This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/rE_1H-00uBo7a6gc1UV-KaxbXpk.roa File: rE_1H-00uBo7a6gc1UV-KaxbXpk.roa (raw, json) Hash identifier: Nok0K6EfIgHcNFE45GfXNSKdGaLmBIALv0MixqWr//8= Subject key identifier: AC:4F:F5:1F:ED:34:B8:1A:3B:6B:A8:1C:D5:45:7E:29:AC:5B:5E:99 Certificate issuer: /CN=df46d49cc34767f8d024aff295ad6a932e7915e0 Certificate serial: 019B7BA32AA06E80B97251A7DBF7B08A892B Authority key identifier: DF:46:D4:9C:C3:47:67:F8:D0:24:AF:F2:95:AD:6A:93:2E:79:15:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/rE_1H-00uBo7a6gc1UV-KaxbXpk.roa Signing time: Thu 01 Jan 2026 22:17:29 +0000 ROA not before: Thu 01 Jan 2026 22:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60557 IP address blocks: 2001:678:ce4::/48 maxlen: 48 2001:678:ce8::/48 maxlen: 48 2001:678:cec::/48 maxlen: 48 2001:678:cf0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.crl rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:2a:a0:6e:80:b9:72:51:a7:db:f7:b0:8a:89:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df46d49cc34767f8d024aff295ad6a932e7915e0 Validity Not Before: Jan 1 22:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac4ff51fed34b81a3b6ba81cd5457e29ac5b5e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1e:83:7a:4a:93:d3:2c:ea:3e:a9:1e:e9:14: 1e:ff:fb:9b:0f:dc:4c:c2:7a:aa:99:a1:1b:74:20: e7:45:e7:3b:2a:73:75:4f:3f:50:83:db:5b:d5:20: 6a:16:ed:90:aa:5d:a6:d1:dc:f5:1f:49:ae:77:e8: 64:65:f3:6c:ce:e0:a8:41:c2:80:57:fd:de:92:0b: 1a:89:5a:13:ae:da:47:0c:7c:67:5d:c6:ae:53:fb: 53:d3:1f:0c:7f:b1:4b:66:11:db:fc:3b:6a:e2:13: f7:a2:ed:81:f2:1a:46:45:5f:06:3a:32:dd:55:0c: e0:f8:95:80:5f:11:fd:1f:0a:b6:ab:f2:ca:3f:fe: 0a:09:0d:dc:3d:ad:09:e0:d5:79:db:16:5a:aa:25: 9d:c2:3f:1c:85:cf:b0:82:39:e5:be:6c:33:82:07: cd:32:cb:15:5f:28:5d:73:0a:d9:9c:1a:bd:e0:20: 66:fc:b7:cd:7f:f6:3a:d9:9c:f7:c6:c5:af:21:9a: 4b:7a:df:8a:4f:15:58:d2:8d:b2:1a:5f:19:ae:6a: 83:5f:b7:0b:bf:34:c9:ed:50:d5:cf:12:80:c8:d3: ee:76:9b:dc:68:a5:42:3e:6f:c6:b7:00:73:90:98: 5b:6c:c2:cc:e9:87:66:70:37:7d:dd:b2:bd:0c:9f: 2d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4F:F5:1F:ED:34:B8:1A:3B:6B:A8:1C:D5:45:7E:29:AC:5B:5E:99 X509v3 Authority Key Identifier: keyid:DF:46:D4:9C:C3:47:67:F8:D0:24:AF:F2:95:AD:6A:93:2E:79:15:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/rE_1H-00uBo7a6gc1UV-KaxbXpk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:ce4::/48 2001:678:ce8::/48 2001:678:cec::/48 2001:678:cf0::/48 Signature Algorithm: sha256WithRSAEncryption