This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/N1SG5SrpH3PiSdO7PAve4Bv5orA.roa File: N1SG5SrpH3PiSdO7PAve4Bv5orA.roa (raw, json) Hash identifier: YtSfmIEKTUTro+rxRNaVatWBNeXjc5o6y20fLk3hkV4= Subject key identifier: 37:54:86:E5:2A:E9:1F:73:E2:49:D3:BB:3C:0B:DE:E0:1B:F9:A2:B0 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EACBE7DF43EE5D213BDA31A2E49AE Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/N1SG5SrpH3PiSdO7PAve4Bv5orA.roa Signing time: Thu 01 Jan 2026 12:18:23 +0000 ROA not before: Thu 01 Jan 2026 12:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208217 IP address blocks: 2a0e:aa01:fe00::/44 maxlen: 48 2a0e:aa01:fe80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ac:be:7d:f4:3e:e5:d2:13:bd:a3:1a:2e:49:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=375486e52ae91f73e249d3bb3c0bdee01bf9a2b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:14:ef:7d:9c:7b:5e:39:c3:44:43:05:b5:11: dd:f2:70:95:d3:14:e9:2a:22:29:e4:32:ea:ec:54: e2:67:80:e1:af:27:5e:a1:70:f6:99:79:32:d4:ba: 8a:67:13:90:e7:05:06:f4:78:cf:40:f0:55:52:d1: 82:77:05:36:07:2c:86:c7:f2:5e:b7:34:ab:76:1d: cc:9c:ff:ba:17:27:ed:38:77:c2:86:33:24:71:25: 45:88:ad:f8:55:6f:7f:1b:d0:b7:19:38:fe:6c:0b: be:ee:64:e5:19:2e:53:91:77:e2:5a:65:bc:2a:c1: 3a:8d:79:59:3f:cd:7c:1c:ab:1a:78:76:c0:ee:33: 3d:33:1b:ca:46:f0:5e:69:02:a6:2e:fd:e5:78:39: 2c:65:ea:de:c6:86:f0:bb:61:66:07:fc:c2:ca:ba: 92:ec:00:23:3e:cc:ff:60:9f:ef:46:6d:fd:9b:0c: 34:a5:36:2f:78:01:1f:ef:89:be:e2:bd:24:65:93: b5:46:d0:25:fb:bd:80:56:df:98:d9:27:0f:30:7c: b4:4b:53:da:e4:47:ed:0f:e4:f3:1b:71:37:5c:c8: ba:62:4d:06:dd:be:6a:fa:6e:41:2e:cd:af:5e:4e: cb:73:34:2a:de:c0:5e:da:cb:4e:39:c0:3d:f0:a0: 91:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:54:86:E5:2A:E9:1F:73:E2:49:D3:BB:3C:0B:DE:E0:1B:F9:A2:B0 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/N1SG5SrpH3PiSdO7PAve4Bv5orA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa01:fe00::/44 2a0e:aa01:fe80::/48 Signature Algorithm: sha256WithRSAEncryption 3a:d4:35:21:81:eb:6b:9c:7e:08:b6:2b:73:d7:c3:2f:88:fe: c4:dc:03:81:67:86:3d:43:95:0e:0b:bd:4a:f0:63:1b:92:e6: 89:d0:75:bf:39:10:36:45:6d:cb:34:07:3b:da:aa:3d:d2:80: d7:1f:a7:0f:ff:fc:a7:e9:a8:77:84:de:ac:de:97:e5:10:9b: 02:32:39:75:65:78:36:2d:c3:7f:44:a1:11:cd:b8:30:ad:28: b8:39:42:90:e4:43:a6:c8:62:d5:1e:8e:d1:31:5c:95:a4:4a: 47:28:51:40:14:b2:2f:72:e9:69:d8:5f:d8:b9:93:63:0c:30: d4:74:6d:7c:c9:77:15:11:b9:5c:61:e5:d6:d7:83:ab:cc:18: a6:ce:7a:5f:d5:76:85:8a:0c:1f:6e:fb:b9:e7:1a:a7:4a:07: 0f:53:bc:76:3c:7a:36:e1:9a:17:06:4f:b9:6c:97:d2:57:3c: 4f:6d:eb:1b:18:57:72:71:7b:73:5a:9b:bb:a7:a0:b5:ef:ad: 36:0f:7b:50:b4:88:52:78:85:1f:c5:db:8a:d8:f3:59:de:f6: ff:30:87:20:a0:f5:58:03:31:67:30:82:e7:18:05:d9:35:31: 32:89:59:12:e7:79:ba:1c:93:fc:eb:be:bd:2a:9a:cc:44:e4: bd:8b:d2:fb -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5fqy+ffQ+5dITvaMaLkmuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzU0ODZlNTJhZTkxZjczZTI0OWQzYmIzYzBiZGVlMDFiZjlhMmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RTvfZx7XjnDREMFtRHd8nCV0xTp KiIp5DLq7FTiZ4DhrydeoXD2mXky1LqKZxOQ5wUG9HjPQPBVUtGCdwU2ByyGx/Je tzSrdh3MnP+6FyftOHfChjMkcSVFiK34VW9/G9C3GTj+bAu+7mTlGS5TkXfiWmW8 KsE6jXlZP818HKsaeHbA7jM9MxvKRvBeaQKmLv3leDksZerexobwu2FmB/zCyrqS 7AAjPsz/YJ/vRm39mww0pTYveAEf74m+4r0kZZO1RtAl+72AVt+Y2ScPMHy0S1Pa 5EftD+TzG3E3XMi6Yk0G3b5q+m5BLs2vXk7LczQq3sBe2stOOcA98KCRzQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDdUhuUq6R9z4knTuzwL3uAb+aKwMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvTjFTRzVTcnBIM1BpU2RPN1BBdmU0QnY1b3JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg6qAf4A AwcAKg6qAf6AMA0GCSqGSIb3DQEBCwUAA4IBAQA61DUhgetrnH4Ititz18MviP7E 3AOBZ4Y9Q5UOC71K8GMbkuaJ0HW/ORA2RW3LNAc72qo90oDXH6cP//yn6ah3hN6s 3pflEJsCMjl1ZXg2LcN/RKERzbgwrSi4OUKQ5EOmyGLVHo7RMVyVpEpHKFFAFLIv culp2F/YuZNjDDDUdG18yXcVEblcYeXW14OrzBimznpf1XaFigwfbvu55xqnSgcP U7x2PHo24ZoXBk+5bJfSVzxPbesbGFdycXtzWpu7p6C17602D3tQtIhSeIUfxduK 2PNZ3vb/MIcgoPVYAzFnMILnGAXZNTEyiVkS53m6HJP86769KprMROS9i9L7 -----END CERTIFICATE-----Generated at Tue Jan 6 21:31:19 2026 by rpki-client