This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/Ip878u9pBQi9g89YkISpQa7bCf0.roa File: Ip878u9pBQi9g89YkISpQa7bCf0.roa (raw, json) Hash identifier: 5w9cx6mrV87FtSruYjnPB/haPzCFoJHrmqiObhlSqk0= Subject key identifier: 22:9F:3B:F2:EF:69:05:08:BD:83:CF:58:90:84:A9:41:AE:DB:09:FD Certificate issuer: /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2 Certificate serial: 019B7EA5387C2AFF2233F31119194FE2B627 Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/Ip878u9pBQi9g89YkISpQa7bCf0.roa Signing time: Fri 02 Jan 2026 12:18:35 +0000 ROA not before: Fri 02 Jan 2026 12:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214759 IP address blocks: 2001:67c:2c1c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:38:7c:2a:ff:22:33:f3:11:19:19:4f:e2:b6:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2 Validity Not Before: Jan 2 12:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=229f3bf2ef690508bd83cf589084a941aedb09fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a5:dd:6d:9f:49:d9:3d:4d:7b:07:8b:13:3f: 02:fa:bb:48:5a:5a:01:25:d4:d2:7d:69:31:b7:03: fd:41:48:e6:24:da:6f:35:98:be:21:56:58:0b:bd: bd:62:63:35:ee:0a:f2:8c:c2:88:3f:51:60:c6:64: c6:70:be:7e:8f:96:6a:15:63:f3:47:52:21:98:de: 4b:43:b0:1d:d1:a9:6e:0d:51:1b:d1:5b:87:5e:4a: 0f:a7:41:1e:3d:dc:4d:39:e9:f1:f8:29:d0:39:07: ac:a4:89:e5:24:cc:df:5e:b2:9c:6d:94:69:42:e3: 0f:e9:52:71:1d:c9:b4:89:b2:30:73:4a:74:1b:96: bb:b9:94:71:2e:33:2a:4b:47:29:1d:82:00:f3:96: 04:00:3f:a8:6f:04:07:cc:e8:7f:a1:2f:24:fc:4a: 27:fe:3d:1e:47:96:e8:ba:c5:6d:92:66:8e:d5:d2: 23:b4:8c:3d:a9:ad:7d:9b:ee:4a:c7:c5:b4:c9:9f: 73:2c:37:3f:a6:28:63:6b:bc:3f:c9:d5:75:2b:06: c5:7c:14:74:77:ff:24:0e:05:d8:6b:4d:3d:16:ec: c4:0e:1d:d8:92:b7:b6:5c:66:15:ba:dc:73:8d:cf: ff:85:41:80:3c:99:62:41:bf:3b:26:85:0a:90:c2: 27:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9F:3B:F2:EF:69:05:08:BD:83:CF:58:90:84:A9:41:AE:DB:09:FD X509v3 Authority Key Identifier: keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/Ip878u9pBQi9g89YkISpQa7bCf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2c1c::/48 Signature Algorithm: sha256WithRSAEncryption 9c:52:4a:cd:b5:71:ac:c0:99:28:88:d5:fc:34:54:a1:f5:c8: 25:5d:ac:a8:c4:28:4b:83:5a:6d:ca:96:0c:02:47:f5:ee:c8: b1:40:4a:13:c5:dd:f5:d4:f0:d1:2a:f9:fe:1e:98:07:ab:f3: cb:25:95:45:64:75:0f:04:1b:b1:5c:f6:25:19:ab:74:c0:b9: 64:1c:13:62:58:58:df:ef:37:50:fe:bc:64:a7:38:d4:cb:3a: ee:a9:ad:b9:99:ff:61:8c:c3:fe:be:33:61:61:64:65:67:21: 63:ad:ff:c8:b0:3f:17:b1:0f:77:0e:bc:fa:39:ea:f6:76:5a: b7:13:b8:2c:da:64:71:51:de:f4:c2:a3:06:04:fa:cc:3a:43: ea:02:a3:b9:99:45:a1:e6:5f:86:37:2d:04:5c:f3:65:15:db: 0b:2b:77:f6:3d:e5:ce:cf:69:a0:8b:97:2f:38:33:70:b3:e7: 91:44:a6:9e:ab:db:dd:12:0e:88:42:22:5e:a9:2e:8c:01:66: 8a:63:74:eb:9d:c9:0f:fc:f6:74:87:8c:93:b1:d1:80:1a:39: 3d:a5:20:15:e0:fa:e1:1c:3b:93:97:18:bf:c3:5c:0e:20:e9: f2:73:24:04:fb:c6:96:5f:ee:e4:74:e9:c1:7b:95:93:bc:52: b5:4c:54:9e -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt+pTh8Kv8iM/MRGRlP4rYnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMzBmMmY2NzJmYjU0YmE0OTc3YzZlMWE2YmEyNzEzMWMy MzFmZjIwHhcNMjYwMTAyMTIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjlmM2JmMmVmNjkwNTA4YmQ4M2NmNTg5MDg0YTk0MWFlZGIwOWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KXdbZ9J2T1NeweLEz8C+rtIWloB JdTSfWkxtwP9QUjmJNpvNZi+IVZYC729YmM17gryjMKIP1FgxmTGcL5+j5ZqFWPz R1IhmN5LQ7Ad0aluDVEb0VuHXkoPp0EePdxNOenx+CnQOQespInlJMzfXrKcbZRp QuMP6VJxHcm0ibIwc0p0G5a7uZRxLjMqS0cpHYIA85YEAD+obwQHzOh/oS8k/Eon /j0eR5bousVtkmaO1dIjtIw9qa19m+5Kx8W0yZ9zLDc/pihja7w/ydV1KwbFfBR0 d/8kDgXYa009FuzEDh3Ykre2XGYVutxzjc//hUGAPJliQb87JoUKkMInyQIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFCKfO/LvaQUIvYPPWJCEqUGu2wn9MB8GA1UdIwQY MBaAFPow8vZy+1S6SXfG4aa6JxMcIx/yMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1qRHk5bkw3VkxwSmQ4Ymhwcm9uRXh3akhfSS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvMTk2OGQwLWZhZjEtNGUzNy1hYzg4 LWQ0MDRiNDgwYzU2Ny8xL0lwODc4dTlwQlFpOWc4OVlrSVNwUWE3YkNmMC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjEvMTk2OGQwLWZhZjEtNGUzNy1hYzg4LWQ0MDRiNDgwYzU2 Ny8xLzEtakR5OW5MN1ZMcEpkOGJocHJvbkV4d2pIX0kuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQZ8 LBwwDQYJKoZIhvcNAQELBQADggEBAJxSSs21cazAmSiI1fw0VKH1yCVdrKjEKEuD Wm3KlgwCR/XuyLFAShPF3fXU8NEq+f4emAer88sllUVkdQ8EG7Fc9iUZq3TAuWQc E2JYWN/vN1D+vGSnONTLOu6prbmZ/2GMw/6+M2FhZGVnIWOt/8iwPxexD3cOvPo5 6vZ2WrcTuCzaZHFR3vTCowYE+sw6Q+oCo7mZRaHmX4Y3LQRc82UV2wsrd/Y95c7P aaCLly84M3Cz55FEpp6r290SDohCIl6pLowBZopjdOudyQ/89nSHjJOx0YAaOT2l IBXg+uEcO5OXGL/DXA4g6fJzJAT7xpZf7uR06cF7lZO8UrVMVJ4= -----END CERTIFICATE-----Generated at Mon Jan 26 07:09:40 2026 by rpki-client