This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/b1NnfX82WWUKnDzO-T_p9BDnjPM.roa File: b1NnfX82WWUKnDzO-T_p9BDnjPM.roa (raw, json) Hash identifier: uuhxZnIOVP3yGkI2POwoZpysQSXnT6B0qJNkc7bJXFw= Subject key identifier: 6F:53:67:7D:7F:36:59:65:0A:9C:3C:CE:F9:3F:E9:F4:10:E7:8C:F3 Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a Certificate serial: 019B7BA466B364A49719EE26C3FFC7BA7F77 Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/b1NnfX82WWUKnDzO-T_p9BDnjPM.roa Signing time: Thu 01 Jan 2026 22:18:50 +0000 ROA not before: Thu 01 Jan 2026 22:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215256 IP address blocks: 2a12:3fc5::/32 maxlen: 48 2a12:3fc5::/36 maxlen: 36 2a12:3fc5:1000::/36 maxlen: 36 2a12:3fc5:2000::/36 maxlen: 36 2a12:3fc5:3000::/36 maxlen: 36 2a12:3fc5:4000::/36 maxlen: 36 2a12:3fc5:5000::/36 maxlen: 36 2a12:3fc5:6000::/36 maxlen: 36 2a12:3fc5:7000::/36 maxlen: 36 2a12:3fc5:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:66:b3:64:a4:97:19:ee:26:c3:ff:c7:ba:7f:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a Validity Not Before: Jan 1 22:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f53677d7f3659650a9c3ccef93fe9f410e78cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:34:9e:3c:1e:17:85:4b:85:27:d0:54:ed:c9: f7:49:de:2b:28:06:83:23:a5:51:c8:82:d1:ac:55: 10:d7:70:29:b1:d1:65:90:38:8d:d5:79:51:e3:7b: 39:a2:28:64:b5:b8:2b:a6:5f:1b:fb:31:ae:bd:fc: 5a:11:26:e3:91:bf:86:d3:b6:31:b7:f1:2d:fc:ac: f3:18:34:10:0c:d9:a4:95:dc:30:b0:a2:29:99:9a: 29:33:80:4f:71:18:1f:2b:b6:0c:27:10:51:70:e6: 56:3e:66:7e:cd:63:33:bb:c3:8e:18:71:af:bf:a3: 7a:49:32:3c:9a:94:5d:51:b4:c5:e9:73:0d:d4:16: 67:e8:8e:d6:a2:db:58:5e:da:60:1e:eb:9e:7b:fc: 8d:ca:57:a2:6b:ce:63:4c:4f:45:b2:1c:f5:ad:e8: 81:a6:c1:33:63:ad:ae:ad:6c:ee:3e:39:6f:2d:95: a5:8c:b6:3a:06:61:83:14:7c:85:97:8d:72:f4:c3: 76:06:eb:18:95:2f:a7:53:ce:b1:e9:3d:6d:2a:4e: b1:ae:55:90:d2:5c:3a:1d:39:b3:64:ce:b6:a5:1e: 72:a7:46:0b:c3:3e:bd:00:57:f4:00:64:2c:3e:ae: 05:d0:e7:d0:18:9c:19:9a:26:15:2b:94:b4:85:4e: c2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:53:67:7D:7F:36:59:65:0A:9C:3C:CE:F9:3F:E9:F4:10:E7:8C:F3 X509v3 Authority Key Identifier: keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/b1NnfX82WWUKnDzO-T_p9BDnjPM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:3fc5::/32 Signature Algorithm: sha256WithRSAEncryption 