This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/S3ZN1Eo4WmIttcCuXgmyXCV1mQA.roa File: S3ZN1Eo4WmIttcCuXgmyXCV1mQA.roa (raw, json) Hash identifier: HALtWZ0hiQzMkL2eGHauQhHqRPrLY/Kagy5eLk2wo9A= Subject key identifier: 4B:76:4D:D4:4A:38:5A:62:2D:B5:C0:AE:5E:09:B2:5C:25:75:99:00 Certificate issuer: /CN=1e2eaad7a8706615d1c8436dce0195495f214a87 Certificate serial: 019B78355430113B4F15A6C5E033E21B4B9C Authority key identifier: 1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/S3ZN1Eo4WmIttcCuXgmyXCV1mQA.roa Signing time: Thu 01 Jan 2026 06:18:39 +0000 ROA not before: Thu 01 Jan 2026 06:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29001 IP address blocks: 2001:678:a1c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:54:30:11:3b:4f:15:a6:c5:e0:33:e2:1b:4b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e2eaad7a8706615d1c8436dce0195495f214a87 Validity Not Before: Jan 1 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b764dd44a385a622db5c0ae5e09b25c25759900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:75:af:6f:ef:c4:51:2c:b6:5b:ca:5d:80:51: 66:22:4e:1c:e7:d8:6e:a0:28:c0:f3:7a:b8:56:b8: 91:5b:70:97:54:73:25:25:41:48:05:5a:70:08:d5: 75:f2:c3:0e:a5:c8:5b:dc:8c:bb:10:04:dd:2b:0f: 1e:da:d9:d2:04:c1:b3:42:27:e6:40:e6:f4:f2:71: 8e:30:b0:36:d8:92:2a:1b:38:cf:52:a1:2a:53:b6: 3e:14:bb:c8:8f:b8:3e:41:55:b9:53:ec:ab:80:0a: ef:e9:ad:24:a5:fa:58:0f:0f:0b:27:32:7c:9a:79: 6d:17:85:87:98:ec:64:3b:00:8b:4e:6b:28:65:32: 74:da:fd:c8:1d:87:28:99:a6:8c:0a:5f:55:c2:81: 64:c0:73:41:29:30:fb:b4:fb:bb:57:f9:37:04:3e: 81:a4:40:f8:8c:1a:3b:e8:c9:ac:1c:89:e4:54:9c: cc:8e:3e:06:1b:4a:08:58:03:39:65:32:dc:04:58: fd:6b:2c:17:9a:6c:6e:47:28:6e:16:92:f2:b5:d2: b2:55:41:4c:3f:f9:e6:de:e8:35:e0:63:90:0e:2d: 32:c3:38:a0:d8:90:25:92:6c:23:f2:50:57:60:d9: 4c:9e:42:a2:c9:d2:d4:b0:83:97:f3:72:e4:6c:99: 63:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:76:4D:D4:4A:38:5A:62:2D:B5:C0:AE:5E:09:B2:5C:25:75:99:00 X509v3 Authority Key Identifier: keyid:1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/S3ZN1Eo4WmIttcCuXgmyXCV1mQA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:a1c::/48 Signature Algorithm: sha256WithRSAEncryption 53:57:fb:44:ba:c0:12:2b:64:d5:31:be:30:93:38:57:95:c0: e2:a4:91:70:fb:ed:97:c4:1e:11:78:9e:19:86:e7:41:c5:94: 69:48:b4:b5:a3:ac:bd:a4:a0:fc:8c:dd:a7:aa:f2:78:b1:72: 90:b1:fc:dd:0d:04:f8:23:22:72:4f:38:41:b8:f3:47:bb:af: 79:f0:99:89:63:05:db:68:43:29:ea:18:4e:9d:ab:40:f6:1c: a7:3e:f9:de:74:9c:14:37:32:32:f1:34:6e:1d:7c:bc:e0:db: 7d:0c:71:99:2b:b1:37:b4:02:d7:62:24:e3:bc:0e:1d:79:57: cd:66:7c:a6:ee:ef:aa:68:62:fb:cf:92:2b:5f:e0:c6:b1:6d: b8:46:97:de:30:f8:55:9e:b6:e7:af:e1:54:4d:92:71:1b:19: 54:57:bb:fd:cc:31:44:d6:7e:7c:b4:fc:84:46:92:68:c5:bc: 12:e9:a2:47:42:db:d7:90:20:ce:d2:4f:8e:91:a8:55:7c:f5: 9a:06:7a:0e:09:63:ae:46:fb:33:23:e8:9c:90:7a:bb:74:73: 60:1c:d3:74:c2:1e:93:e0:37:ca:8d:e8:56:a6:c0:5b:d1:74: 33:5b:61:64:77:1c:91:c0:59:05:60:34:43:37:ed:b4:28:d2: 91:1e:5a:92 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4NVQwETtPFabF4DPiG0ucMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMmVhYWQ3YTg3MDY2MTVkMWM4NDM2ZGNlMDE5NTQ5NWYy MTRhODcwHhcNMjYwMTAxMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Yjc2NGRkNDRhMzg1YTYyMmRiNWMwYWU1ZTA5YjI1YzI1NzU5OTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHWvb+/EUSy2W8pdgFFmIk4c59hu oCjA83q4VriRW3CXVHMlJUFIBVpwCNV18sMOpchb3Iy7EATdKw8e2tnSBMGzQifm QOb08nGOMLA22JIqGzjPUqEqU7Y+FLvIj7g+QVW5U+yrgArv6a0kpfpYDw8LJzJ8 mnltF4WHmOxkOwCLTmsoZTJ02v3IHYcomaaMCl9VwoFkwHNBKTD7tPu7V/k3BD6B pED4jBo76MmsHInkVJzMjj4GG0oIWAM5ZTLcBFj9aywXmmxuRyhuFpLytdKyVUFM P/nm3ug14GOQDi0ywzig2JAlkmwj8lBXYNlMnkKiydLUsIOX83LkbJljYQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEt2TdRKOFpiLbXArl4JslwldZkAMB8GA1UdIwQY MBaAFB4uqteocGYV0chDbc4BlUlfIUqHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGk2cTE2aHdaaFhSeUVOdHpnR1ZTVjhoU29jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8wOGNiNjItMzlkZi00MzJlLThhNzYt MmM5OGYxN2I4ZWIzLzEvUzNaTjFFbzRXbUl0dGNDdVhnbXlYQ1YxbVFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8wOGNiNjItMzlkZi00MzJlLThhNzYtMmM5OGYxN2I4ZWIz LzEvSGk2cTE2aHdaaFhSeUVOdHpnR1ZTVjhoU29jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAoc MA0GCSqGSIb3DQEBCwUAA4IBAQBTV/tEusASK2TVMb4wkzhXlcDipJFw++2XxB4R eJ4ZhudBxZRpSLS1o6y9pKD8jN2nqvJ4sXKQsfzdDQT4IyJyTzhBuPNHu6958JmJ YwXbaEMp6hhOnatA9hynPvnedJwUNzIy8TRuHXy84Nt9DHGZK7E3tALXYiTjvA4d eVfNZnym7u+qaGL7z5IrX+DGsW24RpfeMPhVnrbnr+FUTZJxGxlUV7v9zDFE1n58 tPyERpJoxbwS6aJHQtvXkCDO0k+OkahVfPWaBnoOCWOuRvszI+ickHq7dHNgHNN0 wh6T4DfKjehWpsBb0XQzW2FkdxyRwFkFYDRDN+20KNKRHlqS -----END CERTIFICATE-----Generated at Sun Jan 25 22:28:46 2026 by rpki-client