This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/NEq1_nGnRgy9ZqRE-TWWtWlrj0A.roa File: NEq1_nGnRgy9ZqRE-TWWtWlrj0A.roa (raw, json) Hash identifier: hACJLXbiQQybEmA2FC3ErE869vzK4Czo2p45asoCTqw= Subject key identifier: 34:4A:B5:FE:71:A7:46:0C:BD:66:A4:44:F9:35:96:B5:69:6B:8F:40 Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Certificate serial: 019B7F84CBD8986418D9AB5F953010EFEFF2 Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/NEq1_nGnRgy9ZqRE-TWWtWlrj0A.roa Signing time: Fri 02 Jan 2026 16:22:47 +0000 ROA not before: Fri 02 Jan 2026 16:22:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197962 IP address blocks: 2a11:f140::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:cb:d8:98:64:18:d9:ab:5f:95:30:10:ef:ef:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Validity Not Before: Jan 2 16:22:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=344ab5fe71a7460cbd66a444f93596b5696b8f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e5:d5:31:0b:d6:8d:d3:84:56:40:5c:c0:88: 56:2a:99:95:26:6d:3a:67:17:50:f4:f1:62:28:f5: b7:ba:04:52:e7:27:64:c6:4d:1b:9a:68:61:a1:e7: f0:70:20:3e:cc:8a:27:d6:f3:63:18:cd:90:8c:51: a5:a9:0f:51:c3:84:ed:a9:39:c4:05:f3:a1:ae:87: f2:15:6f:d6:72:a1:21:95:bc:56:84:43:39:ed:12: 80:b7:f0:bc:0f:e6:d4:f9:86:77:de:96:d8:bd:66: 7e:81:09:5f:9c:02:2d:3c:aa:88:27:a6:bc:e6:63: 36:84:23:e8:91:58:25:f4:b3:15:a1:c7:25:0a:25: 35:aa:84:52:37:8e:d8:2f:37:f7:51:26:ba:68:ab: ec:7e:b6:26:45:53:95:69:ac:3c:70:50:76:97:46: e4:72:53:39:b2:8d:39:9e:ad:84:41:25:b3:a3:6a: eb:86:99:00:5a:bd:86:33:fe:e5:8b:69:f3:56:21: bb:0b:3b:88:e9:91:82:ce:87:2a:8c:92:81:3b:c4: 8a:af:6d:71:ad:ef:d3:64:33:be:75:40:3d:a8:ac: 2f:3b:38:10:a1:1f:fa:f4:6c:97:a9:36:38:34:e8: d0:b2:12:39:48:1d:cb:eb:ab:4a:46:0e:af:d4:c1: ce:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4A:B5:FE:71:A7:46:0C:BD:66:A4:44:F9:35:96:B5:69:6B:8F:40 X509v3 Authority Key Identifier: keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/NEq1_nGnRgy9ZqRE-TWWtWlrj0A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f140::/29 Signature Algorithm: sha256WithRSAEncryption 18:d0:b4:20:3f:8c:c3:77:62:28:1a:23:18:d9:3a:64:3a:22: 65:2a:af:87:65:99:e5:21:e9:95:d3:50:ad:58:fe:2a:9e:d5: 3c:1e:c8:9a:8c:6f:1a:4c:96:19:2c:52:98:ab:e8:30:f3:ae: 80:49:6e:e6:75:42:c8:e5:62:42:0e:59:98:38:31:bd:c6:d8: 88:8c:29:25:53:43:61:5c:6c:40:91:16:67:3f:8b:94:b0:7b: e5:18:d1:9e:6e:56:37:ba:6a:91:eb:77:fc:51:c4:19:cf:ca: 1b:61:9c:fe:9d:56:02:d6:3a:a5:ba:d9:26:8b:81:df:4d:d9: 99:11:38:2b:ed:be:09:b0:4a:13:82:83:ea:35:58:9a:2f:4c: 51:3c:ba:77:fb:e2:1e:ac:63:d6:89:ba:fc:31:41:e5:3f:62: e9:0b:cc:a9:39:33:70:c1:2e:52:97:12:6a:1c:18:23:98:ed: 4d:88:99:db:64:ea:60:81:0c:8a:b2:d5:93:62:e3:81:be:25: 58:e8:3e:40:28:46:eb:8d:71:64:42:cd:49:4b:58:08:19:53: 3c:5d:bf:9b:7c:73:5c:4d:13:c0:07:16:75:43:11:22:b5:9d: 89:57:77:a4:61:45:c6:d9:3f:07:d2:1b:51:09:26:50:fb:d8: 8a:73:8f:39 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/hMvYmGQY2atflTAQ7+/yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz Mjc2ZTMwHhcNMjYwMTAyMTYyMjQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDRhYjVmZTcxYTc0NjBjYmQ2NmE0NDRmOTM1OTZiNTY5NmI4ZjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uXVMQvWjdOEVkBcwIhWKpmVJm06 ZxdQ9PFiKPW3ugRS5ydkxk0bmmhhoefwcCA+zIon1vNjGM2QjFGlqQ9Rw4TtqTnE BfOhrofyFW/WcqEhlbxWhEM57RKAt/C8D+bU+YZ33pbYvWZ+gQlfnAItPKqIJ6a8 5mM2hCPokVgl9LMVocclCiU1qoRSN47YLzf3USa6aKvsfrYmRVOVaaw8cFB2l0bk clM5so05nq2EQSWzo2rrhpkAWr2GM/7li2nzViG7CzuI6ZGCzocqjJKBO8SKr21x re/TZDO+dUA9qKwvOzgQoR/69GyXqTY4NOjQshI5SB3L66tKRg6v1MHOxQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFDRKtf5xp0YMvWakRPk1lrVpa49AMB8GA1UdIwQY MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt YTJhNGM2YTYyMWNkLzEvTkVxMV9uR25SZ3k5WnFSRS1UV1d0V2xyajBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhHxQDAN BgkqhkiG9w0BAQsFAAOCAQEAGNC0ID+Mw3diKBojGNk6ZDoiZSqvh2WZ5SHpldNQ rVj+Kp7VPB7ImoxvGkyWGSxSmKvoMPOugElu5nVCyOViQg5ZmDgxvcbYiIwpJVND YVxsQJEWZz+LlLB75RjRnm5WN7pqket3/FHEGc/KG2Gc/p1WAtY6pbrZJouB303Z mRE4K+2+CbBKE4KD6jVYmi9MUTy6d/viHqxj1om6/DFB5T9i6QvMqTkzcMEuUpcS ahwYI5jtTYiZ22TqYIEMirLVk2Ljgb4lWOg+QChG641xZELNSUtYCBlTPF2/m3xz XE0TwAcWdUMRIrWdiVd3pGFFxtk/B9IbUQkmUPvYinOPOQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:10:04 2026 by rpki-client