This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/PsdMSgJpRCSnxs0WFJwJ49XVU1U.roa File: PsdMSgJpRCSnxs0WFJwJ49XVU1U.roa (raw, json) Hash identifier: iQu1OA2imBxucOaZb2YkGe/IH/xMnrU8wpfz8jp4qU8= Subject key identifier: 3E:C7:4C:4A:02:69:44:24:A7:C6:CD:16:14:9C:09:E3:D5:D5:53:55 Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690 Certificate serial: 019B7E3863F29FCDBAC1B8B1E2FDE82CFFCB Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/PsdMSgJpRCSnxs0WFJwJ49XVU1U.roa Signing time: Fri 02 Jan 2026 10:19:43 +0000 ROA not before: Fri 02 Jan 2026 10:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50340 IP address blocks: 2a09:f9c1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:63:f2:9f:cd:ba:c1:b8:b1:e2:fd:e8:2c:ff:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690 Validity Not Before: Jan 2 10:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ec74c4a02694424a7c6cd16149c09e3d5d55355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6d:0c:b3:c0:06:76:a8:b0:98:27:47:bc:33: 32:7d:8e:26:be:a8:f9:4d:54:87:5b:e1:33:1a:0c: 84:ae:79:f2:66:e6:4c:7a:93:01:7b:4d:91:ea:03: 76:a0:a0:76:54:be:ac:2b:11:bb:82:b7:92:80:4e: b0:bd:82:00:12:0f:a4:51:06:9c:18:1b:f2:88:46: c3:cf:c5:8a:2d:43:0b:2a:b2:41:49:c1:9c:1b:85: 22:e9:d7:2c:a8:87:45:3a:e4:9d:c4:39:4e:9c:65: b3:06:ba:b5:54:97:eb:5e:33:ab:3d:a2:6f:a0:1c: fe:ff:ac:24:38:3e:c1:5b:9d:c4:1b:a9:cd:eb:fa: 10:f2:61:1c:0e:2d:4e:a6:25:7a:bb:7e:0a:22:83: 31:1f:44:85:09:40:b3:9a:d6:24:42:cf:78:b5:9d: 1d:d2:61:de:86:21:3d:ef:0b:0b:a2:ad:a1:31:e6: 82:d1:0c:cf:41:dd:04:46:3a:06:e4:2b:ce:e6:d2: d7:e6:cf:48:c2:db:4d:11:a3:dd:70:c4:33:b4:f0: fd:53:62:47:b6:9a:86:78:18:74:85:5d:b9:b9:78: be:fd:98:3b:b8:4b:30:57:c9:2b:b7:0d:16:db:43: d4:09:f6:4b:b1:96:18:0e:47:bb:e2:8d:c2:6b:de: 87:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C7:4C:4A:02:69:44:24:A7:C6:CD:16:14:9C:09:E3:D5:D5:53:55 X509v3 Authority Key Identifier: keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/PsdMSgJpRCSnxs0WFJwJ49XVU1U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:f9c1::/32 Signature Algorithm: sha256WithRSAEncryption 70:70:e6:ef:45:2f:0b:0b:02:61:9a:ac:0d:f0:a3:86:a7:e8: d3:51:cb:3c:79:db:96:f7:c9:c2:d2:c2:3e:5b:3b:4d:f1:62: 57:ff:54:06:43:00:80:cf:ae:45:66:79:2e:76:41:af:2e:ed: a4:38:21:14:42:7c:c6:2c:d0:36:87:80:d0:c8:17:d2:78:3d: 2e:7d:15:9a:c6:51:f6:3e:3c:a0:82:d0:c1:4f:15:df:58:57: 2b:85:f3:e0:66:d3:83:8d:0f:9f:c2:0e:2f:87:c6:5f:83:31: 67:a2:78:93:47:cd:e9:5b:0f:4f:7d:8f:87:3e:7b:87:ff:79: 49:c0:2f:29:cb:86:f8:d1:06:47:ce:5d:be:5e:0e:a3:09:d9: 4d:8c:63:44:c3:2a:05:84:5f:62:37:8a:18:e0:21:03:00:46: 06:62:4e:5f:7b:7a:2d:56:4e:98:02:68:32:69:3c:d6:76:1b: b6:27:5a:31:cb:e3:d6:05:46:2a:80:6f:6a:6a:5b:62:d5:42: e0:17:bc:8a:39:cd:10:b8:af:8e:e3:53:3c:05:9d:8e:2d:3d: 83:48:bc:30:25:b6:8a:4f:5b:ce:4f:21:cb:06:38:83:70:0e: 80:ca:88:6f:1d:90:96:1f:ba:4a:d6:4a:d3:fc:1b:57:af:cb: 8a:c3:e2:04 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+OGPyn826wbix4v3oLP/LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZDRkNDlkYTNlMTQ4NTVhN2I4ODM2MDNmZjE0OGMxYmIy MWY2OTAwHhcNMjYwMTAyMTAxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWM3NGM0YTAyNjk0NDI0YTdjNmNkMTYxNDljMDllM2Q1ZDU1MzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt20Ms8AGdqiwmCdHvDMyfY4mvqj5 TVSHW+EzGgyErnnyZuZMepMBe02R6gN2oKB2VL6sKxG7greSgE6wvYIAEg+kUQac GBvyiEbDz8WKLUMLKrJBScGcG4Ui6dcsqIdFOuSdxDlOnGWzBrq1VJfrXjOrPaJv oBz+/6wkOD7BW53EG6nN6/oQ8mEcDi1OpiV6u34KIoMxH0SFCUCzmtYkQs94tZ0d 0mHehiE97wsLoq2hMeaC0QzPQd0ERjoG5CvO5tLX5s9IwttNEaPdcMQztPD9U2JH tpqGeBh0hV25uXi+/Zg7uEswV8krtw0W20PUCfZLsZYYDke74o3Ca96HkwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFD7HTEoCaUQkp8bNFhScCePV1VNVMB8GA1UdIwQY MBaAFAXU1J2j4UhVp7iDYD/xSMG7IfaQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8xYTNmOTEtMTViYy00ZWI4LTk3ZGQt NThmMWNiZjNjYWMzLzEvUHNkTVNnSnBSQ1NueHMwV0ZKd0o0OVhWVTFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8xYTNmOTEtMTViYy00ZWI4LTk3ZGQtNThmMWNiZjNjYWMz LzEvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgn5wTAN BgkqhkiG9w0BAQsFAAOCAQEAcHDm70UvCwsCYZqsDfCjhqfo01HLPHnblvfJwtLC Pls7TfFiV/9UBkMAgM+uRWZ5LnZBry7tpDghFEJ8xizQNoeA0MgX0ng9Ln0VmsZR 9j48oILQwU8V31hXK4Xz4GbTg40Pn8IOL4fGX4MxZ6J4k0fN6VsPT32Phz57h/95 ScAvKcuG+NEGR85dvl4OownZTYxjRMMqBYRfYjeKGOAhAwBGBmJOX3t6LVZOmAJo Mmk81nYbtidaMcvj1gVGKoBvampbYtVC4Be8ijnNELivjuNTPAWdji09g0i8MCW2 ik9bzk8hywY4g3AOgMqIbx2Qlh+6StZK0/wbV6/LisPiBA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:38 2026 by rpki-client