This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1vy2Zod5icTuhsQoU0EnDjOvBUw.roa File: 1vy2Zod5icTuhsQoU0EnDjOvBUw.roa (raw, json) Hash identifier: lJYkGyyhIavQAOFGfkLnoEQo2R64Z5o6AfYNpKGslCE= Subject key identifier: D6:FC:B6:66:87:79:89:C4:EE:86:C4:28:53:41:27:0E:33:AF:05:4C Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506 Certificate serial: 019B77C718A464927174353C523D0DB6A8E1 Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1vy2Zod5icTuhsQoU0EnDjOvBUw.roa Signing time: Thu 01 Jan 2026 04:18:15 +0000 ROA not before: Thu 01 Jan 2026 04:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216369 IP address blocks: 2a04:9307:10::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:18:a4:64:92:71:74:35:3c:52:3d:0d:b6:a8:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506 Validity Not Before: Jan 1 04:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6fcb666877989c4ee86c4285341270e33af054c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9b:2f:16:9e:fb:68:38:63:7d:82:3c:a9:93: 9c:9d:7e:a2:43:89:e6:c0:46:46:54:a8:81:a6:4a: 0d:4e:08:bd:87:c9:03:7e:7f:ba:8b:82:63:06:56: 63:8d:19:75:a8:fe:78:c7:ac:28:40:cd:c0:1b:12: b1:e8:8d:bf:3c:29:45:47:18:6e:f9:2f:28:04:33: 50:9f:c1:3d:a0:11:9f:ad:a9:34:2e:c5:54:af:00: 93:ca:3c:31:74:ed:1f:b9:08:4f:ab:66:71:3b:5e: 40:74:e5:61:db:05:00:0b:32:ed:12:57:cb:9e:6e: 69:cc:13:01:c9:40:e5:48:4e:03:ed:b2:7f:f8:0c: 28:11:4e:0a:a9:bc:b7:36:5a:43:d8:eb:39:96:43: 39:4e:98:ed:70:36:c2:2a:80:dd:ab:91:7f:d5:8c: 8e:2f:18:33:e4:97:64:a5:53:6e:88:c3:cc:1b:29: 9f:9e:b7:c9:c9:f1:a4:c8:f5:8c:c0:86:ae:20:f9: 4a:6d:2a:29:ba:3c:37:f3:0f:46:88:b1:9d:9d:f4: 77:50:63:01:64:66:54:52:51:c3:06:2b:fc:c2:56: 80:62:15:cb:a6:a5:bd:cb:aa:2d:dc:22:93:4e:ca: f6:08:a9:c7:cd:64:b1:0d:70:2a:46:b5:96:8f:85: 49:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FC:B6:66:87:79:89:C4:EE:86:C4:28:53:41:27:0E:33:AF:05:4C X509v3 Authority Key Identifier: keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1vy2Zod5icTuhsQoU0EnDjOvBUw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:9307:10::/44 Signature Algorithm: sha256WithRSAEncryption c7:87:ce:6b:dd:9d:28:f5:03:55:ca:94:0c:39:0e:d0:83:ff: dd:a2:f4:6a:34:7e:a7:8a:95:be:b5:5e:15:03:27:0b:3b:d4: dd:cb:e9:d0:4d:67:be:61:f8:7b:5e:90:75:20:e8:6c:10:0a: 64:15:d7:71:2f:47:8b:27:81:d2:26:61:69:f3:31:ae:e0:95: 11:50:29:21:f5:63:1c:2f:0b:de:b6:45:0d:51:d4:9a:e5:57: a5:ac:c1:74:5b:13:0e:5c:5e:ad:ae:3c:1a:32:05:b9:41:b2: 1e:00:56:1d:a1:d5:83:7f:0a:51:57:82:42:f1:e4:49:80:0d: 8f:92:da:85:da:3c:71:fa:fa:26:68:79:a2:f1:81:1d:24:0a: 35:83:fb:29:17:67:8a:30:3b:a0:4f:4a:16:87:5d:23:64:4c: 52:3d:d4:7f:8a:5a:97:d2:a4:d8:4b:fc:93:10:74:cd:1f:f2: 47:23:be:14:f9:d7:e4:62:f4:0b:8a:6d:d5:bf:75:87:66:87: 76:c0:36:bc:80:4b:06:ce:b1:d0:53:42:fd:92:b1:32:b4:ad: ed:05:bb:52:c5:b6:c3:67:02:2d:b7:dc:0f:e4:52:b2:be:69: 18:ed:6c:64:5a:35:2c:d1:78:93:0d:c5:2d:0a:64:dd:56:3b: 0c:13:e7:ad -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3xxikZJJxdDU8Uj0NtqjhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw YjQ1MDYwHhcNMjYwMTAxMDQxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmZjYjY2Njg3Nzk4OWM0ZWU4NmM0Mjg1MzQxMjcwZTMzYWYwNTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJsvFp77aDhjfYI8qZOcnX6iQ4nm wEZGVKiBpkoNTgi9h8kDfn+6i4JjBlZjjRl1qP54x6woQM3AGxKx6I2/PClFRxhu +S8oBDNQn8E9oBGfrak0LsVUrwCTyjwxdO0fuQhPq2ZxO15AdOVh2wUACzLtElfL nm5pzBMByUDlSE4D7bJ/+AwoEU4Kqby3NlpD2Os5lkM5TpjtcDbCKoDdq5F/1YyO Lxgz5JdkpVNuiMPMGymfnrfJyfGkyPWMwIauIPlKbSopujw38w9GiLGdnfR3UGMB ZGZUUlHDBiv8wlaAYhXLpqW9y6ot3CKTTsr2CKnHzWSxDXAqRrWWj4VJCQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNb8tmaHeYnE7obEKFNBJw4zrwVMMB8GA1UdIwQY MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt OGVlYjc1N2NmNTQ1LzEvMXZ5MlpvZDVpY1R1aHNRb1UwRW5Eak92QlV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1 LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgSTBwAQ MA0GCSqGSIb3DQEBCwUAA4IBAQDHh85r3Z0o9QNVypQMOQ7Qg//dovRqNH6nipW+ tV4VAycLO9Tdy+nQTWe+Yfh7XpB1IOhsEApkFddxL0eLJ4HSJmFp8zGu4JURUCkh 9WMcLwvetkUNUdSa5VelrMF0WxMOXF6trjwaMgW5QbIeAFYdodWDfwpRV4JC8eRJ gA2PktqF2jxx+vomaHmi8YEdJAo1g/spF2eKMDugT0oWh10jZExSPdR/ilqX0qTY S/yTEHTNH/JHI74U+dfkYvQLim3Vv3WHZod2wDa8gEsGzrHQU0L9krEytK3tBbtS xbbDZwItt9wP5FKyvmkY7WxkWjUs0XiTDcUtCmTdVjsME+et -----END CERTIFICATE-----Generated at Mon Jan 26 02:08:07 2026 by rpki-client