This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1-jH6Ub3r1y-lQGP4gSg9k8Pf8Ig.roa File: 1-jH6Ub3r1y-lQGP4gSg9k8Pf8Ig.roa (raw, json) Hash identifier: q2zDkE+zqtSzCat2Tvi6VNy+NT9rvgDHrSGJnB93NlY= Subject key identifier: FA:31:FA:51:BD:EB:D7:2F:A5:40:63:F8:81:28:3D:93:C3:DF:F0:88 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910B056D575E45A443FBDEBF2A13405 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1-jH6Ub3r1y-lQGP4gSg9k8Pf8Ig.roa Signing time: Thu 01 Jan 2026 10:18:15 +0000 ROA not before: Thu 01 Jan 2026 10:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214209 IP address blocks: 2a12:bec4:17b0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b0:56:d5:75:e4:5a:44:3f:bd:eb:f2:a1:34:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa31fa51bdebd72fa54063f881283d93c3dff088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fb:03:6d:b0:e7:97:60:bc:45:60:74:d5:43: c8:60:91:2b:63:7d:a6:31:f5:3d:5d:04:cd:9f:5f: 48:91:e5:e3:87:9b:82:a5:8c:ee:66:a5:0f:6d:71: d2:a0:1b:c9:1a:14:13:5c:be:ae:cc:f6:64:54:42: 6f:98:79:f5:95:45:01:a9:e4:cd:b3:4a:7b:e2:65: 76:23:43:80:32:94:f8:e2:ee:45:2f:b3:36:16:8a: a8:12:ff:50:4f:6b:78:c9:f8:be:25:cf:6f:51:e3: 59:b2:33:cc:55:06:8e:78:fb:84:1c:df:8b:d1:c0: 38:86:62:07:bf:77:98:b3:d3:de:90:9b:9e:81:a5: 98:2a:6c:02:2a:2e:55:63:79:41:b4:f9:47:e5:21: c6:db:32:8a:be:83:10:8b:4e:a1:6f:81:ce:54:54: be:0c:71:c2:ee:e4:d9:cf:64:86:a6:d3:2d:9e:6c: dd:49:70:db:ae:3f:71:f0:92:c3:ce:9b:3b:58:e8: 95:cb:49:30:7d:97:79:f3:83:8c:82:d9:eb:c4:72: 58:64:58:fd:47:82:57:0f:ca:f3:d4:6f:f7:43:d6: 6f:bf:de:ab:b0:b3:bf:1c:d0:a4:8c:cc:bc:87:32: 40:49:4b:f0:b8:40:ef:a9:72:bd:0d:4f:4a:3b:42: 97:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:31:FA:51:BD:EB:D7:2F:A5:40:63:F8:81:28:3D:93:C3:DF:F0:88 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1-jH6Ub3r1y-lQGP4gSg9k8Pf8Ig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:17b0::/44 Signature Algorithm: sha256WithRSAEncryption 0f:91:72:cd:1c:28:6e:26:a2:d6:32:09:c1:9e:1d:a9:77:92: 71:f0:6a:b8:f0:5f:8f:f5:dd:d0:10:f9:e8:35:3b:ac:d3:98: be:50:5b:c9:e8:71:aa:2f:dd:0e:f3:49:bc:4d:56:b5:d7:4c: 99:8f:fa:67:f3:3e:39:b3:8b:ab:47:41:f0:97:e4:b4:95:3a: 71:65:0d:27:e5:84:05:33:48:02:de:d1:6c:8e:4a:6c:1e:6f: f9:1b:e6:0b:4d:17:9b:27:3e:e5:52:e9:e4:1f:84:4d:db:db: 8e:8f:ac:05:9a:c7:60:b9:17:a1:e0:4d:c6:f5:ce:09:16:82: f3:05:6c:5b:53:a6:49:bc:32:22:1b:64:6d:4f:ed:6f:ba:f2: 0d:b0:91:22:bc:a6:f2:16:bd:6d:1a:dd:7f:fe:3b:56:02:3e: f6:64:33:6c:3b:c2:ec:f8:9f:64:9c:61:bb:4c:44:c0:2d:a8: a7:a2:16:9d:b8:7f:6c:a9:d8:d0:07:39:29:37:49:5c:16:3a: 3b:82:9d:11:74:08:d8:0b:32:b1:fc:de:48:0b:a1:7d:38:e2: 28:f3:40:44:6e:b3:14:fb:c3:11:48:c8:9a:5f:95:48:05:68: 4b:de:ce:f6:eb:74:d5:52:64:0e:b9:5e:46:09:44:d6:2d:24: 0a:a7:7e:f1 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt5ELBW1XXkWkQ/vevyoTQFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTMxZmE1MWJkZWJkNzJmYTU0MDYzZjg4MTI4M2Q5M2MzZGZmMDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fsDbbDnl2C8RWB01UPIYJErY32m MfU9XQTNn19IkeXjh5uCpYzuZqUPbXHSoBvJGhQTXL6uzPZkVEJvmHn1lUUBqeTN s0p74mV2I0OAMpT44u5FL7M2FoqoEv9QT2t4yfi+Jc9vUeNZsjPMVQaOePuEHN+L 0cA4hmIHv3eYs9PekJuegaWYKmwCKi5VY3lBtPlH5SHG2zKKvoMQi06hb4HOVFS+ DHHC7uTZz2SGptMtnmzdSXDbrj9x8JLDzps7WOiVy0kwfZd584OMgtnrxHJYZFj9 R4JXD8rz1G/3Q9Zvv96rsLO/HNCkjMy8hzJASUvwuEDvqXK9DU9KO0KXvwIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPox+lG969cvpUBj+IEoPZPD3/CIMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvMS1qSDZVYjNyMXktbFFHUDRnU2c5azhQZjhJZy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODcvOTdmNDlhLTdhOTUtNGRkNS04Yzc0LTU1MzY5Y2Y1MDdl ZS8xL3MzNGhXa0ZlMTdYZVMyM0JMeTk3ZDFERDFtOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoSvsQX sDANBgkqhkiG9w0BAQsFAAOCAQEAD5FyzRwobiai1jIJwZ4dqXeScfBquPBfj/Xd 0BD56DU7rNOYvlBbyehxqi/dDvNJvE1WtddMmY/6Z/M+ObOLq0dB8JfktJU6cWUN J+WEBTNIAt7RbI5KbB5v+RvmC00Xmyc+5VLp5B+ETdvbjo+sBZrHYLkXoeBNxvXO CRaC8wVsW1OmSbwyIhtkbU/tb7ryDbCRIrym8ha9bRrdf/47VgI+9mQzbDvC7Pif ZJxhu0xEwC2op6IWnbh/bKnY0Ac5KTdJXBY6O4KdEXQI2AsysfzeSAuhfTjiKPNA RG6zFPvDEUjIml+VSAVoS97O9ut01VJkDrleRglE1i0kCqd+8Q== -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:01 2026 by rpki-client