This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/1-Ks480-iPBy-Vm_4dlD2KLww4y8.roa File: 1-Ks480-iPBy-Vm_4dlD2KLww4y8.roa (raw, json) Hash identifier: +0tlrIhz57IHGfgs8oqzQyrPKsieu75TXgBbupvdSQo= Subject key identifier: F8:AB:38:F3:4F:A2:3C:1C:BE:56:6F:F8:76:50:F6:28:BC:30:E3:2F Certificate issuer: /CN=893afecd711705c476b785d0c86ef54c2124354c Certificate serial: 019B7F83C74262CD510FAEC18B16B2162F74 Authority key identifier: 89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/1-Ks480-iPBy-Vm_4dlD2KLww4y8.roa Signing time: Fri 02 Jan 2026 16:21:40 +0000 ROA not before: Fri 02 Jan 2026 16:21:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8767 IP address blocks: 2a01:4800::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:c7:42:62:cd:51:0f:ae:c1:8b:16:b2:16:2f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893afecd711705c476b785d0c86ef54c2124354c Validity Not Before: Jan 2 16:21:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8ab38f34fa23c1cbe566ff87650f628bc30e32f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8c:33:e1:ac:89:59:92:81:45:93:d8:67:ac: 80:52:39:f8:ea:6b:22:e0:8c:27:3c:fe:66:d8:7b: 3a:9e:7a:ae:dc:7f:b2:66:94:9a:8a:4a:2d:9a:77: 41:95:dc:3c:59:4b:ed:06:69:a9:d0:75:11:77:d0: 8a:97:77:a1:3a:00:05:09:0b:3c:fe:b5:6a:0b:1e: 36:d6:92:c9:b3:b7:fb:a9:2f:d9:3a:5e:6d:5e:d2: b2:4e:30:fb:f1:d4:22:bc:4e:2c:be:6f:94:c7:af: 53:8d:03:1f:ee:aa:e2:ce:42:59:6d:ae:49:76:30: f3:1e:d8:84:4f:d6:49:7b:55:6f:45:1b:86:a8:0b: f6:94:15:dc:d0:76:80:5f:4e:52:47:5d:81:eb:66: 7f:7d:88:b2:20:c7:18:c0:4b:ec:7f:8a:bc:81:a6: 89:80:31:73:f5:fe:3c:e6:53:06:cd:02:51:e8:5c: ec:90:78:68:88:54:54:c3:e3:7f:0a:11:e9:de:1e: cd:96:0c:c0:8b:63:2f:d5:4b:ef:e9:e6:14:2e:ec: 8a:a2:91:06:7a:36:80:c3:79:45:6c:56:7b:18:7a: cc:00:b6:d9:c4:ba:01:45:b7:a0:64:00:d7:c1:0a: ac:5f:e6:a3:45:0b:a5:82:41:37:30:c2:0e:af:53: e1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:AB:38:F3:4F:A2:3C:1C:BE:56:6F:F8:76:50:F6:28:BC:30:E3:2F X509v3 Authority Key Identifier: keyid:89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/1-Ks480-iPBy-Vm_4dlD2KLww4y8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:4800::/32 Signature Algorithm: sha256WithRSAEncryption 2a:f6:bf:0b:d3:a9:89:5b:bd:14:03:48:6e:2f:2f:50:88:0e: c1:d3:67:2c:2b:72:13:54:b5:ef:df:db:a8:59:33:13:a5:e4: 7f:18:80:54:ae:5e:e0:ab:09:e2:90:7c:39:33:ca:b2:68:eb: 