This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/1cDQdypkn0cjo9FfkDhM0paatNY.roa File: 1cDQdypkn0cjo9FfkDhM0paatNY.roa (raw, json) Hash identifier: +ByPIkalEzr2Rwt/bFmRxra3ZwfCDb/OP1YXhCyI2zk= Subject key identifier: D5:C0:D0:77:2A:64:9F:47:23:A3:D1:5F:90:38:4C:D2:96:9A:B4:D6 Certificate issuer: /CN=486510a3116972fced95e8a8bdafd6e455ded0ba Certificate serial: 019B7D5C125B5BDCF248F3190172C92E2062 Authority key identifier: 48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/1cDQdypkn0cjo9FfkDhM0paatNY.roa Signing time: Fri 02 Jan 2026 06:19:04 +0000 ROA not before: Fri 02 Jan 2026 06:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47846 IP address blocks: 64.190.62.0/23 maxlen: 32 91.195.240.0/23 maxlen: 32 2001:67c:64c::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:12:5b:5b:dc:f2:48:f3:19:01:72:c9:2e:20:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=486510a3116972fced95e8a8bdafd6e455ded0ba Validity Not Before: Jan 2 06:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5c0d0772a649f4723a3d15f90384cd2969ab4d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:53:e7:48:ca:0f:a6:28:a4:a0:6a:a2:88:b6: 88:50:41:7c:ba:34:c8:3e:ee:89:a0:35:fd:6f:a4: 0b:86:d8:f8:82:81:58:e6:df:31:fb:96:67:27:f1: 94:d0:c7:f5:e3:0b:8f:f3:47:c5:e1:6a:3a:84:7a: 2c:54:b3:4b:0f:b3:63:5b:19:c7:a5:40:84:6f:cc: 8d:7c:d9:89:d8:5d:4f:4e:b0:89:bc:f6:e3:56:17: 96:01:5b:80:27:45:b8:10:af:be:d3:88:03:59:84: e2:73:54:2f:81:c9:18:b1:d1:80:5e:c1:64:24:e7: 48:63:90:47:c6:1b:bb:c0:7c:6d:da:17:5a:9d:aa: 1e:71:7c:0f:09:e6:e9:81:64:fd:7b:63:89:86:88: 7d:50:39:72:de:48:15:a7:3a:f6:30:35:01:64:22: 14:91:ae:67:1d:98:b2:f2:d2:2b:1a:05:37:1f:55: b6:8a:75:84:34:39:f3:9f:ab:06:14:44:45:98:bc: 0a:3f:8c:3b:07:9b:06:d0:29:0c:17:fa:76:42:6e: 21:a8:83:1d:0a:04:71:c4:dd:b2:a1:cf:05:89:bc: 43:29:5c:2c:db:9f:0b:bc:1d:4b:75:93:d2:f1:36: 40:a2:2f:f7:66:13:5e:d7:78:a4:58:d7:07:ea:f0: 44:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C0:D0:77:2A:64:9F:47:23:A3:D1:5F:90:38:4C:D2:96:9A:B4:D6 X509v3 Authority Key Identifier: keyid:48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/1cDQdypkn0cjo9FfkDhM0paatNY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.190.62.0/23 91.195.240.0/23 IPv6: 2001:67c:64c::/48 Signature Algorithm: sha256WithRSAEncryption 72:1f:db:a0:c6:ee:05:04:89:b7:f2:1c:2b:c1:0c:f7:02:36: a8:d8:cf:87:0c:16:40:49:76:b2:10:7a:13:36:da:36:cc:f6: 