This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/m1AMEfz2rq9UYyTrv-YyIrpi3OE.roa File: m1AMEfz2rq9UYyTrv-YyIrpi3OE.roa (raw, json) Hash identifier: Gy2fPWkA44bEyqmTq2kzpwyTOHR1dG7Fs+P1u7NBrmQ= Subject key identifier: 9B:50:0C:11:FC:F6:AE:AF:54:63:24:EB:BF:E6:32:22:BA:62:DC:E1 Certificate issuer: /CN=f50bae60970a2dfc86dd607c5b915ad5c534b413 Certificate serial: 019B7EA752B5DA1305CF268CFEDB9B561C44 Authority key identifier: F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/m1AMEfz2rq9UYyTrv-YyIrpi3OE.roa Signing time: Fri 02 Jan 2026 12:20:53 +0000 ROA not before: Fri 02 Jan 2026 12:20:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212804 IP address blocks: 2a0a:2785::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:52:b5:da:13:05:cf:26:8c:fe:db:9b:56:1c:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f50bae60970a2dfc86dd607c5b915ad5c534b413 Validity Not Before: Jan 2 12:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b500c11fcf6aeaf546324ebbfe63222ba62dce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3c:81:7a:ec:63:84:f8:2e:d1:0f:aa:6b:d6: dd:15:80:d7:d4:fc:d2:ec:f4:8f:df:b9:49:42:ac: 4f:6e:67:28:2f:e8:d5:2e:ec:2d:57:9f:54:b9:a1: d1:4e:57:9d:29:41:22:02:f4:e3:ab:c7:0f:f6:8f: dd:6c:01:62:6c:b5:bf:9d:9c:f7:ac:f9:7f:e2:1d: 19:f5:1a:c7:00:d8:4a:97:f2:13:7c:89:4b:02:c7: 23:4a:b7:0a:11:07:d1:17:dd:fd:39:c7:68:f3:7c: 97:c6:5c:8c:c2:79:f5:a2:ff:53:66:79:32:ee:c7: 07:83:d2:3a:04:59:83:52:13:00:26:c5:16:9a:fa: 47:a5:ea:65:15:f1:e4:74:ea:a5:13:e8:a8:80:eb: 44:de:15:f0:43:92:90:bd:ca:53:7a:1c:35:3c:c3: 08:26:4b:80:12:b0:23:cf:29:bf:3a:ff:39:ad:a9: 96:71:c3:e2:97:c4:f7:3e:92:b5:e5:ab:0d:45:73: 0d:a0:4f:5c:2e:bf:5a:f5:f4:7b:db:e9:29:01:c7: 4c:47:02:9a:48:77:49:06:3e:c3:d5:cb:fc:7e:23: de:5f:ef:d9:3f:0e:c5:a2:88:bd:27:38:dd:1a:bc: c7:14:91:fb:42:e3:f7:55:2b:b2:6a:df:17:ea:71: 10:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:50:0C:11:FC:F6:AE:AF:54:63:24:EB:BF:E6:32:22:BA:62:DC:E1 X509v3 Authority Key Identifier: keyid:F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/m1AMEfz2rq9UYyTrv-YyIrpi3OE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:2785::/32 Signature Algorithm: sha256WithRSAEncryption 96:ff:e0:9f:53:15:ec:d1:2b:34:fc:0f:48:f2:af:e4:a5:fa: 34:b8:1e:aa:2a:b0:61:d2:c5:2b:21:b2:06:6a:9e:76:ce:c6: 55:5f:43:a2:3b:12:8c:0f:95:f3:53:2d:bd:72:0d:13:65:1b: 