This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/1-jRYaUzINFrEnjfAdRPinSU_734.roa File: 1-jRYaUzINFrEnjfAdRPinSU_734.roa (raw, json) Hash identifier: 3ooS3VmIZ0+eOUublxtT5ocb/PZYp04ILnN6aKePHuY= Subject key identifier: FA:34:58:69:4C:C8:34:5A:C4:9E:37:C0:75:13:E2:9D:25:3F:EF:7E Certificate issuer: /CN=7e3150f8c67063121027328954968d08d4cf329a Certificate serial: 019B7C127F4E1EDC08AAAD82714B31585D66 Authority key identifier: 7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/1-jRYaUzINFrEnjfAdRPinSU_734.roa Signing time: Fri 02 Jan 2026 00:19:05 +0000 ROA not before: Fri 02 Jan 2026 00:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200529 IP address blocks: 2a06:2c80:2000::/36 maxlen: 48 2a06:2c80:6000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:7f:4e:1e:dc:08:aa:ad:82:71:4b:31:58:5d:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e3150f8c67063121027328954968d08d4cf329a Validity Not Before: Jan 2 00:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa3458694cc8345ac49e37c07513e29d253fef7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ff:58:2e:7f:ab:9c:93:e8:57:b5:a5:26:d0: b1:6e:7e:7a:b7:84:68:45:59:8c:13:d8:d9:51:c1: 7c:9d:84:fe:c3:61:75:3f:a5:f2:48:e0:f9:ef:ea: cc:7a:51:a0:5e:be:9a:8a:e5:78:c0:89:84:74:6d: 03:96:08:61:32:f1:96:82:76:f2:09:ce:12:09:e8: a2:3c:d9:82:ad:3d:95:9c:d5:3e:55:46:52:21:1a: 51:c7:b7:28:4d:38:71:8b:6d:3e:47:3a:b7:0b:3e: 10:22:41:4a:9f:9f:74:ab:4f:5b:95:01:09:66:b6: 50:86:1c:87:0d:73:c5:03:65:b3:a2:2d:58:ad:2c: 90:c1:a5:66:60:79:be:be:cc:55:b7:d6:3d:85:da: b8:81:9e:f7:0b:05:dd:3d:b8:84:bc:b8:ab:d0:e1: 7a:cb:4a:4c:88:4d:6a:30:26:33:86:41:83:9a:5f: dc:64:d8:28:3a:cb:1b:fc:b2:66:02:9e:19:20:50: 8e:5b:68:ef:10:5e:9e:50:d6:2e:01:ef:aa:61:98: a4:ce:c2:86:4e:5a:f3:3b:f7:ec:56:8a:c1:7b:0b: a0:ca:ad:b1:d7:42:18:9a:6a:57:7c:db:69:e3:03: 14:2d:b4:3a:6d:c0:5a:6d:f6:90:a3:41:09:a2:25: 93:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:34:58:69:4C:C8:34:5A:C4:9E:37:C0:75:13:E2:9D:25:3F:EF:7E X509v3 Authority Key Identifier: keyid:7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/1-jRYaUzINFrEnjfAdRPinSU_734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:2c80:2000::/36 2a06:2c80:6000::/36 Signature Algorithm: sha256WithRSAEncryption a8:81:54:57:20:84:18:58:43:d3:38:37:ef:3c:1b:3c:36:68: 97:ab:75:e6:28:e9:1e:1d:92:e8:22:a2:4a:68:ba:89:98:84: a1:16:34:a9:6b:37:1c:8d:04:31:9c:41:b7:d1:b8:62:96:5c: 