This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/1r95LK4HWizqALUZJhEWO2mRfys.roa File: 1r95LK4HWizqALUZJhEWO2mRfys.roa (raw, json) Hash identifier: a7n3lQCzMluTfryIIH6MTnQ1x4Z9vPgOFoHPe0ckSs8= Subject key identifier: D6:BF:79:2C:AE:07:5A:2C:EA:00:B5:19:26:11:16:3B:69:91:7F:2B Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d Certificate serial: 019B7FF24FF3B07302E8E6D1A82CACB8BF74 Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/1r95LK4HWizqALUZJhEWO2mRfys.roa Signing time: Fri 02 Jan 2026 18:22:25 +0000 ROA not before: Fri 02 Jan 2026 18:22:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 2a02:e9c1::/32 maxlen: 32 2a02:e9c2::/32 maxlen: 32 2a02:e9c4::/32 maxlen: 32 2a02:e9c7::/32 maxlen: 32 2a13:6cc0::/32 maxlen: 32 2a13:6cc3::/32 maxlen: 32 2a13:6cc4::/32 maxlen: 32 2a13:6cc5::/32 maxlen: 32 2a13:6cc7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:4f:f3:b0:73:02:e8:e6:d1:a8:2c:ac:b8:bf:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d Validity Not Before: Jan 2 18:22:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6bf792cae075a2cea00b5192611163b69917f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b1:9b:b1:00:14:1b:77:25:0f:ac:44:19:24: 0b:e2:92:71:d4:24:ae:ec:5a:06:4b:77:52:12:73: 49:a1:77:ab:43:26:9c:61:e8:49:bb:ec:d6:db:7e: 8f:8d:81:a8:9f:36:7a:6f:5f:4a:bc:44:d8:d1:ac: c7:01:03:59:81:92:5b:15:a8:aa:dc:33:8b:10:9f: cd:e0:a3:db:ef:1e:f1:39:a9:e3:d2:b0:f4:2b:81: 7e:3d:59:d9:c6:a1:e9:e4:3f:20:9b:76:a5:61:23: 66:74:3e:8c:a2:b9:31:de:ac:54:89:2b:79:38:3f: eb:f3:65:d2:94:00:8a:a0:a0:c1:2e:88:70:4a:35: 2e:6e:ff:0f:64:d6:a7:3e:d8:d0:dd:1e:f6:bf:d7: e7:48:c3:9b:3b:66:de:fe:ca:46:ca:27:de:23:99: bb:be:2d:73:71:51:66:f2:34:a7:14:35:d9:b1:4f: 21:05:46:40:26:c4:4e:73:99:ab:7f:61:e5:0d:f0: 9c:4e:0b:28:a4:0e:a6:1e:f9:e1:4a:a3:25:8a:c9: 7b:45:f1:35:fb:ea:e1:ab:05:18:aa:e8:78:29:27: f7:95:45:be:0d:50:d6:3b:c8:2f:a8:c6:89:cd:c3: d5:a1:d0:b7:45:18:88:54:96:3d:da:d9:6d:1e:1d: 58:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BF:79:2C:AE:07:5A:2C:EA:00:B5:19:26:11:16:3B:69:91:7F:2B X509v3 Authority Key Identifier: keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/1r95LK4HWizqALUZJhEWO2mRfys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:e9c1::-2a02:e9c2:ffff:ffff:ffff:ffff:ffff:ffff 2a02:e9c4::/32 2a02:e9c7::/32 2a13:6cc0::/32 2a13:6cc3::-2a13:6cc5:ffff:ffff:ffff:ffff:ffff:ffff 2a13:6cc7::/32 Signature Algorithm: