This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/L1EgWlcecAT3ZJCSD7dsxRrS5gY.roa File: L1EgWlcecAT3ZJCSD7dsxRrS5gY.roa (raw, json) Hash identifier: XjCdltafvkU+W0HTZ2Gpfs3P+GnUcAc+4fU6I9YL5EE= Subject key identifier: 2F:51:20:5A:57:1E:70:04:F7:64:90:92:0F:B7:6C:C5:1A:D2:E6:06 Certificate issuer: /CN=33a51d7ff02d21fac193ae4aed1f0c3956ce4515 Certificate serial: 019B7AC79773004CD54CBE49AD53354D5327 Authority key identifier: 33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/L1EgWlcecAT3ZJCSD7dsxRrS5gY.roa Signing time: Thu 01 Jan 2026 18:17:39 +0000 ROA not before: Thu 01 Jan 2026 18:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1132 IP address blocks: 2001:67c:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.crl rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:97:73:00:4c:d5:4c:be:49:ad:53:35:4d:53:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33a51d7ff02d21fac193ae4aed1f0c3956ce4515 Validity Not Before: Jan 1 18:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f51205a571e7004f76490920fb76cc51ad2e606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:50:44:a9:94:cc:74:d1:c0:ab:4b:6d:f2:b3: 98:f6:d7:47:04:5f:7a:c7:42:0e:11:8e:11:26:36: a8:98:52:f7:96:f6:d8:d6:56:47:3d:56:a4:94:48: 0d:73:e8:2c:84:a4:f2:87:72:21:58:a5:81:92:5b: 56:4a:46:c6:ca:77:88:b8:a5:4c:50:77:36:24:cb: 4a:7b:0f:29:f4:65:6c:da:ab:de:67:93:04:10:6d: a3:83:99:3b:a1:00:0a:66:94:83:cf:19:95:ba:4d: 42:c2:9f:d2:68:8c:34:1d:58:60:a8:4e:47:ee:86: f6:19:ca:6a:e1:95:84:ce:1f:fd:5c:2d:d6:5f:b4: 36:86:ed:1e:c5:f9:e5:4f:e3:d7:6d:79:c2:ac:d2: ab:fa:a2:e3:4b:bb:86:2c:40:e0:23:37:f4:63:42: 74:59:76:f8:de:75:0b:55:d8:36:1b:41:e9:f1:34: 9f:3b:6c:86:d7:47:ae:35:1e:8d:7f:41:b9:04:2e: d1:af:08:1e:30:cf:0e:e5:e9:d6:33:3f:8c:e5:de: c0:1f:01:81:81:6b:37:58:39:13:a1:bd:ba:c6:c9: 22:e7:03:46:a4:99:5a:3f:86:ed:74:53:ce:8e:bc: ad:49:ed:dc:df:f0:70:ff:99:dc:27:f5:31:7e:9a: 63:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:51:20:5A:57:1E:70:04:F7:64:90:92:0F:B7:6C:C5:1A:D2:E6:06 X509v3 Authority Key Identifier: keyid:33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/L1EgWlcecAT3ZJCSD7dsxRrS5gY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2c::/48 Signature Algorithm: sha256WithRSAEncryption 00:bf:15:88:19:64:03:f8:e9:9c:ae:a8:c2:0a:d8:6e:e0:77: 31:3c:31:04:a0:7f:75:fc:45:5c:bf:79:3c:1f:99:ae:ac:4a: