This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/l1zzaU-q12nJ_8HhmrchfHRCS-0.roa File: l1zzaU-q12nJ_8HhmrchfHRCS-0.roa (raw, json) Hash identifier: Zlyw0gSFTXLUc8CDvWYZw2HjLJJb5vGb6M3Zn4aUG2c= Subject key identifier: 97:5C:F3:69:4F:AA:D7:69:C9:FF:C1:E1:9A:B7:21:7C:74:42:4B:ED Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019B797F34D8F3CBAB2EBCC9FCA4424924A0 Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/l1zzaU-q12nJ_8HhmrchfHRCS-0.roa Signing time: Thu 01 Jan 2026 12:18:58 +0000 ROA not before: Thu 01 Jan 2026 12:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210842 IP address blocks: 2a05:b0c2::/36 maxlen: 36 2a05:b0c2:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:34:d8:f3:cb:ab:2e:bc:c9:fc:a4:42:49:24:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Jan 1 12:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=975cf3694faad769c9ffc1e19ab7217c74424bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b3:37:54:f6:55:d7:03:83:6d:c3:79:27:0e: 20:5f:80:81:76:ac:c6:f9:c4:97:c4:bc:43:3a:e1: f9:18:36:31:36:b7:85:24:2d:a0:10:f7:c4:90:aa: 45:d5:29:44:dd:b1:aa:15:48:d4:a4:d5:3d:55:32: da:6c:6d:9e:8f:29:67:9d:a0:2e:b4:d2:49:e5:aa: ab:b7:9d:d7:81:6a:21:e1:bd:10:62:88:52:24:30: d4:3a:2e:d4:92:ec:ee:33:a2:86:44:be:9c:ce:64: c2:8c:b4:32:77:4c:1f:61:6d:20:db:28:18:3d:6d: de:cd:84:3b:ce:03:5e:47:cb:23:47:25:3c:c4:f5: 4c:fa:24:c5:2e:b5:97:2a:78:ab:cb:23:67:6e:9a: da:f0:c1:c5:72:3d:64:a6:ea:ba:0c:84:0d:93:35: 86:b1:51:de:02:55:92:e1:5c:89:72:8c:b6:7d:5f: be:6f:72:28:cc:6c:b2:65:3c:38:37:51:76:ee:e2: 8a:d7:cc:81:57:3f:c7:ca:53:24:27:5c:6a:93:99: c4:61:57:9d:fc:af:ab:3c:df:86:d8:f6:c3:6c:c5: d5:8b:86:91:3a:46:00:d6:2c:83:8a:2f:a0:88:9f: ba:82:3b:7b:4a:d7:4b:8e:db:b5:39:99:e0:58:9c: 0d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5C:F3:69:4F:AA:D7:69:C9:FF:C1:E1:9A:B7:21:7C:74:42:4B:ED X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/l1zzaU-q12nJ_8HhmrchfHRCS-0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:b0c2::/35 Signature Algorithm: sha256WithRSAEncryption 20:4f:ae:f8:0d:86:f2:c8:a5:7e:cb:1f:52:1c:61:8e:c6:27: 8f:3f:2e:4a:f5:1d:00:fe:7a:0f:85:6a:00:d8:2f:7b:de:ca: 67:1b:37:22:36:2e:83:bd:d7:9d:f3:ae:f3:33:91:fd:2c:60: 91:4d:b6:06:cc:28:f4:8f:ab:95:71:54:a9:45:23:8a:22:d4: 17:d2:68:df:a0:b4:58:6a:8c:2b:eb:ef:33:4d:93:d0:b2:e4: 7d:6a:14:15:a9:bb:95:67:61:f4:ec:36:e5:19:32:bd:c3:d4: 15:c4:be:81:3f:9e:da:bb:c8:37:a3:d4:53:c8:fa:2c:57:31: ee:47:49:a1:42:77:e3:4c:95:44:eb:33:c1:ce:8e:d8:37:6d: 77:18:15:cd:b0:c0:0a:25:d8:4f:6d:7d:9e:61:53:4f:9d:bc: 78:3e:76:02:ca:c8:04:a0:bb:1c:6c:12:13:18:8d:12:f4:b0: 40:44:f8:78:9a:b5:68:af:74:a8:18:aa:27:9b:f6:fd:a0:14: 9b:e2:ca:e7:13:ba:06:83:6b:1e:ce:68:d8:8c:27:8c:e8:60: 00:91:14:ed:48:d7:96:1a:96:35:84:4d:a2:34:89:d1:6e:24: 64:55:53:25:a4:47:0a:5c:e3:f1:7e:5a:a6:8a:2e:fa:e4:e5: bb:c9:00:d6 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5fzTY88urLrzJ/KRCSSSgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjYwMTAxMTIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzVjZjM2OTRmYWFkNzY5YzlmZmMxZTE5YWI3MjE3Yzc0NDI0YmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LM3VPZV1wODbcN5Jw4gX4CBdqzG +cSXxLxDOuH5GDYxNreFJC2gEPfEkKpF1SlE3bGqFUjUpNU9VTLabG2ejylnnaAu tNJJ5aqrt53XgWoh4b0QYohSJDDUOi7UkuzuM6KGRL6czmTCjLQyd0wfYW0g2ygY PW3ezYQ7zgNeR8sjRyU8xPVM+iTFLrWXKniryyNnbpra8MHFcj1kpuq6DIQNkzWG sVHeAlWS4VyJcoy2fV++b3IozGyyZTw4N1F27uKK18yBVz/HylMkJ1xqk5nEYVed /K+rPN+G2PbDbMXVi4aROkYA1iyDii+giJ+6gjt7StdLjtu1OZngWJwN+wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFJdc82lPqtdpyf/B4Zq3IXx0QkvtMB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvbDF6emFVLXExMm5KXzhIaG1yY2hmSFJDUy0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFKgWwwgAw DQYJKoZIhvcNAQELBQADggEBACBPrvgNhvLIpX7LH1IcYY7GJ48/Lkr1HQD+eg+F agDYL3veymcbNyI2LoO9153zrvMzkf0sYJFNtgbMKPSPq5VxVKlFI4oi1BfSaN+g tFhqjCvr7zNNk9Cy5H1qFBWpu5VnYfTsNuUZMr3D1BXEvoE/ntq7yDej1FPI+ixX Me5HSaFCd+NMlUTrM8HOjtg3bXcYFc2wwAol2E9tfZ5hU0+dvHg+dgLKyASguxxs EhMYjRL0sEBE+HiatWivdKgYqieb9v2gFJviyucTugaDax7OaNiMJ4zoYACRFO1I 15YaljWETaI0idFuJGRVUyWkRwpc4/F+WqaKLvrk5bvJANY= -----END CERTIFICATE-----Generated at Mon Jan 19 20:34:57 2026 by rpki-client