This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/1-rduehBiSXoXtEjm13X_baLg9hg.roa File: 1-rduehBiSXoXtEjm13X_baLg9hg.roa (raw, json) Hash identifier: w3JHE4zjBQCl+As/2Jf4pROYK6+W2f/IVxYPRcpmzD0= Subject key identifier: FA:B7:6E:7A:10:62:49:7A:17:B4:48:E6:D7:75:FF:6D:A2:E0:F6:18 Certificate issuer: /CN=75245438a2b6209c81675ef35783d89a19b707fa Certificate serial: 019B7CED1F6210AC978288E103FE61A3D26C Authority key identifier: 75:24:54:38:A2:B6:20:9C:81:67:5E:F3:57:83:D8:9A:19:B7:07:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/1-rduehBiSXoXtEjm13X_baLg9hg.roa Signing time: Fri 02 Jan 2026 04:17:53 +0000 ROA not before: Fri 02 Jan 2026 04:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199852 IP address blocks: 2001:67c:197c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:1f:62:10:ac:97:82:88:e1:03:fe:61:a3:d2:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75245438a2b6209c81675ef35783d89a19b707fa Validity Not Before: Jan 2 04:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fab76e7a1062497a17b448e6d775ff6da2e0f618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:11:24:02:aa:af:d4:e6:25:99:a0:55:9e:f8: 94:5b:8d:21:1b:b5:4b:8e:71:73:a3:5a:59:0f:d2: d8:ac:85:1e:ef:da:1e:e7:17:21:ae:36:81:2f:fe: d1:a7:3d:01:0c:3c:79:82:60:6a:30:2c:c3:3d:c0: f3:0a:2b:fd:d8:ca:d6:78:e1:7e:0d:13:b3:54:37: 8f:a3:a4:d0:9f:be:fd:18:c0:69:c7:2e:3f:5e:d0: 77:b3:95:cd:72:27:1e:4c:f2:b5:18:e6:5c:78:8a: b0:51:f8:a1:3b:a7:e1:1f:00:02:46:c8:39:fe:68: 28:13:ce:e4:24:90:a2:d1:0d:93:75:08:b7:b9:12: 23:7a:8a:81:04:a9:2f:4a:57:6c:5c:f5:d3:ff:6b: b5:3a:33:89:d8:42:04:f8:d3:40:3c:8d:05:90:83: 14:14:94:03:c3:a2:c0:0a:f7:a3:a7:fb:0f:7c:17: f1:29:7d:fe:f4:ca:f2:04:aa:5c:c4:62:2f:83:fc: 16:18:79:db:71:cc:f7:60:d7:0b:57:99:a5:6e:e3: 0d:ef:be:3e:e7:da:d5:25:5c:9e:55:19:97:5e:a1: 42:0a:0e:a5:ce:04:96:c5:70:77:ad:ea:92:67:8c: 17:ad:c4:bf:f4:19:14:fa:40:b0:58:bd:fe:4b:20: e0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B7:6E:7A:10:62:49:7A:17:B4:48:E6:D7:75:FF:6D:A2:E0:F6:18 X509v3 Authority Key Identifier: keyid:75:24:54:38:A2:B6:20:9C:81:67:5E:F3:57:83:D8:9A:19:B7:07:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/1-rduehBiSXoXtEjm13X_baLg9hg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:197c::/48 Signature Algorithm: sha256WithRSAEncryption 60:cc:79:d6:8c:01:7a:3b:1e:3e:df:68:25:1c:f3:ed:6e:a3: 3c:12:47:2c:95:35:77:13:07:73:ac:22:a7:92:3a:79:13:e0: 