This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/Ql1YFiUReCktjzOXgcJSrBSI6No.roa File: Ql1YFiUReCktjzOXgcJSrBSI6No.roa (raw, json) Hash identifier: USou/kCPcPW7NF+NsAzNyLXe0GEfMruJyzGdt4jQ4H8= Subject key identifier: 42:5D:58:16:25:11:78:29:2D:8F:33:97:81:C2:52:AC:14:88:E8:DA Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Certificate serial: 019B7C113348377259EB9FC90966620D3988 Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/Ql1YFiUReCktjzOXgcJSrBSI6No.roa Signing time: Fri 02 Jan 2026 00:17:40 +0000 ROA not before: Fri 02 Jan 2026 00:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5606 IP address blocks: 2a00:ece1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:33:48:37:72:59:eb:9f:c9:09:66:62:0d:39:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Validity Not Before: Jan 2 00:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=425d5816251178292d8f339781c252ac1488e8da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ba:cf:1c:7f:66:73:64:dc:a1:07:15:85:29: e2:83:f1:ff:8f:f4:a2:cd:a2:88:8d:6e:78:34:13: af:bb:14:58:fd:a1:8b:d2:fc:a1:e2:c8:93:1a:2e: 7b:0e:b0:ef:77:93:95:44:c3:31:a5:f0:e9:87:71: 3c:8f:5f:58:ca:43:94:24:12:95:76:04:ac:ac:36: 4c:81:1c:76:65:1f:67:26:c2:ae:3b:dc:d0:e1:b4: 21:bd:1a:7c:00:c2:70:fd:1c:f8:35:bd:34:1b:fc: 8f:d5:ab:d1:9b:fe:2b:b4:98:15:4c:e4:fa:f3:43: 7d:49:6c:52:a3:30:f0:67:5f:5c:fd:29:42:df:ad: 50:fd:16:b2:4d:cd:1b:d1:33:ef:c4:f7:b9:9e:86: 18:b0:90:54:e8:44:f5:da:f7:37:33:72:58:42:75: 65:2f:21:3e:99:b9:aa:b0:ed:65:1c:27:6c:1a:42: ed:01:1f:c8:92:16:f4:09:25:2e:a3:03:da:31:86: b1:c8:73:2d:9b:dd:db:fa:4a:97:87:85:8c:93:06: 88:92:d0:de:b1:a4:ae:95:78:c0:5a:aa:1e:82:d0: 89:cc:f8:72:ae:1f:9f:95:7a:53:10:69:bc:af:01: 52:cf:50:12:b6:3c:36:86:17:6e:10:3a:66:80:d3: bf:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:5D:58:16:25:11:78:29:2D:8F:33:97:81:C2:52:AC:14:88:E8:DA X509v3 Authority Key Identifier: keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/Ql1YFiUReCktjzOXgcJSrBSI6No.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:ece1::/48 Signature Algorithm: sha256WithRSAEncryption 08:cb:38:01:13:74:46:20:e2:e2:a4:e4:24:5f:37:8d:16:4c: fa:46:22:50:13:cf:bc:6b:9f:0d:a1:2c:6f:29:20:34:89:9b: b3:4a:ee:bb:d1:36:40:7a:1e:09:3e:b6:b2:5f:00:9a:12:e0: 97:3f:09:19:d8:f8:ff:82:e5:c4:8e:05:7d:e0:b1:87:7e:63: 2c:54:1c:1c:98:34:82:2a:45:b7:e8:7f:7e:ce:55:3b:29:c7: 31:09:29:f5:2f:83:eb:9b:18:7c:86:24:1f:99:dd:bf:1f:d1: 41:30:6c:e0:3e:61:c8:00:49:41:c1:85:71:2f:e0:69:8f:a4: f6:76:9c:c3:45:04:99:52:5a:39:d7:91:38:8d:5b:6f:58:c9: 22:d1:07:2a:d4:ae:d0:ef:0c:0f:37:05:cf:aa:03:ef:74:c2: e6:3c:ee:53:82:c7:68:cd:31:c8:e6:8f:03:34:34:47:36:72: 80:12:a2:35:99:78:c5:02:42:dd:f4:dd:52:e8:fd:a6:83:cd: 9f:da:f7:ff:6e:a8:02:ce:27:97:ef:ca:d3:bd:6b:32:ba:0d: 02:c0:39:78:85:ec:83:6d:92:9a:75:79:34:2c:33:82:0b:88: 4a:9a:6c:e3:2c:f5:2b:2c:48:ed:ca:d1:bf:af:56:e9:33:bf: 90:9c:88:88 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8ETNIN3JZ65/JCWZiDTmIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYzIwYWUxZGFjY2EzMTgxNWIyNzQ3MDI5MjdjMWE1YTlk YmM3YjMwHhcNMjYwMTAyMDAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjVkNTgxNjI1MTE3ODI5MmQ4ZjMzOTc4MWMyNTJhYzE0ODhlOGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbrPHH9mc2TcoQcVhSnig/H/j/Si zaKIjW54NBOvuxRY/aGL0vyh4siTGi57DrDvd5OVRMMxpfDph3E8j19YykOUJBKV dgSsrDZMgRx2ZR9nJsKuO9zQ4bQhvRp8AMJw/Rz4Nb00G/yP1avRm/4rtJgVTOT6 80N9SWxSozDwZ19c/SlC361Q/RayTc0b0TPvxPe5noYYsJBU6ET12vc3M3JYQnVl LyE+mbmqsO1lHCdsGkLtAR/Ikhb0CSUuowPaMYaxyHMtm93b+kqXh4WMkwaIktDe saSulXjAWqoegtCJzPhyrh+flXpTEGm8rwFSz1AStjw2hhduEDpmgNO/FQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEJdWBYlEXgpLY8zl4HCUqwUiOjaMB8GA1UdIwQY MBaAFLDCCuHazKMYFbJ0cCknwaWp28ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYt NTQ4NDQwMmNlYjdhLzEvUWwxWUZpVVJlQ2t0anpPWGdjSlNyQlNJNk5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYtNTQ4NDQwMmNlYjdh LzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgDs4QAA MA0GCSqGSIb3DQEBCwUAA4IBAQAIyzgBE3RGIOLipOQkXzeNFkz6RiJQE8+8a58N oSxvKSA0iZuzSu670TZAeh4JPrayXwCaEuCXPwkZ2Pj/guXEjgV94LGHfmMsVBwc mDSCKkW36H9+zlU7KccxCSn1L4Prmxh8hiQfmd2/H9FBMGzgPmHIAElBwYVxL+Bp j6T2dpzDRQSZUlo515E4jVtvWMki0Qcq1K7Q7wwPNwXPqgPvdMLmPO5TgsdozTHI 5o8DNDRHNnKAEqI1mXjFAkLd9N1S6P2mg82f2vf/bqgCzieX78rTvWsyug0CwDl4 heyDbZKadXk0LDOCC4hKmmzjLPUrLEjtytG/r1bpM7+QnIiI -----END CERTIFICATE-----Generated at Mon Jan 26 23:21:40 2026 by rpki-client