This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/1M-oRRQHQN7WzAJ9drZIYs_Ib5w.roa File: 1M-oRRQHQN7WzAJ9drZIYs_Ib5w.roa (raw, json) Hash identifier: NTj3YD9SP7WkKzIuO7OWJNyQJyk6W1qPJFmHH+wxA0s= Subject key identifier: D4:CF:A8:45:14:07:40:DE:D6:CC:02:7D:76:B6:48:62:CF:C8:6F:9C Certificate issuer: /CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7 Certificate serial: 019B7CED87D50A3B20DBA0BCF174E303E194 Authority key identifier: 40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/1M-oRRQHQN7WzAJ9drZIYs_Ib5w.roa Signing time: Fri 02 Jan 2026 04:18:20 +0000 ROA not before: Fri 02 Jan 2026 04:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14114 IP address blocks: 2001:678:f88::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 07:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:87:d5:0a:3b:20:db:a0:bc:f1:74:e3:03:e1:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7 Validity Not Before: Jan 2 04:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4cfa845140740ded6cc027d76b64862cfc86f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:16:02:9d:4c:69:95:f1:67:22:01:5c:a4:37: e0:4c:0c:ad:7e:fe:27:32:6d:ed:4d:ff:c9:3b:4a: 2e:38:f1:75:ba:1a:a3:4a:79:53:7b:bb:70:b7:f4: c6:cf:6d:24:2d:a1:21:3b:6d:37:64:51:88:73:b9: 7e:a9:bf:55:f0:75:9c:17:01:8a:ca:65:f6:ee:f4: d0:f4:76:e7:5c:a3:dd:22:39:bf:1d:f8:70:1c:ae: 82:d0:9b:f7:84:aa:0c:54:db:02:11:1e:f7:0b:f7: 0c:6f:54:f9:be:56:6b:c1:21:af:57:26:09:0e:87: e7:42:ce:30:67:cc:ad:92:21:3e:63:82:7e:cf:02: bb:e7:73:0b:37:3f:47:48:82:da:5c:68:37:e4:cc: 40:06:05:0f:ec:d5:f1:f9:34:02:17:94:9d:2c:66: 73:8c:7a:b9:1e:2b:f4:e4:14:23:21:21:a6:10:05: 3f:a9:be:7b:0a:d9:f4:c2:78:8d:d7:cc:42:40:24: ce:21:44:10:74:b6:d6:70:42:d8:5e:60:59:74:7e: 8e:15:dc:3a:6e:ec:62:15:8d:82:6f:78:5a:80:5b: 74:ad:cd:c9:19:b3:8d:d2:d4:53:b3:fe:95:9e:fa: 97:06:74:3d:83:29:f7:79:d4:ab:14:42:fd:13:c3: 8a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CF:A8:45:14:07:40:DE:D6:CC:02:7D:76:B6:48:62:CF:C8:6F:9C X509v3 Authority Key Identifier: keyid:40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/1M-oRRQHQN7WzAJ9drZIYs_Ib5w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:f88::/48 Signature Algorithm: sha256WithRSAEncryption 5d:78:68:4b:59:30:ee:f7:c5:63:1d:18:fb:10:b1:f8:4e:b8: 89:6b:f2:61:42:9d:c7:49:13:6c:f1:c7:e4:f6:d2:89:b6:31: f3:08:0f:81:cd:65:d5:f4:80:04:06:8c:9c:cc:66:17:6b:ae: 03:7e:82:da:5c:06:6b:4b:8d:c6:1b:99:07:96:fb:51:8a:25: 8d:26:ed:17:81:26:7f:66:5b:28:2b:b6:62:08:b6:1d:e3:61: 63:80:39:20:fe:77:bf:0d:f6:81:48:d6:e0:ee:20:76:7c:18: 10:04:c5:82:04:e1:0f:ec:02:e2:27:0b:17:b7:29:4b:2a:43: 42:09:17:49:51:ad:6c:60:3c:71:e0:80:28:80:96:d0:8a:5e: a0:4a:05:fd:3c:d8:36:c5:88:bb:1b:25:5d:53:bf:0d:47:fc: 23:5a:91:24:2b:2a:e8:76:97:a3:89:33:7e:67:6d:21:a9:81: 4a:78:8c:b4:2f:5c:06:52:3b:35:38:c0:38:31:a9:3a:d8:68: 07:17:0d:b3:2d:c9:db:e0:0b:fb:7d:41:ed:e2:ee:9d:b5:93: 45:3d:da:fd:5a:cb:fe:8d:29:2d:8e:74:38:35:90:f8:a0:ef: 7e:59:6c:b9:9f:3c:e9:b7:7b:2c:f6:30:de:23:70:55:64:28: fd:7d:65:da -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87YfVCjsg26C88XTjA+GUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwY2Q1YTUwMzhkNWUxMmZlMWM5ZDlmNWM4NjY0MDc0YzNk ZDBhYzcwHhcNMjYwMTAyMDQxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGNmYTg0NTE0MDc0MGRlZDZjYzAyN2Q3NmI2NDg2MmNmYzg2ZjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxYCnUxplfFnIgFcpDfgTAytfv4n Mm3tTf/JO0ouOPF1uhqjSnlTe7twt/TGz20kLaEhO203ZFGIc7l+qb9V8HWcFwGK ymX27vTQ9HbnXKPdIjm/HfhwHK6C0Jv3hKoMVNsCER73C/cMb1T5vlZrwSGvVyYJ DofnQs4wZ8ytkiE+Y4J+zwK753MLNz9HSILaXGg35MxABgUP7NXx+TQCF5SdLGZz jHq5Hiv05BQjISGmEAU/qb57Ctn0wniN18xCQCTOIUQQdLbWcELYXmBZdH6OFdw6 buxiFY2Cb3hagFt0rc3JGbON0tRTs/6VnvqXBnQ9gyn3edSrFEL9E8OK7wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNTPqEUUB0De1swCfXa2SGLPyG+cMB8GA1UdIwQY MBaAFEDNWlA41eEv4cnZ9chmQHTD3QrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU0xYVVEalY0U19oeWRuMXlHWkFkTVBkQ3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9jZWMxMTktNGM5OS00MTU4LTk5ZjEt NjU5YzY3MTkxMWYxLzEvMU0tb1JSUUhRTjdXekFKOWRyWklZc19JYjV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9jZWMxMTktNGM5OS00MTU4LTk5ZjEtNjU5YzY3MTkxMWYx LzEvUU0xYVVEalY0U19oeWRuMXlHWkFkTVBkQ3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA+I MA0GCSqGSIb3DQEBCwUAA4IBAQBdeGhLWTDu98VjHRj7ELH4TriJa/JhQp3HSRNs 8cfk9tKJtjHzCA+BzWXV9IAEBoyczGYXa64DfoLaXAZrS43GG5kHlvtRiiWNJu0X gSZ/ZlsoK7ZiCLYd42FjgDkg/ne/DfaBSNbg7iB2fBgQBMWCBOEP7ALiJwsXtylL KkNCCRdJUa1sYDxx4IAogJbQil6gSgX9PNg2xYi7GyVdU78NR/wjWpEkKyrodpej iTN+Z20hqYFKeIy0L1wGUjs1OMA4Mak62GgHFw2zLcnb4Av7fUHt4u6dtZNFPdr9 Wsv+jSktjnQ4NZD4oO9+WWy5nzzpt3ss9jDeI3BVZCj9fWXa -----END CERTIFICATE-----Generated at Fri Jan 9 17:49:32 2026 by rpki-client