This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/1-Dqswh2nOTAd-BLgdUyGvB-Z1kc.roa File: 1-Dqswh2nOTAd-BLgdUyGvB-Z1kc.roa (raw, json) Hash identifier: fQXXSs2gglVxP/y70N/IcdYPFQ/yUJztMiHuepjm5xo= Subject key identifier: F8:3A:AC:C2:1D:A7:39:30:1D:F8:12:E0:75:4C:86:BC:1F:99:D6:47 Certificate issuer: /CN=a378118db05e4c93e76fa1f1c95679c705beb208 Certificate serial: 019B7C7F3056C646A20F1006158091D0FF1B Authority key identifier: A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/1-Dqswh2nOTAd-BLgdUyGvB-Z1kc.roa Signing time: Fri 02 Jan 2026 02:17:48 +0000 ROA not before: Fri 02 Jan 2026 02:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15542 IP address blocks: 2001:67c:2ef0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:30:56:c6:46:a2:0f:10:06:15:80:91:d0:ff:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a378118db05e4c93e76fa1f1c95679c705beb208 Validity Not Before: Jan 2 02:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f83aacc21da739301df812e0754c86bc1f99d647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4f:73:df:99:6e:3d:52:de:c1:ae:48:23:ef: d6:16:d8:cd:ed:2b:5d:67:45:00:73:19:73:c1:bc: 78:df:09:37:b3:7f:b1:a5:5f:1f:2f:15:fb:c3:54: 30:29:08:9e:be:13:7f:e6:57:f1:7b:05:ac:4a:b8: 14:b4:62:04:50:d1:ff:9e:75:9f:54:5f:96:f4:77: c4:d0:c1:63:e4:96:4f:b4:4a:e5:ce:ee:6d:bd:bc: 9f:21:a2:98:36:75:08:c8:3a:06:b2:a6:ce:31:12: 24:eb:07:df:c7:fb:f2:40:6f:bc:77:8e:01:c1:f8: 70:13:d1:af:dd:69:64:22:9f:18:36:18:76:f7:3d: 7e:24:10:23:da:03:9c:e2:72:68:37:9e:5f:0c:6f: 66:cf:18:1f:d9:f2:38:31:95:0c:f6:83:f7:d1:2c: e9:cc:e3:a7:5a:10:39:2a:f1:0e:cc:bb:94:d7:6e: ac:9b:1f:ae:9c:8a:21:7e:76:8e:a8:b6:f0:6b:4b: fb:c7:9d:26:b8:c6:65:06:d3:1c:90:22:fe:e0:a2: d6:c5:d8:69:55:ce:03:83:be:88:e3:5a:95:5d:77: 7e:3d:bf:14:b2:94:16:a4:67:96:86:ab:d8:94:b1: da:74:1c:99:d6:98:f3:0e:47:b5:d6:09:cc:d1:29: 8c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3A:AC:C2:1D:A7:39:30:1D:F8:12:E0:75:4C:86:BC:1F:99:D6:47 X509v3 Authority Key Identifier: keyid:A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/1-Dqswh2nOTAd-BLgdUyGvB-Z1kc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2ef0::/48 Signature Algorithm: sha256WithRSAEncryption 4e:2a:34:43:b9:5b:7d:f6:1a:05:2c:27:54:69:b8:85:19:9f: 63:ce:21:aa:55:29:4f:87:0b:f6:dc:b7:e8:74:bd:5f:70:a6: 38:2e:2f:93:89:0a:5e:7b:67:eb:85:82:a4:5d:a7:b1:58:ec: 15:44:81:75:a2:6f:96:b2:a6:e8:91:67:4d:03:fb:30:ad:03: 96:a7:03:ac:eb:27:0b:c4:19:1d:de:85:3d:0d:b5:13:0c:b1: 83:e6:9c:c1:61:40:49:3b:1b:6e:54:98:d1:58:60:82:58:1f: ff:fe:32:db:3b:3a:a9:1f:ae:38:4d:ad:6c:de:63:84:70:50: 1d:92:02:54:b4:f1:c9:ff:00:13:ae:50:ba:b5:cb:4b:83:60: e5:d7:07:32:6b:4f:97:77:c7:3f:8a:34:93:cf:64:47:86:58: db:80:41:03:a1:e0:8e:8f:48:8e:54:a0:ca:db:89:5a:39:15: 50:6b:0c:0c:b4:5f:33:80:93:b5:da:d7:89:78:62:de:50:5c: aa:a5:b3:e7:d6:af:37:77:90:2a:c5:1b:f5:a2:ce:d7:d5:65: 69:3c:f5:c3:64:de:3a:e6:00:a3:17:a3:28:20:14:f3:11:d3: 2a:45:ae:7d:d0:33:b3:cc:c1:5b:6e:b6:39:3b:05:66:46:76: 3e:0d:e0:34 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt8fzBWxkaiDxAGFYCR0P8bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNzgxMThkYjA1ZTRjOTNlNzZmYTFmMWM5NTY3OWM3MDVi ZWIyMDgwHhcNMjYwMTAyMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODNhYWNjMjFkYTczOTMwMWRmODEyZTA3NTRjODZiYzFmOTlkNjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmE9z35luPVLewa5II+/WFtjN7Std Z0UAcxlzwbx43wk3s3+xpV8fLxX7w1QwKQievhN/5lfxewWsSrgUtGIEUNH/nnWf VF+W9HfE0MFj5JZPtErlzu5tvbyfIaKYNnUIyDoGsqbOMRIk6wffx/vyQG+8d44B wfhwE9Gv3WlkIp8YNhh29z1+JBAj2gOc4nJoN55fDG9mzxgf2fI4MZUM9oP30Szp zOOnWhA5KvEOzLuU126smx+unIohfnaOqLbwa0v7x50muMZlBtMckCL+4KLWxdhp Vc4Dg76I41qVXXd+Pb8UspQWpGeWhqvYlLHadByZ1pjzDke11gnM0SmM8QIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPg6rMIdpzkwHfgS4HVMhrwfmdZHMB8GA1UdIwQY MBaAFKN4EY2wXkyT52+h8clWeccFvrIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzNnUmpiQmVUSlBuYjZIeHlWWjV4d1ctc2dnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8wZjM1NWEtM2EwYS00NmVjLWIwN2Yt ODY2NjA3YWYyZmE1LzEvMS1EcXN3aDJuT1RBZC1CTGdkVXlHdkItWjFrYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDkvMGYzNTVhLTNhMGEtNDZlYy1iMDdmLTg2NjYwN2FmMmZh NS8xL28zZ1JqYkJlVEpQbmI2SHh5Vlo1eHdXLXNnZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwu 8DANBgkqhkiG9w0BAQsFAAOCAQEATio0Q7lbffYaBSwnVGm4hRmfY84hqlUpT4cL 9ty36HS9X3CmOC4vk4kKXntn64WCpF2nsVjsFUSBdaJvlrKm6JFnTQP7MK0DlqcD rOsnC8QZHd6FPQ21Ewyxg+acwWFASTsbblSY0Vhgglgf//4y2zs6qR+uOE2tbN5j hHBQHZICVLTxyf8AE65QurXLS4Ng5dcHMmtPl3fHP4o0k89kR4ZY24BBA6Hgjo9I jlSgytuJWjkVUGsMDLRfM4CTtdrXiXhi3lBcqqWz59avN3eQKsUb9aLO19VlaTz1 w2TeOuYAoxejKCAU8xHTKkWufdAzs8zBW262OTsFZkZ2Pg3gNA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:11 2026 by rpki-client