a1:af:0d:ec:f0:bd:d1:7a:20:5e:da:b6:32:db:d2:a0:1d:d8: 77:38:87:51:07:ae:39:fa:ea:a8:ea:f9:de:80:f7:d0:9b:e5: 2c:d2:d0:b6:b2:b1:25:dc:95:0d:9a:ea:fe:d6:aa:7f:37:ae: ea:62:a2:75:11:4d:e6:b5:fa:24:8d:6c:1a:c1:5b:06:2a:68: b5:9f:4f:38:76:bc:80:27:2a:71:e4:ca:17:fa:a4:52:d8:fb: 22:02:02:bc:68:6b:59:f8:03:97:3e:18:8d:a8:be:9c:59:87: 58:67:7f:7d:c6:59:fe:42:fd:53:d9:f1:2c:2b:1c:8e:c7:c6: 99:3a:0e:3a:0c:27:c7:bc:0c:2d:06:6c:ae:60:8f:63:16:fe: 86:a1:7b:ff:4a:f0:4d:90:ac:06:46:52:72:d4:54:34:1d:5b: 85:7f:ca:e7:a0:9b:12:85:33:bb:5f:f5:ba:14:98:e5:2f:6e: 66:f5:d2:d3:a5:05:45:31:90:d4:71:73:bb:cd:84:7c:52:b9: 22:fa:3e:80:5b:5a:a7:e6:fd:30:60:96:e2:8d:a2:4e:dc:fb: 25:b7:9b:39:4c:cd:c0:bd:34:b2:a6:b7:60:4d:b0:c0:b3:24: 2a:0b:72:cb:eb:35:89:c8:df:1d:98:d3:55:1b:70:3f:f4:2c: 20:2e:fe:28 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt7oyqgboC5clGn2/ewiokrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNDZkNDljYzM0NzY3ZjhkMDI0YWZmMjk1YWQ2YTkzMmU3 OTE1ZTAwHhcNMjYwMTAxMjIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzRmZjUxZmVkMzRiODFhM2I2YmE4MWNkNTQ1N2UyOWFjNWI1ZTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB6DekqT0yzqPqke6RQe//ubD9xM wnqqmaEbdCDnRec7KnN1Tz9Qg9tb1SBqFu2Qql2m0dz1H0mud+hkZfNszuCoQcKA V/3ekgsaiVoTrtpHDHxnXcauU/tT0x8Mf7FLZhHb/Dtq4hP3ou2B8hpGRV8GOjLd VQzg+JWAXxH9Hwq2q/LKP/4KCQ3cPa0J4NV52xZaqiWdwj8chc+wgjnlvmwzggfN MssVXyhdcwrZnBq94CBm/LfNf/Y62Zz3xsWvIZpLet+KTxVY0o2yGl8ZrmqDX7cL vzTJ7VDVzxKAyNPudpvcaKVCPm/GtwBzkJhbbMLM6YdmcDd93bK9DJ8tAQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFKxP9R/tNLgaO2uoHNVFfimsW16ZMB8GA1UdIwQY MBaAFN9G1JzDR2f40CSv8pWtapMueRXgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzBiVW5NTkhaX2pRSktfeWxhMXFreTU1RmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My85Yjk3M2QtMWYyZi00Yzc3LTlkZDAt MWY3MzIwNDZiNzRjLzEvckVfMUgtMDB1Qm83YTZnYzFVVi1LYXhiWHBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My85Yjk3M2QtMWYyZi00Yzc3LTlkZDAtMWY3MzIwNDZiNzRj LzEvMzBiVW5NTkhaX2pRSktfeWxhMXFreTU1RmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAIAEGeAzk AwcAIAEGeAzoAwcAIAEGeAzsAwcAIAEGeAzwMA0GCSqGSIb3DQEBCwUAA4IBAQCh rw3s8L3ReiBe2rYy29KgHdh3OIdRB645+uqo6vnegPfQm+Us0tC2srEl3JUNmur+ 1qp/N67qYqJ1EU3mtfokjWwawVsGKmi1n084dryAJypx5MoX+qRS2PsiAgK8aGtZ +AOXPhiNqL6cWYdYZ399xln+Qv1T2fEsKxyOx8aZOg46DCfHvAwtBmyuYI9jFv6G oXv/SvBNkKwGRlJy1FQ0HVuFf8rnoJsShTO7X/W6FJjlL25m9dLTpQVFMZDUcXO7 zYR8Urki+j6AW1qn5v0wYJbijaJO3Pslt5s5TM3AvTSyprdgTbDAsyQqC3LL6zWJ yN8dmNNVG3A/9CwgLv4o -----END CERTIFICATE-----Generated at Tue Jan 27 09:49:26 2026 by rpki-client