This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1-ShJbsfkPLfryW4d3Bcvb5BY4Oc.roa File: 1-ShJbsfkPLfryW4d3Bcvb5BY4Oc.roa (raw, json) Hash identifier: 3jFCcEnaNavx0+ADjWr03+91AqE+yWTktRxwao2e8N8= Subject key identifier: F9:28:49:6E:C7:E4:3C:B7:EB:C9:6E:1D:DC:17:2F:6F:90:58:E0:E7 Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b Certificate serial: 019C2B3D236BF17ACDB3E8F6E1988EB8F989 Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1-ShJbsfkPLfryW4d3Bcvb5BY4Oc.roa Signing time: Thu 05 Feb 2026 00:39:12 +0000 ROA not before: Thu 05 Feb 2026 00:39:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201741 IP address blocks: 2a06:9801:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 19:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2b:3d:23:6b:f1:7a:cd:b3:e8:f6:e1:98:8e:b8:f9:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b Validity Not Before: Feb 5 00:39:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f928496ec7e43cb7ebc96e1ddc172f6f9058e0e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6e:c6:41:cf:b7:60:36:7e:bf:6f:5e:a2:f7: e0:cb:d5:73:dd:55:cc:de:2a:a6:f6:d7:46:54:58: d4:a0:82:f8:02:d1:41:fb:97:a0:75:cd:28:ec:76: a2:4c:a5:ef:9d:8f:19:88:93:33:78:3e:d9:05:f1: 3c:22:a5:2d:9d:70:ed:11:a4:1c:b4:d3:4c:48:e3: a6:8f:f2:fc:fd:30:08:dc:17:7a:64:1c:b1:63:10: 68:ba:2a:41:95:65:4b:80:30:c6:6a:20:e5:37:dc: 0a:45:98:43:e7:91:4e:a4:b6:33:c5:d1:e9:62:c1: bd:60:ab:48:d9:d2:6e:32:86:b9:c1:d2:06:7c:50: 28:f5:8f:82:1d:4d:05:4f:e3:c5:9c:bb:bc:fc:69: bf:a6:af:17:2c:aa:77:86:8e:87:24:53:4c:52:4a: f4:9d:c2:2f:7c:62:53:b2:b2:2a:96:e6:1b:29:c1: bc:e4:97:c0:94:5c:11:45:eb:7c:40:39:5f:68:be: 45:88:b1:a7:af:96:90:6d:36:18:e3:76:8f:69:ec: d1:f9:c6:83:82:d1:fd:da:4f:c3:ed:f2:83:3a:12: 2a:d3:c6:da:b9:b0:24:84:d0:2b:13:35:0c:c2:f1: e2:e0:b1:e8:5f:27:bb:1a:74:82:9d:30:7c:89:58: e0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:28:49:6E:C7:E4:3C:B7:EB:C9:6E:1D:DC:17:2F:6F:90:58:E0:E7 X509v3 Authority Key Identifier: keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1-ShJbsfkPLfryW4d3Bcvb5BY4Oc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9801:6::/48 Signature Algorithm: sha256WithRSAEncryption 03:9a:80:a2:9d:59:c0:92:af:ca:49:36:3f:78:6e:3a:08:59: b3:4d:3c:35:6b:16:d8:49:72:be:fc:d8:f8:fd:cd:08:e2:03: 86:f1:c5:fb:0d:9d:79:7b:cb:c4:34:c0:df:80:6f:00:f8:a6: f8:71:64:c4:60:64:6d:fc:c4:19:fd:13:a6:fa:7b:99:d3:e4: 7b:a8:6d:b7:84:eb:b7:db:be:b0:ce:c3:17:49:0a:0d:44:6c: 62:84:be:bb:38:2f:fc:65:0a:49:a1:ba:92:4b:76:e9:bc:40: 72:6d:52:9c:1c:ae:36:76:7a:bf:a5:4c:fe:e1:66:eb:10:67: a0:45:3a:5a:e8:10:c5:c4:64:4a:87:d2:2f:99:aa:0e:d3:4e: 79:61:e5:6b:dd:87:d0:5f:64:69:0e:09:3a:42:79:5f:d1:c1: b0:47:0e:35:4f:9b:b1:8f:d7:32:ea:7b:ff:89:9a:a6:52:0a: 6b:b2:eb:d7:e6:0d:ef:f4:2f:ec:b6:e6:04:ec:88:2e:63:d4: 55:aa:79:4f:55:59:f9:e5:6b:a8:a1:99:eb:79:38:64:eb:26: 5e:5a:05:cf:52:33:c4:a7:b9:e5:75:47:e3:65:6d:c9:46:09: a9:b8:d5:50:81:1f:ee:7c:2b:90:6e:da:3c:66:37:0e:30:d0: 17:32:11:72 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZwrPSNr8XrNs+j24ZiOuPmJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3 Y2EzNmIwHhcNMjYwMjA1MDAzOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTI4NDk2ZWM3ZTQzY2I3ZWJjOTZlMWRkYzE3MmY2ZjkwNThlMGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm27GQc+3YDZ+v29eovfgy9Vz3VXM 3iqm9tdGVFjUoIL4AtFB+5egdc0o7HaiTKXvnY8ZiJMzeD7ZBfE8IqUtnXDtEaQc tNNMSOOmj/L8/TAI3Bd6ZByxYxBouipBlWVLgDDGaiDlN9wKRZhD55FOpLYzxdHp YsG9YKtI2dJuMoa5wdIGfFAo9Y+CHU0FT+PFnLu8/Gm/pq8XLKp3ho6HJFNMUkr0 ncIvfGJTsrIqluYbKcG85JfAlFwRRet8QDlfaL5FiLGnr5aQbTYY43aPaezR+caD gtH92k/D7fKDOhIq08baubAkhNArEzUMwvHi4LHoXye7GnSCnTB8iVjgWwIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPkoSW7H5Dy368luHdwXL2+QWODnMB8GA1UdIwQY MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt ZWQ4Y2ZhZjFiODFmLzEvMS1TaEpic2ZrUExmcnlXNGQzQmN2YjVCWTRPYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTkvMWE2YjE3LWUzZmUtNGM2ZC1iOGMxLWVkOGNmYWYxYjgx Zi8xL01kSkNRU1B0QjNKVE1MLUJlVVQ5SjJ0OG8ycy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoGmAEA BjANBgkqhkiG9w0BAQsFAAOCAQEAA5qAop1ZwJKvykk2P3huOghZs008NWsW2Ely vvzY+P3NCOIDhvHF+w2deXvLxDTA34BvAPim+HFkxGBkbfzEGf0Tpvp7mdPke6ht t4Trt9u+sM7DF0kKDURsYoS+uzgv/GUKSaG6kkt26bxAcm1SnByuNnZ6v6VM/uFm 6xBnoEU6WugQxcRkSofSL5mqDtNOeWHla92H0F9kaQ4JOkJ5X9HBsEcONU+bsY/X Mup7/4maplIKa7Lr1+YN7/Qv7LbmBOyILmPUVap5T1VZ+eVrqKGZ63k4ZOsmXloF z1IzxKe55XVH42VtyUYJqbjVUIEf7nwrkG7aPGY3DjDQFzIRcg== -----END CERTIFICATE-----Generated at Sun Feb 8 04:50:43 2026 by rpki-client