31:03:3f:1a:d2:ea:e1:eb:89:74:9e:32:0a:97:ac:ef:b1:f9: 7d:0d:08:12:6e:27:cf:46:b8:23:86:98:98:ca:f3:21:94:30: 63:7d:e3:e1:59:e8:bc:05:47:e4:e1:6f:66:12:33:d5:a5:bf: d9:7c:e6:67:78:d1:36:4b:91:2d:d9:ab:1f:67:7e:27:73:5c: 74:89:5a:84:84:87:19:00:64:cb:b5:76:ee:58:a4:bc:6f:d5: 58:bf:63:72:d8:5f:85:a1:33:24:d9:05:1b:f5:2d:a3:4b:74: d4:f8:ef:81:1d:f1:2e:3d:37:13:90:50:15:bf:f0:6a:a8:42: de:9d:87:57:44:79:1a:01:75:5b:f5:6c:71:b6:0d:30:f1:e2: 8d:1e:87:38:86:5c:8a:97:c4:7e:96:8c:b8:6a:dc:9d:a4:6b: 6c:4a:5d:ff:06:b2:ea:42:4d:01:9d:a4:f5:47:b8:ed:db:dc: 24:4f:7b:9f:70:25:f3:30:ae:05:c3:00:1e:9a:b7:b2:6e:1a: 23:26:b6:bb:18:0c:80:66:67:94:d9:30:fd:e9:dd:44:65:94: ac:21:1f:e9:53:3f:7a:8e:8e:36:8d:83:cc:60:59:bb:cf:a3: e3:ac:17:0e:d6:d2:eb:af:45:5d:1d:26:0a:ff:34:3a:a7:ef: fa:6b:e7:aa -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7pGazZKSXGe4mw//Hun93MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMTZhYmNjNDRjOWE5NTU0MGNkZjViMWRjNTQyZWM3ZDEx ZmUwN2EwHhcNMjYwMTAxMjIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjUzNjc3ZDdmMzY1OTY1MGE5YzNjY2VmOTNmZTlmNDEwZTc4Y2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDSePB4XhUuFJ9BU7cn3Sd4rKAaD I6VRyILRrFUQ13ApsdFlkDiN1XlR43s5oihktbgrpl8b+zGuvfxaESbjkb+G07Yx t/Et/KzzGDQQDNmkldwwsKIpmZopM4BPcRgfK7YMJxBRcOZWPmZ+zWMzu8OOGHGv v6N6STI8mpRdUbTF6XMN1BZn6I7WottYXtpgHuuee/yNyleia85jTE9Fshz1reiB psEzY62urWzuPjlvLZWljLY6BmGDFHyFl41y9MN2BusYlS+nU86x6T1tKk6xrlWQ 0lw6HTmzZM62pR5yp0YLwz69AFf0AGQsPq4F0OfQGJwZmiYVK5S0hU7CTQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFG9TZ31/NlllCpw8zvk/6fQQ54zzMB8GA1UdIwQY MBaAFBIWq8xEyalVQM31sdxULsfRH+B6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hYzljZjYtMWJlYy00MjRiLWFhNTEt YTA5NjJkOTk4ZTYwLzEvYjFObmZYODJXV1VLbkR6Ty1UX3A5QkRualBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9hYzljZjYtMWJlYy00MjRiLWFhNTEtYTA5NjJkOTk4ZTYw LzEvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhI/xTAN BgkqhkiG9w0BAQsFAAOCAQEAMQM/GtLq4euJdJ4yCpes77H5fQ0IEm4nz0a4I4aY mMrzIZQwY33j4VnovAVH5OFvZhIz1aW/2XzmZ3jRNkuRLdmrH2d+J3NcdIlahISH GQBky7V27likvG/VWL9jcthfhaEzJNkFG/Uto0t01PjvgR3xLj03E5BQFb/waqhC 3p2HV0R5GgF1W/VscbYNMPHijR6HOIZcipfEfpaMuGrcnaRrbEpd/way6kJNAZ2k 9Ue47dvcJE97n3Al8zCuBcMAHpq3sm4aIya2uxgMgGZnlNkw/endRGWUrCEf6VM/ eo6ONo2DzGBZu8+j46wXDtbS669FXR0mCv80Oqfv+mvnqg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:49:31 2026 by rpki-client