This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/0P1RjYkUunzUVQsRql-6_fKRzc8.roa File: 0P1RjYkUunzUVQsRql-6_fKRzc8.roa (raw, json) Hash identifier: QQ0zolHUVpVnhMPlw+ijSEm88671++BfofXDGkViKYk= Subject key identifier: D0:FD:51:8D:89:14:BA:7C:D4:55:0B:11:AA:5F:BA:FD:F2:91:CD:CF Certificate issuer: /CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b Certificate serial: 019B7B3686FA114DE055E5D93A82850B8EAC Authority key identifier: F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/0P1RjYkUunzUVQsRql-6_fKRzc8.roa Signing time: Thu 01 Jan 2026 20:18:49 +0000 ROA not before: Thu 01 Jan 2026 20:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215578 IP address blocks: 2001:67c:dc8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:86:fa:11:4d:e0:55:e5:d9:3a:82:85:0b:8e:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b Validity Not Before: Jan 1 20:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0fd518d8914ba7cd4550b11aa5fbafdf291cdcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:32:31:72:6c:9a:04:a6:39:f9:c7:af:56:d4: 4b:c6:4c:52:38:7e:88:bd:ff:a7:ef:12:3b:a6:57: c6:82:8e:fc:bd:4f:bf:a0:f5:f8:75:a8:08:78:9d: f5:ed:f7:a4:e2:98:36:7f:0d:22:f5:ce:d4:4a:65: 4b:86:7b:fe:21:9c:a1:97:d6:07:6f:02:ae:be:11: 0f:e3:ba:28:9a:66:11:54:d0:f7:83:33:43:9d:45: 24:34:4b:c5:d6:eb:85:44:07:88:ef:32:18:87:03: b9:c6:30:12:96:9b:f3:fc:08:34:d7:97:af:1b:4f: d0:38:ee:ba:85:cd:cd:a8:48:ae:e1:b0:b3:fd:aa: 9c:4c:67:67:ea:7e:66:1b:40:b2:69:a2:e4:88:05: b2:d8:b5:2c:80:77:98:87:8d:a7:53:fe:7c:18:15: bc:cd:a1:15:a3:55:50:ce:bd:f5:42:f2:af:1d:f4: 91:ef:57:a2:ed:13:4a:a9:f6:e5:5d:a0:d1:c2:3e: 57:52:d9:61:23:da:16:ca:10:79:8e:0a:34:42:0f: 14:7d:46:f7:91:d1:93:fc:db:ea:ca:53:35:c8:5b: e2:23:95:0f:52:a3:36:0a:17:cb:2a:98:27:2b:8e: d9:94:7d:d4:25:82:d3:4f:94:dd:b0:6a:32:19:9c: 1d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:FD:51:8D:89:14:BA:7C:D4:55:0B:11:AA:5F:BA:FD:F2:91:CD:CF X509v3 Authority Key Identifier: keyid:F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/0P1RjYkUunzUVQsRql-6_fKRzc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:dc8::/48 Signature Algorithm: sha256WithRSAEncryption 88:dc:2e:ff:4f:5e:c7:4e:30:e6:7c:99:3a:68:ab:74:c5:12: 9e:df:a3:9a:e6:bc:81:05:43:77:bb:6f:38:2e:f0:07:5e:89: 80:a8:dd:dc:c8:71:cc:09:fb:9e:d6:0f:82:4f:61:28:e0:0f: d6:e7:96:b2:d2:b4:4d:77:79:3a:de:80:3d:00:af:21:1a:dc: 16:a7:62:3f:3e:76:33:8b:df:b2:00:85:9a:67:7b:e0:0a:9e: 44:7e:7e:75:5f:e1:ff:7f:a0:f6:44:34:bc:04:da:9e:be:49: 2d:b6:e6:91:17:24:a4:4c:9e:ef:92:91:d6:0b:b9:09:18:f5: c9:42:84:83:79:30:87:59:fd:4b:32:bc:a3:c4:a1:54:ee:5d: 90:e5:85:3b:de:96:85:22:64:49:32:66:e5:a1:f0:78:37:18: e5:6e:c4:95:43:b1:95:d5:1c:2c:04:f0:14:7e:83:89:a7:5e: eb:db:53:1d:d8:dd:c0:5d:5c:a6:33:cb:5b:18:4d:ff:76:de: 37:19:0f:de:3c:00:06:eb:b2:79:12:55:bf:7e:ec:ec:f1:cc: bd:31:55:1d:90:b0:a1:59:b6:45:e2:c1:f1:8c:cc:3e:65:09: 92:a9:99:1c:90:02:75:04:d2:40:64:7d:77:08:98:ad:34:90: 4e:65:20:04 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt7Nob6EU3gVeXZOoKFC46sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5YzE4Y2IxYTUwMjdmYTE3MjZmMTE0YjNlZmU2MmEzYTk3 OWNlMWIwHhcNMjYwMTAxMjAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGZkNTE4ZDg5MTRiYTdjZDQ1NTBiMTFhYTVmYmFmZGYyOTFjZGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDIxcmyaBKY5+cevVtRLxkxSOH6I vf+n7xI7plfGgo78vU+/oPX4dagIeJ317fek4pg2fw0i9c7USmVLhnv+IZyhl9YH bwKuvhEP47oommYRVND3gzNDnUUkNEvF1uuFRAeI7zIYhwO5xjASlpvz/Ag015ev G0/QOO66hc3NqEiu4bCz/aqcTGdn6n5mG0CyaaLkiAWy2LUsgHeYh42nU/58GBW8 zaEVo1VQzr31QvKvHfSR71ei7RNKqfblXaDRwj5XUtlhI9oWyhB5jgo0Qg8UfUb3 kdGT/NvqylM1yFviI5UPUqM2ChfLKpgnK47ZlH3UJYLTT5TdsGoyGZwd6wIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFND9UY2JFLp81FULEapfuv3ykc3PMB8GA1UdIwQY MBaAFPnBjLGlAn+hcm8RSz7+YqOpec4bMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1jR01zYVVDZjZGeWJ4RkxQdjVpbzZsNXpocy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvMjZjYTkyLTZmYjgtNGRkMi05Nzk1 LTliYzVjMjZkNGJlOC8xLzBQMVJqWWtVdW56VVZRc1JxbC02X2ZLUnpjOC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMzUvMjZjYTkyLTZmYjgtNGRkMi05Nzk1LTliYzVjMjZkNGJl OC8xLzEtY0dNc2FVQ2Y2RnlieEZMUHY1aW82bDV6aHMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQZ8 DcgwDQYJKoZIhvcNAQELBQADggEBAIjcLv9PXsdOMOZ8mTpoq3TFEp7fo5rmvIEF Q3e7bzgu8AdeiYCo3dzIccwJ+57WD4JPYSjgD9bnlrLStE13eTregD0AryEa3Ban Yj8+djOL37IAhZpne+AKnkR+fnVf4f9/oPZENLwE2p6+SS225pEXJKRMnu+SkdYL uQkY9clChIN5MIdZ/UsyvKPEoVTuXZDlhTveloUiZEkyZuWh8Hg3GOVuxJVDsZXV HCwE8BR+g4mnXuvbUx3Y3cBdXKYzy1sYTf923jcZD948AAbrsnkSVb9+7OzxzL0x VR2QsKFZtkXiwfGMzD5lCZKpmRyQAnUE0kBkfXcImK00kE5lIAQ= -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:38 2026 by rpki-client