This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/1-BeXqPwf4wGqQf8BMkvATSMUSvg.roa File: 1-BeXqPwf4wGqQf8BMkvATSMUSvg.roa (raw, json) Hash identifier: sHCQTjP4DGWRR+9EwPFQEYOJ1YUo6fNUrBWZXp0K9lU= Subject key identifier: F8:17:97:A8:FC:1F:E3:01:AA:41:FF:01:32:4B:C0:4D:23:14:4A:F8 Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Certificate serial: 019B7BA36C20A2297A7F41BB708B325E721A Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/1-BeXqPwf4wGqQf8BMkvATSMUSvg.roa Signing time: Thu 01 Jan 2026 22:17:46 +0000 ROA not before: Thu 01 Jan 2026 22:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208771 IP address blocks: 2a01:e901:109::/48 maxlen: 48 2a01:e901:119::/48 maxlen: 48 2a01:e901:129::/48 maxlen: 48 2a01:e901:139::/48 maxlen: 48 2a01:e901:149::/48 maxlen: 48 2a01:e901:159::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:6c:20:a2:29:7a:7f:41:bb:70:8b:32:5e:72:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Validity Not Before: Jan 1 22:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f81797a8fc1fe301aa41ff01324bc04d23144af8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:98:c5:78:21:55:87:b3:5b:cd:64:42:03:6b: 14:0e:d3:8d:c7:1e:2f:7d:2e:50:e1:f2:5a:b7:bb: 7f:db:fd:18:b1:b0:39:a1:cc:75:f2:a1:0a:bb:ff: e8:f9:67:84:22:42:a2:19:a9:ff:25:ef:5d:a8:a0: b7:32:ad:0e:35:70:f2:ca:25:e7:d9:c5:16:03:15: af:01:b2:87:90:12:7a:24:28:22:03:e6:86:c3:03: a1:41:11:e9:aa:6e:bc:dd:ed:87:58:3c:98:4d:79: 50:d0:43:b9:2c:a4:8b:6f:b0:6e:a6:dd:a6:cd:0f: aa:dc:f0:bc:42:50:86:bd:6c:d2:6c:b2:12:82:f2: be:f7:32:8b:6b:0a:33:81:91:ae:54:85:31:1a:bd: 4a:2b:7b:a3:11:47:e0:0e:89:68:3e:1c:35:ed:3e: 87:98:8f:e4:8d:8c:14:e9:26:80:b1:8f:27:cc:b0: 6e:03:bc:f9:aa:24:72:50:2e:a2:8c:22:e0:e8:cd: a7:79:3c:37:2a:41:d2:e8:63:f3:75:7e:eb:38:d6: c2:2f:a0:c9:b7:8c:16:4f:1e:cb:9c:a9:e6:08:79: 7d:93:aa:b0:23:39:fa:e6:60:58:d0:95:16:50:fb: 77:6f:b4:88:c2:2a:55:54:39:e7:48:ac:80:2d:55: bc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:17:97:A8:FC:1F:E3:01:AA:41:FF:01:32:4B:C0:4D:23:14:4A:F8 X509v3 Authority Key Identifier: keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/1-BeXqPwf4wGqQf8BMkvATSMUSvg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e901:109::/48 2a01:e901:119::/48 2a01:e901:129::/48 2a01:e901:139::/48 2a01:e901:149::/48 2a01:e901:159::/48 Signature Algorithm: sha256WithRSAEncryption 3e:f0:fb:ca:da:e5:a7:7b:c7:e5:0a:a4:41:44:11:1e:1d:1a: 