4a:4c:2d:c0:f1:ea:49:a0:9c:f0:d4:01:d2:ee:ca:bc:20:42: 34:6a:ac:12:ca:17:9b:37:6c:1a:53:a1:85:9a:66:36:11:4c: 2d:b6:ff:d1:0a:df:81:40:28:7c:50:ce:83:82:e9:6d:f3:44: 3d:93:f9:4e:6f:46:2b:8f:5b:c2:d0:c8:e3:27:a3:d9:2e:f3: 38:32:79:32:02:42:3b:48:9e:58:95:78:cb:52:02:f3:3e:b5: 98:ae:b5:ec:f1:35:87:5c:41:d2:9a:ce:80:c9:66:f7:fe:a3: 13:0a:a8:39:e7:64:ba:55:84:5d:32:8f:43:04:ba:ac:19:eb: 43:2e:72:34:1f:31:ed:f4:5f:be:dc:78:32:b5:8a:b6:f1:20: 91:ff:d0:2e:64:9d:44:4f:33:01:26:cf:7d:68:3b:43:83:57: 46:47:45:ae:2f:30:85:c6:75:4d:6b:ce:99:30:80:6d:89:9e: 50:d9:eb:67:4b:45:ec:bc:8d:95:3e:ec:8c:c2:b7:68:4c:9c: c9:d8:83:b9:5e:b0:06:e5:17:bc:82:7a:cd:8b:28:50:a9:1f: 9d:6f:0d:7b -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt9XBJbW9zySPMZAXLJLiBiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NjUxMGEzMTE2OTcyZmNlZDk1ZThhOGJkYWZkNmU0NTVk ZWQwYmEwHhcNMjYwMTAyMDYxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWMwZDA3NzJhNjQ5ZjQ3MjNhM2QxNWY5MDM4NGNkMjk2OWFiNGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1PnSMoPpiikoGqiiLaIUEF8ujTI Pu6JoDX9b6QLhtj4goFY5t8x+5ZnJ/GU0Mf14wuP80fF4Wo6hHosVLNLD7NjWxnH pUCEb8yNfNmJ2F1PTrCJvPbjVheWAVuAJ0W4EK++04gDWYTic1QvgckYsdGAXsFk JOdIY5BHxhu7wHxt2hdanaoecXwPCebpgWT9e2OJhoh9UDly3kgVpzr2MDUBZCIU ka5nHZiy8tIrGgU3H1W2inWENDnzn6sGFERFmLwKP4w7B5sG0CkMF/p2Qm4hqIMd CgRxxN2yoc8FibxDKVws258LvB1LdZPS8TZAoi/3ZhNe13ikWNcH6vBEEQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFNXA0HcqZJ9HI6PRX5A4TNKWmrTWMB8GA1UdIwQY MBaAFEhlEKMRaXL87ZXoqL2v1uRV3tC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0dVUW94RnBjdnp0bGVpb3ZhX1c1RlhlMExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hZWFlM2YtYWY0ZC00ZWVlLWIyODQt YTVmNmMwYWExMWRlLzEvMWNEUWR5cGtuMGNqbzlGZmtEaE0wcGFhdE5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9hZWFlM2YtYWY0ZC00ZWVlLWIyODQtYTVmNmMwYWExMWRl LzEvU0dVUW94RnBjdnp0bGVpb3ZhX1c1RlhlMExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBQL4+AwQB W8PwMA8EAgACMAkDBwAgAQZ8BkwwDQYJKoZIhvcNAQELBQADggEBAHIf26DG7gUE ibfyHCvBDPcCNqjYz4cMFkBJdrIQehM22jbM9kpMLcDx6kmgnPDUAdLuyrwgQjRq rBLKF5s3bBpToYWaZjYRTC22/9EK34FAKHxQzoOC6W3zRD2T+U5vRiuPW8LQyOMn o9ku8zgyeTICQjtInliVeMtSAvM+tZiutezxNYdcQdKazoDJZvf+oxMKqDnnZLpV hF0yj0MEuqwZ60MucjQfMe30X77ceDK1irbxIJH/0C5knURPMwEmz31oO0ODV0ZH Ra4vMIXGdU1rzpkwgG2JnlDZ62dLRey8jZU+7IzCt2hMnMnYg7lesAblF7yCes2L KFCpH51vDXs= -----END CERTIFICATE-----Generated at Tue Jan 27 09:48:04 2026 by rpki-client