This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/liK1oYSYzTAoS7kAatnii2Wzx_E.roa File: liK1oYSYzTAoS7kAatnii2Wzx_E.roa (raw, json) Hash identifier: gb2CbqJOVrEPYPGiLKPKwSB2WKz26ugg+uzkt83v7JE= Subject key identifier: 96:22:B5:A1:84:98:CD:30:28:4B:B9:00:6A:D9:E2:8B:65:B3:C7:F1 Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Certificate serial: 019B7910CC28D56B565BA01EBFFE332768A1 Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/liK1oYSYzTAoS7kAatnii2Wzx_E.roa Signing time: Thu 01 Jan 2026 10:18:22 +0000 ROA not before: Thu 01 Jan 2026 10:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210378 IP address blocks: 2a07:2902:9c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:cc:28:d5:6b:56:5b:a0:1e:bf:fe:33:27:68:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Validity Not Before: Jan 1 10:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9622b5a18498cd30284bb9006ad9e28b65b3c7f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fa:12:48:84:14:4b:42:88:c5:a1:ff:00:4f: b5:29:17:e8:8d:92:8d:28:86:ca:41:cf:52:ae:0a: 9e:f4:0f:58:ac:7f:15:49:08:b1:54:05:f8:a8:4b: b1:d1:52:12:1f:ee:2d:f8:ba:12:58:7c:aa:18:47: c8:2d:7d:51:04:fe:46:50:2e:77:cd:1c:66:bc:f4: 35:8d:40:0b:d3:f6:fc:2e:6b:7d:ae:ce:13:4c:09: e0:dd:bc:57:9a:6b:f7:77:98:30:30:fd:af:41:c2: 47:71:77:1c:64:b3:f7:56:7f:04:e7:ee:9d:de:08: 23:c6:18:6c:b7:8a:2f:7e:8a:b3:e6:78:da:49:a8: 14:d6:5d:c3:3b:b2:9c:ee:62:ea:47:1d:60:94:81: 64:44:08:c8:7d:55:58:9a:e0:ac:bf:cc:01:1d:a2: 8a:b3:53:9f:02:9a:ab:aa:b4:3f:78:98:24:f4:67: bc:1c:2c:3e:b0:98:ea:69:77:0e:2c:dd:50:88:5c: 5f:fb:e3:d9:2e:78:6d:cf:9d:42:dd:ce:f3:c0:92: ce:97:24:c0:66:84:e4:16:d9:47:94:60:7c:25:b0: ed:7e:fb:89:0c:67:55:c8:27:05:e0:9e:a2:6a:84: 27:f8:1c:30:0e:ba:ac:62:20:ca:73:1c:2a:a9:11: 7b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:22:B5:A1:84:98:CD:30:28:4B:B9:00:6A:D9:E2:8B:65:B3:C7:F1 X509v3 Authority Key Identifier: keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/liK1oYSYzTAoS7kAatnii2Wzx_E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:2902:9c00::/38 Signature Algorithm: sha256WithRSAEncryption 6e:3c:c9:1c:5a:28:60:50:76:bd:38:37:2d:e6:2c:02:0c:85: df:bd:fb:c2:e9:ba:ae:a9:54:ef:d9:5d:14:e5:e0:08:c6:cc: 3a:15:b2:f6:7b:f7:6e:f0:9c:af:78:96:76:8a:5a:b5:67:6b: c5:80:0e:3f:49:e0:cb:65:15:15:52:2c:11:2d:67:63:65:14: bd:30:f8:c0:cd:56:c1:06:4b:af:3e:37:2f:cc:f1:32:28:75: 36:17:f5:17:26:7f:eb:69:08:41:99:78:3d:0f:14:fc:7c:0f: 8f:a0:26:ff:c2:f3:8c:15:26:4f:b9:fc:0a:56:a7:c6:4e:d7: dc:0f:f1:29:a9:cb:1f:83:6a:21:b8:69:0b:70:06:a9:03:20: b4:8e:95:a7:01:55:b6:23:ec:7e:37:87:dd:71:07:6a:18:ab: 62:77:69:61:5e:f7:e1:8c:fe:91:eb:dd:41:01:25:fb:5d:48: 56:61:43:83:dc:45:d2:fc:ba:11:e2:ac:a2:72:8c:09:5c:04: 49:48:f4:32:31:0f:4e:eb:7e:c1:3d:96:98:db:34:ce:22:02: a0:d3:36:a8:ee:64:df:92:08:1a:61:07:49:f3:32:1b:2e:d7: 05:3c:14:92:0b:80:0a:1c:a8:49:6f:e6:43:cb:2e:bb:74:87: 8a:58:9f:30 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5EMwo1WtWW6Aev/4zJ2ihMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWM2ODNjYjFlYjljMGY0OWI5NjdlM2JkOWI4Yjg0Y2Yw OTliYjgwHhcNMjYwMTAxMTAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjIyYjVhMTg0OThjZDMwMjg0YmI5MDA2YWQ5ZTI4YjY1YjNjN2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPoSSIQUS0KIxaH/AE+1KRfojZKN KIbKQc9Srgqe9A9YrH8VSQixVAX4qEux0VISH+4t+LoSWHyqGEfILX1RBP5GUC53 zRxmvPQ1jUAL0/b8Lmt9rs4TTAng3bxXmmv3d5gwMP2vQcJHcXccZLP3Vn8E5+6d 3ggjxhhst4ovfoqz5njaSagU1l3DO7Kc7mLqRx1glIFkRAjIfVVYmuCsv8wBHaKK s1OfApqrqrQ/eJgk9Ge8HCw+sJjqaXcOLN1QiFxf++PZLnhtz51C3c7zwJLOlyTA ZoTkFtlHlGB8JbDtfvuJDGdVyCcF4J6iaoQn+BwwDrqsYiDKcxwqqRF72wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFJYitaGEmM0wKEu5AGrZ4otls8fxMB8GA1UdIwQY MBaAFMRcaDyx65wPSbln472bi4TPCZu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYt ODhkMmRmMTBkMTViLzEvbGlLMW9ZU1l6VEFvUzdrQWF0bmlpMld6eF9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYtODhkMmRmMTBkMTVi LzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKgcpApww DQYJKoZIhvcNAQELBQADggEBAG48yRxaKGBQdr04Ny3mLAIMhd+9+8Lpuq6pVO/Z XRTl4AjGzDoVsvZ7927wnK94lnaKWrVna8WADj9J4MtlFRVSLBEtZ2NlFL0w+MDN VsEGS68+Ny/M8TIodTYX9Rcmf+tpCEGZeD0PFPx8D4+gJv/C84wVJk+5/ApWp8ZO 19wP8Smpyx+DaiG4aQtwBqkDILSOlacBVbYj7H43h91xB2oYq2J3aWFe9+GM/pHr 3UEBJftdSFZhQ4PcRdL8uhHirKJyjAlcBElI9DIxD07rfsE9lpjbNM4iAqDTNqju ZN+SCBphB0nzMhsu1wU8FJILgAocqElv5kPLLrt0h4pYnzA= -----END CERTIFICATE-----Generated at Mon Jan 26 01:44:01 2026 by rpki-client