This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/1-AA_Ym6EX8oobe6NeXk7HWy7rN8.roa File: 1-AA_Ym6EX8oobe6NeXk7HWy7rN8.roa (raw, json) Hash identifier: 5t3UXfHRI3FdEzMfG7EasqVmyGfPVOTBzPUk3KiG+pQ= Subject key identifier: F8:00:3F:62:6E:84:5F:CA:28:6D:EE:8D:79:79:3B:1D:6C:BB:AC:DF Certificate issuer: /CN=97893182b16718983bc008c8d087f8ddca3d8614 Certificate serial: 019B7A5AD6931C5C09A0C85FD108E4C224D3 Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/1-AA_Ym6EX8oobe6NeXk7HWy7rN8.roa Signing time: Thu 01 Jan 2026 16:18:52 +0000 ROA not before: Thu 01 Jan 2026 16:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209915 IP address blocks: 2a0b:1300:81dc::/48 maxlen: 48 2a0b:1306:1dc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d6:93:1c:5c:09:a0:c8:5f:d1:08:e4:c2:24:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614 Validity Not Before: Jan 1 16:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8003f626e845fca286dee8d79793b1d6cbbacdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cf:a0:5a:02:28:b3:b7:ce:e1:00:09:e9:c5: 12:34:f7:fd:01:14:ab:4c:60:fc:03:37:88:36:99: 2d:0b:f3:1c:a5:20:0e:86:37:41:c4:62:7e:d6:22: 16:68:9e:2e:be:54:e4:45:f6:a5:23:fe:95:29:da: c2:5d:66:38:35:07:8e:e8:b3:aa:2e:6a:4d:95:53: 92:1d:f6:9d:92:75:1a:49:d7:3e:34:89:59:39:a5: 13:5e:37:56:a1:20:d3:5a:c9:f7:b7:33:d9:88:d8: b3:ef:8d:61:02:df:a0:43:1f:32:34:86:b5:83:10: c2:fd:31:d8:7f:3c:e6:34:f7:40:8f:1e:d8:8a:28: 80:9a:42:4d:c6:1d:84:ab:74:b3:42:b2:a1:19:f5: b5:89:b6:20:d5:64:54:a1:a0:2b:08:ec:7b:cd:30: d8:26:e0:b1:2e:ec:ba:08:aa:94:b2:6d:97:ae:49: ff:40:f4:12:60:1e:81:9c:dd:ff:85:b9:b1:a6:be: 27:5a:ee:13:0b:53:39:e8:ad:bb:47:34:22:39:da: d6:32:1a:26:a7:33:fe:1d:56:f4:9c:6c:a5:6c:1d: ca:10:ab:24:36:36:1d:52:69:ec:93:ce:a8:8d:0c: f7:50:d1:8d:a2:72:c6:79:0c:21:21:86:9d:6c:04: be:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:00:3F:62:6E:84:5F:CA:28:6D:EE:8D:79:79:3B:1D:6C:BB:AC:DF X509v3 Authority Key Identifier: keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/1-AA_Ym6EX8oobe6NeXk7HWy7rN8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:1300:81dc::/48 2a0b:1306:1dc::/48 Signature Algorithm: sha256WithRSAEncryption 8c:08:98:90:b3:a5:26:96:88:28:13:93:6a:1c:db:7d:6a:ea: 9a:1e:cc:03:7b:98:bc:28:11:4f:f0:b5:3d:56:f9:4b:4a:64: 68:e0:a7:d6:67:e2:67:a3:05:ff:17:bd:11:0b:da:65:1e:6e: 