This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/1oXMdBZ5QwBEktq29jlZeTysc3c.roa File: 1oXMdBZ5QwBEktq29jlZeTysc3c.roa (raw, json) Hash identifier: WrwjvmGXn9QS/QC9EfjjK7O+1t52HaSP06M7BN2wY4Q= Subject key identifier: D6:85:CC:74:16:79:43:00:44:92:DA:B6:F6:39:59:79:3C:AC:73:77 Certificate issuer: /CN=acecd11269eea06726277ce361ab51ce42049e36 Certificate serial: 019B77C6BA81355F63779669EB6DF4395522 Authority key identifier: AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/1oXMdBZ5QwBEktq29jlZeTysc3c.roa Signing time: Thu 01 Jan 2026 04:17:51 +0000 ROA not before: Thu 01 Jan 2026 04:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203861 IP address blocks: 2a14:9e00:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ba:81:35:5f:63:77:96:69:eb:6d:f4:39:55:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acecd11269eea06726277ce361ab51ce42049e36 Validity Not Before: Jan 1 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d685cc74167943004492dab6f63959793cac7377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:15:96:f0:8c:2e:23:a7:04:6e:b7:59:f9:08: 5e:b1:7c:23:6f:ed:b5:33:61:81:b9:23:11:10:3c: bb:1d:0a:23:bf:05:a8:99:97:f3:c6:65:67:2d:c2: a1:ea:db:2b:13:4b:27:15:91:b2:01:5d:aa:ea:a0: 4e:64:ec:5a:4f:7e:4f:38:5f:22:7f:19:9d:3f:c1: 1b:f9:31:3f:81:1d:da:96:93:88:65:a0:c0:d5:cc: 0d:10:0f:56:07:b8:ac:06:e1:e5:99:8c:ba:9c:7a: 98:f9:8f:a1:9d:28:fe:4c:36:68:44:6b:82:e3:e2: 10:e5:a9:29:2c:fd:06:56:b6:c8:ed:00:6b:65:38: c7:55:0b:35:8a:10:66:19:05:49:ae:9a:eb:ff:d4: 6c:c8:f6:23:00:3e:99:c4:3d:2e:bc:79:73:02:79: 8a:c9:a0:fd:0e:f9:4d:50:65:7f:92:9d:e0:05:34: 72:55:fd:bb:8b:4c:93:fa:e7:1f:0b:5f:d0:fc:f0: 65:8a:20:76:4a:26:9a:ff:88:df:04:e4:21:13:c5: 7d:11:c7:12:a2:bd:00:c7:2c:9e:e4:dc:6a:13:07: 0a:f0:20:ec:59:93:98:d8:9b:39:1f:14:89:28:ed: 8a:75:6f:04:ae:05:92:9e:1b:a6:23:16:25:35:16: 2f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:85:CC:74:16:79:43:00:44:92:DA:B6:F6:39:59:79:3C:AC:73:77 X509v3 Authority Key Identifier: keyid:AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/1oXMdBZ5QwBEktq29jlZeTysc3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:9e00:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 2c:79:85:3e:c1:91:1d:36:38:0b:cc:7d:8d:44:ae:16:bd:a8: d9:d9:fa:17:bc:64:13:bf:aa:68:58:00:13:03:ad:e5:6d:ad: c8:6f:e4:fa:d0:ca:77:2e:82:c7:e9:82:48:74:49:70:54:c8: 90:f6:54:c6:dc:d9:2e:18:44:42:7d:94:56:74:71:32:36:02: 58:8b:61:b9:c1:9a:81:11:7f:29:c7:a6:9b:ba:7c:68:80:25: b3:f1:8a:1d:81:3d:a4:fe:98:1e:a8:68:75:54:cd:5f:2d:f8: e3:5e:d0:92:17:74:4f:5c:68:bd:8c:b4:17:25:3b:1d:5a:6b: 71:ad:08:cc:61:c5:1a:d6:30:ed:f8:6c:71:3b:3b:d3:0d:1b: cc:b9:82:f3:28:ba:5c:f2:ac:dc:bf:81:f4:a5:0b:61:e6:83: b8:a3:b3:32:7b:8e:2e:a1:9b:fc:79:a7:05:cd:0f:0f:24:5f: b5:06:6e:77:92:4e:ce:bf:cf:05:bb:dc:e6:3e:80:17:99:d6: a5:6b:50:88:95:9e:a8:e7:ae:2f:b2:ba:5b:04:cd:ad:0f:a6: aa:96:63:85:76:22:78:48:e6:c9:60:1f:64:d8:e3:9b:18:e9: b7:8b:9c:ed:78:65:62:36:1a:bd:24:6e:28:f6:e8:ab:a1:ad: 9c:7e:cc:49 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3xrqBNV9jd5Zp6230OVUiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZWNkMTEyNjllZWEwNjcyNjI3N2NlMzYxYWI1MWNlNDIw NDllMzYwHhcNMjYwMTAxMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjg1Y2M3NDE2Nzk0MzAwNDQ5MmRhYjZmNjM5NTk3OTNjYWM3Mzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxWW8IwuI6cEbrdZ+QhesXwjb+21 M2GBuSMREDy7HQojvwWomZfzxmVnLcKh6tsrE0snFZGyAV2q6qBOZOxaT35POF8i fxmdP8Eb+TE/gR3alpOIZaDA1cwNEA9WB7isBuHlmYy6nHqY+Y+hnSj+TDZoRGuC 4+IQ5akpLP0GVrbI7QBrZTjHVQs1ihBmGQVJrprr/9RsyPYjAD6ZxD0uvHlzAnmK yaD9DvlNUGV/kp3gBTRyVf27i0yT+ucfC1/Q/PBliiB2Siaa/4jfBOQhE8V9EccS or0Axyye5NxqEwcK8CDsWZOY2Js5HxSJKO2KdW8ErgWSnhumIxYlNRYvqQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNaFzHQWeUMARJLatvY5WXk8rHN3MB8GA1UdIwQY MBaAFKzs0RJp7qBnJid842GrUc5CBJ42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck96UkVtbnVvR2NtSjN6allhdFJ6a0lFbmpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NmVlOGYtMGM3Yi00OTIxLWJmZjUt NDA0N2UwZmJlOWNiLzEvMW9YTWRCWjVRd0JFa3RxMjlqbFplVHlzYzNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84NmVlOGYtMGM3Yi00OTIxLWJmZjUtNDA0N2UwZmJlOWNi LzEvck96UkVtbnVvR2NtSjN6allhdFJ6a0lFbmpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhSeALAL MA0GCSqGSIb3DQEBCwUAA4IBAQAseYU+wZEdNjgLzH2NRK4WvajZ2foXvGQTv6po WAATA63lba3Ib+T60Mp3LoLH6YJIdElwVMiQ9lTG3NkuGERCfZRWdHEyNgJYi2G5 wZqBEX8px6abunxogCWz8YodgT2k/pgeqGh1VM1fLfjjXtCSF3RPXGi9jLQXJTsd WmtxrQjMYcUa1jDt+GxxOzvTDRvMuYLzKLpc8qzcv4H0pQth5oO4o7Mye44uoZv8 eacFzQ8PJF+1Bm53kk7Ov88Fu9zmPoAXmdala1CIlZ6o564vsrpbBM2tD6aqlmOF diJ4SObJYB9k2OObGOm3i5zteGViNhq9JG4o9uiroa2cfsxJ -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:02 2026 by rpki-client