af:65:da:fb:13:fe:43:d7:92:92:1d:9c:54:0d:fe:18:9c:f6: 79:a4:c5:a7:65:b6:7c:ed:82:99:69:a7:52:ce:78:75:6a:94: f4:b7:1b:1c:e7:7c:80:53:97:1a:cc:cb:51:07:ce:28:16:8e: 37:1b:ca:05:1c:42:5c:5f:12:2e:66:30:11:0a:52:7b:7c:44: 3b:09:bc:37:93:88:b5:9d:8f:00:f3:ba:f9:33:ae:bc:11:37: 7c:d3:42:f7:68:a9:00:75:2d:09:5c:6e:7a:88:cf:e3:20:0a: 8d:51:b6:3b:2a:38:62:e8:35:eb:ba:36:ea:07:9c:ad:9b:b9: 87:b5:66:0a:72:b3:0a:e0:b6:6e:af:fc:09:df:80:d0:b6:09: 38:ae:c0:4f:87:60:c8:be:66:9d:27:aa:ff:f8:f7:0d:3f:d2: 27:9d:ec:bc:0d:99:b0:7d:2e:5b:95:c5:e6:48:a8:b0:17:e5: b7:ab:5a:35:cf:42:43:07:b7:75:f8:b3:9b:2e:2b:1f:fe:f2: b3:12:95:9d:8c:68:cc:ce:74:68:d1:f0:99:c9:37:03:45:54: 84:97:60:37 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6x5dzAEzVTL5JrVM1TVMnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYTUxZDdmZjAyZDIxZmFjMTkzYWU0YWVkMWYwYzM5NTZj ZTQ1MTUwHhcNMjYwMTAxMTgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjUxMjA1YTU3MWU3MDA0Zjc2NDkwOTIwZmI3NmNjNTFhZDJlNjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31BEqZTMdNHAq0tt8rOY9tdHBF96 x0IOEY4RJjaomFL3lvbY1lZHPVaklEgNc+gshKTyh3IhWKWBkltWSkbGyneIuKVM UHc2JMtKew8p9GVs2qveZ5MEEG2jg5k7oQAKZpSDzxmVuk1Cwp/SaIw0HVhgqE5H 7ob2Gcpq4ZWEzh/9XC3WX7Q2hu0exfnlT+PXbXnCrNKr+qLjS7uGLEDgIzf0Y0J0 WXb43nULVdg2G0Hp8TSfO2yG10euNR6Nf0G5BC7RrwgeMM8O5enWMz+M5d7AHwGB gWs3WDkTob26xski5wNGpJlaP4btdFPOjrytSe3c3/Bw/5ncJ/UxfppjOwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFC9RIFpXHnAE92SQkg+3bMUa0uYGMB8GA1UdIwQY MBaAFDOlHX/wLSH6wZOuSu0fDDlWzkUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTZVZGZfQXRJZnJCazY1SzdSOE1PVmJPUlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC81MThlNDItZWJhZS00NTQ3LThiMjIt OWIxZTZhOGU0MGYzLzEvTDFFZ1dsY2VjQVQzWkpDU0Q3ZHN4UnJTNWdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC81MThlNDItZWJhZS00NTQ3LThiMjItOWIxZTZhOGU0MGYz LzEvTTZVZGZfQXRJZnJCazY1SzdSOE1PVmJPUlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAAs MA0GCSqGSIb3DQEBCwUAA4IBAQAAvxWIGWQD+OmcrqjCCthu4HcxPDEEoH91/EVc v3k8H5murEqvZdr7E/5D15KSHZxUDf4YnPZ5pMWnZbZ87YKZaadSznh1apT0txsc 53yAU5cazMtRB84oFo43G8oFHEJcXxIuZjARClJ7fEQ7Cbw3k4i1nY8A87r5M668 ETd800L3aKkAdS0JXG56iM/jIAqNUbY7Kjhi6DXrujbqB5ytm7mHtWYKcrMK4LZu r/wJ34DQtgk4rsBPh2DIvmadJ6r/+PcNP9Inney8DZmwfS5blcXmSKiwF+W3q1o1 z0JDB7d1+LObLisf/vKzEpWdjGjMznRo0fCZyTcDRVSEl2A3 -----END CERTIFICATE-----Generated at Mon Jan 26 23:48:43 2026 by rpki-client