This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/1-A-7q5MSfEASgOSJsLHqRfzUioE.roa File: 1-A-7q5MSfEASgOSJsLHqRfzUioE.roa (raw, json) Hash identifier: Za0B6sbWjI78oQmGRktphtY5YZXqOifBcaQfnD50Rt0= Subject key identifier: F8:0F:BB:AB:93:12:7C:40:12:80:E4:89:B0:B1:EA:45:FC:D4:8A:81 Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Certificate serial: 019B7C12AED375C2BD12C630AB3BBB1B61C7 Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/1-A-7q5MSfEASgOSJsLHqRfzUioE.roa Signing time: Fri 02 Jan 2026 00:19:17 +0000 ROA not before: Fri 02 Jan 2026 00:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207530 IP address blocks: 2a09:d2c1:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ae:d3:75:c2:bd:12:c6:30:ab:3b:bb:1b:61:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Validity Not Before: Jan 2 00:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f80fbbab93127c401280e489b0b1ea45fcd48a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:12:48:77:b5:1b:91:4f:66:97:72:6e:ef:eb: 4a:0d:3f:b6:27:06:19:e6:4c:33:e5:26:6b:9e:89: 1d:39:67:fb:1a:c6:c9:ab:65:aa:d5:94:3d:92:2c: 9e:f8:67:ce:7e:7f:32:bf:c3:18:2d:4b:53:ce:cb: c4:90:d2:e3:68:2d:92:6c:c1:7a:d5:cd:13:8f:d3: 22:8f:34:1b:7a:c3:e8:89:6c:57:ac:cd:8f:b3:a6: c1:f7:1f:89:67:18:04:26:7c:eb:c1:f3:1f:34:d2: 7b:5e:b7:74:da:b7:19:53:56:dd:fa:e4:f7:79:43: 3b:0b:b3:4b:e2:1f:12:2e:24:1d:fc:87:f7:90:b7: 2f:42:f4:ba:52:93:49:59:2b:60:18:69:9c:3c:1b: 2b:9c:a4:18:a4:43:2b:43:c2:93:83:6f:ac:df:e9: 6c:37:42:3b:6d:70:ae:f6:f8:7b:e9:e8:88:f4:14: 9b:6a:ac:db:8c:0c:e5:12:d5:bf:d6:d7:bd:ec:dc: 18:b6:21:af:8c:6c:82:b0:bd:df:c4:c1:6b:9d:89: 06:5b:1b:d5:d1:a4:69:52:3e:e9:b9:51:58:89:5f: 4e:53:4a:bb:31:37:77:01:81:48:68:6f:ab:6b:46: 34:a4:9d:86:6a:c5:5d:36:9f:66:be:2c:4c:8e:d5: 4c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0F:BB:AB:93:12:7C:40:12:80:E4:89:B0:B1:EA:45:FC:D4:8A:81 X509v3 Authority Key Identifier: keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/1-A-7q5MSfEASgOSJsLHqRfzUioE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:d2c1:9::/48 Signature Algorithm: sha256WithRSAEncryption 36:cb:ab:a0:d9:31:92:21:45:29:3a:21:04:f0:cb:79:a7:54: 53:e4:d5:3e:11:6b:a6:f9:70:f3:46:c1:b4:09:c8:1c:58:41: 07:f0:62:ef:fa:fc:12:f2:c2:59:b7:b8:fa:1a:23:cc:be:db: bf:88:67:bf:3d:65:07:7f:5a:bd:7b:e0:76:60:86:1a:c3:d2: 25:7e:cc:87:fa:06:c2:87:88:0f:8b:17:3a:ea:3b:96:54:b0: 21:75:ba:d0:cd:84:07:f2:df:62:50:bd:ac:9e:50:8d:2d:04: 21:7d:e6:c4:c1:c9:17:40:45:55:1a:6c:7b:23:33:cb:f6:60: 12:b1:a3:29:74:d9:e0:75:5a:97:95:62:53:fa:25:70:43:b9: 85:b3:bd:78:a1:2f:9b:02:97:f4:33:08:c9:05:7c:0a:55:a4: 71:71:1c:a5:01:e5:19:88:a5:3d:22:dd:a3:4c:44:2b:ac:b8: 99:1f:0b:d0:b9:21:44:d8:90:00:96:59:ec:5a:40:fd:70:ee: 7a:cd:d7:91:46:31:08:96:57:fa:f3:26:ec:98:03:c6:ed:28: 98:73:34:ab:82:f7:51:95:f6:4b:dc:54:59:ca:8d:24:9a:ef: e7:cc:ca:85:32:1b:4f:fd:ed:69:66:ba:61:9f:e2:99:a9:35: 9d:77:6b:62 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt8Eq7TdcK9EsYwqzu7G2HHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2Q3M2Y4MmMyNjBkYTg3Mzg2ZGNmN2JlMjZkNWM1NDQ1 NTI2ZmEwHhcNMjYwMTAyMDAxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODBmYmJhYjkzMTI3YzQwMTI4MGU0ODliMGIxZWE0NWZjZDQ4YTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRJId7UbkU9ml3Ju7+tKDT+2JwYZ 5kwz5SZrnokdOWf7GsbJq2Wq1ZQ9kiye+GfOfn8yv8MYLUtTzsvEkNLjaC2SbMF6 1c0Tj9MijzQbesPoiWxXrM2Ps6bB9x+JZxgEJnzrwfMfNNJ7Xrd02rcZU1bd+uT3 eUM7C7NL4h8SLiQd/If3kLcvQvS6UpNJWStgGGmcPBsrnKQYpEMrQ8KTg2+s3+ls N0I7bXCu9vh76eiI9BSbaqzbjAzlEtW/1te97NwYtiGvjGyCsL3fxMFrnYkGWxvV 0aRpUj7puVFYiV9OU0q7MTd3AYFIaG+ra0Y0pJ2GasVdNp9mvixMjtVMdQIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPgPu6uTEnxAEoDkibCx6kX81IqBMB8GA1UdIwQY MBaAFM/Nc/gsJg2oc4bc974m1cVEVSb6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTct NmVkYzFiMjI1NjI1LzEvMS1BLTdxNU1TZkVBU2dPU0pzTEhxUmZ6VWlvRS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGMvNDBhZGUwLTk4ZGEtNGFhNS1iODE3LTZlZGMxYjIyNTYy NS8xL3o4MXotQ3dtRGFoemh0ejN2aWJWeFVSVkp2by5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoJ0sEA CTANBgkqhkiG9w0BAQsFAAOCAQEANsuroNkxkiFFKTohBPDLeadUU+TVPhFrpvlw 80bBtAnIHFhBB/Bi7/r8EvLCWbe4+hojzL7bv4hnvz1lB39avXvgdmCGGsPSJX7M h/oGwoeID4sXOuo7llSwIXW60M2EB/LfYlC9rJ5QjS0EIX3mxMHJF0BFVRpseyMz y/ZgErGjKXTZ4HVal5ViU/olcEO5hbO9eKEvmwKX9DMIyQV8ClWkcXEcpQHlGYil PSLdo0xEK6y4mR8L0LkhRNiQAJZZ7FpA/XDues3XkUYxCJZX+vMm7JgDxu0omHM0 q4L3UZX2S9xUWcqNJJrv58zKhTIbT/3taWa6YZ/imak1nXdrYg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:35:53 2026 by rpki-client