This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/13lETM7dYwgkukJoWApUFl8dJuI.roa File: 13lETM7dYwgkukJoWApUFl8dJuI.roa (raw, json) Hash identifier: cZO0/GICe69R1nGUBraIiKZbW7afS/3775vhW3rYR+4= Subject key identifier: D7:79:44:4C:CE:DD:63:08:24:BA:42:68:58:0A:54:16:5F:1D:26:E2 Certificate issuer: /CN=c6ff541cf364193a2a00ada14244acd34c14038a Certificate serial: 019B79ECCC293D6211A45215BFC2682784C4 Authority key identifier: C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/13lETM7dYwgkukJoWApUFl8dJuI.roa Signing time: Thu 01 Jan 2026 14:18:40 +0000 ROA not before: Thu 01 Jan 2026 14:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8772 IP address blocks: 2001:67c:1874::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:cc:29:3d:62:11:a4:52:15:bf:c2:68:27:84:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6ff541cf364193a2a00ada14244acd34c14038a Validity Not Before: Jan 1 14:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d779444ccedd630824ba4268580a54165f1d26e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2b:cf:3d:05:18:71:9e:c5:b4:98:88:f9:32: 7b:af:3f:bd:78:6a:2a:ac:09:2d:a9:27:a9:88:92: c9:0d:5c:05:4f:fe:bd:5f:2e:dd:32:e3:2f:9f:26: 29:22:16:cc:2f:0f:48:04:78:ed:83:14:30:48:df: ed:06:87:97:e5:3e:5f:6c:57:f8:4d:e6:62:4c:dd: bb:98:d5:fa:72:39:5e:7c:fe:f6:9b:e2:6c:a9:62: 10:10:3d:96:32:0a:a7:5b:50:69:0e:9e:70:77:3e: ac:ab:a8:25:c1:10:e8:f0:38:35:22:05:0f:61:fb: 22:d0:12:0e:0f:ce:60:5d:e3:48:34:35:a8:c8:be: cc:83:d4:91:23:ac:69:8c:a2:4b:53:e1:16:be:bc: 86:6e:23:73:78:9c:34:07:ac:7b:2e:17:ef:85:8f: c8:bc:65:41:c3:6f:bb:3f:1f:f8:ba:10:a2:dc:a5: 30:7a:22:e0:d5:44:1e:0e:cb:c7:a7:19:e4:44:fb: 5a:b3:dd:16:2e:40:4c:02:3e:27:b7:a8:63:c2:09: c6:29:fd:64:f2:ba:06:2b:b4:a2:0f:72:bf:21:7a: fe:ed:ec:8a:b2:a0:67:ad:0e:2e:7a:f6:4e:f2:d7: db:66:74:47:b3:7f:81:86:c6:d5:4d:8a:6e:80:dc: 8d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:79:44:4C:CE:DD:63:08:24:BA:42:68:58:0A:54:16:5F:1D:26:E2 X509v3 Authority Key Identifier: keyid:C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/13lETM7dYwgkukJoWApUFl8dJuI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1874::/48 Signature Algorithm: sha256WithRSAEncryption aa:8e:0b:f1:fa:2a:34:39:cd:75:35:42:4e:b4:47:89:ab:1c: 7a:70:d1:30:b3:10:c7:e1:51:65:d8:06:ac:85:db:78:30:f0: 10:38:04:58:da:5e:2d:01:1e:bc:ca:6a:7c:46:2e:73:fe:b8: c3:92:dd:36:4b:13:0d:2d:4f:ec:c7:12:0c:b0:61:e2:68:d0: bf:71:19:0d:3f:81:b9:c6:da:81:8a:1f:e7:21:f6:22:b7:7c: a1:44:b7:2d:5e:2f:1b:8b:7e:1e:ac:d7:fd:09:06:b8:0e:79: 1f:53:6f:29:6c:75:aa:6d:86:b7:cd:f5:9b:89:f0:a2:be:3b: 14:96:30:32:ae:1f:1e:30:9f:09:3b:40:bb:0d:eb:4b:cc:ce: 96:43:ac:4e:0d:32:e4:1a:aa:22:85:03:b1:4f:c9:9b:69:ea: 6d:02:27:7f:8a:57:f2:03:37:81:ad:e5:74:74:ff:66:3a:e1: 0c:c5:85:c5:64:51:42:c1:7a:dd:70:3c:71:bb:19:f4:72:b6: e9:e7:2c:30:1d:82:d0:03:4f:ac:ee:8b:4e:87:7e:6e:1d:19: 0a:0b:da:d1:87:af:f5:90:50:b7:bc:17:d6:78:73:cb:14:40: 79:01:ec:02:7f:c4:32:2c:65:94:0e:50:44:e7:1f:3d:80:eb: bb:07:13:d8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57MwpPWIRpFIVv8JoJ4TEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZmY1NDFjZjM2NDE5M2EyYTAwYWRhMTQyNDRhY2QzNGMx NDAzOGEwHhcNMjYwMTAxMTQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzc5NDQ0Y2NlZGQ2MzA4MjRiYTQyNjg1ODBhNTQxNjVmMWQyNmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvivPPQUYcZ7FtJiI+TJ7rz+9eGoq rAktqSepiJLJDVwFT/69Xy7dMuMvnyYpIhbMLw9IBHjtgxQwSN/tBoeX5T5fbFf4 TeZiTN27mNX6cjlefP72m+JsqWIQED2WMgqnW1BpDp5wdz6sq6glwRDo8Dg1IgUP Yfsi0BIOD85gXeNINDWoyL7Mg9SRI6xpjKJLU+EWvryGbiNzeJw0B6x7LhfvhY/I vGVBw2+7Px/4uhCi3KUweiLg1UQeDsvHpxnkRPtas90WLkBMAj4nt6hjwgnGKf1k 8roGK7SiD3K/IXr+7eyKsqBnrQ4uevZO8tfbZnRHs3+BhsbVTYpugNyNfQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNd5REzO3WMIJLpCaFgKVBZfHSbiMB8GA1UdIwQY MBaAFMb/VBzzZBk6KgCtoUJErNNMFAOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHY5VUhQTmtHVG9xQUsyaFFrU3MwMHdVQTRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8zOWEwMjItZmFlZC00Mzc2LThiZTYt MmE1ZTk4YWJkMWYzLzEvMTNsRVRNN2RZd2drdWtKb1dBcFVGbDhkSnVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8zOWEwMjItZmFlZC00Mzc2LThiZTYtMmE1ZTk4YWJkMWYz LzEveHY5VUhQTmtHVG9xQUsyaFFrU3MwMHdVQTRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBh0 MA0GCSqGSIb3DQEBCwUAA4IBAQCqjgvx+io0Oc11NUJOtEeJqxx6cNEwsxDH4VFl 2Aashdt4MPAQOARY2l4tAR68ymp8Ri5z/rjDkt02SxMNLU/sxxIMsGHiaNC/cRkN P4G5xtqBih/nIfYit3yhRLctXi8bi34erNf9CQa4DnkfU28pbHWqbYa3zfWbifCi vjsUljAyrh8eMJ8JO0C7DetLzM6WQ6xODTLkGqoihQOxT8mbaeptAid/ilfyAzeB reV0dP9mOuEMxYXFZFFCwXrdcDxxuxn0crbp5ywwHYLQA0+s7otOh35uHRkKC9rR h6/1kFC3vBfWeHPLFEB5AewCf8QyLGWUDlBE5x89gOu7BxPY -----END CERTIFICATE-----Generated at Mon Jan 26 00:25:59 2026 by rpki-client