This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/1MbFx2hYgLEKAUIjFCjMUUah6nY.roa File: 1MbFx2hYgLEKAUIjFCjMUUah6nY.roa (raw, json) Hash identifier: irNw6BMjZ8MiMdNaeEroKRt7R7y7F1x4LJIElSoSeO0= Subject key identifier: D4:C6:C5:C7:68:58:80:B1:0A:01:42:23:14:28:CC:51:46:A1:EA:76 Certificate issuer: /CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd Certificate serial: 019B78A226AD9C7B58E06E58767B762640CA Authority key identifier: 57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/1MbFx2hYgLEKAUIjFCjMUUah6nY.roa Signing time: Thu 01 Jan 2026 08:17:31 +0000 ROA not before: Thu 01 Jan 2026 08:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203701 IP address blocks: 2a09:e200:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.mft rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:26:ad:9c:7b:58:e0:6e:58:76:7b:76:26:40:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd Validity Not Before: Jan 1 08:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4c6c5c7685880b10a0142231428cc5146a1ea76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:12:0e:03:e0:e7:76:85:c1:2f:bf:ca:28:cb: 4d:e7:b7:82:3b:08:52:9c:e5:1f:02:4a:f7:d4:df: ac:1f:3c:dd:75:14:18:5a:6c:cb:b1:29:b1:fb:cf: 25:af:95:70:33:69:d8:18:ab:cb:d1:e9:03:21:ea: 13:0b:b9:98:44:c4:1c:81:c0:5d:50:c5:fb:66:9a: 76:dd:4e:b7:05:fe:40:83:9b:fc:0e:74:1a:74:7c: 5e:d8:e0:ae:b4:29:ee:1a:9e:7f:b8:96:29:76:b1: 2b:76:83:cf:da:69:3f:d5:0e:56:c4:06:0f:fc:b9: 45:e3:74:4c:e1:c1:2e:3b:4f:cb:9f:7c:02:72:b9: d9:ba:3d:da:bb:5f:32:a1:a8:7f:1d:59:79:a9:f1: a2:bc:38:ed:50:32:6f:d1:c9:fa:fc:a1:eb:87:12: fc:0a:a0:9b:d6:3a:1e:99:14:b4:13:47:f7:92:21: 18:34:fd:6d:fe:5b:9b:93:da:02:6a:b8:7a:cf:7b: 23:8f:f1:3b:9b:a9:4a:c2:19:9e:6e:a8:52:38:1b: 0a:f7:ec:bf:1c:eb:4f:b9:89:70:c7:7a:37:29:ec: 0f:b6:04:ff:72:52:d1:b3:e3:39:22:2e:4a:09:5e: 89:82:6b:ed:a3:28:24:42:93:1d:bf:cd:75:fc:be: a0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C6:C5:C7:68:58:80:B1:0A:01:42:23:14:28:CC:51:46:A1:EA:76 X509v3 Authority Key Identifier: keyid:57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/1MbFx2hYgLEKAUIjFCjMUUah6nY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:e200:40::/48 Signature Algorithm: sha256WithRSAEncryption 06:46:d1:62:96:8e:27:14:b7:6b:bd:f4:2c:08:c7:dc:43:76: 07:4f:e2:71:cd:c9:d6:14:36:14:b0:3f:f7:5c:51:27:ea:64: 48:58:f4:bf:55:a5:52:b3:4e:01:2f:6f:34:9a:66:a9:cd:a7: 5a:a9:e6:d5:29:07:e7:cf:40:d9:94:69:17:69:b6:d1:16:7d: 74:fa:46:77:95:1a:36:23:e7:5b:39:4d:1f:83:89:4d:a8:b7: 7c:29:d0:d8:7a:39:1a:60:96:f6:79:42:11:ce:c7:19:9b:5d: 8b:b7:1e:35:b0:6a:c7:b5:a2:d1:72:e1:dc:0a:e2:80:30:10: b0:ea:a4:fb:54:87:08:e5:01:b7:89:8a:d6:c0:80:f3:77:fa: 41:6d:89:46:f4:75:48:07:aa:df:4c:9d:77:cc:6c:9c:e7:f2: ab:4f:e4:38:6e:47:b8:39:9f:34:24:26:7c:e2:20:31:37:6a: 06:29:fa:ef:5c:f9:08:6b:a7:f4:db:2a:b7:24:34:10:dc:20: 8b:52:e3:26:3b:09:d3:de:be:73:6b:84:31:c1:e9:eb:1c:ab: 04:16:f7:a9:8f:b3:1c:bb:67:88:e1:45:20:4a:f8:93:f0:ce: ce:99:3a:77:cf:fa:6e:8b:8c:05:95:30:d1:05:c3:be:20:d4: 84:4a:62:9d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4oiatnHtY4G5Ydnt2JkDKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3OWFkZTlmZWFlZGM0MDZkZjVlMTFiY2VmMDM5M2NkNWU5 ZmQwZGQwHhcNMjYwMTAxMDgxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGM2YzVjNzY4NTg4MGIxMGEwMTQyMjMxNDI4Y2M1MTQ2YTFlYTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRIOA+DndoXBL7/KKMtN57eCOwhS nOUfAkr31N+sHzzddRQYWmzLsSmx+88lr5VwM2nYGKvL0ekDIeoTC7mYRMQcgcBd UMX7Zpp23U63Bf5Ag5v8DnQadHxe2OCutCnuGp5/uJYpdrErdoPP2mk/1Q5WxAYP /LlF43RM4cEuO0/Ln3wCcrnZuj3au18yoah/HVl5qfGivDjtUDJv0cn6/KHrhxL8 CqCb1joemRS0E0f3kiEYNP1t/lubk9oCarh6z3sjj/E7m6lKwhmebqhSOBsK9+y/ HOtPuYlwx3o3KewPtgT/clLRs+M5Ii5KCV6JgmvtoygkQpMdv811/L6gOQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNTGxcdoWICxCgFCIxQozFFGoep2MB8GA1UdIwQY MBaAFFea3p/q7cQG314RvO8Dk81en9DdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjVyZW4tcnR4QWJmWGhHODd3T1R6VjZmME4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yMjBlZDctOGRjMi00YzAxLTkyYmIt MjA4ZWYzMmMwMjAyLzEvMU1iRngyaFlnTEVLQVVJakZDak1VVWFoNm5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8yMjBlZDctOGRjMi00YzAxLTkyYmItMjA4ZWYzMmMwMjAy LzEvVjVyZW4tcnR4QWJmWGhHODd3T1R6VjZmME4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgniAABA MA0GCSqGSIb3DQEBCwUAA4IBAQAGRtFilo4nFLdrvfQsCMfcQ3YHT+JxzcnWFDYU sD/3XFEn6mRIWPS/VaVSs04BL280mmapzadaqebVKQfnz0DZlGkXabbRFn10+kZ3 lRo2I+dbOU0fg4lNqLd8KdDYejkaYJb2eUIRzscZm12Ltx41sGrHtaLRcuHcCuKA MBCw6qT7VIcI5QG3iYrWwIDzd/pBbYlG9HVIB6rfTJ13zGyc5/KrT+Q4bke4OZ80 JCZ84iAxN2oGKfrvXPkIa6f02yq3JDQQ3CCLUuMmOwnT3r5za4QxwenrHKsEFvep j7Mcu2eI4UUgSviT8M7OmTp3z/pui4wFlTDRBcO+INSESmKd -----END CERTIFICATE-----Generated at Tue Feb 10 04:48:56 2026 by rpki-client