This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/L314PIS9EZuLIllvbYG4hWHPUco.roa File: L314PIS9EZuLIllvbYG4hWHPUco.roa (raw, json) Hash identifier: oCRJ7CpfVca9XR76mJtqFGhJ4HnpliA09q5+Ns2Ex/4= Subject key identifier: 2F:7D:78:3C:84:BD:11:9B:8B:22:59:6F:6D:81:B8:85:61:CF:51:CA Certificate issuer: /CN=98af640c820eeb5fbc92281c61144f11a7bd707e Certificate serial: 019B7DCA3E79383B7C531D1EFBEF7178E385 Authority key identifier: 98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/L314PIS9EZuLIllvbYG4hWHPUco.roa Signing time: Fri 02 Jan 2026 08:19:24 +0000 ROA not before: Fri 02 Jan 2026 08:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60150 IP address blocks: 2001:678:6bc::/48 maxlen: 48 2001:678:ef0::/48 maxlen: 48 2001:678:ef4::/48 maxlen: 48 2001:678:ef8::/48 maxlen: 48 2001:67c:270::/48 maxlen: 48 2001:67c:28a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:3e:79:38:3b:7c:53:1d:1e:fb:ef:71:78:e3:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98af640c820eeb5fbc92281c61144f11a7bd707e Validity Not Before: Jan 2 08:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f7d783c84bd119b8b22596f6d81b88561cf51ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:16:1b:50:22:f3:3a:8f:ce:c8:2e:38:65:89: c8:db:69:7b:e3:d0:d5:99:7a:e6:21:ce:24:d3:d7: a4:b5:66:fb:16:65:c6:61:34:9d:f2:c2:09:2c:62: b4:48:9c:63:b6:e3:82:3e:48:b1:ce:cb:d1:79:68: a3:7a:0e:f5:20:08:6f:c0:f4:0e:21:02:71:1e:dc: fb:cc:e0:e8:63:78:b6:f1:e2:7d:a6:c3:9b:dc:f2: a9:4a:9b:15:3f:4e:65:96:5f:c3:48:81:07:15:16: 98:af:5f:dc:88:bb:e0:87:82:8c:39:67:3f:14:c8: 81:99:ec:d2:79:c8:69:d4:33:c5:c5:9f:39:d1:c6: 0f:07:20:45:9a:d9:2a:f3:de:e4:8f:fe:ec:58:2c: 67:76:7b:ee:f0:90:1f:2a:50:17:5c:b1:69:a6:bf: 8c:0d:0f:1b:e5:c9:8f:6d:c1:27:b5:34:35:b7:b9: 5e:73:0f:9f:5a:28:62:a0:04:96:33:f0:46:27:4c: ff:00:85:d0:9e:7d:d5:2a:ef:c0:a9:81:af:2e:70: b2:fe:10:c2:89:ea:98:c2:0d:43:0f:f7:15:ed:d7: b4:b0:ff:4f:3b:dc:5b:6b:d3:66:6c:fc:d4:b2:a0: ca:c1:96:f7:8b:10:df:04:68:8c:4b:93:4e:09:d3: 45:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:7D:78:3C:84:BD:11:9B:8B:22:59:6F:6D:81:B8:85:61:CF:51:CA X509v3 Authority Key Identifier: keyid:98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/L314PIS9EZuLIllvbYG4hWHPUco.