This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1-ky5ICu8QcUMP4jXzBouQKvzAY8.roa File: 1-ky5ICu8QcUMP4jXzBouQKvzAY8.roa (raw, json) Hash identifier: SSoxUjGa1R03vucvuCCj5I919DT3SCQAUYBG+/1Hv2U= Subject key identifier: FA:4C:B9:20:2B:BC:41:C5:0C:3F:88:D7:CC:1A:2E:40:AB:F3:01:8F Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b Certificate serial: 019C359882481637C0764910D7F355B2F745 Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1-ky5ICu8QcUMP4jXzBouQKvzAY8.roa Signing time: Sat 07 Feb 2026 00:55:13 +0000 ROA not before: Sat 07 Feb 2026 00:55:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201398 IP address blocks: 2a06:9801:d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 19:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:35:98:82:48:16:37:c0:76:49:10:d7:f3:55:b2:f7:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b Validity Not Before: Feb 7 00:55:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa4cb9202bbc41c50c3f88d7cc1a2e40abf3018f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:18:c5:44:d8:92:01:ae:04:46:1f:a8:17:a4: fb:10:b2:07:f4:73:86:32:a2:23:38:c6:32:2d:5f: 92:56:20:f6:1b:8b:81:59:f3:df:10:36:db:20:98: 3a:fd:c8:1f:ce:74:65:88:25:4b:49:a5:2c:f3:d8: 94:91:4f:25:00:d5:d8:9c:23:6e:fd:9e:bd:ef:33: e4:98:da:2f:59:10:47:a6:88:9b:6b:6a:43:00:5f: 3c:cf:a5:05:6e:20:3f:08:19:2f:bc:00:64:07:22: 41:55:fb:eb:c2:88:0a:55:73:34:af:da:87:e5:64: c1:cd:5f:b3:d6:06:78:0e:5b:f3:a4:61:fb:d3:5d: 6c:45:66:64:b4:d2:22:16:6d:f1:ba:b1:5f:9f:a9: b5:31:a5:ca:72:4e:0d:04:51:b4:70:82:1b:7a:af: bb:71:ef:91:82:74:21:62:75:0d:bc:38:f5:cb:b1: b5:a8:60:9f:59:a6:fb:72:85:ae:6f:83:8e:13:df: 1f:ef:78:f5:7e:e4:dd:fd:bd:30:22:ab:3a:15:8a: d0:ec:3f:1b:e4:ae:2a:8b:fb:d7:71:3f:dd:4e:8a: e4:b9:3c:89:26:5d:74:d5:cf:f9:df:59:86:eb:ee: e4:3c:26:8d:75:b5:69:48:05:ac:66:f9:53:34:80: db:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4C:B9:20:2B:BC:41:C5:0C:3F:88:D7:CC:1A:2E:40:AB:F3:01:8F X509v3 Authority Key Identifier: keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1-ky5ICu8QcUMP4jXzBouQKvzAY8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9801:d::/48 Signature Algorithm: sha256WithRSAEncryption 2d:cf:8b:ed:da:92:ab:3f:0a:fe:6d:75:bb:00:8b:56:af:fa: 35:53:3e:74:eb:4c:b2:4c:63:4e:e1:15:7d:d8:ed:cb:9d:f7: a8:9b:21:c7:9e:5f:78:ca:70:15:88:22:67:dc:49:1a:1f:78: 23:bf:53:96:a7:e4:3f:84:00:86:64:aa:db:18:da:cf:8e:27: a1:4e:e5:7e:d6:48:64:71:b8:89:5f:1f:e4:5b:f9:46:af:e2: 93:07:97:95:87:3a:cb:78:d3:e3:9e:4a:02:ac:a8:a0:ca:67: 88:1a:b6:a8:1d:08:2e:aa:df:7a:b1:49:c0:d7:ab:1e:d5:1e: a5:47:28:61:28:56:41:2a:90:da:06:97:34:26:e4:1a:f2:df: 75:e8:ee:fd:bb:7f:4f:9d:d8:6b:66:b4:f3:99:68:a9:7f:2b: 99:34:28:47:86:48:87:df:af:c1:e3:47:52:57:d8:7b:a3:03: 6e:b1:21:f4:71:2e:52:95:ad:30:ca:7f:f7:16:0f:02:74:ed: 91:26:72:13:97:49:a1:22:cd:90:31:cd:6e:8c:07:d1:83:20: d4:65:3d:3b:73:bb:b2:84:ab:25:99:6e:28:e4:e5:32:4d:e1: 3d:f4:11:ab:06:2f:af:99:9b:f1:f3:80:e9:d3:38:f0:a3:73: 1b:ec:84:e4 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZw1mIJIFjfAdkkQ1/NVsvdFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3 Y2EzNmIwHhcNMjYwMjA3MDA1NTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTRjYjkyMDJiYmM0MWM1MGMzZjg4ZDdjYzFhMmU0MGFiZjMwMThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9BjFRNiSAa4ERh+oF6T7ELIH9HOG MqIjOMYyLV+SViD2G4uBWfPfEDbbIJg6/cgfznRliCVLSaUs89iUkU8lANXYnCNu /Z697zPkmNovWRBHpoiba2pDAF88z6UFbiA/CBkvvABkByJBVfvrwogKVXM0r9qH 5WTBzV+z1gZ4DlvzpGH7011sRWZktNIiFm3xurFfn6m1MaXKck4NBFG0cIIbeq+7 ce+RgnQhYnUNvDj1y7G1qGCfWab7coWub4OOE98f73j1fuTd/b0wIqs6FYrQ7D8b 5K4qi/vXcT/dTorkuTyJJl101c/531mG6+7kPCaNdbVpSAWsZvlTNIDbNwIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPpMuSArvEHFDD+I18waLkCr8wGPMB8GA1UdIwQY MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt ZWQ4Y2ZhZjFiODFmLzEvMS1reTVJQ3U4UWNVTVA0alh6Qm91UUt2ekFZOC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTkvMWE2YjE3LWUzZmUtNGM2ZC1iOGMxLWVkOGNmYWYxYjgx Zi8xL01kSkNRU1B0QjNKVE1MLUJlVVQ5SjJ0OG8ycy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoGmAEA DTANBgkqhkiG9w0BAQsFAAOCAQEALc+L7dqSqz8K/m11uwCLVq/6NVM+dOtMskxj TuEVfdjty533qJshx55feMpwFYgiZ9xJGh94I79TlqfkP4QAhmSq2xjaz44noU7l ftZIZHG4iV8f5Fv5Rq/ikweXlYc6y3jT455KAqyooMpniBq2qB0ILqrferFJwNer HtUepUcoYShWQSqQ2gaXNCbkGvLfdeju/bt/T53Ya2a085loqX8rmTQoR4ZIh9+v weNHUlfYe6MDbrEh9HEuUpWtMMp/9xYPAnTtkSZyE5dJoSLNkDHNbowH0YMg1GU9 O3O7soSrJZluKOTlMk3hPfQRqwYvr5mb8fOA6dM48KNzG+yE5A== -----END CERTIFICATE-----Generated at Sun Feb 8 04:50:37 2026 by rpki-client