This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/1sZcd1tzDnfBO7H0zC0MHfPctz8.roa File: 1sZcd1tzDnfBO7H0zC0MHfPctz8.roa (raw, json) Hash identifier: QGxYJT3nkBpWjK3CNe4elV7r+TMzHWhmpzIEj94vs3c= Subject key identifier: D6:C6:5C:77:5B:73:0E:77:C1:3B:B1:F4:CC:2D:0C:1D:F3:DC:B7:3F Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Certificate serial: 019B7C8013110A2FE7856E8B0CE3643A5E46 Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/1sZcd1tzDnfBO7H0zC0MHfPctz8.roa Signing time: Fri 02 Jan 2026 02:18:46 +0000 ROA not before: Fri 02 Jan 2026 02:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207389 IP address blocks: 2a13:2200:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:13:11:0a:2f:e7:85:6e:8b:0c:e3:64:3a:5e:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Validity Not Before: Jan 2 02:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6c65c775b730e77c13bb1f4cc2d0c1df3dcb73f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d8:30:f6:de:eb:36:fa:94:02:57:a9:d0:32: 85:20:c4:a2:81:52:8e:3e:3a:9e:7e:f5:de:2a:6f: 62:2a:7a:6b:c2:92:42:6d:f3:cd:9d:b6:be:ef:02: 24:eb:db:6b:fd:f6:b2:a2:26:f7:b8:d7:9f:53:a1: 2d:23:17:f5:32:c3:0d:90:3c:ef:17:65:56:64:3b: 63:f6:5e:d5:50:7a:88:7e:cf:b9:4c:83:b8:d5:87: e7:db:1a:62:5c:00:58:9f:d6:a2:cf:0c:91:f2:6e: 8f:11:b8:a1:c2:b7:e6:06:92:ca:c0:a9:f2:61:47: c1:c7:34:25:11:05:72:50:1c:f8:e2:f7:4d:27:d4: 8a:69:48:fd:ee:e9:af:ee:6a:51:93:60:48:28:cc: ab:1c:70:c6:a1:b4:23:50:e1:42:bb:46:a3:21:f4: b1:06:90:fa:08:56:a8:f8:22:a0:99:fb:d5:75:02: 2a:e2:db:79:0a:9b:46:d7:67:4d:43:b2:ce:f4:db: 9d:f1:02:5a:a6:f9:02:29:10:38:76:66:0d:fd:d8: ad:f7:9c:04:80:be:5f:b0:d3:39:76:38:83:f3:79: 55:48:f9:a5:8c:41:44:59:68:98:cb:fc:ed:c2:ad: 49:9f:a8:b5:f1:0a:8a:c8:0f:2b:0c:03:75:ce:10: 22:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C6:5C:77:5B:73:0E:77:C1:3B:B1:F4:CC:2D:0C:1D:F3:DC:B7:3F X509v3 Authority Key Identifier: keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/1sZcd1tzDnfBO7H0zC0MHfPctz8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:2200:f::/48 Signature Algorithm: sha256WithRSAEncryption 3f:47:fd:2a:f5:48:32:49:c8:9c:29:e9:55:19:40:c8:a0:ee: 8c:ec:70:46:06:83:01:eb:ce:f7:45:a2:e7:47:e9:66:b6:92: b6:b2:55:c3:f0:6b:cc:36:ad:c9:82:18:88:c9:a3:0f:ba:05: b2:45:1c:c6:04:a4:8d:3f:cb:de:04:82:2a:ab:8a:f8:fc:63: 86:97:71:71:c9:ce:04:85:35:20:b1:ee:72:13:3a:d2:e3:94: 87:0f:5b:bb:1c:4a:bd:64:38:a0:72:30:cc:19:c9:88:43:e8: 30:8b:28:5e:f1:db:50:55:8c:4d:69:a0:dc:75:b0:58:8a:a7: 92:ca:07:3a:fb:62:12:e0:5b:a3:c2:27:d3:c1:b4:e9:e8:23: 4e:43:d1:17:88:82:e2:e7:e3:cf:fb:b9:d0:36:dc:ee:69:4c: 5f:ed:0c:62:0c:35:7f:5b:17:00:b7:78:0f:9a:2d:b2:b9:2a: 9e:8c:51:44:f0:aa:33:ae:7e:72:09:82:c2:08:bd:32:5b:3d: e8:d8:48:0a:9b:0c:2a:4c:04:f6:ff:9d:15:af:61:73:97:27: a8:6a:fe:54:3e:0a:f7:94:20:7b:8b:00:6e:5c:69:fa:66:1f: 56:ae:d6:48:9b:d0:0e:ef:73:4f:28:ee:0e:2f:37:b8:2a:4e: cf:85:95:d8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gBMRCi/nhW6LDONkOl5GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMmQxMDJiNjExMmIwZDlhOGI4ZWViYWM0Yjk3YzgxOWY5 N2M2MDYwHhcNMjYwMTAyMDIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmM2NWM3NzViNzMwZTc3YzEzYmIxZjRjYzJkMGMxZGYzZGNiNzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtgw9t7rNvqUAlep0DKFIMSigVKO PjqefvXeKm9iKnprwpJCbfPNnba+7wIk69tr/fayoib3uNefU6EtIxf1MsMNkDzv F2VWZDtj9l7VUHqIfs+5TIO41Yfn2xpiXABYn9aizwyR8m6PEbihwrfmBpLKwKny YUfBxzQlEQVyUBz44vdNJ9SKaUj97umv7mpRk2BIKMyrHHDGobQjUOFCu0ajIfSx BpD6CFao+CKgmfvVdQIq4tt5CptG12dNQ7LO9Nud8QJapvkCKRA4dmYN/dit95wE gL5fsNM5djiD83lVSPmljEFEWWiYy/ztwq1Jn6i18QqKyA8rDAN1zhAivwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNbGXHdbcw53wTux9MwtDB3z3Lc/MB8GA1UdIwQY MBaAFOotECthErDZqLjuusS5fIGfl8YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEt YjgyOWNjNDAxMDMxLzEvMXNaY2QxdHpEbmZCTzdIMHpDME1IZlBjdHo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEtYjgyOWNjNDAxMDMx LzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhMiAAAP MA0GCSqGSIb3DQEBCwUAA4IBAQA/R/0q9UgyScicKelVGUDIoO6M7HBGBoMB6873 RaLnR+lmtpK2slXD8GvMNq3JghiIyaMPugWyRRzGBKSNP8veBIIqq4r4/GOGl3Fx yc4EhTUgse5yEzrS45SHD1u7HEq9ZDigcjDMGcmIQ+gwiyhe8dtQVYxNaaDcdbBY iqeSygc6+2IS4FujwifTwbTp6CNOQ9EXiILi5+PP+7nQNtzuaUxf7QxiDDV/WxcA t3gPmi2yuSqejFFE8Kozrn5yCYLCCL0yWz3o2EgKmwwqTAT2/50Vr2Fzlyeoav5U Pgr3lCB7iwBuXGn6Zh9WrtZIm9AO73NPKO4OLze4Kk7PhZXY -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:54 2026 by rpki-client