This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/N_t0iSjnQlMLmJZKqbJJB1AKECI.roa File: N_t0iSjnQlMLmJZKqbJJB1AKECI.roa (raw, json) Hash identifier: CLalor9+rY0MRNCFPs5EzzFZ6W1RHuYiyZymjFGnJuc= Subject key identifier: 37:FB:74:89:28:E7:42:53:0B:98:96:4A:A9:B2:49:07:50:0A:10:22 Certificate issuer: /CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208 Certificate serial: 019B7AC80EB8EEC168BC690A3FFA0664234C Authority key identifier: 1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/N_t0iSjnQlMLmJZKqbJJB1AKECI.roa Signing time: Thu 01 Jan 2026 18:18:09 +0000 ROA not before: Thu 01 Jan 2026 18:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206671 IP address blocks: 2001:678:91c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:0e:b8:ee:c1:68:bc:69:0a:3f:fa:06:64:23:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208 Validity Not Before: Jan 1 18:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37fb748928e742530b98964aa9b24907500a1022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8c:56:74:27:db:c8:0a:4c:04:aa:00:c4:ab: 82:93:a0:c8:bc:43:1c:e8:67:90:01:93:78:b0:80: f3:79:3e:f4:a2:34:40:20:7f:69:1b:0d:0b:1e:19: 65:0d:f8:09:15:dc:e1:65:56:8c:55:a6:24:69:97: 4e:13:ad:e0:30:1f:41:82:7c:3c:65:d3:6f:99:e1: 89:88:42:02:9c:1e:23:37:5e:fd:ea:f7:18:21:cd: e3:d6:29:c5:56:21:55:bb:ce:f8:fa:ca:5c:d0:8f: 70:de:77:29:53:36:c6:d9:f7:22:9a:fa:cd:9d:bf: 57:7c:67:19:6e:de:16:80:eb:4e:45:69:e7:5a:c2: 24:25:18:78:f5:f5:bb:fb:3a:01:48:a0:43:91:ef: 3c:a5:ac:e5:79:52:c5:c6:ec:fc:c7:76:ab:e5:54: 0f:28:fb:5a:fd:a0:e9:1c:fd:5a:85:fe:b0:59:bd: 06:15:62:84:70:af:22:e5:e1:53:8c:c3:47:24:f1: fb:79:fc:64:dd:ac:9e:03:34:d7:2d:89:f7:c3:7b: a7:64:98:75:b0:dc:8f:f9:d1:88:30:16:98:97:d1: 50:92:eb:ea:ad:71:ef:d9:79:0f:41:d4:e9:ec:19: 25:c9:db:e8:57:b1:f8:dd:97:a5:15:43:d7:3c:8e: 8e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FB:74:89:28:E7:42:53:0B:98:96:4A:A9:B2:49:07:50:0A:10:22 X509v3 Authority Key Identifier: keyid:1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/N_t0iSjnQlMLmJZKqbJJB1AKECI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:91c::/48 Signature Algorithm: sha256WithRSAEncryption 9a:ff:75:6d:6f:9a:43:d1:7f:cf:bd:45:1f:81:4b:1b:61:7a: 94:7b:d2:98:34:8b:b1:6f:bf:df:c4:ab:94:b2:56:c8:b8:18: b5:14:97:0c:00:a6:d5:94:49:0b:fb:c2:0d:4a:91:fc:de:57: c7:9e:11:57:3e:25:f2:29:38:f0:46:93:66:8f:53:ed:42:af: 40:c0:72:79:3d:c5:c6:f2:cf:06:52:37:9a:bb:e1:a1:42:69: a0:23:97:c7:f7:c2:6b:98:e7:60:8b:de:7c:ad:06:de:2e:58: c7:b8:dc:cc:e5:90:3e:70:96:38:16:db:89:af:63:d1:a1:92: 5c:c2:b1:ac:83:0e:eb:73:0c:8f:56:4e:5d:74:e6:13:8d:34: b4:18:7c:f9:f7:f7:b2:13:7e:5a:98:d9:ec:5a:ae:e2:23:1d: 2c:73:da:5b:52:ee:b6:d4:92:f4:f1:7b:98:02:9b:93:a0:1a: 9a:be:fb:a3:f7:cf:2b:1b:3a:97:44:79:da:dd:94:11:9e:92: 69:c7:c0:2e:6e:6f:2b:14:4f:24:09:8d:12:86:57:2b:49:21: 0f:e5:be:22:76:c1:72:3b:23:4a:14:58:53:8c:70:c3:72:e3: 5d:49:96:0e:cd:2a:8d:5a:7e:aa:81:e8:af:bc:bb:11:4c:e6: 5a:8e:13:41 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yA647sFovGkKP/oGZCNMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMTFhNjYzNmY4Y2UyY2VmNTgzNmM0NDM1NjVjNWZlM2Fl MmYyMDgwHhcNMjYwMTAxMTgxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2ZiNzQ4OTI4ZTc0MjUzMGI5ODk2NGFhOWIyNDkwNzUwMGExMDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYxWdCfbyApMBKoAxKuCk6DIvEMc 6GeQAZN4sIDzeT70ojRAIH9pGw0LHhllDfgJFdzhZVaMVaYkaZdOE63gMB9Bgnw8 ZdNvmeGJiEICnB4jN1796vcYIc3j1inFViFVu874+spc0I9w3ncpUzbG2fcimvrN nb9XfGcZbt4WgOtORWnnWsIkJRh49fW7+zoBSKBDke88pazleVLFxuz8x3ar5VQP KPta/aDpHP1ahf6wWb0GFWKEcK8i5eFTjMNHJPH7efxk3ayeAzTXLYn3w3unZJh1 sNyP+dGIMBaYl9FQkuvqrXHv2XkPQdTp7BklydvoV7H43ZelFUPXPI6OQQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDf7dIko50JTC5iWSqmySQdQChAiMB8GA1UdIwQY MBaAFBoRpmNvjOLO9YNsRDVlxf464vIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2hHbVkyLU00czcxZzJ4RU5XWEZfanJpOGdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mOGY5YzgtMGRlYi00MGRlLTg5NDYt MjkxZTRiZDcwMzA5LzEvTl90MGlTam5RbE1MbUpaS3FiSkpCMUFLRUNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9mOGY5YzgtMGRlYi00MGRlLTg5NDYtMjkxZTRiZDcwMzA5 LzEvR2hHbVkyLU00czcxZzJ4RU5XWEZfanJpOGdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAkc MA0GCSqGSIb3DQEBCwUAA4IBAQCa/3Vtb5pD0X/PvUUfgUsbYXqUe9KYNIuxb7/f xKuUslbIuBi1FJcMAKbVlEkL+8INSpH83lfHnhFXPiXyKTjwRpNmj1PtQq9AwHJ5 PcXG8s8GUjeau+GhQmmgI5fH98JrmOdgi958rQbeLljHuNzM5ZA+cJY4FtuJr2PR oZJcwrGsgw7rcwyPVk5ddOYTjTS0GHz59/eyE35amNnsWq7iIx0sc9pbUu621JL0 8XuYApuToBqavvuj988rGzqXRHna3ZQRnpJpx8Aubm8rFE8kCY0ShlcrSSEP5b4i dsFyOyNKFFhTjHDDcuNdSZYOzSqNWn6qgeivvLsRTOZajhNB -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:43 2026 by rpki-client