07:f6:45:cc:e5:00:06:b5:97:89:2d:63:90:ea:2c:83:50:5b: bc:45:1c:0e:bd:e9:d5:d4:6a:af:41:42:57:b4:e3:fe:e6:27: da:51:60:24:20:f5:a0:d9:d1:8b:d1:7e:c6:8d:07:9b:9a:71: 8b:70:e1:7e:fc:69:a4:06:2b:39:c3:84:77:13:ad:fd:c0:4f: 52:25:55:2b:e9:9a:3d:7d:c4:61:0e:95:85:47:59:1f:64:8c: ef:de:a0:bc:fa:b7:9a:c8:20:06:78:e8:06:d2:0c:b5:d3:e1: b3:27:b5:3b:3f:3b:c3:66:8e:2a:ae:94:4a:9b:32:7a:b4:f0: e9:52:9a:1f:85:eb:82:db:c1:a3:a1:c9:6f:72:ba:9c:29:0a: d0:ea:1f:91:5a:f4:66:4f:d8:31:51:2b:1e:89:20:8b:8b:03: 53:7c:62:46:df:28:d2:3f:fd:1d:01:a7:23:49:ad:09:3b:c3: 5b:2a:5b:94:7f:24:22:4d:1f:c9:50:12:9b:fc:4a:65:53:76: af:c0:ce:8b:69:1b:73:a3:be:e5:09:20:90:de:55:d5:a0:2c: ef:4b:1a:85 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt87R9iEKyXgojhA/5ho9JsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MjQ1NDM4YTJiNjIwOWM4MTY3NWVmMzU3ODNkODlhMTli NzA3ZmEwHhcNMjYwMTAyMDQxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWI3NmU3YTEwNjI0OTdhMTdiNDQ4ZTZkNzc1ZmY2ZGEyZTBmNjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxEkAqqv1OYlmaBVnviUW40hG7VL jnFzo1pZD9LYrIUe79oe5xchrjaBL/7Rpz0BDDx5gmBqMCzDPcDzCiv92MrWeOF+ DROzVDePo6TQn779GMBpxy4/XtB3s5XNciceTPK1GOZceIqwUfihO6fhHwACRsg5 /mgoE87kJJCi0Q2TdQi3uRIjeoqBBKkvSldsXPXT/2u1OjOJ2EIE+NNAPI0FkIMU FJQDw6LACvejp/sPfBfxKX3+9MryBKpcxGIvg/wWGHnbccz3YNcLV5mlbuMN774+ 59rVJVyeVRmXXqFCCg6lzgSWxXB3reqSZ4wXrcS/9BkU+kCwWL3+SyDgowIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPq3bnoQYkl6F7RI5td1/22i4PYYMB8GA1UdIwQY MBaAFHUkVDiitiCcgWde81eD2JoZtwf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFNSVU9LSzJJSnlCWjE3elY0UFltaG0zQl9vLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wZWVkMmItMjA1Ny00NWU3LTlmMDAt NWVlMTg1ODhkZjU5LzEvMS1yZHVlaEJpU1hvWHRFam0xM1hfYmFMZzloZy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvN2UvMGVlZDJiLTIwNTctNDVlNy05ZjAwLTVlZTE4NTg4ZGY1 OS8xL2RTUlVPS0sySUp5QloxN3pWNFBZbWhtM0Jfby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwZ fDANBgkqhkiG9w0BAQsFAAOCAQEAYMx51owBejsePt9oJRzz7W6jPBJHLJU1dxMH c6wip5I6eRPgB/ZFzOUABrWXiS1jkOosg1BbvEUcDr3p1dRqr0FCV7Tj/uYn2lFg JCD1oNnRi9F+xo0Hm5pxi3DhfvxppAYrOcOEdxOt/cBPUiVVK+maPX3EYQ6VhUdZ H2SM796gvPq3msggBnjoBtIMtdPhsye1Oz87w2aOKq6USpsyerTw6VKaH4XrgtvB o6HJb3K6nCkK0OofkVr0Zk/YMVErHokgi4sDU3xiRt8o0j/9HQGnI0mtCTvDWypb lH8kIk0fyVASm/xKZVN2r8DOi2kbc6O+5QkgkN5V1aAs70sahQ== -----END CERTIFICATE-----Generated at Mon Jan 26 19:34:57 2026 by rpki-client