32:f6:39:29:a2:d6:b3:29:5c:0b:dc:9b:86:5d:cf:12:28:8b: 46:72:2c:b9:d2:18:a0:d3:6a:6e:e3:f2:0b:a3:c4:2b:d8:44: 4f:e0:07:50:59:55:0a:ff:43:06:bc:b1:83:b7:d8:ba:9c:69: 40:e1:32:ee:66:69:0a:2c:37:e9:fe:9c:d8:bc:79:5f:52:b5: 4d:9a:7d:27:8b:ca:93:89:b4:ed:6f:05:d7:e6:51:c5:4f:53: d1:a6:18:4c:5e:51:9f:ea:53:6e:68:a9:40:eb:20:71:e8:92: f6:af:e8:5f:42:28:83:2b:57:de:86:71:66:ee:f3:db:f2:38: 4e:dd:88:02:7d:5d:70:0f:4f:26:4e:a5:ff:07:e5:24:c7:29: 1b:00:cf:b5:96:ec:75:63:aa:fe:bf:55:1b:7d:7c:b7:81:86: 43:cf:58:78:ac:1b:de:9d:6e:30:b3:e4:50:12:13:d9:39:10: 9a:5f:5f:52:0e:e4:77:ac:08:77:ed:1d:a7:a7:17:7a:f3:c5: 14:8f:71:72 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+p1K12hMFzyaM/tubVhxEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MGJhZTYwOTcwYTJkZmM4NmRkNjA3YzViOTE1YWQ1YzUz NGI0MTMwHhcNMjYwMTAyMTIyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjUwMGMxMWZjZjZhZWFmNTQ2MzI0ZWJiZmU2MzIyMmJhNjJkY2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjyBeuxjhPgu0Q+qa9bdFYDX1PzS 7PSP37lJQqxPbmcoL+jVLuwtV59UuaHRTledKUEiAvTjq8cP9o/dbAFibLW/nZz3 rPl/4h0Z9RrHANhKl/ITfIlLAscjSrcKEQfRF939Ocdo83yXxlyMwnn1ov9TZnky 7scHg9I6BFmDUhMAJsUWmvpHpeplFfHkdOqlE+iogOtE3hXwQ5KQvcpTehw1PMMI JkuAErAjzym/Ov85ramWccPil8T3PpK15asNRXMNoE9cLr9a9fR72+kpAcdMRwKa SHdJBj7D1cv8fiPeX+/ZPw7Fooi9JzjdGrzHFJH7QuP3VSuyat8X6nEQVwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFJtQDBH89q6vVGMk67/mMiK6YtzhMB8GA1UdIwQY MBaAFPULrmCXCi38ht1gfFuRWtXFNLQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVF1dVlKY0tMZnlHM1dCOFc1RmExY1UwdEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9mNzFkY2ItOWU5Mi00NGU3LWIwNDIt MzY2NTA2N2RiMjU2LzEvbTFBTUVmejJycTlVWXlUcnYtWXlJcnBpM09FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9mNzFkY2ItOWU5Mi00NGU3LWIwNDItMzY2NTA2N2RiMjU2 LzEvOVF1dVlKY0tMZnlHM1dCOFc1RmExY1UwdEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgonhTAN BgkqhkiG9w0BAQsFAAOCAQEAlv/gn1MV7NErNPwPSPKv5KX6NLgeqiqwYdLFKyGy Bmqeds7GVV9DojsSjA+V81MtvXINE2UbMvY5KaLWsylcC9ybhl3PEiiLRnIsudIY oNNqbuPyC6PEK9hET+AHUFlVCv9DBryxg7fYupxpQOEy7mZpCiw36f6c2Lx5X1K1 TZp9J4vKk4m07W8F1+ZRxU9T0aYYTF5Rn+pTbmipQOsgceiS9q/oX0IogytX3oZx Zu7z2/I4Tt2IAn1dcA9PJk6l/wflJMcpGwDPtZbsdWOq/r9VG318t4GGQ89YeKwb 3p1uMLPkUBIT2TkQml9fUg7kd6wId+0dp6cXevPFFI9xcg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:28:51 2026 by rpki-client