This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/1-D937rD1tsKNWPmDbAk8-rvXHXA.roa File: 1-D937rD1tsKNWPmDbAk8-rvXHXA.roa (raw, json) Hash identifier: 7g93zLH+mNACQKS6+XtRJRTE+j1388LV8O0AXF+koz4= Subject key identifier: F8:3F:77:EE:B0:F5:B6:C2:8D:58:F9:83:6C:09:3C:FA:BB:D7:1D:70 Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA751D8EFC9B01FBC10D7EDB2B7A2F2 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/1-D937rD1tsKNWPmDbAk8-rvXHXA.roa Signing time: Fri 02 Jan 2026 12:20:53 +0000 ROA not before: Fri 02 Jan 2026 12:20:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203801 IP address blocks: 2a06:e881:4400::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:51:d8:ef:c9:b0:1f:bc:10:d7:ed:b2:b7:a2:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f83f77eeb0f5b6c28d58f9836c093cfabbd71d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:11:40:1d:11:65:5f:ca:fc:04:07:30:3a:08: 31:0a:1d:7d:b7:3c:4b:97:78:57:83:bc:b9:14:4a: 52:31:30:3a:d6:0d:29:e8:13:d4:00:1d:05:bf:1a: d2:b5:29:9a:cf:11:ea:6e:b5:24:26:51:4c:e9:3d: fe:2c:64:65:f2:2c:a1:6d:b9:bd:00:8a:8c:56:06: 0a:3b:f3:29:c6:35:96:19:89:a3:79:4d:d0:8d:18: c1:58:fd:89:1b:5a:87:11:2f:6c:d6:1e:9d:9b:a3: a0:73:71:08:2e:f9:f0:a3:dc:f4:f2:cd:2f:89:38: eb:91:b0:f3:f4:b7:51:e7:f5:06:6a:9d:31:c7:e5: 2b:60:1d:dc:93:84:9c:28:85:ce:1d:c1:a7:c3:d9: 8c:18:bd:d6:6c:a2:53:3b:c0:c8:c8:4d:4e:d1:44: 62:a2:64:11:a9:56:ad:0f:28:b6:2a:0e:aa:38:43: 03:03:d1:fb:74:1e:0c:d0:48:51:d8:37:15:b9:c7: 06:3e:1b:8d:ba:2e:40:4b:41:31:01:95:76:31:0d: db:04:f2:38:b9:47:63:9d:da:ba:ee:d4:f0:f7:3a: 22:7a:c9:5e:58:65:67:07:30:6d:9e:69:14:f3:5b: e5:dc:0d:ab:ce:cd:40:40:0e:bd:59:f5:d6:ba:ea: 16:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3F:77:EE:B0:F5:B6:C2:8D:58:F9:83:6C:09:3C:FA:BB:D7:1D:70 X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/1-D937rD1tsKNWPmDbAk8-rvXHXA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:e881:4400::/44 Signature Algorithm: sha256WithRSAEncryption d7:2c:73:75:af:02:f3:8a:a4:8e:e8:0e:49:50:7e:e5:fc:b2: e5:17:c4:5f:42:e4:95:e0:da:e6:b8:8c:1a:e7:9d:94:6b:85: 4e:1f:85:6a:fc:0b:91:33:4a:4b:4c:ca:a7:97:e0:50:3f:45: 96:b1:a8:5d:83:dd:75:f2:4a:00:25:f9:e8:13:af:a3:f6:ec: a2:43:22:ef:29:10:4a:2f:34:84:16:a5:0e:6f:b0:ac:e4:cf: d0:56:6f:ba:4f:3c:8a:fc:02:10:1a:39:ad:0f:38:67:5b:7f: f4:cc:b0:0b:b0:78:8c:de:73:8c:01:8a:65:df:e0:48:71:a6: ad:17:dd:5f:b3:71:c7:92:be:e2:c7:70:0e:3e:72:9e:3e:24: 6c:df:42:f1:82:bf:06:2a:01:59:53:01:0c:69:d1:5d:66:e0: 72:d8:fd:87:62:62:d6:24:fd:7e:58:d5:f8:ff:ae:9f:9d:90: 89:8e:1a:50:4e:7e:07:30:8c:16:60:06:58:25:5a:e8:97:d3: 95:f5:d7:0e:30:fa:65:e4:89:8b:d4:fb:1d:76:16:54:eb:cf: 84:2f:77:dc:bb:46:4f:46:69:38:44:84:17:0f:ae:db:09:a9: 33:a0:e3:7d:21:2c:23:bd:a2:1f:c9:67:39:32:89:9c:48:30: 25:76:00:f1 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt+p1HY78mwH7wQ1+2yt6LyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODNmNzdlZWIwZjViNmMyOGQ1OGY5ODM2YzA5M2NmYWJiZDcxZDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBFAHRFlX8r8BAcwOggxCh19tzxL l3hXg7y5FEpSMTA61g0p6BPUAB0FvxrStSmazxHqbrUkJlFM6T3+LGRl8iyhbbm9 AIqMVgYKO/MpxjWWGYmjeU3QjRjBWP2JG1qHES9s1h6dm6Ogc3EILvnwo9z08s0v iTjrkbDz9LdR5/UGap0xx+UrYB3ck4ScKIXOHcGnw9mMGL3WbKJTO8DIyE1O0URi omQRqVatDyi2Kg6qOEMDA9H7dB4M0EhR2DcVuccGPhuNui5AS0ExAZV2MQ3bBPI4 uUdjndq67tTw9zoiesleWGVnBzBtnmkU81vl3A2rzs1AQA69WfXWuuoWkwIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPg/d+6w9bbCjVj5g2wJPPq71x1wMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvMS1EOTM3ckQxdHNLTldQbURiQWs4LXJ2WEhYQS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOWIvMWU0M2U0LWQwNmUtNGE1NS1iZGI2LTNkOTFlZGU1YjJi MS8xL3VBZExRWjZ0VE9fcUx5clN3bG5aZU1YdGVWUS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoG6IFE ADANBgkqhkiG9w0BAQsFAAOCAQEA1yxzda8C84qkjugOSVB+5fyy5RfEX0LkleDa 5riMGuedlGuFTh+FavwLkTNKS0zKp5fgUD9FlrGoXYPddfJKACX56BOvo/bsokMi 7ykQSi80hBalDm+wrOTP0FZvuk88ivwCEBo5rQ84Z1t/9MywC7B4jN5zjAGKZd/g SHGmrRfdX7Nxx5K+4sdwDj5ynj4kbN9C8YK/BioBWVMBDGnRXWbgctj9h2Ji1iT9 fljV+P+un52QiY4aUE5+BzCMFmAGWCVa6JfTlfXXDjD6ZeSJi9T7HXYWVOvPhC93 3LtGT0ZpOESEFw+u2wmpM6DjfSEsI72iH8lnOTKJnEgwJXYA8Q== -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:39 2026 by rpki-client