This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/1dV6pkuQdd-HC1y6xQt3McROiYw.roa File: 1dV6pkuQdd-HC1y6xQt3McROiYw.roa (raw, json) Hash identifier: gXtTDzPv9WQmg2U2/AVAIR2HMc660QfTKzCojb5m4Ek= Subject key identifier: D5:D5:7A:A6:4B:90:75:DF:87:0B:5C:BA:C5:0B:77:31:C4:4E:89:8C Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 019B76EB88958BC3939312C4C206688C92DF Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/1dV6pkuQdd-HC1y6xQt3McROiYw.roa Signing time: Thu 01 Jan 2026 00:18:25 +0000 ROA not before: Thu 01 Jan 2026 00:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199984 IP address blocks: 2a11:840:24::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:88:95:8b:c3:93:93:12:c4:c2:06:68:8c:92:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Jan 1 00:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5d57aa64b9075df870b5cbac50b7731c44e898c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a3:88:cc:bb:a3:c5:2e:c8:77:10:22:8a:b6: 12:e7:af:eb:30:41:35:07:5a:4c:53:f8:e4:36:2e: 4c:e2:15:ed:1a:51:87:6e:e1:e0:2b:bc:aa:83:c8: cc:94:06:61:1a:61:5c:a8:e2:30:f7:85:a4:c5:20: d8:58:c8:65:92:8d:31:5a:ef:05:47:98:70:a7:4a: 39:c6:52:32:83:93:fd:87:50:35:fe:1b:45:0d:f5: ee:4a:3e:bf:e0:6d:b9:1d:fc:0b:07:2b:bd:22:53: ff:fc:80:29:25:dd:87:2b:0b:e3:b4:5c:7d:88:22: 1e:6c:ef:94:60:5e:41:2a:86:d3:39:6d:e0:59:10: 4e:ed:20:0c:7c:fb:d3:65:c6:1a:17:35:2e:1e:90: f8:27:52:5b:08:23:f9:04:e9:ca:f0:0d:45:ec:ca: 4d:16:56:f5:30:04:08:ec:d0:a6:96:11:64:3e:05: f0:be:61:d1:b5:23:a8:2a:13:37:f7:35:cb:30:e0: ea:cf:f4:06:af:29:bb:6e:52:f1:38:d7:5f:d2:2d: 8b:61:95:25:ba:7f:a0:cc:9c:2b:c6:6d:80:d1:07: 6f:20:f3:37:cc:11:7c:db:32:e8:52:31:62:7f:57: 92:24:18:2c:e4:1f:b9:f6:99:2b:27:62:72:fa:6c: d8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D5:7A:A6:4B:90:75:DF:87:0B:5C:BA:C5:0B:77:31:C4:4E:89:8C X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/1dV6pkuQdd-HC1y6xQt3McROiYw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:840:24::/48 Signature Algorithm: sha256WithRSAEncryption 1c:ed:72:8a:e7:7f:ed:0a:ec:1a:92:ad:b7:cb:9d:89:e8:7b: 2a:88:5a:4f:a8:de:53:10:7a:1b:a5:72:33:f2:da:76:b4:62: 0b:a6:aa:4e:ba:d1:61:a1:49:e8:6e:9f:64:d1:0e:a0:28:1d: dc:c3:b1:a1:29:6f:2e:c7:af:b5:9d:df:d5:07:4d:c3:e6:6d: 98:bf:9e:69:81:41:21:ac:f2:0e:20:3d:f9:e4:55:dc:01:cc: bf:34:53:b2:94:be:83:fc:04:ff:30:50:ad:65:23:f9:6f:f4: b3:04:ba:16:8a:c5:46:35:c9:12:61:21:4c:8d:ab:ad:90:8b: 1e:43:78:ea:85:85:5d:c7:42:ac:71:b2:aa:f4:e0:fe:fb:81: 87:70:af:87:e0:02:cd:fa:d6:94:99:eb:cc:28:44:42:7e:86: 53:72:c6:fd:71:4d:89:58:5f:ff:cf:d7:27:70:2e:dc:1e:58: ab:e4:b4:d2:81:e0:c1:4d:db:fb:01:93:59:24:31:64:6a:05: 70:3e:98:1e:e5:e4:ba:5a:48:f2:39:84:02:49:0d:5f:3b:0d: b8:3b:c1:b8:3b:ff:17:3a:64:92:d3:6b:1f:b5:a8:de:a1:0b: a4:ac:01:d7:fc:8d:75:8b:72:b2:0e:0e:80:96:2c:a8:1d:83: 53:c8:66:3b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt264iVi8OTkxLEwgZojJLfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjYwMTAxMDAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWQ1N2FhNjRiOTA3NWRmODcwYjVjYmFjNTBiNzczMWM0NGU4OThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KOIzLujxS7IdxAiirYS56/rMEE1 B1pMU/jkNi5M4hXtGlGHbuHgK7yqg8jMlAZhGmFcqOIw94WkxSDYWMhlko0xWu8F R5hwp0o5xlIyg5P9h1A1/htFDfXuSj6/4G25HfwLByu9IlP//IApJd2HKwvjtFx9 iCIebO+UYF5BKobTOW3gWRBO7SAMfPvTZcYaFzUuHpD4J1JbCCP5BOnK8A1F7MpN Flb1MAQI7NCmlhFkPgXwvmHRtSOoKhM39zXLMODqz/QGrym7blLxONdf0i2LYZUl un+gzJwrxm2A0QdvIPM3zBF82zLoUjFif1eSJBgs5B+59pkrJ2Jy+mzY5QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNXVeqZLkHXfhwtcusULdzHETomMMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvMWRWNnBrdVFkZC1IQzF5NnhRdDNNY1JPaVl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhEIQAAk MA0GCSqGSIb3DQEBCwUAA4IBAQAc7XKK53/tCuwakq23y52J6HsqiFpPqN5TEHob pXIz8tp2tGILpqpOutFhoUnobp9k0Q6gKB3cw7GhKW8ux6+1nd/VB03D5m2Yv55p gUEhrPIOID355FXcAcy/NFOylL6D/AT/MFCtZSP5b/SzBLoWisVGNckSYSFMjaut kIseQ3jqhYVdx0KscbKq9OD++4GHcK+H4ALN+taUmevMKERCfoZTcsb9cU2JWF// z9cncC7cHlir5LTSgeDBTdv7AZNZJDFkagVwPpge5eS6WkjyOYQCSQ1fOw24O8G4 O/8XOmSS02sftajeoQukrAHX/I11i3KyDg6AliyoHYNTyGY7 -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:52 2026 by rpki-client