This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/n-1zO1mkbkpAK25DKPeRknT2Xwk.roa File: n-1zO1mkbkpAK25DKPeRknT2Xwk.roa (raw, json) Hash identifier: fAsIaj/DFcfGvej8sp2fgwVMTS7hWzp8nJHPmFLM/NM= Subject key identifier: 9F:ED:73:3B:59:A4:6E:4A:40:2B:6E:43:28:F7:91:92:74:F6:5F:09 Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Certificate serial: 019B7E381EE5A4742286A44EE51E2C7565D5 Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/n-1zO1mkbkpAK25DKPeRknT2Xwk.roa Signing time: Fri 02 Jan 2026 10:19:25 +0000 ROA not before: Fri 02 Jan 2026 10:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215877 IP address blocks: 2a10:e300:fff0::/48 maxlen: 48 2a10:e300:fff1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:1e:e5:a4:74:22:86:a4:4e:e5:1e:2c:75:65:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Validity Not Before: Jan 2 10:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fed733b59a46e4a402b6e4328f7919274f65f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ba:87:aa:a3:57:97:64:71:82:46:7e:e2:1e: 5a:4d:e2:33:f3:fe:5a:4b:67:19:d1:09:03:81:0a: fc:42:b0:0d:dc:24:0e:2a:65:d2:05:f2:3f:a3:24: 9e:ae:45:24:d6:7e:85:0d:6e:8e:66:44:d1:65:b1: 96:4b:bb:4f:cf:f2:56:3b:53:b3:56:83:08:a9:40: cd:68:55:b6:4b:91:a1:b6:ef:3f:37:db:77:15:9d: ad:9c:ee:15:8b:c1:71:68:49:2a:c8:5a:86:b6:a3: 9f:e8:e5:be:d8:ff:52:24:50:31:fd:92:16:6b:96: 90:3a:d5:d8:34:9c:22:23:d1:a6:28:82:d1:48:93: f7:c8:e2:19:1c:60:66:ba:cd:94:35:2b:e7:4f:2a: 93:fa:82:d3:27:a8:6f:be:42:4c:91:7f:b0:34:b6: 24:1e:0c:1d:2c:64:4f:18:2e:56:8e:5e:52:63:dd: 42:c6:48:d9:c5:87:c6:1b:16:3c:11:1a:5d:38:a9: f7:a5:a0:f1:a6:95:bc:14:7f:87:67:78:77:60:f6: 63:ea:d5:88:1e:16:6f:19:bb:47:80:48:7f:ca:bc: 6f:2e:15:3a:93:8d:3f:a8:bc:2e:a7:3a:50:fa:bc: 67:46:61:67:50:18:9b:03:0f:2d:06:ab:06:1b:53: 9d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:ED:73:3B:59:A4:6E:4A:40:2B:6E:43:28:F7:91:92:74:F6:5F:09 X509v3 Authority Key Identifier: keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/n-1zO1mkbkpAK25DKPeRknT2Xwk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:e300:fff0::/47 Signature Algorithm: sha256WithRSAEncryption 6d:48:39:48:45:68:43:5a:46:45:11:8d:b6:e6:ea:f2:4d:90: 9b:95:44:ca:d4:6d:46:ce:d7:ab:37:3d:11:ff:99:fb:39:d2: 57:31:04:eb:78:e8:76:16:09:1b:f9:0d:0c:5b:ca:83:ad:4b: 9c:5f:a2:12:f4:d0:23:c1:b6:f3:45:20:13:29:87:cf:5e:c1: ce:0f:92:de:b1:7f:e7:7d:bd:5b:a0:14:9d:ad:2d:03:4f:2b: ee:f7:db:ef:94:a6:3d:e5:2b:3c:58:d5:e7:d4:26:98:e6:1b: e3:7a:8d:19:46:43:55:0f:5b:63:ad:ac:60:a1:4d:fa:bb:97: 94:e7:d3:e0:3d:0e:52:bc:91:36:13:57:7d:d5:81:a2:ce:00: ca:ad:bb:23:20:7c:3a:a7:6f:b8:8d:d6:52:60:c8:f0:94:e0: 7d:ae:4b:57:65:03:68:1d:2b:07:33:74:b8:f4:c8:c6:27:fc: 8f:e9:99:7d:f8:d9:8a:f2:ce:d7:f3:80:ac:38:97:de:d4:ea: fe:07:45:fb:3f:a7:e5:f5:0f:81:89:d7:fe:a1:46:87:10:53: 0f:00:ec:a0:f6:9f:4b:62:82:40:48:3c:f3:80:7e:d0:06:d0: 29:a9:73:e0:9b:d2:e3:a1:8b:f3:00:7f:ad:07:e4:09:48:93: c2:97:b4:04 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OB7lpHQihqRO5R4sdWXVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOTJiNWRhNGI0ZmZlYWY3MjA2NDk1MThmYmFhYTEwYzVj YjI4MTEwHhcNMjYwMTAyMTAxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmVkNzMzYjU5YTQ2ZTRhNDAyYjZlNDMyOGY3OTE5Mjc0ZjY1ZjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprqHqqNXl2RxgkZ+4h5aTeIz8/5a S2cZ0QkDgQr8QrAN3CQOKmXSBfI/oySerkUk1n6FDW6OZkTRZbGWS7tPz/JWO1Oz VoMIqUDNaFW2S5Ghtu8/N9t3FZ2tnO4Vi8FxaEkqyFqGtqOf6OW+2P9SJFAx/ZIW a5aQOtXYNJwiI9GmKILRSJP3yOIZHGBmus2UNSvnTyqT+oLTJ6hvvkJMkX+wNLYk HgwdLGRPGC5Wjl5SY91CxkjZxYfGGxY8ERpdOKn3paDxppW8FH+HZ3h3YPZj6tWI HhZvGbtHgEh/yrxvLhU6k40/qLwupzpQ+rxnRmFnUBibAw8tBqsGG1OdWwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJ/tcztZpG5KQCtuQyj3kZJ09l8JMB8GA1UdIwQY MBaAFEKStdpLT/6vcgZJUY+6qhDFyygRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3Yzct YTA0M2UxYjY3Yjk0LzEvbi0xek8xbWtia3BBSzI1REtQZVJrblQyWHdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3YzctYTA0M2UxYjY3Yjk0 LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKhDjAP/w MA0GCSqGSIb3DQEBCwUAA4IBAQBtSDlIRWhDWkZFEY225uryTZCblUTK1G1Gzter Nz0R/5n7OdJXMQTreOh2Fgkb+Q0MW8qDrUucX6IS9NAjwbbzRSATKYfPXsHOD5Le sX/nfb1boBSdrS0DTyvu99vvlKY95Ss8WNXn1CaY5hvjeo0ZRkNVD1tjraxgoU36 u5eU59PgPQ5SvJE2E1d91YGizgDKrbsjIHw6p2+4jdZSYMjwlOB9rktXZQNoHSsH M3S49MjGJ/yP6Zl9+NmK8s7X84CsOJfe1Or+B0X7P6fl9Q+Bidf+oUaHEFMPAOyg 9p9LYoJASDzzgH7QBtApqXPgm9LjoYvzAH+tB+QJSJPCl7QE -----END CERTIFICATE-----Generated at Sun Jan 25 23:49:11 2026 by rpki-client