This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/1-_tolY0Ku6cjK7uWuGIDT-aOsUM.roa File: 1-_tolY0Ku6cjK7uWuGIDT-aOsUM.roa (raw, json) Hash identifier: zHmw/JUfBT58tzI52qKI6ZXBHiMslg81gZfcAbrW9BY= Subject key identifier: FB:FB:68:95:8D:0A:BB:A7:23:2B:BB:96:B8:62:03:4F:E6:8E:B1:43 Certificate issuer: /CN=486510a3116972fced95e8a8bdafd6e455ded0ba Certificate serial: 019B7D5C1219F9BD7B456B10C5EB8A88E5AA Authority key identifier: 48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/1-_tolY0Ku6cjK7uWuGIDT-aOsUM.roa Signing time: Fri 02 Jan 2026 06:19:04 +0000 ROA not before: Fri 02 Jan 2026 06:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8560 IP address blocks: 64.190.62.0/23 maxlen: 24 91.195.240.0/23 maxlen: 24 2001:67c:64c::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:12:19:f9:bd:7b:45:6b:10:c5:eb:8a:88:e5:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=486510a3116972fced95e8a8bdafd6e455ded0ba Validity Not Before: Jan 2 06:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbfb68958d0abba7232bbb96b862034fe68eb143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5e:17:3e:40:6e:5c:9c:ca:c0:45:c6:33:49: ce:11:63:73:c2:77:bc:a1:06:2d:14:44:56:19:5f: a7:07:dc:2d:16:e7:2c:10:ad:69:88:43:83:da:a9: 4a:c3:e5:bc:64:9f:49:f2:8f:42:19:95:54:60:9b: d2:83:83:8f:d0:f2:ba:76:16:1f:0d:1b:34:0d:ac: f8:86:de:3e:34:a7:7d:00:76:ef:a2:f1:f1:55:3b: b8:cd:0e:aa:d4:0b:79:de:f7:f8:cd:4c:58:b9:df: ce:7f:1f:43:df:c4:6f:5d:3d:c4:c6:30:21:1d:7a: 35:19:78:63:7b:69:b0:ae:3e:f6:f6:e1:5d:fe:23: 48:10:b0:da:29:b3:e9:f3:32:59:4a:b9:16:f7:f6: 6c:1e:3b:dd:08:5e:1b:ab:54:c6:9e:1e:0d:5b:c1: c7:1d:a4:dd:eb:5f:f0:3b:6a:65:1c:7e:b6:4c:94: 74:30:74:42:bb:30:a4:62:31:26:90:cc:ac:81:4e: 30:23:ee:e7:d3:30:35:8d:66:e7:0c:7d:20:1f:f9: 1f:06:09:d4:25:3e:f3:54:ca:db:57:1c:98:8e:73: d2:30:a1:3a:f1:db:a0:82:51:2c:08:44:3e:81:f8: 8e:48:39:f2:4c:67:4c:9b:73:52:03:32:f5:0d:b7: 65:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:FB:68:95:8D:0A:BB:A7:23:2B:BB:96:B8:62:03:4F:E6:8E:B1:43 X509v3 Authority Key Identifier: keyid:48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/1-_tolY0Ku6cjK7uWuGIDT-aOsUM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.190.62.0/23 91.195.240.0/23 IPv6: 2001:67c:64c::/48 Signature Algorithm: sha256WithRSAEncryption 2e:13:ac:51:da:d3:64:21:06:45:ef:f4:f6:35:88:35:64:88: 5a:fc:ff:f6:80:72:7d:c6:43:31:36:de:eb:c6:56:43:1b:cd: 