This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1Dp_HULnNZMVAhlLe-9yixatYQY.roa File: 1Dp_HULnNZMVAhlLe-9yixatYQY.roa (raw, json) Hash identifier: IzhDm1YzC6h947to5j0A0XdTQTStwYjG3m5n2MGywqw= Subject key identifier: D4:3A:7F:1D:42:E7:35:93:15:02:19:4B:7B:EF:72:8B:16:AD:61:06 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B79108D4DCFC74481025840ED970A6E90 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1Dp_HULnNZMVAhlLe-9yixatYQY.roa Signing time: Thu 01 Jan 2026 10:18:06 +0000 ROA not before: Thu 01 Jan 2026 10:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198366 IP address blocks: 2a12:bec0:350::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:8d:4d:cf:c7:44:81:02:58:40:ed:97:0a:6e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d43a7f1d42e735931502194b7bef728b16ad6106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e8:8c:89:5e:34:a0:d7:ef:e3:cb:77:ce:f0: c4:66:86:92:e0:3f:6f:cb:cc:47:19:66:5a:61:12: 2a:48:69:d8:d0:dc:63:d8:00:47:cb:80:f9:30:66: ca:57:3c:10:fa:df:7f:2a:fe:64:b4:c6:4a:c7:9e: c0:02:ab:1a:96:34:90:3d:7b:c1:f1:c0:b3:f0:72: 19:ce:b3:b2:6b:f8:b8:50:23:00:2d:77:66:33:b5: 6d:44:03:10:f3:17:f3:dc:02:ec:ee:60:45:14:de: 37:e3:4f:84:d7:b1:90:07:ed:b7:41:ab:de:d1:d4: 5f:b8:6e:21:d0:3e:88:20:2d:88:08:59:d9:24:fe: 9a:8e:9a:df:9a:72:d5:3a:ed:4d:37:d7:59:a2:4f: 18:c6:ce:ed:e4:db:13:d4:9f:d9:ed:fc:5f:c8:f5: 93:a5:8d:76:0c:78:72:fd:a9:0e:90:18:93:ee:6c: af:2d:e7:36:dd:ea:0d:43:38:64:f2:74:e4:ef:da: 56:d0:58:1e:b2:c6:2e:3f:01:b8:aa:db:07:a1:38: d1:aa:95:69:2a:a0:f1:e3:c8:0f:09:58:9b:23:f1: 35:17:52:06:e0:82:68:04:4c:ab:20:fb:7a:02:c1: 6e:41:29:e0:f2:a0:c3:e4:d9:99:76:88:20:82:34: d5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:3A:7F:1D:42:E7:35:93:15:02:19:4B:7B:EF:72:8B:16:AD:61:06 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1Dp_HULnNZMVAhlLe-9yixatYQY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:350::/44 Signature Algorithm: sha256WithRSAEncryption 4e:09:b6:2a:74:59:5b:fa:94:18:9b:10:95:d4:b4:78:8f:76: 1f:5e:26:41:24:8c:b8:16:d2:9f:5f:f7:cb:bc:1a:d4:1c:07: 4c:69:8a:2b:e7:5d:f9:12:55:80:4a:45:5e:de:4c:53:48:e4: 36:40:7c:f6:a2:72:e0:7a:5c:ff:48:a8:5d:b6:c1:d4:dc:5b: 45:40:3a:4e:bb:24:6a:8f:f2:d3:ad:fa:43:55:c9:49:38:68: 1b:5d:3d:c3:73:77:ac:45:36:e3:69:31:13:ce:c0:c9:06:eb: 76:cc:c8:e0:1b:1b:b8:1d:a1:f7:7e:45:a7:57:5d:f5:a1:eb: f1:49:20:54:e8:ec:96:0f:af:8e:09:ee:42:5e:c7:2c:41:6e: 77:de:13:21:78:c9:29:1d:9b:83:d2:02:69:9a:20:c4:c3:cf: fe:1e:fe:2d:c7:4d:92:f5:09:4c:7c:f2:f4:f3:66:e6:53:e6: 8f:f4:52:df:cd:d8:19:93:5b:5f:21:52:c9:40:3c:94:1f:b2: 5b:3d:a1:99:4f:66:09:2c:50:1b:49:92:6d:7c:d0:c3:2a:af: a9:02:aa:ab:19:89:12:57:58:f6:d6:ec:60:05:8e:f1:91:98: f8:fe:2a:67:b7:65:e1:68:25:7b:3a:61:11:6f:a6:56:e7:9a: 79:a2:13:cd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EI1Nz8dEgQJYQO2XCm6QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDNhN2YxZDQyZTczNTkzMTUwMjE5NGI3YmVmNzI4YjE2YWQ2MTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveiMiV40oNfv48t3zvDEZoaS4D9v y8xHGWZaYRIqSGnY0Nxj2ABHy4D5MGbKVzwQ+t9/Kv5ktMZKx57AAqsaljSQPXvB 8cCz8HIZzrOya/i4UCMALXdmM7VtRAMQ8xfz3ALs7mBFFN4340+E17GQB+23Qave 0dRfuG4h0D6IIC2ICFnZJP6ajprfmnLVOu1NN9dZok8Yxs7t5NsT1J/Z7fxfyPWT pY12DHhy/akOkBiT7myvLec23eoNQzhk8nTk79pW0FgessYuPwG4qtsHoTjRqpVp KqDx48gPCVibI/E1F1IG4IJoBEyrIPt6AsFuQSng8qDD5NmZdogggjTVnwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNQ6fx1C5zWTFQIZS3vvcosWrWEGMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvMURwX0hVTG5OWk1WQWhsTGUtOXlpeGF0WVFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wANQ MA0GCSqGSIb3DQEBCwUAA4IBAQBOCbYqdFlb+pQYmxCV1LR4j3YfXiZBJIy4FtKf X/fLvBrUHAdMaYor5135ElWASkVe3kxTSOQ2QHz2onLgelz/SKhdtsHU3FtFQDpO uyRqj/LTrfpDVclJOGgbXT3Dc3esRTbjaTETzsDJBut2zMjgGxu4HaH3fkWnV131 oevxSSBU6OyWD6+OCe5CXscsQW533hMheMkpHZuD0gJpmiDEw8/+Hv4tx02S9QlM fPL082bmU+aP9FLfzdgZk1tfIVLJQDyUH7JbPaGZT2YJLFAbSZJtfNDDKq+pAqqr GYkSV1j21uxgBY7xkZj4/ipnt2XhaCV7OmERb6ZW55p5ohPN -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:12 2026 by rpki-client