This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/Rf1IRr7ln3MYijmbQD8SHel_MDs.roa File: Rf1IRr7ln3MYijmbQD8SHel_MDs.roa (raw, json) Hash identifier: +BoNoFKi0FqndtLU0znTacn8SBNepPAZnhdtF4/C/xc= Subject key identifier: 45:FD:48:46:BE:E5:9F:73:18:8A:39:9B:40:3F:12:1D:E9:7F:30:3B Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Certificate serial: 019B7910CCC0749F433E51F3DDC99EC34328 Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/Rf1IRr7ln3MYijmbQD8SHel_MDs.roa Signing time: Thu 01 Jan 2026 10:18:22 +0000 ROA not before: Thu 01 Jan 2026 10:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211452 IP address blocks: 2a07:291b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:cc:c0:74:9f:43:3e:51:f3:dd:c9:9e:c3:43:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Validity Not Before: Jan 1 10:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45fd4846bee59f73188a399b403f121de97f303b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b5:2e:b3:33:aa:53:f1:9e:41:e4:af:0f:21: 11:f4:09:fa:c5:28:ab:fb:b2:2c:6f:a4:4c:47:68: 22:7b:78:bc:5e:85:fe:e2:62:d6:2a:30:a5:a0:62: 6b:e8:8a:f2:c3:c9:da:2a:a2:28:a5:fc:41:8b:7f: 1b:cc:ca:77:54:72:0e:09:57:b5:d6:35:fe:ab:33: 5f:85:61:b9:8a:4e:1d:ac:7f:94:75:f4:5d:a5:0f: 5f:58:f5:8b:b4:36:d4:6f:98:d9:ea:f6:b4:62:58: b7:e5:59:90:a3:9c:ca:7b:85:6c:d9:f5:5a:b5:9d: e5:43:ab:18:bf:b2:6d:f2:bc:e4:d2:6f:f1:8d:cb: a8:78:99:27:6d:c0:e8:11:81:eb:34:04:15:94:64: 5b:af:d6:00:05:44:08:0b:4d:fd:cb:ec:ac:f9:dc: 90:4b:ff:2e:d1:bd:30:33:b5:b1:f3:9d:2e:66:2a: 7f:fa:96:af:e1:2d:21:80:7c:e3:fc:98:d9:7c:ae: 52:9b:25:3e:b5:06:6e:5f:a2:d7:bb:d7:b7:e1:24: 04:59:8a:3a:ea:7b:b5:4d:d7:f2:83:23:5c:0e:24: da:87:e9:ce:16:16:4e:be:eb:c8:1e:a3:97:60:ef: 30:f9:57:90:41:5f:46:d6:5d:00:47:79:13:03:3d: 82:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FD:48:46:BE:E5:9F:73:18:8A:39:9B:40:3F:12:1D:E9:7F:30:3B X509v3 Authority Key Identifier: keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/Rf1IRr7ln3MYijmbQD8SHel_MDs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:291b::/32 Signature Algorithm: sha256WithRSAEncryption 7f:0f:8d:a7:ab:b8:97:f6:00:2c:b7:a0:91:ea:32:d4:36:0a: 37:a6:46:5f:b9:e1:45:0c:09:7c:9a:f8:a9:01:31:8a:aa:8d: 86:40:74:82:26:6e:c2:0d:1e:c3:58:cc:ae:62:16:aa:1e:74: d5:ee:ca:90:b5:73:b8:00:5f:f8:bf:20:93:da:94:82:37:4f: 11:4e:66:c7:d2:59:57:c7:1f:2e:98:f1:5d:9f:92:6e:e1:ca: 61:0f:7b:2b:81:bb:69:cc:b3:77:e8:1d:a0:d3:fb:2c:ff:8d: 9c:40:9e:07:63:ca:d2:5b:0a:ab:0d:a9:ec:58:7f:18:06:26: b8:c8:3c:16:93:6d:4f:26:03:77:de:6a:28:2b:6b:f3:62:27: 12:ae:80:a6:da:54:70:00:27:eb:3b:35:5e:b0:c2:22:e0:21: 32:83:a6:b5:6a:5a:72:81:de:ea:41:6c:5c:77:08:f9:00:8a: 0a:ef:0d:e4:90:01:f1:b1:80:88:51:26:bf:f8:09:bf:f5:00: 1b:41:5c:a7:2b:53:3d:00:38:19:ad:4c:89:e6:6b:7a:30:f2: 45:ac:64:6e:a0:ef:82:a0:ab:72:95:15:5f:77:3a:0b:3a:99: 00:82:4a:4a:c7:b2:6a:b6:e8:97:46:87:47:59:b5:02:e7:ef: 62:f8:a2:a7 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5EMzAdJ9DPlHz3cmew0MoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWM2ODNjYjFlYjljMGY0OWI5NjdlM2JkOWI4Yjg0Y2Yw OTliYjgwHhcNMjYwMTAxMTAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWZkNDg0NmJlZTU5ZjczMTg4YTM5OWI0MDNmMTIxZGU5N2YzMDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7UuszOqU/GeQeSvDyER9An6xSir +7Isb6RMR2gie3i8XoX+4mLWKjCloGJr6Iryw8naKqIopfxBi38bzMp3VHIOCVe1 1jX+qzNfhWG5ik4drH+UdfRdpQ9fWPWLtDbUb5jZ6va0Yli35VmQo5zKe4Vs2fVa tZ3lQ6sYv7Jt8rzk0m/xjcuoeJknbcDoEYHrNAQVlGRbr9YABUQIC039y+ys+dyQ S/8u0b0wM7Wx850uZip/+pav4S0hgHzj/JjZfK5SmyU+tQZuX6LXu9e34SQEWYo6 6nu1TdfygyNcDiTah+nOFhZOvuvIHqOXYO8w+VeQQV9G1l0AR3kTAz2CswIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFEX9SEa+5Z9zGIo5m0A/Eh3pfzA7MB8GA1UdIwQY MBaAFMRcaDyx65wPSbln472bi4TPCZu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYt ODhkMmRmMTBkMTViLzEvUmYxSVJyN2xuM01ZaWptYlFEOFNIZWxfTURzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYtODhkMmRmMTBkMTVi LzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgcpGzAN BgkqhkiG9w0BAQsFAAOCAQEAfw+Np6u4l/YALLegkeoy1DYKN6ZGX7nhRQwJfJr4 qQExiqqNhkB0giZuwg0ew1jMrmIWqh501e7KkLVzuABf+L8gk9qUgjdPEU5mx9JZ V8cfLpjxXZ+SbuHKYQ97K4G7acyzd+gdoNP7LP+NnECeB2PK0lsKqw2p7Fh/GAYm uMg8FpNtTyYDd95qKCtr82InEq6AptpUcAAn6zs1XrDCIuAhMoOmtWpacoHe6kFs XHcI+QCKCu8N5JAB8bGAiFEmv/gJv/UAG0FcpytTPQA4Ga1MieZrejDyRaxkbqDv gqCrcpUVX3c6CzqZAIJKSseyarbol0aHR1m1AufvYviipw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:41:20 2026 by rpki-client