28:42:37:2c:ec:89:a6:f8:29:75:08:b3:3d:ee:a6:77:4b:51: 64:d7:fc:b8:ac:9c:e0:70:75:ec:b3:dc:f4:97:fe:cf:5c:ba: 56:b8:6b:bb:c8:f9:67:39:2e:84:d8:42:ab:d0:59:08:f3:b2: 80:12:de:47:9d:b0:80:b4:5b:53:d8:77:c9:9f:ab:f8:71:5c: a3:8e:ea:9c:09:77:36:58:08:e4:db:e5:3f:9a:d9:5d:0d:78: 4b:d8:b1:41:a9:66:08:cf:e0:0d:cf:ca:64:c5:75:fa:34:d3: 2e:50:da:41:d0:cd:a6:b3:af:60:20:46:34:c0:ee:09:d5:65: 15:64:a2:46:0f:39:82:7e:da:76:32:0d:18:15:4a:49:92:8a: d6:a7:29:dd:ea:50:d8:89:d4:b8:3c:9a:df:42:2a:38:5a:b2: 83:3a:8e:97:4e:14:de:7b:15:f2:9b:0a:7f:17:f7:18:e1:58: be:cf:30:de:40:b6:6c:aa:c9:50:87:da:8f:fc:e9:80:2c:53: 84:9d:cc:13 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt8En9OHtwIqq2CcUsxWF1mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMzE1MGY4YzY3MDYzMTIxMDI3MzI4OTU0OTY4ZDA4ZDRj ZjMyOWEwHhcNMjYwMTAyMDAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTM0NTg2OTRjYzgzNDVhYzQ5ZTM3YzA3NTEzZTI5ZDI1M2ZlZjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/9YLn+rnJPoV7WlJtCxbn56t4Ro RVmME9jZUcF8nYT+w2F1P6XySOD57+rMelGgXr6aiuV4wImEdG0DlghhMvGWgnby Cc4SCeiiPNmCrT2VnNU+VUZSIRpRx7coTThxi20+Rzq3Cz4QIkFKn590q09blQEJ ZrZQhhyHDXPFA2Wzoi1YrSyQwaVmYHm+vsxVt9Y9hdq4gZ73CwXdPbiEvLir0OF6 y0pMiE1qMCYzhkGDml/cZNgoOssb/LJmAp4ZIFCOW2jvEF6eUNYuAe+qYZikzsKG TlrzO/fsVorBewugyq2x10IYmmpXfNtp4wMULbQ6bcBabfaQo0EJoiWTuwIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFPo0WGlMyDRaxJ43wHUT4p0lP+9+MB8GA1UdIwQY MBaAFH4xUPjGcGMSECcyiVSWjQjUzzKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmpGUS1NWndZeElRSnpLSlZKYU5DTlRQTXBvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84YmNmZDctZjZkMy00MzJhLWI1ZjAt OTM1ZTQxOGJkYmU3LzEvMS1qUllhVXpJTkZyRW5qZkFkUlBpblNVXzczNC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTIvOGJjZmQ3LWY2ZDMtNDMyYS1iNWYwLTkzNWU0MThiZGJl Ny8xL2ZqRlEtTVp3WXhJUUp6S0pWSmFOQ05UUE1wby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjApBggrBgEFBQcBBwEB/wQaMBgwFgQCAAIwEAMGBCoGLIAg AwYEKgYsgGAwDQYJKoZIhvcNAQELBQADggEBAKiBVFcghBhYQ9M4N+88Gzw2aJer deYo6R4dkugiokpouomYhKEWNKlrNxyNBDGcQbfRuGKWXChCNyzsiab4KXUIsz3u pndLUWTX/LisnOBwdeyz3PSX/s9cula4a7vI+Wc5LoTYQqvQWQjzsoAS3kedsIC0 W1PYd8mfq/hxXKOO6pwJdzZYCOTb5T+a2V0NeEvYsUGpZgjP4A3PymTFdfo00y5Q 2kHQzaazr2AgRjTA7gnVZRVkokYPOYJ+2nYyDRgVSkmSitanKd3qUNiJ1Lg8mt9C KjhasoM6jpdOFN57FfKbCn8X9xjhWL7PMN5AtmyqyVCH2o/86YAsU4SdzBM= -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:08 2026 by rpki-client