This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/13XDGJYyNR2DoNt3I63wL8U0Jzs.roa File: 13XDGJYyNR2DoNt3I63wL8U0Jzs.roa (raw, json) Hash identifier: I+JS8FII02pQo9N3kTh18PHz112YKE00khkm+cip7eA= Subject key identifier: D7:75:C3:18:96:32:35:1D:83:A0:DB:77:23:AD:F0:2F:C5:34:27:3B Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Certificate serial: 019B7834532083378999691044EF192B6037 Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/13XDGJYyNR2DoNt3I63wL8U0Jzs.roa Signing time: Thu 01 Jan 2026 06:17:33 +0000 ROA not before: Thu 01 Jan 2026 06:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201749 IP address blocks: 2a04:2dc0:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:53:20:83:37:89:99:69:10:44:ef:19:2b:60:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Validity Not Before: Jan 1 06:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d775c3189632351d83a0db7723adf02fc534273b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ad:a6:c7:0a:f2:3f:44:12:8e:d6:e2:2a:23: 33:d5:ad:8c:bb:10:f6:5f:1d:df:ab:db:ee:06:08: a1:dc:13:c4:96:bd:12:e7:04:bd:81:df:29:38:4c: 33:c1:11:62:49:71:4e:78:db:15:0d:18:52:6b:07: 1a:90:87:3d:b8:10:8d:34:d1:28:00:37:68:16:2b: 7b:4b:42:9e:b3:e0:73:05:05:c7:1b:6a:20:3e:09: bc:f8:6e:fd:f8:6b:e3:d8:4f:87:ec:fa:3e:49:f1: e6:fc:22:0d:54:89:83:77:2a:a8:f2:84:06:5e:44: 32:b3:1f:0a:f7:5c:ce:87:5c:e5:b5:ba:88:7a:19: bf:0c:5c:65:ac:6a:d7:cf:55:55:07:61:08:3f:7f: 32:06:47:d2:88:e3:e9:fb:93:a1:6c:06:64:57:9b: 7b:8e:8f:dd:ec:64:a0:86:a8:66:c7:a9:00:c0:33: f6:11:4b:87:76:bb:a7:67:b8:a4:9b:49:b3:8a:53: 95:34:46:1d:a9:5d:75:d9:b2:33:fa:f3:8c:5f:7b: 96:4d:f4:af:1a:b2:40:22:86:80:ef:fe:b8:08:91: 18:d1:51:ac:e2:32:4c:3b:bc:4a:5c:a8:77:ad:1e: a9:6b:41:ea:ab:de:2c:82:f0:b4:34:f9:e0:31:c2: 41:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:75:C3:18:96:32:35:1D:83:A0:DB:77:23:AD:F0:2F:C5:34:27:3B X509v3 Authority Key Identifier: keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/13XDGJYyNR2DoNt3I63wL8U0Jzs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:2dc0:18::/48 Signature Algorithm: sha256WithRSAEncryption ab:85:96:ca:ea:30:82:da:b6:21:5f:8e:95:30:42:cd:bf:37: 22:70:7f:6a:6a:a6:16:50:eb:a1:d6:5d:e9:29:44:0c:a8:b9: 84:8b:e7:25:5e:18:67:07:3a:d0:84:37:b4:0a:71:7e:7d:05: 44:89:d1:24:6d:b2:03:05:74:25:d1:54:4b:17:82:21:30:29: 53:68:41:6e:a7:23:17:7e:c3:0d:fd:87:3b:36:03:72:5c:c1: 4b:ae:c3:4b:79:e7:52:e6:f2:6d:36:d0:89:0b:d2:44:7b:c2: 8d:58:ca:b7:22:89:ef:3f:bc:38:30:6b:e7:af:fc:12:26:80: 7b:f2:e5:f5:5e:6b:97:8b:38:2d:3d:6e:e2:c2:3e:42:63:52: 75:40:ca:df:7a:04:1e:44:80:00:ba:6d:17:4e:51:b9:b7:35: a0:b3:41:f2:1e:de:64:b6:89:41:be:5f:63:ba:d9:63:db:95: e6:01:ef:80:12:d9:3d:97:f7:27:07:d2:89:60:ae:ac:46:b6: d8:95:1f:6b:80:d5:7a:53:3e:86:9e:c4:ea:57:ab:d1:8b:6f: b6:b3:7f:15:64:a2:e4:15:4c:37:ca:57:e4:a9:28:68:de:0d: 45:ed:d2:1d:be:ed:e7:79:6d:67:39:e4:3d:be:8d:01:97:b1: 20:55:01:e8 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt4NFMggzeJmWkQRO8ZK2A3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhY2NiYjcyYWE5ODg0YTViZjhkMGU3NTc0MDRhMTdlNWUy MzMyMmMwHhcNMjYwMTAxMDYxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzc1YzMxODk2MzIzNTFkODNhMGRiNzcyM2FkZjAyZmM1MzQyNzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx62mxwryP0QSjtbiKiMz1a2MuxD2 Xx3fq9vuBgih3BPElr0S5wS9gd8pOEwzwRFiSXFOeNsVDRhSawcakIc9uBCNNNEo ADdoFit7S0Kes+BzBQXHG2ogPgm8+G79+Gvj2E+H7Po+SfHm/CINVImDdyqo8oQG XkQysx8K91zOh1zltbqIehm/DFxlrGrXz1VVB2EIP38yBkfSiOPp+5OhbAZkV5t7 jo/d7GSghqhmx6kAwDP2EUuHdrunZ7ikm0mzilOVNEYdqV112bIz+vOMX3uWTfSv GrJAIoaA7/64CJEY0VGs4jJMO7xKXKh3rR6pa0Hqq94sgvC0NPngMcJBbQIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFNd1wxiWMjUdg6DbdyOt8C/FNCc7MB8GA1UdIwQY MBaAFPrMu3KqmISlv40OdXQEoX5eIzIsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1zeTdjcXFZaEtXX2pRNTFkQVNoZmw0ak1pdy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvZThjYjQ0LWE5NTQtNDY3Mi1iOWE0 LWE0OWU1YzY2MzNiZC8xLzEzWERHSll5TlIyRG9OdDNJNjN3TDhVMEp6cy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTMvZThjYjQ0LWE5NTQtNDY3Mi1iOWE0LWE0OWU1YzY2MzNi ZC8xLzEtc3k3Y3FxWWhLV19qUTUxZEFTaGZsNGpNaXcuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBC3A ABgwDQYJKoZIhvcNAQELBQADggEBAKuFlsrqMILatiFfjpUwQs2/NyJwf2pqphZQ 66HWXekpRAyouYSL5yVeGGcHOtCEN7QKcX59BUSJ0SRtsgMFdCXRVEsXgiEwKVNo QW6nIxd+ww39hzs2A3JcwUuuw0t551Lm8m020IkL0kR7wo1Yyrciie8/vDgwa+ev /BImgHvy5fVea5eLOC09buLCPkJjUnVAyt96BB5EgAC6bRdOUbm3NaCzQfIe3mS2 iUG+X2O62WPbleYB74AS2T2X9ycH0olgrqxGttiVH2uA1XpTPoaexOpXq9GLb7az fxVkouQVTDfKV+SpKGjeDUXt0h2+7ed5bWc55D2+jQGXsSBVAeg= -----END CERTIFICATE-----Generated at Sun Jan 25 23:49:03 2026 by rpki-client