This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/1-cEaaO_Ysid8Br5DRVo96OE6Rw0.roa File: 1-cEaaO_Ysid8Br5DRVo96OE6Rw0.roa (raw, json) Hash identifier: fjeWtz//51nB13NzQwtc912b3agAHVfHErKRO/L6d0o= Subject key identifier: F9:C1:1A:68:EF:D8:B2:27:7C:06:BE:43:45:5A:3D:E8:E1:3A:47:0D Certificate issuer: /CN=4f22834c479747b0a8bd0a6129f9fe65f83026d0 Certificate serial: 019B78348F43886312AA76FEF312DF8F48B3 Authority key identifier: 4F:22:83:4C:47:97:47:B0:A8:BD:0A:61:29:F9:FE:65:F8:30:26:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TyKDTEeXR7CovQphKfn-ZfgwJtA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/1-cEaaO_Ysid8Br5DRVo96OE6Rw0.roa Signing time: Thu 01 Jan 2026 06:17:48 +0000 ROA not before: Thu 01 Jan 2026 06:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214592 IP address blocks: 2001:678:60c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.crl rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.mft rsync://rpki.ripe.net/repository/DEFAULT/TyKDTEeXR7CovQphKfn-ZfgwJtA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:8f:43:88:63:12:aa:76:fe:f3:12:df:8f:48:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f22834c479747b0a8bd0a6129f9fe65f83026d0 Validity Not Before: Jan 1 06:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9c11a68efd8b2277c06be43455a3de8e13a470d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:23:9a:30:a4:e3:b8:38:95:fd:42:09:6a:41: dd:22:19:c4:28:d6:1b:7e:8c:91:76:c2:1e:65:0f: 55:59:ca:9f:23:46:38:21:6c:f9:d0:9b:e0:5e:a9: 92:d8:84:20:fc:f2:4b:d4:93:98:e4:4f:a6:f3:3a: 70:c4:79:e9:d7:bb:95:41:8e:8b:f3:b6:a6:8f:fa: e4:ee:1c:f5:a4:ea:79:2c:7c:76:4a:74:eb:7f:6f: 59:b3:94:44:59:34:cc:17:93:6b:06:a3:ac:8e:dc: 3e:91:96:1a:ec:16:1f:86:9f:2a:4d:cc:34:5f:d4: 7a:11:2c:79:42:09:f3:6e:bc:7c:78:7e:cf:74:c3: f7:ef:b5:ff:e1:27:26:11:a5:f0:16:91:7c:fb:82: 7c:83:de:71:c9:ed:11:ce:ed:19:79:b6:49:57:aa: c9:47:f6:f3:74:07:d0:b5:41:86:98:fb:1c:e5:de: c7:72:d6:ba:92:9a:09:90:70:8d:03:bf:57:7c:b7: b2:b7:63:d0:22:59:6b:86:42:6c:f0:11:e4:24:6b: dd:02:6c:06:17:8b:ab:a1:f7:b7:c4:33:ee:33:43: f7:5b:b0:82:1a:35:18:94:ef:16:b0:d0:46:5f:38: b4:21:d5:9d:3e:5f:9f:f7:66:f0:bf:1b:c6:c3:56: 0f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C1:1A:68:EF:D8:B2:27:7C:06:BE:43:45:5A:3D:E8:E1:3A:47:0D X509v3 Authority Key Identifier: keyid:4F:22:83:4C:47:97:47:B0:A8:BD:0A:61:29:F9:FE:65:F8:30:26:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TyKDTEeXR7CovQphKfn-ZfgwJtA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/1-cEaaO_Ysid8Br5DRVo96OE6Rw0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:60c::/48 