This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/b1kWz31G0z0Rl-xpHCTmkBEIdy8.roa File: b1kWz31G0z0Rl-xpHCTmkBEIdy8.roa (raw, json) Hash identifier: 7c62aKLINS7kDpBrtVKdhOYcdDC/FVR/WEdM92D9EzM= Subject key identifier: 6F:59:16:CF:7D:46:D3:3D:11:97:EC:69:1C:24:E6:90:11:08:77:2F Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758F857234C6A57DD964A46BBFC5665 Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/b1kWz31G0z0Rl-xpHCTmkBEIdy8.roa Signing time: Thu 01 Jan 2026 02:17:58 +0000 ROA not before: Thu 01 Jan 2026 02:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213250 IP address blocks: 2a01:367:c204::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f8:57:23:4c:6a:57:dd:96:4a:46:bb:fc:56:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f5916cf7d46d33d1197ec691c24e6901108772f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:84:72:17:2c:25:44:6d:75:3a:de:1a:2c:b2: 08:98:5c:d6:14:62:9f:4d:0a:93:c9:3d:ef:20:ea: 7c:ee:06:1b:b2:fe:71:3d:c4:30:74:79:d4:14:7f: 65:de:e1:5e:11:82:b0:4d:14:54:28:d8:37:00:2a: 8d:73:ee:3f:eb:cc:1a:19:79:f4:ec:45:76:a1:95: 4b:0d:50:31:23:ab:bd:24:22:b0:eb:77:4e:97:cc: 5f:92:2d:60:6f:bb:61:36:2d:35:b5:6e:f9:77:f6: 94:09:d6:d7:29:91:d1:52:b8:8f:1a:12:f3:6c:49: 61:42:01:5a:51:0d:a1:3c:9f:45:a4:2e:e5:1a:ec: a6:88:24:f4:03:5e:56:96:a9:0d:8f:f2:d2:0e:7b: 78:7b:97:5e:91:20:4c:c5:fc:23:f7:3f:8c:42:e7: 2d:28:dd:b8:b5:02:68:94:28:e8:16:14:07:d9:45: 03:5b:81:af:4d:33:47:b3:2d:b4:d5:59:0f:d0:7e: 79:93:11:ae:5b:2a:c4:9b:98:99:bc:1a:e7:da:6d: 9c:e7:d2:26:4e:f1:47:65:02:ec:5a:55:ec:e8:be: 09:46:be:64:52:65:24:b5:d6:4f:6c:2d:d7:51:72: bd:6d:7e:03:8d:a2:01:f7:19:15:46:60:88:97:b2: be:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:59:16:CF:7D:46:D3:3D:11:97:EC:69:1C:24:E6:90:11:08:77:2F X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/b1kWz31G0z0Rl-xpHCTmkBEIdy8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:367:c204::/48 Signature Algorithm: sha256WithRSAEncryption 9e:23:24:f6:af:ae:8d:cc:91:21:ee:17:39:b5:d8:af:80:56: 9b:6c:4c:42:22:2a:41:d9:14:9d:23:29:24:a2:5c:5d:f5:d4: fd:27:cf:34:f0:57:d5:3b:29:9b:c1:26:63:11:66:be:58:ec: b3:5c:44:a3:db:ee:71:72:ee:9e:91:eb:3a:e4:fa:60:a1:95: 9b:f4:0b:82:e5:8d:59:82:08:6d:44:18:21:0a:d4:64:66:ea: 23:02:39:18:9d:53:37:91:8f:fd:d8:56:9f:d8:af:7e:00:8f: ae:35:9b:25:d6:0c:16:8f:29:a0:f9:74:ea:96:f2:ac:71:17: a2:cb:2a:9a:ef:df:3c:2d:50:4f:39:a2:b9:a4:7e:30:8f:3a: 26:2b:69:2b:5f:06:bc:81:dc:e9:21:6a:73:6f:82:0c:aa:3a: 8b:4f:49:f9:91:5e:61:a1:e9:3e:53:65:70:49:28:5d:a2:2d: 98:50:5f:a4:bb:7b:75:03:f5:41:58:ce:94:73:b9:f7:b5:b0: 5e:a4:a0:30:e2:e3:2c:2d:dc:33:e3:22:67:2b:45:34:29:a7: 6e:f5:e5:b3:bc:ed:88:58:34:74:25:7d:f3:62:58:3d:04:e0: 53:d8:64:ef:8d:23:1c:8e:e0:84:b1:ad:4a:ea:d0:9b:89:c7: 22:86:d3:0f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WPhXI0xqV92WSka7/FZlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjU5MTZjZjdkNDZkMzNkMTE5N2VjNjkxYzI0ZTY5MDExMDg3NzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYRyFywlRG11Ot4aLLIImFzWFGKf TQqTyT3vIOp87gYbsv5xPcQwdHnUFH9l3uFeEYKwTRRUKNg3ACqNc+4/68waGXn0 7EV2oZVLDVAxI6u9JCKw63dOl8xfki1gb7thNi01tW75d/aUCdbXKZHRUriPGhLz bElhQgFaUQ2hPJ9FpC7lGuymiCT0A15WlqkNj/LSDnt4e5dekSBMxfwj9z+MQuct KN24tQJolCjoFhQH2UUDW4GvTTNHsy201VkP0H55kxGuWyrEm5iZvBrn2m2c59Im TvFHZQLsWlXs6L4JRr5kUmUktdZPbC3XUXK9bX4DjaIB9xkVRmCIl7K+hwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFG9ZFs99RtM9EZfsaRwk5pARCHcvMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvYjFrV3ozMUcwejBSbC14cEhDVG1rQkVJZHk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgEDZ8IE MA0GCSqGSIb3DQEBCwUAA4IBAQCeIyT2r66NzJEh7hc5tdivgFabbExCIipB2RSd Iykkolxd9dT9J8808FfVOymbwSZjEWa+WOyzXESj2+5xcu6ekes65PpgoZWb9AuC 5Y1ZgghtRBghCtRkZuojAjkYnVM3kY/92Faf2K9+AI+uNZsl1gwWjymg+XTqlvKs cReiyyqa7988LVBPOaK5pH4wjzomK2krXwa8gdzpIWpzb4IMqjqLT0n5kV5hoek+ U2VwSShdoi2YUF+ku3t1A/VBWM6Uc7n3tbBepKAw4uMsLdwz4yJnK0U0Kadu9eWz vO2IWDR0JX3zYlg9BOBT2GTvjSMcjuCEsa1K6tCbiccihtMP -----END CERTIFICATE-----Generated at Wed Jan 21 00:03:45 2026 by rpki-client