sha256WithRSAEncryption 31:28:ae:c7:c4:3b:75:02:2b:d7:c2:88:a7:7f:70:1a:32:2c: ae:4c:02:d5:36:9a:44:e7:16:a4:38:09:ea:90:81:ab:92:2c: e0:39:af:72:16:1f:62:0e:79:5f:87:78:94:94:e6:1b:0c:23: eb:df:d8:49:f6:45:7c:56:49:54:cd:0a:48:10:aa:54:5d:97: da:10:15:69:a4:70:ff:48:e7:9b:b2:60:33:57:28:4b:8f:45: 12:a6:e5:a0:0b:42:33:d5:ad:14:76:76:3e:eb:a7:d4:16:ad: f8:ea:85:c8:90:37:67:e1:51:d2:b4:21:69:2e:16:bf:2c:c4: db:af:b7:dd:aa:91:10:d1:3a:2c:9e:b1:21:50:a2:5c:03:fe: ad:62:49:1d:5a:fd:c2:c4:8a:fb:bd:d8:af:98:2e:3b:8d:4c: c1:ce:21:97:4a:8b:07:38:fe:3d:54:72:6a:91:f2:3a:80:77: 91:62:d0:64:cb:36:91:70:6f:5e:dd:1c:f1:02:06:96:b1:36: 6b:dd:11:7a:74:08:2e:8b:73:99:0a:7c:01:3c:ce:a5:5a:bd: 75:72:47:e8:93:69:b4:d0:d5:25:52:2b:d6:5d:8a:14:04:54: 0e:d4:01:9c:07:7b:00:f1:4f:96:a2:73:0e:cf:ac:05:60:05: 68:a4:f5:0a -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt/8k/zsHMC6ObRqCysuL90MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGJmYmRiNmU5NzVkZGNhOGY2ZGQ5NjhjMzdhN2Q1NTYw ZTY5MWQwHhcNMjYwMTAyMTgyMjI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmJmNzkyY2FlMDc1YTJjZWEwMGI1MTkyNjExMTYzYjY5OTE3ZjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrGbsQAUG3clD6xEGSQL4pJx1CSu 7FoGS3dSEnNJoXerQyacYehJu+zW236PjYGonzZ6b19KvETY0azHAQNZgZJbFaiq 3DOLEJ/N4KPb7x7xOanj0rD0K4F+PVnZxqHp5D8gm3alYSNmdD6Morkx3qxUiSt5 OD/r82XSlACKoKDBLohwSjUubv8PZNanPtjQ3R72v9fnSMObO2be/spGyifeI5m7 vi1zcVFm8jSnFDXZsU8hBUZAJsROc5mrf2HlDfCcTgsopA6mHvnhSqMlisl7RfE1 ++rhqwUYquh4KSf3lUW+DVDWO8gvqMaJzcPVodC3RRiIVJY92tltHh1YXwIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFNa/eSyuB1os6gC1GSYRFjtpkX8rMB8GA1UdIwQY MBaAFP/b+9tul13cqPbdlow3p9VWDmkdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUt MTk3NjlmNTc4ZWZkLzEvMXI5NUxLNEhXaXpxQUxVWkpoRVdPMm1SZnlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUtMTk3NjlmNTc4ZWZk LzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAAjA8MA4DBQAqAunB AwUAKgLpwgMFACoC6cQDBQAqAunHAwUAKhNswDAOAwUAKhNswwMFASoTbMQDBQAq E2zHMA0GCSqGSIb3DQEBCwUAA4IBAQAxKK7HxDt1AivXwoinf3AaMiyuTALVNppE 5xakOAnqkIGrkizgOa9yFh9iDnlfh3iUlOYbDCPr39hJ9kV8VklUzQpIEKpUXZfa EBVppHD/SOebsmAzVyhLj0USpuWgC0Iz1a0UdnY+66fUFq346oXIkDdn4VHStCFp Lha/LMTbr7fdqpEQ0TosnrEhUKJcA/6tYkkdWv3CxIr7vdivmC47jUzBziGXSosH OP49VHJqkfI6gHeRYtBkyzaRcG9e3RzxAgaWsTZr3RF6dAgui3OZCnwBPM6lWr11 ckfok2m00NUlUivWXYoUBFQO1AGcB3sA8U+WonMOz6wFYAVopPUK -----END CERTIFICATE-----Generated at Sun Jan 25 03:14:27 2026 by rpki-client