This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1-_yOHxDowuUEcsMT-tBSHJNawJY.roa File: 1-_yOHxDowuUEcsMT-tBSHJNawJY.roa (raw, json) Hash identifier: OkEE2PY+HxH7AS4Wef2NDEm88il1r3tB4z1trxdzMcY= Subject key identifier: FB:FC:8E:1F:10:E8:C2:E5:04:72:C3:13:FA:D0:52:1C:93:5A:C0:96 Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506 Certificate serial: 019B77C714E24189287906ACEDF9D0FCAF90 Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1-_yOHxDowuUEcsMT-tBSHJNawJY.roa Signing time: Thu 01 Jan 2026 04:18:14 +0000 ROA not before: Thu 01 Jan 2026 04:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199015 IP address blocks: 2a01:190:39::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:14:e2:41:89:28:79:06:ac:ed:f9:d0:fc:af:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506 Validity Not Before: Jan 1 04:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbfc8e1f10e8c2e50472c313fad0521c935ac096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:05:50:5c:ad:8c:52:49:cd:cb:88:e4:10:b3: f5:d7:80:cc:f6:7a:a9:02:fa:ae:92:e3:9b:ea:26: 24:01:da:11:41:5a:68:02:e1:34:3c:46:d4:9b:bf: 43:84:8f:c2:3e:d5:be:6f:0c:be:00:26:c0:b5:dd: cd:53:c8:09:1b:4a:5c:77:f7:a1:99:71:85:97:74: a2:d1:d8:b5:a9:aa:dc:57:9e:87:f7:72:ff:85:e7: 8d:7b:bb:71:72:0a:d1:53:da:81:ef:28:f2:86:a1: 0b:bc:10:ff:ee:aa:cb:5b:26:54:7c:dc:15:17:7b: 3d:45:39:f8:2a:82:d1:83:fe:21:a6:70:83:6d:f5: 94:69:4f:5c:15:27:9a:d1:f3:7f:c4:f7:b9:9e:7c: b5:46:45:91:3c:29:84:7f:24:61:5b:3d:8c:fb:5a: 95:8f:19:c9:cf:b2:0e:31:28:1f:89:03:74:0a:5c: bb:86:19:77:ff:14:38:44:e2:d7:0b:f2:e7:7e:a7: 5b:b6:d9:1b:71:94:8c:f3:bd:84:db:81:2d:4a:ab: 32:7b:8c:fa:db:bb:bc:9e:56:ad:23:8d:91:0a:a0: e5:2c:21:ab:35:c8:d6:e8:99:8d:84:7a:24:e8:41: e9:9b:1e:e2:a7:34:5a:ce:86:93:12:93:9c:9c:c4: 88:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:FC:8E:1F:10:E8:C2:E5:04:72:C3:13:FA:D0:52:1C:93:5A:C0:96 X509v3 Authority Key Identifier: keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1-_yOHxDowuUEcsMT-tBSHJNawJY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:190:39::/48 Signature Algorithm: sha256WithRSAEncryption 21:38:9e:48:c0:0a:72:a7:3f:31:ae:07:ac:f3:03:3e:0f:0c: d5:54:10:3c:47:bb:9c:2a:a5:24:11:d0:8c:7e:06:5b:16:3e: 2d:99:b6:5d:da:14:2b:38:59:8c:1d:e9:bb:c5:3c:30:ea:40: f7:b1:4c:8e:02:0d:d6:54:57:d7:ce:79:89:14:a7:03:11:b4: ba:98:b1:03:7a:78:ac:ee:ef:ec:86:7f:4b:b9:44:dc:3b:4b: a9:30:8a:d4:22:3a:ea:ec:b4:91:16:3e:88:0c:e5:1a:57:f9: de:c4:0c:d7:da:08:2e:3d:b7:d1:85:65:65:78:05:6c:6e:71: 83:42:18:71:6c:21:e7:77:85:9a:5b:bb:fb:d7:7b:80:aa:27: 1f:35:f3:c0:6f:f0:22:1b:ba:7b:fc:f7:c6:07:06:b1:38:ae: 68:67:44:b1:d7:67:2e:0b:83:97:6d:98:a8:7c:31:50:de:81: ec:8e:99:58:0d:24:48:06:c4:05:14:9a:64:da:f7:b6:50:45: 63:56:ed:c2:04:ee:cb:77:2a:64:93:1c:f8:1e:93:3b:59:84: 87:d2:9a:0f:0c:ed:3d:9e:0e:c4:1d:16:1d:7e:be:a6:47:dc: 12:28:b1:1b:f3:24:61:bc:eb:a5:fd:31:b8:91:37:fc:16:3e: f7:53:26:91 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt3xxTiQYkoeQas7fnQ/K+QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw YjQ1MDYwHhcNMjYwMTAxMDQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmZjOGUxZjEwZThjMmU1MDQ3MmMzMTNmYWQwNTIxYzkzNWFjMDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QVQXK2MUknNy4jkELP114DM9nqp AvqukuOb6iYkAdoRQVpoAuE0PEbUm79DhI/CPtW+bwy+ACbAtd3NU8gJG0pcd/eh mXGFl3Si0di1qarcV56H93L/heeNe7txcgrRU9qB7yjyhqELvBD/7qrLWyZUfNwV F3s9RTn4KoLRg/4hpnCDbfWUaU9cFSea0fN/xPe5nny1RkWRPCmEfyRhWz2M+1qV jxnJz7IOMSgfiQN0Cly7hhl3/xQ4ROLXC/LnfqdbttkbcZSM872E24EtSqsye4z6 27u8nlatI42RCqDlLCGrNcjW6JmNhHok6EHpmx7ipzRazoaTEpOcnMSIywIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPv8jh8Q6MLlBHLDE/rQUhyTWsCWMB8GA1UdIwQY MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt OGVlYjc1N2NmNTQ1LzEvMS1feU9IeERvd3VVRWNzTVQtdEJTSEpOYXdKWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTkvMmVjZTYyLTFkOGMtNDUwYy05MWU4LThlZWI3NTdjZjU0 NS8xLzFuUFlTYmZWQkhOMjFYNXZlVzhBR0xjTFJRWS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoBAZAA OTANBgkqhkiG9w0BAQsFAAOCAQEAITieSMAKcqc/Ma4HrPMDPg8M1VQQPEe7nCql JBHQjH4GWxY+LZm2XdoUKzhZjB3pu8U8MOpA97FMjgIN1lRX1855iRSnAxG0upix A3p4rO7v7IZ/S7lE3DtLqTCK1CI66uy0kRY+iAzlGlf53sQM19oILj230YVlZXgF bG5xg0IYcWwh53eFmlu7+9d7gKonHzXzwG/wIhu6e/z3xgcGsTiuaGdEsddnLguD l22YqHwxUN6B7I6ZWA0kSAbEBRSaZNr3tlBFY1btwgTuy3cqZJMc+B6TO1mEh9Ka DwztPZ4OxB0WHX6+pkfcEiixG/MkYbzrpf0xuJE3/BY+91MmkQ== -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:38 2026 by rpki-client