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:6bc::/48 2001:678:ef0::/48 2001:678:ef4::/48 2001:678:ef8::/48 2001:67c:270::/48 2001:67c:28a0::/48 Signature Algorithm: sha256WithRSAEncryption 2a:4b:f7:a6:75:32:80:5d:47:fa:45:5b:42:d0:3b:2e:87:7d: 3b:c4:26:ba:d0:73:79:25:c6:30:30:06:20:fd:89:92:ea:df: 46:26:b4:74:30:c6:f2:4b:9c:8b:23:86:78:b8:f4:1c:9f:e1: ff:ba:e2:ef:5b:a2:87:5b:ea:d2:55:53:cb:c7:d3:15:83:62: 84:d9:a4:60:17:98:71:89:39:7a:df:41:a2:8f:d7:ca:8a:78: 6d:70:c4:8e:06:23:57:b2:7b:1c:7a:35:33:3f:38:4e:42:64: 96:ec:76:90:76:a1:63:e1:78:9a:e1:3d:e6:7e:33:55:28:cd: f7:ad:64:2f:10:0b:cd:1a:59:e3:35:8d:f5:a3:e0:ee:47:86: 70:81:4f:54:1d:01:be:b2:18:5a:ec:6d:2b:57:e5:86:25:3d: 9d:37:67:cf:a8:a1:e8:19:bb:ab:87:a3:fa:10:d4:f9:74:01: 84:af:ad:f7:29:eb:b2:28:d5:08:02:8b:7e:fb:94:5f:be:fe: 71:a8:1a:0b:61:2f:6d:59:59:58:94:b3:d0:2c:96:c3:1f:1b: 41:86:c6:77:22:df:38:e9:d5:4e:86:f8:20:18:ed:51:01:74: 36:56:9c:a4:c9:3a:a1:7b:34:ea:f4:05:e4:b2:42:d9:e4:6c: 4d:0c:d5:65 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt9yj55ODt8Ux0e++9xeOOFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4YWY2NDBjODIwZWViNWZiYzkyMjgxYzYxMTQ0ZjExYTdi ZDcwN2UwHhcNMjYwMTAyMDgxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjdkNzgzYzg0YmQxMTliOGIyMjU5NmY2ZDgxYjg4NTYxY2Y1MWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRYbUCLzOo/OyC44ZYnI22l749DV mXrmIc4k09ektWb7FmXGYTSd8sIJLGK0SJxjtuOCPkixzsvReWijeg71IAhvwPQO IQJxHtz7zODoY3i28eJ9psOb3PKpSpsVP05lll/DSIEHFRaYr1/ciLvgh4KMOWc/ FMiBmezSechp1DPFxZ850cYPByBFmtkq897kj/7sWCxndnvu8JAfKlAXXLFppr+M DQ8b5cmPbcEntTQ1t7lecw+fWihioASWM/BGJ0z/AIXQnn3VKu/AqYGvLnCy/hDC ieqYwg1DD/cV7de0sP9PO9xba9NmbPzUsqDKwZb3ixDfBGiMS5NOCdNFjwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFC99eDyEvRGbiyJZb22BuIVhz1HKMB8GA1UdIwQY MBaAFJivZAyCDutfvJIoHGEUTxGnvXB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUs5a0RJSU82MS04a2lnY1lSUlBFYWU5Y0g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xMjJmZjQtYzRhNy00Njk4LTg3OWYt ZWNhYjcwZWYzMmRhLzEvTDMxNFBJUzlFWnVMSWxsdmJZRzRoV0hQVWNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8xMjJmZjQtYzRhNy00Njk4LTg3OWYtZWNhYjcwZWYzMmRh LzEvbUs5a0RJSU82MS04a2lnY1lSUlBFYWU5Y0g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAAjA2AwcAIAEGeAa8 AwcAIAEGeA7wAwcAIAEGeA70AwcAIAEGeA74AwcAIAEGfAJwAwcAIAEGfCigMA0G CSqGSIb3DQEBCwUAA4IBAQAqS/emdTKAXUf6RVtC0Dsuh307xCa60HN5JcYwMAYg /YmS6t9GJrR0MMbyS5yLI4Z4uPQcn+H/uuLvW6KHW+rSVVPLx9MVg2KE2aRgF5hx iTl630Gij9fKinhtcMSOBiNXsnscejUzPzhOQmSW7HaQdqFj4Xia4T3mfjNVKM33 rWQvEAvNGlnjNY31o+DuR4ZwgU9UHQG+shha7G0rV+WGJT2dN2fPqKHoGburh6P6 ENT5dAGEr633KeuyKNUIAot++5Rfvv5xqBoLYS9tWVlYlLPQLJbDHxtBhsZ3It84 6dVOhvggGO1RAXQ2VpykyTqhezTq9AXkskLZ5GxNDNVl -----END CERTIFICATE-----Generated at Sun Jan 25 21:03:33 2026 by rpki-client