9e:78:ac:69:3b:97:26:fc:9c:3c:a5:4a:83:7e:9f:93:3a:db: 21:2d:9f:77:67:5f:63:60:b1:53:d0:c5:de:fa:6c:48:fa:14: 93:ad:d1:b0:e1:0b:aa:57:a9:0a:3a:2a:fe:17:0c:5a:f0:51: d9:4d:e0:20:e6:bd:33:8c:83:f3:71:59:c0:c2:7f:d4:6d:00: 8e:7f:53:4f:0d:9f:a5:03:01:6d:1b:02:2d:9c:9d:3c:6d:9d: ba:49:76:a1:74:fd:f9:11:00:79:62:3f:85:4c:2e:cf:f4:2f: 43:10:d0:1e:ad:33:50:88:6c:da:fd:7e:df:70:d9:17:67:d2: 64:fe:f1:22:bf:63:08:86:3e:40:1f:54:32:c9:66:4f:cd:46: 39:61:8e:1b:4d:47:5a:89:02:4f:05:25:c6:3e:f2:18:36:b0: 5c:b8:61:56:76:a2:c3:3d:bd:c9:d4:bf:01:55:91:cf:a4:f2: e2:3b:e8:09:4a:c8:d0:28:d0:b0:dd:45:d3:8e:44:cc:8c:bb: 11:c1:f8:ff -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/g8dCYs1RD67BixayFi90MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5M2FmZWNkNzExNzA1YzQ3NmI3ODVkMGM4NmVmNTRjMjEy NDM1NGMwHhcNMjYwMTAyMTYyMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGFiMzhmMzRmYTIzYzFjYmU1NjZmZjg3NjUwZjYyOGJjMzBlMzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4wz4ayJWZKBRZPYZ6yAUjn46msi 4IwnPP5m2Hs6nnqu3H+yZpSaikotmndBldw8WUvtBmmp0HURd9CKl3ehOgAFCQs8 /rVqCx421pLJs7f7qS/ZOl5tXtKyTjD78dQivE4svm+Ux69TjQMf7qrizkJZba5J djDzHtiET9ZJe1VvRRuGqAv2lBXc0HaAX05SR12B62Z/fYiyIMcYwEvsf4q8gaaJ gDFz9f485lMGzQJR6FzskHhoiFRUw+N/ChHp3h7NlgzAi2Mv1Uvv6eYULuyKopEG ejaAw3lFbFZ7GHrMALbZxLoBRbegZADXwQqsX+ajRQulgkE3MMIOr1PhQQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPirOPNPojwcvlZv+HZQ9ii8MOMvMB8GA1UdIwQY MBaAFIk6/s1xFwXEdreF0Mhu9UwhJDVMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVRyLXpYRVhCY1IydDRYUXlHNzFUQ0VrTlV3LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jYTNiNWYtMDIyMS00M2FkLThhYmQt MWMxMzIwNmE4MTIzLzEvMS1LczQ4MC1pUEJ5LVZtXzRkbEQyS0x3dzR5OC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYmMvY2EzYjVmLTAyMjEtNDNhZC04YWJkLTFjMTMyMDZhODEy My8xL2lUci16WEVYQmNSMnQ0WFF5RzcxVENFa05Vdy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoBSAAw DQYJKoZIhvcNAQELBQADggEBACr2vwvTqYlbvRQDSG4vL1CIDsHTZywrchNUte/f 26hZMxOl5H8YgFSuXuCrCeKQfDkzyrJo6554rGk7lyb8nDylSoN+n5M62yEtn3dn X2NgsVPQxd76bEj6FJOt0bDhC6pXqQo6Kv4XDFrwUdlN4CDmvTOMg/NxWcDCf9Rt AI5/U08Nn6UDAW0bAi2cnTxtnbpJdqF0/fkRAHliP4VMLs/0L0MQ0B6tM1CIbNr9 ft9w2Rdn0mT+8SK/YwiGPkAfVDLJZk/NRjlhjhtNR1qJAk8FJcY+8hg2sFy4YVZ2 osM9vcnUvwFVkc+k8uI76AlKyNAo0LDdRdOORMyMuxHB+P8= -----END CERTIFICATE-----Generated at Tue Jan 27 05:33:56 2026 by rpki-client