This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/_7dkRJNdgno_GD2ibO_640can6k.roa File: _7dkRJNdgno_GD2ibO_640can6k.roa (raw, json) Hash identifier: HOjekM8lbibDsKXgP8G+mm2S14ox7PoL8Qm4nXTQM8A= Subject key identifier: FF:B7:64:44:93:5D:82:7A:3F:18:3D:A2:6C:EF:FA:E3:47:1A:9F:A9 Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81 Certificate serial: 019B9587BAAB590BC4F6969F355969EE6CBB Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/_7dkRJNdgno_GD2ibO_640can6k.roa Signing time: Tue 06 Jan 2026 22:57:38 +0000 ROA not before: Tue 06 Jan 2026 22:57:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 2a0d:aa40::/32 maxlen: 32 2a0d:aa41::/32 maxlen: 32 2a0d:aa42::/32 maxlen: 32 2a0d:aa43::/32 maxlen: 32 2a0d:aa44::/32 maxlen: 32 2a0d:aa45::/32 maxlen: 32 2a0d:aa46::/32 maxlen: 32 2a0d:aa47::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:95:87:ba:ab:59:0b:c4:f6:96:9f:35:59:69:ee:6c:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81 Validity Not Before: Jan 6 22:57:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffb76444935d827a3f183da26ceffae3471a9fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d7:23:31:18:8f:a8:76:06:87:64:3d:ec:c6: eb:92:47:d9:f7:4e:6d:9e:f3:eb:c2:7f:5e:85:b7: e8:61:1a:f5:11:6b:e8:14:05:8c:d9:ee:87:fd:9c: 88:c5:28:12:e0:df:21:97:b4:92:cd:f4:7f:e7:b7: 37:04:27:d0:22:4c:dc:98:bc:80:ee:27:54:4f:e6: 2c:42:a0:b4:7e:b8:80:b3:b4:70:1f:85:5b:ec:22: ad:ac:7b:aa:82:11:65:34:b3:fc:b8:71:a6:03:06: c3:43:e5:62:e4:17:f9:a8:26:b6:32:15:40:ba:64: 38:01:59:19:95:8c:9d:fe:c1:90:99:6c:32:7b:ec: 01:e3:9c:1c:7d:5f:8f:ff:88:b7:e7:eb:81:17:6c: 9d:8e:a8:3e:de:bd:d8:13:cc:12:ff:7f:fb:c1:de: 4a:dc:92:f3:dd:0d:73:81:12:f2:b8:ee:75:9d:1f: 57:7c:35:83:04:60:26:c9:cb:e8:4e:5f:f8:72:0a: 4f:a2:81:bc:1a:55:d9:67:86:10:fa:5f:e5:7c:1c: db:e8:2d:5f:a6:ac:bd:de:b2:5a:d1:b9:e1:86:9a: be:a3:9c:3b:00:07:a1:d4:d6:d0:6b:a8:12:32:c2: bf:2a:3e:67:dc:05:fa:d2:e2:96:a0:14:fd:25:b6: b9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B7:64:44:93:5D:82:7A:3F:18:3D:A2:6C:EF:FA:E3:47:1A:9F:A9 X509v3 Authority Key Identifier: keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/_7dkRJNdgno_GD2ibO_640can6k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:aa40::/29 Signature Algorithm: sha256WithRSAEncryption a2:8c:2c:31:22:6b:a4:a0:53:61:72:04:f8:52:00:2d:6f:67: d4:b8:84:f1:cf:a3:88:dc:42:2b:4e:b1:0f:00:32:28:49:e4: a6:f1:77:09:34:8f:ea:cb:b7:61:d8:fc:69:a2:85:08:46:9a: 52:a6:53:75:87:50:9e:3a:50:db:63:c2:f8:0c:d9:72:e9:c9: b8:55:fd:23:b0:8f:3b:06:4e:5d:ea:87:2d:96:e3:15:13:ed: c4:42:68:be:25:9a:bc:32:3b:4b:43:d3:d7:19:a2:be:dd:61: e2:8b:31:39:3d:f8:43:92:b0:03:17:cb:8a:49:c3:b7:f7:8a: 6a:72:e2:63:5a:1d:d1:82:1a:58:2d:ab:53:05:90:01:4f:0f: 56:a6:04:45:bb:fe:32:ab:c7:12:1b:17:51:fe:3f:dc:18:48: b5:cb:f2:cf:2d:40:df:52:73:58:15:2e:7f:c8:94:88:37:35: f8:28:cc:fb:c4:92:a7:b2:fd:fb:c0:f5:da:b5:dc:1b:bd:6c: d0:84:62:8e:5f:12:34:0b:a4:e7:82:c9:35:ab:aa:8c:90:78: 4c:52:2e:7e:7f:bf:a6:f9:97:fd:9f:5a:bd:c1:dd:78:2b:bd: 38:3f:bf:1c:48:a2:82:de:47:e5:8a:61:20:dd:a8:2f:38:33: e4:59:55:0d -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZuVh7qrWQvE9pafNVlp7my7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMmQzMGIwMTVlYzRlZjFiMGQzYzY0MzQ3YzhkMWI1OTgy OTNmODEwHhcNMjYwMTA2MjI1NzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmI3NjQ0NDkzNWQ4MjdhM2YxODNkYTI2Y2VmZmFlMzQ3MWE5ZmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNcjMRiPqHYGh2Q97MbrkkfZ905t nvPrwn9ehbfoYRr1EWvoFAWM2e6H/ZyIxSgS4N8hl7SSzfR/57c3BCfQIkzcmLyA 7idUT+YsQqC0friAs7RwH4Vb7CKtrHuqghFlNLP8uHGmAwbDQ+Vi5Bf5qCa2MhVA umQ4AVkZlYyd/sGQmWwye+wB45wcfV+P/4i35+uBF2ydjqg+3r3YE8wS/3/7wd5K 3JLz3Q1zgRLyuO51nR9XfDWDBGAmycvoTl/4cgpPooG8GlXZZ4YQ+l/lfBzb6C1f pqy93rJa0bnhhpq+o5w7AAeh1NbQa6gSMsK/Kj5n3AX60uKWoBT9Jba57QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFP+3ZESTXYJ6Pxg9omzv+uNHGp+pMB8GA1UdIwQY MBaAFE8tMLAV7E7xsNPGQ0fI0bWYKT+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85NjY4YjUtNWU5Mi00YzE4LTliYjkt NDM1MWJiZjc0YzBjLzEvXzdka1JKTmRnbm9fR0QyaWJPXzY0MGNhbjZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi85NjY4YjUtNWU5Mi00YzE4LTliYjktNDM1MWJiZjc0YzBj LzEvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg2qQDAN BgkqhkiG9w0BAQsFAAOCAQEAoowsMSJrpKBTYXIE+FIALW9n1LiE8c+jiNxCK06x DwAyKEnkpvF3CTSP6su3Ydj8aaKFCEaaUqZTdYdQnjpQ22PC+AzZcunJuFX9I7CP OwZOXeqHLZbjFRPtxEJoviWavDI7S0PT1xmivt1h4osxOT34Q5KwAxfLiknDt/eK anLiY1od0YIaWC2rUwWQAU8PVqYERbv+MqvHEhsXUf4/3BhItcvyzy1A31JzWBUu f8iUiDc1+CjM+8SSp7L9+8D12rXcG71s0IRijl8SNAuk54LJNauqjJB4TFIufn+/ pvmX/Z9avcHdeCu9OD+/HEiigt5H5YphIN2oLzgz5FlVDQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:35:47 2026 by rpki-client