This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/1-zIs9jjU8K0mXK41dAJeVUv-x4c.roa File: 1-zIs9jjU8K0mXK41dAJeVUv-x4c.roa (raw, json) Hash identifier: Wwe8fLqCZwb5LLmiKUHrz5t6OJnU1nE1y9Jo2xpto7g= Subject key identifier: FB:32:2C:F6:38:D4:F0:AD:26:5C:AE:35:74:02:5E:55:4B:FE:C7:87 Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Certificate serial: 019B7F150FE758462AE09C66631786FC92F7 Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/1-zIs9jjU8K0mXK41dAJeVUv-x4c.roa Signing time: Fri 02 Jan 2026 14:20:45 +0000 ROA not before: Fri 02 Jan 2026 14:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205987 IP address blocks: 2a14:c380:b00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:0f:e7:58:46:2a:e0:9c:66:63:17:86:fc:92:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Validity Not Before: Jan 2 14:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb322cf638d4f0ad265cae3574025e554bfec787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ac:f1:e1:90:fd:58:77:87:53:ee:9d:91:72: 85:62:03:d0:eb:70:44:ea:de:e4:64:dc:da:e1:c4: 3d:a1:6e:31:a2:d8:00:88:70:a0:b2:cc:86:87:65: 03:5f:e6:c4:72:e5:10:54:6d:e8:06:52:1c:6a:34: 65:54:34:0c:77:b0:f6:86:e7:5e:19:d3:a9:a3:29: c8:09:2f:5a:e0:74:dd:ca:87:33:c3:1c:06:b3:a0: 78:db:9d:8d:25:b9:f6:ab:b2:6e:4b:1b:b5:80:16: 30:ba:c4:a4:14:9d:6d:88:8b:a1:46:d1:64:59:94: 7d:48:60:e9:35:e7:f9:2c:3c:46:a0:02:11:d3:90: aa:5f:21:71:75:87:02:b1:33:79:c9:4c:5d:85:de: 4f:f1:17:10:d7:b3:6f:8d:7c:24:ad:2a:60:80:b5: d3:c0:89:e3:dc:2d:af:e4:76:15:fa:73:59:4f:5c: 0a:ad:6e:7d:b7:ad:66:14:0f:b9:e7:2b:91:2e:30: 45:1a:67:33:e2:27:41:9f:8d:5c:c0:02:2b:3a:f2: 28:73:43:12:0f:3d:d8:f7:00:7e:51:b6:4f:93:6f: b5:9a:2a:64:37:f7:16:60:59:27:41:ff:63:24:e7: 63:e3:e6:b8:44:5a:73:6c:94:a9:04:f1:26:5c:d6: 86:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:32:2C:F6:38:D4:F0:AD:26:5C:AE:35:74:02:5E:55:4B:FE:C7:87 X509v3 Authority Key Identifier: keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/1-zIs9jjU8K0mXK41dAJeVUv-x4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c380:b00::/40 Signature Algorithm: sha256WithRSAEncryption 69:10:fb:21:5f:1d:90:49:a3:88:07:81:71:c0:ad:f9:7f:c8: b8:fe:4f:62:4c:94:d0:3b:74:84:be:4d:57:0c:aa:6a:2c:c4: aa:fa:fb:d2:e9:71:5c:13:eb:bd:09:95:f9:09:b5:ec:12:78: 10:4a:c5:15:cf:a2:d7:b7:bc:c7:f4:08:6e:92:31:6e:5a:a5: 4c:e1:84:e6:ab:b8:4b:8b:2c:d6:9b:c2:d4:e5:03:72:50:fd: 16:dc:bc:bf:f8:4c:b9:08:03:88:56:89:23:41:20:1c:9f:87: 11:a4:8d:1a:6b:47:da:85:09:db:c4:55:93:46:1f:4a:a1:41: 47:e7:54:3d:c2:f1:15:59:24:04:0c:43:20:96:4d:bc:25:1e: 96:67:a1:d7:6f:44:52:39:df:4d:f6:71:2c:69:2f:71:ea:0a: 96:8b:94:94:88:5e:70:66:f4:f0:33:9e:73:4e:ca:5f:d2:82: 37:5f:05:aa:a9:d1:7c:31:fa:e6:72:05:a3:1d:43:a3:62:c2: be:d0:45:92:28:a9:2d:d5:04:44:ec:91:4b:16:35:f7:58:49: 89:3d:92:f5:c5:58:fa:20:dc:1b:88:00:21:b4:e2:92:09:77: b5:d6:0a:5d:9f:97:d3:a1:66:a3:f3:a5:74:46:73:14:0b:62: 61:57:62:89 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FQ/nWEYq4JxmYxeG/JL3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2 ZDI1MTIwHhcNMjYwMTAyMTQyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjMyMmNmNjM4ZDRmMGFkMjY1Y2FlMzU3NDAyNWU1NTRiZmVjNzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKzx4ZD9WHeHU+6dkXKFYgPQ63BE 6t7kZNza4cQ9oW4xotgAiHCgssyGh2UDX+bEcuUQVG3oBlIcajRlVDQMd7D2hude GdOpoynICS9a4HTdyoczwxwGs6B4252NJbn2q7JuSxu1gBYwusSkFJ1tiIuhRtFk WZR9SGDpNef5LDxGoAIR05CqXyFxdYcCsTN5yUxdhd5P8RcQ17NvjXwkrSpggLXT wInj3C2v5HYV+nNZT1wKrW59t61mFA+55yuRLjBFGmcz4idBn41cwAIrOvIoc0MS Dz3Y9wB+UbZPk2+1mipkN/cWYFknQf9jJOdj4+a4RFpzbJSpBPEmXNaGNwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPsyLPY41PCtJlyuNXQCXlVL/seHMB8GA1UdIwQY MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt NTMyMWQ2OWQ5NzlkLzEvMS16SXM5ampVOEswbVhLNDFkQUplVlV2LXg0Yy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOGQvNmI3NDkwLWUxMGEtNDJlMC05ZTJlLTUzMjFkNjlkOTc5 ZC8xL1dMUGVYNXJiVVA1Qjl0eDRfOUNpeVFodEpSSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoUw4AL MA0GCSqGSIb3DQEBCwUAA4IBAQBpEPshXx2QSaOIB4FxwK35f8i4/k9iTJTQO3SE vk1XDKpqLMSq+vvS6XFcE+u9CZX5CbXsEngQSsUVz6LXt7zH9AhukjFuWqVM4YTm q7hLiyzWm8LU5QNyUP0W3Ly/+Ey5CAOIVokjQSAcn4cRpI0aa0fahQnbxFWTRh9K oUFH51Q9wvEVWSQEDEMglk28JR6WZ6HXb0RSOd9N9nEsaS9x6gqWi5SUiF5wZvTw M55zTspf0oI3XwWqqdF8MfrmcgWjHUOjYsK+0EWSKKkt1QRE7JFLFjX3WEmJPZL1 xVj6INwbiAAhtOKSCXe11gpdn5fToWaj86V0RnMUC2JhV2KJ -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:38 2026 by rpki-client