64:a7:ea:03:1a:85:4e:1f:a7:af:14:48:79:59:45:59:b4:13: ff:22:68:18:8f:1e:55:d3:2e:17:22:76:e9:35:71:3f:a4:2c: fc:8a:8e:10:c1:81:dc:ff:9d:e8:ed:3f:07:82:3c:ad:a0:ab: 2c:ee:bc:83:ba:79:28:da:8e:d8:49:ce:7b:2e:48:92:31:69: c2:32:ec:ff:d8:4f:0f:ce:f3:4f:e2:b4:f6:82:4c:cc:e2:6b: 13:b4:5a:26:8e:ef:ed:d0:af:8e:56:25:d4:be:5c:5b:08:69: a9:a4:aa:bb:a1:2f:1a:2f:aa:93:b3:65:54:c0:ae:cc:5d:5d: 9f:8c:55:96:3e:8c:1f:49:bf:a9:f7:a1:6f:28:16:a1:d2:00: 24:56:45:08:e8:44:81:b8:51:ce:a8:2a:af:52:4a:41:94:97: 29:ce:cf:1d:a6:66:df:bd:83:6c:21:7c:df:35:9d:ac:1c:79: d3:42:c7:61:67:5d:c4:dd:e1:14:f9:2a:aa:fe:aa:e0:9f:89: 4f:c9:3c:eb:a5:54:22:ce:65:6b:e7:e4:c3:82:6e:4c:4e:3e: 80:f8:a3:22 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt9XBIZ+b17RWsQxeuKiOWqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NjUxMGEzMTE2OTcyZmNlZDk1ZThhOGJkYWZkNmU0NTVk ZWQwYmEwHhcNMjYwMTAyMDYxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmZiNjg5NThkMGFiYmE3MjMyYmJiOTZiODYyMDM0ZmU2OGViMTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF4XPkBuXJzKwEXGM0nOEWNzwne8 oQYtFERWGV+nB9wtFucsEK1piEOD2qlKw+W8ZJ9J8o9CGZVUYJvSg4OP0PK6dhYf DRs0Daz4ht4+NKd9AHbvovHxVTu4zQ6q1At53vf4zUxYud/Ofx9D38RvXT3ExjAh HXo1GXhje2mwrj729uFd/iNIELDaKbPp8zJZSrkW9/ZsHjvdCF4bq1TGnh4NW8HH HaTd61/wO2plHH62TJR0MHRCuzCkYjEmkMysgU4wI+7n0zA1jWbnDH0gH/kfBgnU JT7zVMrbVxyYjnPSMKE68dugglEsCEQ+gfiOSDnyTGdMm3NSAzL1DbdlAwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFPv7aJWNCrunIyu7lrhiA0/mjrFDMB8GA1UdIwQY MBaAFEhlEKMRaXL87ZXoqL2v1uRV3tC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0dVUW94RnBjdnp0bGVpb3ZhX1c1RlhlMExvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hZWFlM2YtYWY0ZC00ZWVlLWIyODQt YTVmNmMwYWExMWRlLzEvMS1fdG9sWTBLdTZjaks3dVd1R0lEVC1hT3NVTS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZDkvYWVhZTNmLWFmNGQtNGVlZS1iMjg0LWE1ZjZjMGFhMTFk ZS8xL1NHVVFveEZwY3Z6dGxlaW92YV9XNUZYZTBMby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEAUC+PgME AVvD8DAPBAIAAjAJAwcAIAEGfAZMMA0GCSqGSIb3DQEBCwUAA4IBAQAuE6xR2tNk IQZF7/T2NYg1ZIha/P/2gHJ9xkMxNt7rxlZDG81kp+oDGoVOH6evFEh5WUVZtBP/ ImgYjx5V0y4XInbpNXE/pCz8io4QwYHc/53o7T8HgjytoKss7ryDunko2o7YSc57 LkiSMWnCMuz/2E8PzvNP4rT2gkzM4msTtFomju/t0K+OViXUvlxbCGmppKq7oS8a L6qTs2VUwK7MXV2fjFWWPowfSb+p96FvKBah0gAkVkUI6ESBuFHOqCqvUkpBlJcp zs8dpmbfvYNsIXzfNZ2sHHnTQsdhZ13E3eEU+Sqq/qrgn4lPyTzrpVQizmVr5+TD gm5MTj6A+KMi -----END CERTIFICATE-----Generated at Tue Jan 27 12:50:14 2026 by rpki-client