This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/c1teJSCnx5sxhf-dhPfRoHQ3Uoo.roa File: c1teJSCnx5sxhf-dhPfRoHQ3Uoo.roa (raw, json) Hash identifier: j/iwjL7u/vgjWwHNIYmrwGArTDQP7YWjfuiZSyU+zwA= Subject key identifier: 73:5B:5E:25:20:A7:C7:9B:31:85:FF:9D:84:F7:D1:A0:74:37:52:8A Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B79108427EDA06F83CC118AA2A6BA814D Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/c1teJSCnx5sxhf-dhPfRoHQ3Uoo.roa Signing time: Thu 01 Jan 2026 10:18:04 +0000 ROA not before: Thu 01 Jan 2026 10:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23470 IP address blocks: 2a12:bec0:420::/44 maxlen: 48 2a12:bec4:13f0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:84:27:ed:a0:6f:83:cc:11:8a:a2:a6:ba:81:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=735b5e2520a7c79b3185ff9d84f7d1a07437528a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:43:af:9f:c2:1f:11:b5:10:05:f9:ab:52:cf: 47:81:0f:48:e7:b7:3e:49:e0:36:16:b7:96:7b:8b: 8d:15:ed:f1:e6:bf:a3:ea:72:4f:82:d1:e4:07:57: 93:13:04:6a:c8:5e:53:28:ba:8d:af:36:f4:14:4d: 35:01:03:b4:eb:85:4a:d0:c8:69:d4:d6:c8:ab:6b: b2:5e:ab:15:3b:ed:0d:90:05:52:9c:92:bc:ad:20: c8:b8:bb:b2:67:e7:c5:66:9c:13:26:82:50:4a:5e: 81:33:67:a0:cd:f6:38:3b:f1:a8:f7:b1:3e:77:ae: 7e:1c:9e:00:db:11:96:d1:34:83:1e:8a:32:54:23: 11:4b:a9:6f:87:a1:03:13:f9:d7:cb:8e:91:15:09: ab:9c:b1:70:9c:c9:f7:17:ec:0f:d3:42:a6:f5:e6: 8c:18:47:08:31:fb:59:b4:0d:1e:4e:ba:4d:f1:19: eb:2f:a8:c5:fc:01:c5:96:b4:6c:3e:a1:df:2b:83: d8:c6:7e:86:ec:16:03:eb:8c:da:9b:76:86:e1:c9: 24:09:f2:46:9d:9c:db:0f:57:d1:3b:68:29:d8:4c: a5:47:4c:db:52:c7:3f:61:2e:00:65:ad:06:cb:86: 93:f3:40:21:13:f9:65:f3:02:6b:53:e1:61:30:5a: 1f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5B:5E:25:20:A7:C7:9B:31:85:FF:9D:84:F7:D1:A0:74:37:52:8A X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/c1teJSCnx5sxhf-dhPfRoHQ3Uoo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:420::/44 2a12:bec4:13f0::/44 Signature Algorithm: sha256WithRSAEncryption 71:d2:c5:1f:1b:0d:d5:c3:a2:f2:4f:49:8d:e2:9a:d0:e4:ac: 18:03:6e:83:5d:4b:67:46:98:58:df:14:7e:35:ba:25:87:e7: bf:66:a5:0e:e8:20:a9:be:2b:71:9b:f9:2f:34:a3:81:b2:5b: 82:39:80:62:58:38:3d:19:ef:69:a8:9a:33:d6:fe:7d:d0:41: 77:6e:8d:dc:69:2a:ae:72:09:bf:5f:11:2c:47:73:ff:a5:b7: bb:25:97:02:66:36:57:bf:79:90:29:11:23:88:bb:eb:dc:df: bb:37:da:42:34:77:f2:e6:62:08:dc:d5:78:54:18:29:8f:cf: 56:41:d1:7a:f9:38:6e:e7:d5:f1:a8:73:05:fc:ba:61:d6:73: ab:a3:c0:18:44:82:ce:d4:63:65:e8:af:fb:77:39:6c:b2:d7: a2:0c:ea:1b:8a:8f:51:c6:ab:02:15:86:05:72:5a:5a:94:11: 90:78:13:b0:50:f0:79:f0:ec:ec:ad:61:5f:2a:0f:8f:32:62: c1:64:ee:fb:37:2c:3b:80:bd:64:77:09:82:2a:9b:77:14:17: 64:19:94:11:3c:a3:c4:f8:e0:7e:24:79:8f:db:f4:8c:03:52: 82:57:b1:16:11:4c:fd:08:74:8e:80:04:f5:19:ad:e4:1d:08: b5:7c:ef:34 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EIQn7aBvg8wRiqKmuoFNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzViNWUyNTIwYTdjNzliMzE4NWZmOWQ4NGY3ZDFhMDc0Mzc1MjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UOvn8IfEbUQBfmrUs9HgQ9I57c+ SeA2FreWe4uNFe3x5r+j6nJPgtHkB1eTEwRqyF5TKLqNrzb0FE01AQO064VK0Mhp 1NbIq2uyXqsVO+0NkAVSnJK8rSDIuLuyZ+fFZpwTJoJQSl6BM2egzfY4O/Go97E+ d65+HJ4A2xGW0TSDHooyVCMRS6lvh6EDE/nXy46RFQmrnLFwnMn3F+wP00Km9eaM GEcIMftZtA0eTrpN8RnrL6jF/AHFlrRsPqHfK4PYxn6G7BYD64zam3aG4ckkCfJG nZzbD1fRO2gp2EylR0zbUsc/YS4AZa0Gy4aT80AhE/ll8wJrU+FhMFofBwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHNbXiUgp8ebMYX/nYT30aB0N1KKMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvYzF0ZUpTQ254NXN4aGYtZGhQZlJvSFEzVW9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKhK+wAQg AwcEKhK+xBPwMA0GCSqGSIb3DQEBCwUAA4IBAQBx0sUfGw3Vw6LyT0mN4prQ5KwY A26DXUtnRphY3xR+Nbolh+e/ZqUO6CCpvitxm/kvNKOBsluCOYBiWDg9Ge9pqJoz 1v590EF3bo3caSqucgm/XxEsR3P/pbe7JZcCZjZXv3mQKREjiLvr3N+7N9pCNHfy 5mII3NV4VBgpj89WQdF6+Thu59XxqHMF/Lph1nOro8AYRILO1GNl6K/7dzlsstei DOobio9RxqsCFYYFclpalBGQeBOwUPB58OzsrWFfKg+PMmLBZO77Nyw7gL1kdwmC Kpt3FBdkGZQRPKPE+OB+JHmP2/SMA1KCV7EWEUz9CHSOgAT1Ga3kHQi1fO80 -----END CERTIFICATE-----Generated at Thu Jan 8 09:23:44 2026 by rpki-client