Signature Algorithm: sha256WithRSAEncryption 73:9e:3d:ff:62:b7:29:80:5b:ae:74:30:96:6d:5a:d5:df:08: 06:ff:32:2f:77:88:20:99:fa:2e:55:cf:5c:e5:ca:f2:11:55: c9:e7:b1:bd:32:fd:fd:5d:e7:e3:0c:0a:f7:dd:a9:eb:71:9e: 11:9c:ca:56:5c:28:57:8c:c1:d9:ff:2e:c2:99:df:e5:b6:5d: 7d:79:19:84:73:bc:cc:3b:99:ad:51:1c:4f:64:61:13:5f:c2: a4:f4:6c:7f:13:43:e0:91:e9:63:b6:be:b7:82:64:38:9b:f1: 63:4c:64:d8:f9:b6:62:2a:b0:fa:31:3c:7a:38:18:09:c4:bf: 12:5e:28:76:af:30:36:36:51:d4:9a:5e:b9:eb:fe:c8:64:4d: 97:ab:36:7a:e7:34:ff:77:7d:7b:1e:f3:3e:de:75:14:98:78: 9e:07:54:9b:11:d0:2e:a7:f1:28:b9:03:3e:05:d5:fd:bd:2c: b7:31:88:25:99:fe:a2:73:9b:7b:fa:20:58:24:22:62:c3:7c: 79:23:db:e3:e8:13:d5:59:0f:12:43:16:85:1b:f8:f4:48:ad: 03:2a:87:f6:90:a9:7d:b7:2c:ca:66:70:2d:87:61:c0:d1:45: 60:cb:6e:f7:76:ba:39:1a:f9:88:2f:ec:9e:78:f5:e4:3a:f3: 87:51:d0:8f -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt4NI9DiGMSqnb+8xLfj0izMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMjI4MzRjNDc5NzQ3YjBhOGJkMGE2MTI5ZjlmZTY1Zjgz MDI2ZDAwHhcNMjYwMTAxMDYxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWMxMWE2OGVmZDhiMjI3N2MwNmJlNDM0NTVhM2RlOGUxM2E0NzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SOaMKTjuDiV/UIJakHdIhnEKNYb foyRdsIeZQ9VWcqfI0Y4IWz50JvgXqmS2IQg/PJL1JOY5E+m8zpwxHnp17uVQY6L 87amj/rk7hz1pOp5LHx2SnTrf29Zs5REWTTMF5NrBqOsjtw+kZYa7BYfhp8qTcw0 X9R6ESx5Qgnzbrx8eH7PdMP377X/4ScmEaXwFpF8+4J8g95xye0Rzu0ZebZJV6rJ R/bzdAfQtUGGmPsc5d7Hcta6kpoJkHCNA79XfLeyt2PQIllrhkJs8BHkJGvdAmwG F4urofe3xDPuM0P3W7CCGjUYlO8WsNBGXzi0IdWdPl+f92bwvxvGw1YPVwIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPnBGmjv2LInfAa+Q0VaPejhOkcNMB8GA1UdIwQY MBaAFE8ig0xHl0ewqL0KYSn5/mX4MCbQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHlLRFRFZVhSN0NvdlFwaEtmbi1aZmd3SnRBLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9iOWEwNTAtNzcyNi00ZWI1LWI0MDMt N2JmNzI0MDU2MTUzLzEvMS1jRWFhT19Zc2lkOEJyNURSVm85Nk9FNlJ3MC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTUvYjlhMDUwLTc3MjYtNGViNS1iNDAzLTdiZjcyNDA1NjE1 My8xL1R5S0RURWVYUjdDb3ZRcGhLZm4tWmZnd0p0QS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBngG DDANBgkqhkiG9w0BAQsFAAOCAQEAc549/2K3KYBbrnQwlm1a1d8IBv8yL3eIIJn6 LlXPXOXK8hFVyeexvTL9/V3n4wwK992p63GeEZzKVlwoV4zB2f8uwpnf5bZdfXkZ hHO8zDuZrVEcT2RhE1/CpPRsfxND4JHpY7a+t4JkOJvxY0xk2Pm2Yiqw+jE8ejgY CcS/El4odq8wNjZR1Jpeuev+yGRNl6s2euc0/3d9ex7zPt51FJh4ngdUmxHQLqfx KLkDPgXV/b0stzGIJZn+onObe/ogWCQiYsN8eSPb4+gT1VkPEkMWhRv49EitAyqH 9pCpfbcsymZwLYdhwNFFYMtu93a6ORr5iC/snnj15Drzh1HQjw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:09:16 2026 by rpki-client