28:cd:29:49:63:17:42:83:89:19:39:77:06:af:78:b7:10:8d: 23:37:3e:8c:fe:17:ce:9b:d5:c3:f3:a1:aa:90:12:f9:9c:7a: c9:a6:cc:12:80:68:a4:52:38:59:5b:42:38:4b:81:4c:7b:1c: f5:ec:14:b4:0e:f7:00:bf:50:24:06:c4:7d:5f:db:fd:47:c5: 8e:d0:04:e1:23:33:03:c9:1a:a6:3e:5c:88:88:7a:8b:50:4e: 11:32:0e:2a:b3:62:7e:43:03:76:43:1c:05:e8:13:cc:32:b6: a2:03:1c:c5:15:38:06:cc:65:6b:c4:e0:68:8a:60:27:4e:24: ab:5d:93:1c:cd:4b:82:83:51:f7:90:b3:5a:2b:2d:3d:31:5b: 3d:5b:af:99:dd:6e:0f:e6:f3:9e:ec:d7:02:97:37:5e:07:37: 40:45:38:75:63:03:96:df:96:c8:01:7a:ca:a5:cb:84:ae:ec: 68:f6:31:48:b6:52:53:de:09:47:7a:55:6d:0f:c5:4c:52:b5: 28:83:2a:c1:8e:37:a1:f5:8c:0e:7f:b9:79:01:55:36:64:f6: 28:8a:25:66:7f:bb:43:27:c3:ca:42:f4:0b:74:4f:e7:92:a5: d8:1d:44:c3 -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgISAZt7o2wgoil6f0G7cIsyXnIaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjhiNGUwZWY4MTA2ZjBlMTJhYjhlNTAxZDJhYTRlMzZi NzgzYzIwHhcNMjYwMTAxMjIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODE3OTdhOGZjMWZlMzAxYWE0MWZmMDEzMjRiYzA0ZDIzMTQ0YWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA95jFeCFVh7NbzWRCA2sUDtONxx4v fS5Q4fJat7t/2/0YsbA5ocx18qEKu//o+WeEIkKiGan/Je9dqKC3Mq0ONXDyyiXn 2cUWAxWvAbKHkBJ6JCgiA+aGwwOhQRHpqm683e2HWDyYTXlQ0EO5LKSLb7Bupt2m zQ+q3PC8QlCGvWzSbLISgvK+9zKLawozgZGuVIUxGr1KK3ujEUfgDoloPhw17T6H mI/kjYwU6SaAsY8nzLBuA7z5qiRyUC6ijCLg6M2neTw3KkHS6GPzdX7rONbCL6DJ t4wWTx7LnKnmCHl9k6qwIzn65mBY0JUWUPt3b7SIwipVVDnnSKyALVW8TQIDAQAB o4ICOjCCAjYwHQYDVR0OBBYEFPgXl6j8H+MBqkH/ATJLwE0jFEr4MB8GA1UdIwQY MBaAFClotODvgQbw4Sq45QHSqk42t4PCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQt NDRmOGVkNWQ2MWQ3LzEvMS1CZVhxUHdmNHdHcVFmOEJNa3ZBVFNNVVN2Zy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTcvNDgxNjM3LTZjMWMtNDVlOC04ZmJkLTQ0ZjhlZDVkNjFk Ny8xL0tXaTA0Ty1CQnZEaEtyamxBZEtxVGphM2c4SS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBPBggrBgEFBQcBBwEB/wRAMD4wPAQCAAIwNgMHACoB6QEB CQMHACoB6QEBGQMHACoB6QEBKQMHACoB6QEBOQMHACoB6QEBSQMHACoB6QEBWTAN BgkqhkiG9w0BAQsFAAOCAQEAPvD7ytrlp3vH5QqkQUQRHh0aKM0pSWMXQoOJGTl3 Bq94txCNIzc+jP4XzpvVw/OhqpAS+Zx6yabMEoBopFI4WVtCOEuBTHsc9ewUtA73 AL9QJAbEfV/b/UfFjtAE4SMzA8kapj5ciIh6i1BOETIOKrNifkMDdkMcBegTzDK2 ogMcxRU4Bsxla8TgaIpgJ04kq12THM1LgoNR95CzWistPTFbPVuvmd1uD+bznuzX Apc3Xgc3QEU4dWMDlt+WyAF6yqXLhK7saPYxSLZSU94JR3pVbQ/FTFK1KIMqwY43 ofWMDn+5eQFVNmT2KIolZn+7QyfDykL0C3RP55Kl2B1Eww== -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:23 2026 by rpki-client