This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/1f3cl6fa8t-l-W7Ec_h4Hi3qeJo.roa File: 1f3cl6fa8t-l-W7Ec_h4Hi3qeJo.roa (raw, json) Hash identifier: aNyojc3jYn6lQHQNmAXrSGeiZeVM+znH218BSnC07+A= Subject key identifier: D5:FD:DC:97:A7:DA:F2:DF:A5:F9:6E:C4:73:F8:78:1E:2D:EA:78:9A Certificate issuer: /CN=d0040765e474600e1bc7622a43663dd8d9fadc87 Certificate serial: 019B7C132BFFD174EA3026A0D21D18CE9BE8 Authority key identifier: D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/1f3cl6fa8t-l-W7Ec_h4Hi3qeJo.roa Signing time: Fri 02 Jan 2026 00:19:49 +0000 ROA not before: Fri 02 Jan 2026 00:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 80.88.236.0/22 maxlen: 24 2a12:5141::/32 maxlen: 48 2a12:5142::/32 maxlen: 48 2a12:5143::/32 maxlen: 48 2a12:5144::/32 maxlen: 48 2a12:5145::/32 maxlen: 48 2a12:5146::/32 maxlen: 48 2a12:5147::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 11:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:2b:ff:d1:74:ea:30:26:a0:d2:1d:18:ce:9b:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0040765e474600e1bc7622a43663dd8d9fadc87 Validity Not Before: Jan 2 00:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5fddc97a7daf2dfa5f96ec473f8781e2dea789a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:80:f7:c9:0f:1e:b3:85:92:0c:d4:33:d9:5b: 7a:05:7c:ec:65:66:a8:5f:03:ea:c7:e1:d2:c7:c7: 1e:8f:f2:e4:46:1f:e9:43:bd:b1:d9:03:74:b3:d3: 58:ee:83:53:46:b2:d8:2b:39:bc:a2:51:5a:9d:8e: 67:db:60:30:7a:06:8d:46:f1:93:12:09:89:e9:9e: 28:ba:b0:b3:db:bb:e4:63:f5:c2:03:5f:68:d3:fe: bb:3e:c1:dd:85:29:34:b6:3e:30:57:fa:fe:c2:1a: c4:2c:e7:3b:47:8a:1e:0a:1c:e6:69:8e:7a:e6:49: aa:c0:50:f8:66:6c:45:75:ce:d1:bb:96:f0:2d:68: 12:7d:01:db:26:fe:ad:9e:b5:9c:99:ec:b0:fb:eb: 48:fe:86:b9:4a:a9:5f:01:4a:62:43:26:71:11:f8: 9c:35:d0:9c:e6:bc:d6:6f:32:b6:21:2a:41:68:48: 79:04:cc:16:a2:11:16:aa:43:9f:65:bd:45:83:98: 1f:06:d9:ba:5f:5d:a4:86:a9:b0:20:38:7c:04:85: d3:d3:11:fc:b2:d7:2e:d1:9a:44:c2:cf:2d:7b:65: 46:26:1f:b7:59:e0:85:ff:cf:12:4c:13:a5:dd:fb: 63:06:8d:a1:fd:78:ed:96:60:c6:cd:fd:96:28:0b: 28:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FD:DC:97:A7:DA:F2:DF:A5:F9:6E:C4:73:F8:78:1E:2D:EA:78:9A X509v3 Authority Key Identifier: keyid:D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/1f3cl6fa8t-l-W7Ec_h4Hi3qeJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.88.236.0/22 IPv6: 2a12:5141::-2a12:5147:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 0d:e8:25:86:a3:1f:92:81:38:dc:c7:aa:1c:dd:ce:bd:34:dc: 