This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1-xBgGkaG2GF6PparPqmNIDh4g_c.roa File: 1-xBgGkaG2GF6PparPqmNIDh4g_c.roa (raw, json) Hash identifier: qEXSxnx1Ru4atj4c8w0IR1vCIMjrFyFNvVfQyK9/EjY= Subject key identifier: FB:10:60:1A:46:86:D8:61:7A:3E:96:AB:3E:A9:8D:20:38:78:83:F7 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910B6167724976B6897F833DBAF9E8A Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1-xBgGkaG2GF6PparPqmNIDh4g_c.roa Signing time: Thu 01 Jan 2026 10:18:16 +0000 ROA not before: Thu 01 Jan 2026 10:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214828 IP address blocks: 2a12:bec4:12b0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b6:16:77:24:97:6b:68:97:f8:33:db:af:9e:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb10601a4686d8617a3e96ab3ea98d20387883f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2e:69:d2:bd:90:c2:3b:a3:bc:36:ed:61:27: c4:62:24:b7:63:fe:4c:4f:9b:d3:07:f5:49:aa:a6: af:bb:07:d3:41:1f:c9:36:28:83:a1:fe:6e:d8:0d: cd:b2:59:a5:05:ab:fc:4a:02:0a:ed:8c:6d:e5:db: 35:79:d0:ef:7c:14:13:cd:5c:df:89:8a:74:e4:5b: cf:62:c8:25:2d:4d:5e:5e:ce:45:ca:4d:0b:e7:62: 88:2b:4a:14:cd:5c:a7:f2:e5:53:e7:1d:26:cc:fb: 19:16:1c:38:3d:8c:2b:27:be:ee:ba:36:64:a7:f1: 48:18:f5:e3:70:29:2a:5c:41:20:f2:e1:fa:8b:61: 2c:c3:fd:7b:54:ed:49:a9:3b:4a:9c:16:26:07:c9: 88:21:e6:77:de:d7:5e:61:ab:59:ab:a6:bf:24:60: 4e:1b:11:61:5e:85:33:76:82:f7:f1:34:0e:9d:72: d6:c9:de:b5:0b:4b:1e:6a:d7:fa:a8:2c:49:51:8a: ad:49:f5:26:18:21:3f:7f:07:0e:ed:23:8f:8c:f7: 7b:6e:04:3d:e3:f9:f5:26:b5:39:b9:f0:88:95:0d: 3c:9f:c9:07:82:35:a1:93:8a:0d:91:f6:b2:ed:46: f4:84:69:b7:b9:10:41:cd:f7:db:48:32:01:36:99: 85:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:10:60:1A:46:86:D8:61:7A:3E:96:AB:3E:A9:8D:20:38:78:83:F7 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1-xBgGkaG2GF6PparPqmNIDh4g_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:12b0::/44 Signature Algorithm: sha256WithRSAEncryption a4:c1:52:9c:71:99:b5:0f:22:c7:34:07:28:05:2a:09:27:2c: 30:96:08:b8:ab:4a:d0:d7:98:18:a9:97:a0:af:b2:c2:5e:c5: 7d:93:e1:9b:e7:ca:a7:8e:1b:78:51:99:c3:05:41:88:e3:0e: a3:b6:3b:30:d6:09:ea:65:a6:3b:d1:43:7a:13:a3:d3:ad:60: 55:25:4e:5e:82:81:95:f0:6d:d5:59:ee:37:31:3e:f8:7c:e8: 7f:d3:ab:a3:98:f7:fe:95:d0:c9:78:99:48:2b:6a:2e:5e:10: 24:3c:b5:02:af:e4:94:53:16:59:94:ca:dc:32:70:53:4a:a9: dc:da:49:91:ca:59:79:b0:b6:f9:9f:eb:42:88:01:6f:bc:b6: 1b:a7:45:30:88:75:ea:8e:cd:20:c8:fc:b1:50:8b:65:8c:27: 1a:84:74:e2:f7:e0:2d:39:09:b5:68:b7:97:7b:6e:53:b5:44: 07:fb:80:cd:2b:3a:3f:b0:fd:f3:76:34:66:fe:77:17:49:ed: 2d:93:69:c6:e0:d8:0a:fd:28:27:08:d8:33:06:b5:96:36:5b: 27:66:d5:2a:44:cf:fb:fe:85:fc:06:07:68:00:a3:e7:1b:c2: 87:99:11:0b:b1:c3:0c:c2:46:3b:8b:35:6a:51:28:c8:13:b5: 01:30:e1:25 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt5ELYWdySXa2iX+DPbr56KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjEwNjAxYTQ2ODZkODYxN2EzZTk2YWIzZWE5OGQyMDM4Nzg4M2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C5p0r2QwjujvDbtYSfEYiS3Y/5M T5vTB/VJqqavuwfTQR/JNiiDof5u2A3NslmlBav8SgIK7Yxt5ds1edDvfBQTzVzf iYp05FvPYsglLU1eXs5Fyk0L52KIK0oUzVyn8uVT5x0mzPsZFhw4PYwrJ77uujZk p/FIGPXjcCkqXEEg8uH6i2Esw/17VO1JqTtKnBYmB8mIIeZ33tdeYatZq6a/JGBO GxFhXoUzdoL38TQOnXLWyd61C0seatf6qCxJUYqtSfUmGCE/fwcO7SOPjPd7bgQ9 4/n1JrU5ufCIlQ08n8kHgjWhk4oNkfay7Ub0hGm3uRBBzffbSDIBNpmFVwIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPsQYBpGhthhej6Wqz6pjSA4eIP3MB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvMS14QmdHa2FHMkdGNlBwYXJQcW1OSURoNGdfYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODcvOTdmNDlhLTdhOTUtNGRkNS04Yzc0LTU1MzY5Y2Y1MDdl ZS8xL3MzNGhXa0ZlMTdYZVMyM0JMeTk3ZDFERDFtOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoSvsQS sDANBgkqhkiG9w0BAQsFAAOCAQEApMFSnHGZtQ8ixzQHKAUqCScsMJYIuKtK0NeY GKmXoK+ywl7FfZPhm+fKp44beFGZwwVBiOMOo7Y7MNYJ6mWmO9FDehOj061gVSVO XoKBlfBt1VnuNzE++Hzof9Oro5j3/pXQyXiZSCtqLl4QJDy1Aq/klFMWWZTK3DJw U0qp3NpJkcpZebC2+Z/rQogBb7y2G6dFMIh16o7NIMj8sVCLZYwnGoR04vfgLTkJ tWi3l3tuU7VEB/uAzSs6P7D983Y0Zv53F0ntLZNpxuDYCv0oJwjYMwa1ljZbJ2bV KkTP+/6F/AYHaACj5xvCh5kRC7HDDMJGO4s1alEoyBO1ATDhJQ== -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:59 2026 by rpki-client