This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/P940wrtoSOiGfXWnPAL7D4ik23s.roa File: P940wrtoSOiGfXWnPAL7D4ik23s.roa (raw, json) Hash identifier: yBpdClWkxX2SD1Bh3PEyQOlFnyswp6gSM6sQE7NZAI8= Subject key identifier: 3F:DE:34:C2:BB:68:48:E8:86:7D:75:A7:3C:02:FB:0F:88:A4:DB:7B Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654 Certificate serial: 019B7CEDE3699B7918C181E23FBD17DF45FB Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/P940wrtoSOiGfXWnPAL7D4ik23s.roa Signing time: Fri 02 Jan 2026 04:18:43 +0000 ROA not before: Fri 02 Jan 2026 04:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208333 IP address blocks: 2001:4d78:f200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:e3:69:9b:79:18:c1:81:e2:3f:bd:17:df:45:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654 Validity Not Before: Jan 2 04:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fde34c2bb6848e8867d75a73c02fb0f88a4db7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fc:e8:53:c8:3d:e5:45:12:f9:48:d5:4d:94: 20:2a:b5:f4:44:99:d6:74:8e:c4:1b:74:2d:07:01: af:6c:ce:8a:c7:1e:89:7e:96:86:8b:d2:d0:c3:b7: 80:ac:4c:bb:87:e2:c6:67:c4:9a:c1:6c:b2:50:c5: ea:4c:b4:02:52:2e:04:63:e5:37:1b:cb:8f:84:14: fe:e6:ba:13:50:99:71:c8:da:08:68:33:bf:5f:a5: 73:c5:19:95:ca:ec:30:ec:80:05:8a:ff:8f:8a:0d: 1c:a1:61:ea:d2:60:c3:99:d7:de:87:c5:27:e3:3f: 1d:1a:1e:81:a5:f8:22:cb:ec:36:8f:09:4c:1d:f7: ca:cb:96:5f:52:d3:1e:ad:5c:53:b2:d9:df:62:52: 42:35:fb:f7:80:bc:77:bd:1f:f3:d9:ec:ab:ca:43: 18:cb:94:ba:e7:7b:ec:f7:81:9c:b3:29:b8:f6:75: a9:90:27:8c:26:ca:94:16:11:37:a3:53:98:eb:7d: 99:65:d1:d5:24:80:e9:35:10:1b:3d:81:93:59:ac: 08:09:29:93:d4:18:90:34:74:8d:26:00:d6:d4:4a: 26:8c:20:81:e9:45:92:fc:e4:89:5a:68:b9:a3:c1: 08:a3:18:06:83:1e:d9:4a:51:a8:c9:ef:c0:d5:13: 58:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DE:34:C2:BB:68:48:E8:86:7D:75:A7:3C:02:FB:0F:88:A4:DB:7B X509v3 Authority Key Identifier: keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/P940wrtoSOiGfXWnPAL7D4ik23s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:4d78:f200::/40 Signature Algorithm: sha256WithRSAEncryption 03:ea:84:f7:09:71:00:01:85:91:b6:c2:ae:89:61:90:46:f9: a2:19:9d:53:a3:dd:2c:32:61:cb:a5:7f:c2:0c:6c:e2:d6:ac: c0:a9:48:d0:25:10:a5:92:11:00:e7:ae:23:b9:63:a4:89:5b: 67:0d:2c:7f:c5:f9:32:eb:ae:86:08:92:2e:92:d7:83:36:c8: 6a:19:e8:36:89:3e:04:5e:85:fc:d9:ff:76:3f:64:76:92:b4: 64:a1:fe:1b:88:e7:e1:c9:8a:52:8a:0a:8b:aa:b3:b9:7e:06: d2:af:19:55:5b:82:2c:21:85:77:ce:9e:a5:7c:4f:64:23:fc: 09:20:f6:e8:77:2e:db:39:61:24:5c:5d:c2:f3:01:38:9e:9f: b7:56:fe:fa:77:91:3d:58:44:bd:00:75:75:e5:0d:b3:cb:f2: 78:52:dd:b0:f6:75:20:5f:96:c5:0d:e6:9d:e7:38:a3:99:fa: b1:41:b2:13:b5:41:31:e9:1f:a9:7d:e0:83:3a:b4:06:c7:ac: 3a:82:e2:fd:d9:fb:22:4e:79:75:42:b7:a5:ed:6f:d9:b6:5c: c3:2e:a1:c7:f6:d4:3f:71:14:87:fb:1a:b8:f9:98:e2:08:fe: 1d:93:39:fd:cc:04:38:7f:50:2f:24:73:4d:0c:12:d3:59:7f: 51:d7:c1:3d -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt87eNpm3kYwYHiP70X30X7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjODY0ODEzYzA4NjJlNmI0NzU2ZjhkZmRhODk1N2M2YWVh YzY2NTQwHhcNMjYwMTAyMDQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmRlMzRjMmJiNjg0OGU4ODY3ZDc1YTczYzAyZmIwZjg4YTRkYjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPzoU8g95UUS+UjVTZQgKrX0RJnW dI7EG3QtBwGvbM6Kxx6JfpaGi9LQw7eArEy7h+LGZ8SawWyyUMXqTLQCUi4EY+U3 G8uPhBT+5roTUJlxyNoIaDO/X6VzxRmVyuww7IAFiv+Pig0coWHq0mDDmdfeh8Un 4z8dGh6Bpfgiy+w2jwlMHffKy5ZfUtMerVxTstnfYlJCNfv3gLx3vR/z2eyrykMY y5S653vs94Gcsym49nWpkCeMJsqUFhE3o1OY632ZZdHVJIDpNRAbPYGTWawICSmT 1BiQNHSNJgDW1EomjCCB6UWS/OSJWmi5o8EIoxgGgx7ZSlGoye/A1RNYWwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFD/eNMK7aEjohn11pzwC+w+IpNt7MB8GA1UdIwQY MBaAFByGSBPAhi5rR1b439qJV8aurGZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSElaSUU4Q0dMbXRIVnZqZjJvbFh4cTZzWmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xMDM5M2QtYTAzMC00YWY1LTg5OTUt OGYyZDY2ODRjODE0LzEvUDk0MHdydG9TT2lHZlhXblBBTDdENGlrMjNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8xMDM5M2QtYTAzMC00YWY1LTg5OTUtOGYyZDY2ODRjODE0 LzEvSElaSUU4Q0dMbXRIVnZqZjJvbFh4cTZzWmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAFNePIw DQYJKoZIhvcNAQELBQADggEBAAPqhPcJcQABhZG2wq6JYZBG+aIZnVOj3SwyYcul f8IMbOLWrMCpSNAlEKWSEQDnriO5Y6SJW2cNLH/F+TLrroYIki6S14M2yGoZ6DaJ PgRehfzZ/3Y/ZHaStGSh/huI5+HJilKKCouqs7l+BtKvGVVbgiwhhXfOnqV8T2Qj /Akg9uh3Lts5YSRcXcLzATien7dW/vp3kT1YRL0AdXXlDbPL8nhS3bD2dSBflsUN 5p3nOKOZ+rFBshO1QTHpH6l94IM6tAbHrDqC4v3Z+yJOeXVCt6Xtb9m2XMMuocf2 1D9xFIf7Grj5mOII/h2TOf3MBDh/UC8kc00MEtNZf1HXwT0= -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:23 2026 by rpki-client