This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1A5ynFumBSopg51qx9XInQXCgc8.roa File: 1A5ynFumBSopg51qx9XInQXCgc8.roa (raw, json) Hash identifier: cazI1uPS6ZAMrlx4lu7IlhXnNr4uRxY58GTmqpe038s= Subject key identifier: D4:0E:72:9C:5B:A6:05:2A:29:83:9D:6A:C7:D5:C8:9D:05:C2:81:CF Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b Certificate serial: 019C359B41A10636F870C51E7F76E8D1A93E Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1A5ynFumBSopg51qx9XInQXCgc8.roa Signing time: Sat 07 Feb 2026 00:58:13 +0000 ROA not before: Sat 07 Feb 2026 00:58:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201371 IP address blocks: 2a06:9801:1b::/48 maxlen: 48 2a06:9801:2e::/48 maxlen: 48 2a06:9801:2f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 19:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:35:9b:41:a1:06:36:f8:70:c5:1e:7f:76:e8:d1:a9:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b Validity Not Before: Feb 7 00:58:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d40e729c5ba6052a29839d6ac7d5c89d05c281cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b2:9a:d0:8d:09:ff:91:8f:dc:d5:59:6e:b1: 00:72:c9:78:5a:7f:56:45:c4:ee:48:ec:ff:3c:89: d2:30:63:00:56:5e:bf:88:e4:e2:6e:c5:d9:ba:e5: 2a:b2:e5:b8:f6:75:79:62:ca:68:11:73:70:4c:9b: 12:61:2d:ee:16:45:8d:ae:0e:bc:42:4d:ce:5c:24: f2:d9:91:fc:c5:86:c0:98:10:cd:f7:56:74:67:ea: e8:58:f1:59:41:e1:96:9a:e9:0c:64:7d:6f:aa:f2: a5:7f:22:14:72:7b:e2:9a:2c:a4:fc:5a:dd:c4:38: bf:94:0c:2e:d8:55:32:f5:dd:ec:9c:59:7b:fe:8b: 00:f4:31:ca:8b:14:61:c3:8f:7b:c1:52:5e:c0:c4: e4:be:ed:10:20:66:c2:17:70:42:46:b0:46:e8:5d: bf:6d:48:5f:8f:09:3a:50:16:f4:e2:d8:af:59:86: 08:db:b0:6c:42:69:5f:a2:33:06:1e:a5:c8:bd:a6: 9a:c2:61:8d:fd:12:a3:99:93:14:47:90:91:5b:ac: a1:f1:ca:f8:fd:41:e5:29:bb:d0:55:0e:6c:e0:25: ef:7c:e2:df:3b:d5:ed:51:77:e9:24:2e:02:56:be: db:86:c4:d9:9e:11:97:44:59:5a:85:4f:d7:bf:12: 89:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0E:72:9C:5B:A6:05:2A:29:83:9D:6A:C7:D5:C8:9D:05:C2:81:CF X509v3 Authority Key Identifier: keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1A5ynFumBSopg51qx9XInQXCgc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9801:1b::/48 2a06:9801:2e::/47 Signature Algorithm: sha256WithRSAEncryption 99:00:0d:00:62:87:27:7c:57:6c:e7:d8:cc:05:27:da:74:b3: 10:29:97:5f:83:18:1c:bb:b6:16:ce:26:e7:4b:21:cc:7f:96: 15:cd:1c:2d:5d:7e:01:01:ab:2b:3f:6c:7e:e0:3b:4e:70:b4: 7a:f4:9f:6e:e8:f8:d2:f6:91:ea:3c:e9:94:bf:7a:2e:26:96: 5e:df:64:52:da:c8:3b:7a:62:6f:3c:ce:6a:96:a7:dd:89:1c: 33:e8:54:dc:df:21:86:3c:82:58:fd:a1:30:f1:4e:c9:e2:66: 44:d9:4a:f4:b8:a1:00:ec:a4:42:70:ad:c5:c9:3a:a1:16:f4: 7d:2f:5c:f8:06:b1:31:aa:88:e4:5f:1a:82:44:24:cc:c4:b6: a8:d9:07:16:f8:37:09:d7:4c:e6:c1:f1:4e:df:b8:bb:36:cf: f3:b9:8e:31:06:9f:84:fc:c2:8e:fc:94:a7:20:f7:96:7b:1e: fe:42:c3:01:e4:1e:80:d6:17:20:43:d7:39:4c:ef:80:ca:9d: 59:b3:4e:5b:41:be:a1:e8:7d:05:2b:40:76:ca:52:44:6c:c9: b5:f4:46:96:e9:47:24:06:d2:7c:79:12:12:3a:5e:53:b4:13: 14:5c:44:ce:d8:c8:d3:65:01:f9:e4:2a:c9:23:8b:ec:94:8f: b3:60:8b:64 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZw1m0GhBjb4cMUef3bo0ak+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3 Y2EzNmIwHhcNMjYwMjA3MDA1ODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDBlNzI5YzViYTYwNTJhMjk4MzlkNmFjN2Q1Yzg5ZDA1YzI4MWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67Ka0I0J/5GP3NVZbrEAcsl4Wn9W RcTuSOz/PInSMGMAVl6/iOTibsXZuuUqsuW49nV5YspoEXNwTJsSYS3uFkWNrg68 Qk3OXCTy2ZH8xYbAmBDN91Z0Z+roWPFZQeGWmukMZH1vqvKlfyIUcnvimiyk/Frd xDi/lAwu2FUy9d3snFl7/osA9DHKixRhw497wVJewMTkvu0QIGbCF3BCRrBG6F2/ bUhfjwk6UBb04tivWYYI27BsQmlfojMGHqXIvaaawmGN/RKjmZMUR5CRW6yh8cr4 /UHlKbvQVQ5s4CXvfOLfO9XtUXfpJC4CVr7bhsTZnhGXRFlahU/XvxKJcwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNQOcpxbpgUqKYOdasfVyJ0FwoHPMB8GA1UdIwQY MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt ZWQ4Y2ZhZjFiODFmLzEvMUE1eW5GdW1CU29wZzUxcXg5WEluUVhDZ2M4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgaYAQAb AwcBKgaYAQAuMA0GCSqGSIb3DQEBCwUAA4IBAQCZAA0AYocnfFds59jMBSfadLMQ KZdfgxgcu7YWzibnSyHMf5YVzRwtXX4BAasrP2x+4DtOcLR69J9u6PjS9pHqPOmU v3ouJpZe32RS2sg7emJvPM5qlqfdiRwz6FTc3yGGPIJY/aEw8U7J4mZE2Ur0uKEA 7KRCcK3FyTqhFvR9L1z4BrExqojkXxqCRCTMxLao2QcW+DcJ10zmwfFO37i7Ns/z uY4xBp+E/MKO/JSnIPeWex7+QsMB5B6A1hcgQ9c5TO+Ayp1Zs05bQb6h6H0FK0B2 ylJEbMm19EaW6UckBtJ8eRISOl5TtBMUXETO2MjTZQH55CrJI4vslI+zYItk -----END CERTIFICATE-----Generated at Sun Feb 8 04:50:40 2026 by rpki-client