This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/1-AaYw2BfaY3XhYhRX7k0ikSXO9w.roa File: 1-AaYw2BfaY3XhYhRX7k0ikSXO9w.roa (raw, json) Hash identifier: WyNldQk+XZoMO0b/C5jIYmrjIYQhy0dv0+KOkKWcQSE= Subject key identifier: F8:06:98:C3:60:5F:69:8D:D7:85:88:51:5F:B9:34:8A:44:97:3B:DC Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a Certificate serial: 019B78A261C7D1ED2524D5962512136DCD3D Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/1-AaYw2BfaY3XhYhRX7k0ikSXO9w.roa Signing time: Thu 01 Jan 2026 08:17:46 +0000 ROA not before: Thu 01 Jan 2026 08:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207200 IP address blocks: 2a0e:1cc0:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:61:c7:d1:ed:25:24:d5:96:25:12:13:6d:cd:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a Validity Not Before: Jan 1 08:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f80698c3605f698dd78588515fb9348a44973bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:39:18:4b:d9:72:8b:37:33:e9:0f:36:ea:f8: 6c:7b:53:8e:85:d9:55:91:96:06:18:eb:a2:d5:01: 0c:49:72:bb:e7:f5:ca:e5:1f:79:27:b0:a5:b8:8a: d9:b3:68:cf:35:13:b0:1e:40:8f:2a:47:e6:95:79: 9e:91:f7:2f:bf:06:54:35:5f:a7:2f:08:f3:2e:5b: dc:e9:a7:4e:c4:f5:e4:48:48:6a:f2:2d:ea:2d:03: fb:b3:df:8f:d2:15:27:50:22:a6:bc:6c:ff:47:d5: c2:dd:ec:2b:b7:b7:58:89:06:42:53:1d:7a:a9:88: d5:b5:89:fc:da:93:66:93:34:8c:99:b9:3c:a1:93: a7:c5:ef:65:36:37:41:17:27:0b:8c:88:48:40:b0: 4c:9a:ba:59:80:f3:a9:4b:ee:65:c8:a0:bf:dd:19: e4:6c:a6:94:59:b2:25:a9:0a:1e:27:bd:56:e6:a3: ad:a7:48:f3:2c:3d:3d:a4:f1:63:22:db:6a:36:21: e7:0a:fa:25:fe:ab:1c:12:da:50:96:e6:af:b5:f0: d2:aa:46:8a:75:f9:c6:35:d4:08:e3:6c:c1:7f:94: 1c:3e:2d:de:0b:81:ac:c5:48:32:ac:0d:38:98:f7: 85:fa:12:2e:16:5d:7e:f3:cb:87:87:d8:b6:9a:3d: d8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:06:98:C3:60:5F:69:8D:D7:85:88:51:5F:B9:34:8A:44:97:3B:DC X509v3 Authority Key Identifier: keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/1-AaYw2BfaY3XhYhRX7k0ikSXO9w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:1cc0:8::/48 Signature Algorithm: sha256WithRSAEncryption b4:8c:c2:5c:f7:6d:4c:c5:82:67:cc:10:e8:24:cc:6b:12:75: 79:9c:66:11:47:cf:72:f4:db:8d:e3:57:08:48:9b:89:1e:a0: d0:d2:31:33:be:af:c6:51:a7:cd:cd:ac:62:8a:a9:0a:f0:43: 00:76:08:14:d7:16:c8:d2:38:3d:06:ad:7c:9f:9a:67:cc:fb: f9:6a:bd:a7:1b:32:84:98:cc:77:0e:3e:ec:e1:0b:3c:b0:8f: e6:29:5d:80:37:d3:1c:4d:c1:08:43:57:62:61:86:15:b0:4b: 50:09:4a:0a:d0:09:34:b9:2d:75:90:94:87:a6:77:92:1f:a4: 8f:07:4d:d3:e5:76:17:f7:c6:f9:21:75:d1:b0:76:59:a2:10: 0e:1f:ea:7d:94:03:b6:a2:bd:e1:58:4e:af:2d:ff:af:3e:41: 48:37:4c:d5:cb:d3:1d:33:4a:70:c1:19:6c:8c:12:ba:54:9b: eb:9d:b8:bf:92:9b:b2:8d:51:27:d4:56:07:81:15:33:af:d4: 9a:a7:84:2a:37:50:bb:7c:4b:11:4b:83:76:d5:fc:c9:e7:6a: ea:c7:8c:f9:ce:f6:a3:c9:16:8c:52:f6:a1:ec:86:c6:25:7c: 80:9d:94:f8:8d:24:2d:ac:da:2a:db:8e:a1:ac:63:cb:6c:bd: 15:73:ce:29 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt4omHH0e0lJNWWJRITbc09MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzEzNjdkZjZkMTg2MTA3MWM5MmJhZTcyNjUyMzMyNmY0 NWJhMmEwHhcNMjYwMTAxMDgxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODA2OThjMzYwNWY2OThkZDc4NTg4NTE1ZmI5MzQ4YTQ0OTczYmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DkYS9lyizcz6Q826vhse1OOhdlV kZYGGOui1QEMSXK75/XK5R95J7CluIrZs2jPNROwHkCPKkfmlXmekfcvvwZUNV+n LwjzLlvc6adOxPXkSEhq8i3qLQP7s9+P0hUnUCKmvGz/R9XC3ewrt7dYiQZCUx16 qYjVtYn82pNmkzSMmbk8oZOnxe9lNjdBFycLjIhIQLBMmrpZgPOpS+5lyKC/3Rnk bKaUWbIlqQoeJ71W5qOtp0jzLD09pPFjIttqNiHnCvol/qscEtpQluavtfDSqkaK dfnGNdQI42zBf5QcPi3eC4GsxUgyrA04mPeF+hIuFl1+88uHh9i2mj3YDwIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPgGmMNgX2mN14WIUV+5NIpElzvcMB8GA1UdIwQY MBaAFO4xNn320YYQcckrrnJlIzJvRboqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2It MTE1OWRiZmJlZDU0LzEvMS1BYVl3MkJmYVkzWGhZaFJYN2swaWtTWE85dy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODEvMWJiNGRkLWU5YzQtNGQzZC05YTNiLTExNTlkYmZiZWQ1 NC8xLzdqRTJmZmJSaGhCeHlTdXVjbVVqTW05RnVpby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoOHMAA CDANBgkqhkiG9w0BAQsFAAOCAQEAtIzCXPdtTMWCZ8wQ6CTMaxJ1eZxmEUfPcvTb jeNXCEibiR6g0NIxM76vxlGnzc2sYoqpCvBDAHYIFNcWyNI4PQatfJ+aZ8z7+Wq9 pxsyhJjMdw4+7OELPLCP5ildgDfTHE3BCENXYmGGFbBLUAlKCtAJNLktdZCUh6Z3 kh+kjwdN0+V2F/fG+SF10bB2WaIQDh/qfZQDtqK94VhOry3/rz5BSDdM1cvTHTNK cMEZbIwSulSb6524v5Kbso1RJ9RWB4EVM6/UmqeEKjdQu3xLEUuDdtX8yedq6seM +c72o8kWjFL2oeyGxiV8gJ2U+I0kLazaKtuOoaxjy2y9FXPOKQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:01:24 2026 by rpki-client