79:4e:20:cc:fd:de:12:52:b1:ff:40:b3:59:f4:18:81:e2:f9: 02:4b:b4:11:6f:7c:2d:8c:3a:de:67:2d:bf:3f:7e:83:0c:f6: 93:66:3b:36:68:47:6c:8d:e4:e8:ef:81:b5:87:58:47:fc:92: b2:c6:d4:cd:b0:de:68:a5:5d:fb:9a:54:c6:81:7f:01:d3:85: b5:31:64:8d:e6:35:29:dd:6c:f3:d8:98:07:99:d0:0b:ad:9c: bd:4f:9d:1d:d0:6b:05:f2:0e:74:e6:37:49:3b:2a:6e:5b:9c: 20:df:48:95:25:29:6f:7c:fc:6c:64:2e:7a:34:4a:27:23:b9: 51:a4:a5:7d:0f:1b:3d:52:7b:6e:ba:d9:a5:e2:86:1a:5b:9d: 40:ff:7e:fe:22:c9:cc:73:7c:f8:92:06:bc:fe:87:63:f7:7f: 24:d2:44:8c:89:01:05:d5:9a:42:21:4d:c0:3b:6e:44:fe:b1: 75:38:38:a2:e7:92:16:ad:4c:5c:6c:b3:46:41:34:1b:a2:02: c4:ca:57:9d:4f:9d:1c:06:92:64:ab:43:0c:de:1f:a1:d2:0a: 3f:2d:35:0d:91:47:be:37:38:25:f8:13:83:72:35:b9:f9:4e: 50:eb:f6:19 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt8Eyv/0XTqMCag0h0YzpvoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMDQwNzY1ZTQ3NDYwMGUxYmM3NjIyYTQzNjYzZGQ4ZDlm YWRjODcwHhcNMjYwMTAyMDAxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWZkZGM5N2E3ZGFmMmRmYTVmOTZlYzQ3M2Y4NzgxZTJkZWE3ODlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4D3yQ8es4WSDNQz2Vt6BXzsZWao XwPqx+HSx8cej/LkRh/pQ72x2QN0s9NY7oNTRrLYKzm8olFanY5n22AwegaNRvGT EgmJ6Z4ourCz27vkY/XCA19o0/67PsHdhSk0tj4wV/r+whrELOc7R4oeChzmaY56 5kmqwFD4ZmxFdc7Ru5bwLWgSfQHbJv6tnrWcmeyw++tI/oa5SqlfAUpiQyZxEfic NdCc5rzWbzK2ISpBaEh5BMwWohEWqkOfZb1Fg5gfBtm6X12khqmwIDh8BIXT0xH8 stcu0ZpEws8te2VGJh+3WeCF/88STBOl3ftjBo2h/XjtlmDGzf2WKAsomQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFNX93Jen2vLfpfluxHP4eB4t6niaMB8GA1UdIwQY MBaAFNAEB2XkdGAOG8diKkNmPdjZ+tyHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEFRSFplUjBZQTRieDJJcVEyWTkyTm42M0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yMmZjZGUtNzIwYi00ZjYzLTljMDIt NDdkMzA4NzEzN2Y0LzEvMWYzY2w2ZmE4dC1sLVc3RWNfaDRIaTNxZUpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8yMmZjZGUtNzIwYi00ZjYzLTljMDItNDdkMzA4NzEzN2Y0 LzEvMEFRSFplUjBZQTRieDJJcVEyWTkyTm42M0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQCUFjsMBYE AgACMBAwDgMFACoSUUEDBQMqElFAMA0GCSqGSIb3DQEBCwUAA4IBAQAN6CWGox+S gTjcx6oc3c69NNx5TiDM/d4SUrH/QLNZ9BiB4vkCS7QRb3wtjDreZy2/P36DDPaT Zjs2aEdsjeTo74G1h1hH/JKyxtTNsN5opV37mlTGgX8B04W1MWSN5jUp3Wzz2JgH mdALrZy9T50d0GsF8g505jdJOypuW5wg30iVJSlvfPxsZC56NEonI7lRpKV9Dxs9 Untuutml4oYaW51A/37+IsnMc3z4kga8/odj938k0kSMiQEF1ZpCIU3AO25E/rF1 ODii55IWrUxcbLNGQTQbogLEyledT50cBpJkq0MM3h+h0go/LTUNkUe+Nzgl+BOD cjW5+U5Q6/YZ -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:28 2026 by rpki-client