This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/a1SQnxRdSMBkFkY-58lt6ZUfPR0.roa File: a1SQnxRdSMBkFkY-58lt6ZUfPR0.roa (raw, json) Hash identifier: dktJteGJkQtVIljFEiTpocdtPuxqrtO+uY+59NtxZ/g= Subject key identifier: 6B:54:90:9F:14:5D:48:C0:64:16:46:3E:E7:C9:6D:E9:95:1F:3D:1D Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B79108460E623D5318588F9F39A527915 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/a1SQnxRdSMBkFkY-58lt6ZUfPR0.roa Signing time: Thu 01 Jan 2026 10:18:04 +0000 ROA not before: Thu 01 Jan 2026 10:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26042 IP address blocks: 2a12:bec4:1980::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:84:60:e6:23:d5:31:85:88:f9:f3:9a:52:79:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b54909f145d48c06416463ee7c96de9951f3d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:19:ae:b0:61:db:09:9b:f0:bf:95:a8:50:18: d1:53:ad:f0:4d:21:13:16:a7:97:32:24:0c:92:a5: 7a:f8:4b:8b:9d:8b:19:e7:7b:f1:34:40:8d:89:64: 95:50:3f:ee:10:fa:57:fb:77:89:7e:c2:e4:3a:f5: 88:57:a2:96:98:38:4d:72:01:a7:76:f0:cb:e1:a8: 9d:80:4f:97:b4:a3:41:45:6e:e2:a6:32:18:e3:62: e4:24:3a:d4:0a:f5:f0:3e:b3:19:10:63:6a:37:01: 1b:af:ff:43:ea:04:b8:be:de:18:03:5e:70:29:23: c6:5b:b5:f5:ef:33:24:ce:b7:67:b9:84:9c:71:21: 54:7d:2e:f0:e3:d7:56:55:11:43:b2:63:e1:08:b7: 86:e8:ae:be:12:4c:c5:8e:dc:49:21:5a:9f:87:97: 96:52:9f:cb:98:7c:b4:23:62:d1:f1:bf:0e:21:c8: 00:77:c4:10:6e:56:21:9a:f7:c9:79:5f:81:6f:60: 4f:58:a8:8a:d4:f7:6a:fc:63:b8:81:07:ac:d2:1a: 0d:6c:9a:b0:33:ab:80:f0:e1:ad:ad:f4:7a:00:5f: 81:4a:3b:9c:12:41:2c:c3:f3:f5:4d:69:d4:00:37: 98:cb:97:d8:f9:d4:ab:cc:89:dd:7f:62:03:bb:c0: 91:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:54:90:9F:14:5D:48:C0:64:16:46:3E:E7:C9:6D:E9:95:1F:3D:1D X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/a1SQnxRdSMBkFkY-58lt6ZUfPR0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:1980::/44 Signature Algorithm: sha256WithRSAEncryption 3e:72:75:6c:54:eb:a9:c6:6f:8a:92:2f:9a:90:34:10:89:2b: 9c:f1:a4:82:bf:b5:63:80:8d:6a:f3:13:b0:ef:a1:b4:e7:c1: 96:2a:f7:e6:ff:68:13:8e:4a:20:6d:3a:d5:66:79:45:6f:26: eb:24:52:86:16:67:7e:b6:2f:91:aa:5f:90:e1:1f:25:a3:95: d4:a3:9d:bd:12:87:2a:27:81:b3:83:b4:18:11:56:05:de:6f: 71:60:da:8f:ea:3d:94:84:11:7a:d3:4a:b5:b6:83:e7:e0:e5: 7e:5d:46:d8:81:42:11:02:39:83:8e:ab:e3:4d:d1:1a:aa:0a: 7f:46:73:61:e5:44:95:cd:15:e5:4f:85:51:68:10:84:48:bf: c7:0e:50:63:b7:00:b6:bd:3a:04:e1:6e:49:03:9b:42:a9:2a: f6:04:2d:87:09:60:14:b6:77:eb:fd:a7:b5:31:3f:2a:e4:94: 54:d3:71:1a:e5:70:df:65:96:ee:e6:c5:d4:3a:0c:52:80:57: b0:4d:c5:07:3b:63:3e:cc:10:9f:41:ea:35:67:76:2b:39:c3: b7:74:2a:1c:e0:cd:1c:f9:b0:c6:4b:7d:8d:b0:8d:d7:1c:7b: 3c:42:82:a3:4b:4f:6a:4b:54:6f:a8:3f:3e:2e:34:22:13:19: a5:7b:55:cf -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EIRg5iPVMYWI+fOaUnkVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjU0OTA5ZjE0NWQ0OGMwNjQxNjQ2M2VlN2M5NmRlOTk1MWYzZDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhmusGHbCZvwv5WoUBjRU63wTSET FqeXMiQMkqV6+EuLnYsZ53vxNECNiWSVUD/uEPpX+3eJfsLkOvWIV6KWmDhNcgGn dvDL4aidgE+XtKNBRW7ipjIY42LkJDrUCvXwPrMZEGNqNwEbr/9D6gS4vt4YA15w KSPGW7X17zMkzrdnuYSccSFUfS7w49dWVRFDsmPhCLeG6K6+EkzFjtxJIVqfh5eW Up/LmHy0I2LR8b8OIcgAd8QQblYhmvfJeV+Bb2BPWKiK1Pdq/GO4gQes0hoNbJqw M6uA8OGtrfR6AF+BSjucEkEsw/P1TWnUADeYy5fY+dSrzIndf2IDu8CRWwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGtUkJ8UXUjAZBZGPufJbemVHz0dMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvYTFTUW54UmRTTUJrRmtZLTU4bHQ2WlVmUFIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+xBmA MA0GCSqGSIb3DQEBCwUAA4IBAQA+cnVsVOupxm+Kki+akDQQiSuc8aSCv7VjgI1q 8xOw76G058GWKvfm/2gTjkogbTrVZnlFbybrJFKGFmd+ti+Rql+Q4R8lo5XUo529 EocqJ4Gzg7QYEVYF3m9xYNqP6j2UhBF600q1toPn4OV+XUbYgUIRAjmDjqvjTdEa qgp/RnNh5USVzRXlT4VRaBCESL/HDlBjtwC2vToE4W5JA5tCqSr2BC2HCWAUtnfr /ae1MT8q5JRU03Ea5XDfZZbu5sXUOgxSgFewTcUHO2M+zBCfQeo1Z3YrOcO3dCoc 4M0c+bDGS32NsI3XHHs8QoKjS09qS1RvqD8+LjQiExmle1XP -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:31 2026 by rpki-client