This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/1f8yNz_6CeZb2_cKtFYjakkUYu0.roa File: 1f8yNz_6CeZb2_cKtFYjakkUYu0.roa (raw, json) Hash identifier: CQrSvmHUDyMuGsezkRUoXIh9i5m3+0vp+bw6nOrytp0= Subject key identifier: D5:FF:32:37:3F:FA:09:E6:5B:DB:F7:0A:B4:56:23:6A:49:14:62:ED Certificate issuer: /CN=91a071508338260551a55f01fd0708fdf5e08287 Certificate serial: 019B7759318182C83FB591C804AF83E87B48 Authority key identifier: 91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/1f8yNz_6CeZb2_cKtFYjakkUYu0.roa Signing time: Thu 01 Jan 2026 02:18:12 +0000 ROA not before: Thu 01 Jan 2026 02:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8466 IP address blocks: 2a05:9ec0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:31:81:82:c8:3f:b5:91:c8:04:af:83:e8:7b:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91a071508338260551a55f01fd0708fdf5e08287 Validity Not Before: Jan 1 02:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5ff32373ffa09e65bdbf70ab456236a491462ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:39:35:ef:97:28:7f:ae:31:cd:d8:5b:11:0b: 28:c7:f3:97:3e:18:7b:bb:76:dc:f8:ef:91:44:7f: 24:c4:20:e7:9d:b2:be:1e:5c:a7:42:99:a8:32:3d: 0e:7f:e0:de:d8:78:4e:5e:71:fe:54:12:df:c5:7e: ac:cb:53:36:51:ed:83:a4:83:f8:60:c5:8e:9b:f9: d4:93:63:06:5f:f7:00:12:f2:af:20:06:6b:f7:d8: 7f:45:4d:c5:2d:8a:e7:89:a3:d4:56:f5:19:5a:9d: 77:a4:90:cf:8e:c6:0d:b1:93:49:94:e7:0a:f8:97: d7:5e:11:ce:44:31:9c:e8:60:ee:55:ec:e3:e3:4d: 26:8a:12:a4:ab:02:48:ca:73:7c:70:d4:53:b5:11: fe:37:d5:d1:b3:2e:9b:41:22:0c:f6:7e:ba:d6:37: c8:77:d8:74:43:3c:de:95:15:4b:2b:15:61:fc:8d: cf:a0:d7:77:9a:de:3f:39:14:ca:a1:36:49:6b:29: c6:2a:e5:d8:fa:08:c3:92:1a:16:8f:c4:4c:d1:7b: 9c:c1:41:9a:64:93:80:d4:f2:24:d6:f3:bf:f8:30: f2:90:aa:01:1e:1f:a8:ea:a8:b5:1f:31:b9:02:be: de:b1:8f:75:e2:ad:33:1d:48:e3:e5:28:83:82:22: 05:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FF:32:37:3F:FA:09:E6:5B:DB:F7:0A:B4:56:23:6A:49:14:62:ED X509v3 Authority Key Identifier: keyid:91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/1f8yNz_6CeZb2_cKtFYjakkUYu0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:9ec0::/29 Signature Algorithm: sha256WithRSAEncryption 31:c8:0a:be:99:54:71:1d:b5:86:27:9f:4b:eb:a5:17:17:42: 3f:9c:64:ee:55:89:3a:0e:60:7a:c8:fc:96:9f:df:d1:0f:dd: 5a:99:ba:46:b9:da:27:28:07:ee:78:1e:77:4e:50:06:45:78: 8f:dd:a8:1e:b2:60:75:88:03:9f:2c:6b:83:7b:0c:7e:e1:e0: 75:1c:c7:8c:48:e2:9b:0b:8d:f3:47:4e:2a:c8:99:a8:18:65: 07:c2:d9:2f:89:e0:fb:e7:bb:0e:57:4e:49:31:e5:31:35:38: a5:76:dc:be:b4:fe:fd:92:7a:fa:6a:75:29:0f:18:84:e1:bb: a3:29:ba:05:98:3f:39:b9:45:de:b2:ee:6e:4d:73:07:86:a8: 43:55:b6:2a:b5:c3:13:2e:e7:0b:9a:d6:cb:52:2a:f0:40:6c: 31:bb:32:01:a3:0c:30:86:65:93:13:99:72:49:8a:cb:fb:c5: f2:59:8b:54:c0:ed:99:f2:a2:70:6b:1e:5a:e1:1d:ae:d1:d3: df:48:a2:28:31:c4:45:47:f8:63:a8:0a:cb:9b:e6:b7:99:42: d9:ee:10:fb:74:a7:a7:6e:e1:41:c1:98:da:df:3d:72:78:cb: ba:ae:1e:27:83:52:f6:4b:46:04:bd:ad:9d:bf:bf:1d:2c:74: e9:78:fe:4e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3WTGBgsg/tZHIBK+D6HtIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxYTA3MTUwODMzODI2MDU1MWE1NWYwMWZkMDcwOGZkZjVl MDgyODcwHhcNMjYwMTAxMDIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWZmMzIzNzNmZmEwOWU2NWJkYmY3MGFiNDU2MjM2YTQ5MTQ2MmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Tk175cof64xzdhbEQsox/OXPhh7 u3bc+O+RRH8kxCDnnbK+HlynQpmoMj0Of+De2HhOXnH+VBLfxX6sy1M2Ue2DpIP4 YMWOm/nUk2MGX/cAEvKvIAZr99h/RU3FLYrniaPUVvUZWp13pJDPjsYNsZNJlOcK +JfXXhHORDGc6GDuVezj400mihKkqwJIynN8cNRTtRH+N9XRsy6bQSIM9n661jfI d9h0QzzelRVLKxVh/I3PoNd3mt4/ORTKoTZJaynGKuXY+gjDkhoWj8RM0XucwUGa ZJOA1PIk1vO/+DDykKoBHh+o6qi1HzG5Ar7esY914q0zHUjj5SiDgiIFfQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFNX/Mjc/+gnmW9v3CrRWI2pJFGLtMB8GA1UdIwQY MBaAFJGgcVCDOCYFUaVfAf0HCP314IKHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2FCeFVJTTRKZ1ZScFY4Ql9RY0lfZlhnZ29jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xNWNjNTItNTFlZS00NjBlLTlhZWIt ZWU1NTU5YjM2NThiLzEvMWY4eU56XzZDZVpiMl9jS3RGWWpha2tVWXUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8xNWNjNTItNTFlZS00NjBlLTlhZWItZWU1NTU5YjM2NThi LzEva2FCeFVJTTRKZ1ZScFY4Ql9RY0lfZlhnZ29jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgWewDAN BgkqhkiG9w0BAQsFAAOCAQEAMcgKvplUcR21hiefS+ulFxdCP5xk7lWJOg5gesj8 lp/f0Q/dWpm6RrnaJygH7nged05QBkV4j92oHrJgdYgDnyxrg3sMfuHgdRzHjEji mwuN80dOKsiZqBhlB8LZL4ng++e7DldOSTHlMTU4pXbcvrT+/ZJ6+mp1KQ8YhOG7 oym6BZg/OblF3rLubk1zB4aoQ1W2KrXDEy7nC5rWy1Iq8EBsMbsyAaMMMIZlkxOZ ckmKy/vF8lmLVMDtmfKicGseWuEdrtHT30iiKDHERUf4Y6gKy5vmt5lC2e4Q+3Sn p27hQcGY2t89cnjLuq4eJ4NS9ktGBL2tnb+/HSx06Xj+Tg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:06 2026 by rpki-client