20:07:6d:df:00:f0:ff:e1:23:b0:2d:97:74:d5:1b:bd:61:ad: a3:e0:00:fd:b0:2d:4f:c2:c9:d2:5e:2a:e6:6a:c7:9f:39:5c: e3:ca:1c:b7:1d:e5:ba:68:e7:f9:8b:6e:3c:b1:55:0c:e3:85: 99:a6:0b:6c:c7:4b:52:f3:0c:2b:b4:8a:3a:14:4b:85:a0:ce: 39:6d:11:a9:c1:8c:4b:cd:31:30:d7:d3:70:ba:2e:0f:8e:0f: b0:93:6f:d8:de:63:d2:ea:24:f7:02:de:7a:aa:cf:b7:39:1c: 6d:53:54:ce:49:01:f8:21:9c:a3:60:02:5a:c7:78:72:0e:df: f6:e1:d0:e5:21:04:c8:78:55:2c:d3:07:b5:7d:2e:bf:fc:d0: 38:2b:06:64:51:41:9f:1f:e0:9e:57:a0:cf:91:f1:20:f3:39: 4e:83:a3:1f:38:17:d3:ac:04:36:83:7f:45:82:5d:89:32:59: 7a:1d:6c:f4:ab:df:35:f8:33:ba:ac:5b:42:64:d2:8d:3b:63: 90:34:65:09 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt6WtaTHFwJoMhf0QjkwiTTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODkzMTgyYjE2NzE4OTgzYmMwMDhjOGQwODdmOGRkY2Ez ZDg2MTQwHhcNMjYwMTAxMTYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODAwM2Y2MjZlODQ1ZmNhMjg2ZGVlOGQ3OTc5M2IxZDZjYmJhY2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc+gWgIos7fO4QAJ6cUSNPf9ARSr TGD8AzeINpktC/McpSAOhjdBxGJ+1iIWaJ4uvlTkRfalI/6VKdrCXWY4NQeO6LOq LmpNlVOSHfadknUaSdc+NIlZOaUTXjdWoSDTWsn3tzPZiNiz741hAt+gQx8yNIa1 gxDC/THYfzzmNPdAjx7YiiiAmkJNxh2Eq3SzQrKhGfW1ibYg1WRUoaArCOx7zTDY JuCxLuy6CKqUsm2Xrkn/QPQSYB6BnN3/hbmxpr4nWu4TC1M56K27RzQiOdrWMhom pzP+HVb0nGylbB3KEKskNjYdUmnsk86ojQz3UNGNonLGeQwhIYadbAS+HwIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFPgAP2JuhF/KKG3ujXl5Ox1su6zfMB8GA1UdIwQY MBaAFJeJMYKxZxiYO8AIyNCH+N3KPYYUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRreGdyRm5HSmc3d0FqSTBJZjQzY285aGhRLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8xMjAwNDMtMTczMy00YzcyLWFkNDct YmMwZTUxMWMyMGNlLzEvMS1BQV9ZbTZFWDhvb2JlNk5lWGs3SFd5N3JOOC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTUvMTIwMDQzLTE3MzMtNGM3Mi1hZDQ3LWJjMGU1MTFjMjBj ZS8xL2w0a3hnckZuR0pnN3dBakkwSWY0M2NvOWhoUS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACoLEwCB 3AMHACoLEwYB3DANBgkqhkiG9w0BAQsFAAOCAQEAjAiYkLOlJpaIKBOTahzbfWrq mh7MA3uYvCgRT/C1PVb5S0pkaOCn1mfiZ6MF/xe9EQvaZR5uIAdt3wDw/+EjsC2X dNUbvWGto+AA/bAtT8LJ0l4q5mrHnzlc48octx3lumjn+YtuPLFVDOOFmaYLbMdL UvMMK7SKOhRLhaDOOW0RqcGMS80xMNfTcLouD44PsJNv2N5j0uok9wLeeqrPtzkc bVNUzkkB+CGco2ACWsd4cg7f9uHQ5SEEyHhVLNMHtX0uv/zQOCsGZFFBnx/gnleg z5HxIPM5ToOjHzgX06wENoN/RYJdiTJZeh1s9KvfNfgzuqxbQmTSjTtjkDRlCQ== -----END CERTIFICATE-----Generated at Sun Jan 25 03:59:00 2026 by rpki-client