This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/1npgJu3da2DJY-gYNC0mp_D7cA8.roa File: 1npgJu3da2DJY-gYNC0mp_D7cA8.roa (raw, json) Hash identifier: hTdQzo7dggejXQGIdEULc8F5CFOgeJzoVvTDCzsb0Pw= Subject key identifier: D6:7A:60:26:ED:DD:6B:60:C9:63:E8:18:34:2D:26:A7:F0:FB:70:0F Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Certificate serial: 019B7BA36A3D307B44D1BC5C8D40287FD255 Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/1npgJu3da2DJY-gYNC0mp_D7cA8.roa Signing time: Thu 01 Jan 2026 22:17:45 +0000 ROA not before: Thu 01 Jan 2026 22:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207359 IP address blocks: 2a01:e901:10e::/48 maxlen: 48 2a01:e901:11e::/48 maxlen: 48 2a01:e901:12e::/48 maxlen: 48 2a01:e901:13e::/48 maxlen: 48 2a01:e901:14e::/48 maxlen: 48 2a01:e901:15e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:6a:3d:30:7b:44:d1:bc:5c:8d:40:28:7f:d2:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Validity Not Before: Jan 1 22:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d67a6026eddd6b60c963e818342d26a7f0fb700f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:01:5c:37:1c:fa:ab:74:49:62:21:75:23:1e: b7:15:4b:cb:15:31:53:71:8b:ad:55:97:39:74:0d: 5c:e2:95:49:f2:06:33:39:2f:b6:e8:59:d0:28:c4: 2c:b0:b3:a4:07:e5:6d:e3:ec:12:d2:0d:3b:b7:dd: 88:b0:99:68:96:3f:8d:3c:30:9f:82:7a:47:57:ec: 13:d4:b6:dc:b2:35:1f:b3:b4:71:52:c4:30:11:8e: 89:3f:73:95:51:08:03:88:37:a6:7f:b0:40:10:c5: 76:64:8b:50:85:ec:ee:91:f6:89:07:de:40:85:f2: d2:0a:ff:99:4a:f6:cd:6b:58:81:64:fc:54:d4:db: 7e:0f:5d:8a:83:3c:f0:fb:b1:93:3b:be:a7:82:02: b1:50:38:3b:e9:26:ce:7c:94:75:98:85:53:3f:e8: db:22:47:0e:26:67:b5:1c:f7:37:76:03:5a:86:d6: 45:c7:a9:90:81:4a:5f:8a:a2:ac:37:38:a6:ba:5a: 83:3a:6a:85:a7:20:18:21:fd:62:1e:83:5b:8e:fe: ec:34:ca:f2:be:16:eb:90:08:ec:8c:02:94:e5:a4: 76:7b:ab:72:9b:e1:27:73:d2:19:46:7f:f0:e1:00: 5b:4a:0d:67:96:60:67:ba:4c:a4:70:98:2c:3a:08: 08:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7A:60:26:ED:DD:6B:60:C9:63:E8:18:34:2D:26:A7:F0:FB:70:0F X509v3 Authority Key Identifier: keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/1npgJu3da2DJY-gYNC0mp_D7cA8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e901:10e::/48 2a01:e901:11e::/48 2a01:e901:12e::/48 2a01:e901:13e::/48 2a01:e901:14e::/48 2a01:e901:15e::/48 Signature Algorithm: sha256WithRSAEncryption 0f:0b:d1:ee:2c:ae:49:a0:f6:5c:c5:f5:46:0d:e1:a3:1b:9a: 34:14:d7:21:27:a9:2c:c9:3e:42:09:c4:26:69:6c:96:22:22: bd:e8:3e:0d:5b:de:a6:07:66:9c:65:72:8b:93:18:93:fd:bf: b7:4f:53:21:26:fd:37:e9:bd:5f:ac:a2:9e:47:26:5b:af:00: 34:99:57:da:e0:cb:3f:fe:f3:b7:bd:dd:ba:d5:04:a3:4c:4e: 59:a7:0f:20:94:22:a3:83:65:76:36:1b:3b:96:ca:a8:34:b0: f9:fc:a0:a8:38:c4:c1:9c:9f:df:12:d6:5c:3c:4d:6c:14:f3: b0:1e:9e:ca:75:dc:32:c2:dc:60:f4:14:ad:57:ce:ec:95:db: 74:cc:ea:cf:c6:35:97:bf:ab:f6:39:1e:60:cc:25:a3:23:15: 73:29:31:4f:ee:d9:e5:46:d6:a4:83:91:9e:08:b4:51:60:b4: 46:a7:f1:ea:c4:8f:18:40:5a:37:54:68:03:56:48:0a:fe:84: 97:ac:74:16:06:be:4d:04:e7:01:a5:00:d1:66:bc:7f:51:a2: b1:90:e1:d3:0a:44:f3:fc:88:19:e4:a1:80:81:a4:94:88:a5: 3f:d8:07:3c:d2:1a:d1:d4:53:40:ec:ac:8c:63:40:47:b7:59: 53:86:25:fe -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt7o2o9MHtE0bxcjUAof9JVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjhiNGUwZWY4MTA2ZjBlMTJhYjhlNTAxZDJhYTRlMzZi NzgzYzIwHhcNMjYwMTAxMjIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjdhNjAyNmVkZGQ2YjYwYzk2M2U4MTgzNDJkMjZhN2YwZmI3MDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgFcNxz6q3RJYiF1Ix63FUvLFTFT cYutVZc5dA1c4pVJ8gYzOS+26FnQKMQssLOkB+Vt4+wS0g07t92IsJlolj+NPDCf gnpHV+wT1LbcsjUfs7RxUsQwEY6JP3OVUQgDiDemf7BAEMV2ZItQhezukfaJB95A hfLSCv+ZSvbNa1iBZPxU1Nt+D12Kgzzw+7GTO76nggKxUDg76SbOfJR1mIVTP+jb IkcOJme1HPc3dgNahtZFx6mQgUpfiqKsNzimulqDOmqFpyAYIf1iHoNbjv7sNMry vhbrkAjsjAKU5aR2e6tym+Enc9IZRn/w4QBbSg1nlmBnukykcJgsOggIFwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFNZ6YCbt3WtgyWPoGDQtJqfw+3APMB8GA1UdIwQY MBaAFClotODvgQbw4Sq45QHSqk42t4PCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQt NDRmOGVkNWQ2MWQ3LzEvMW5wZ0p1M2RhMkRKWS1nWU5DMG1wX0Q3Y0E4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQtNDRmOGVkNWQ2MWQ3 LzEvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAAjA2AwcAKgHpAQEO AwcAKgHpAQEeAwcAKgHpAQEuAwcAKgHpAQE+AwcAKgHpAQFOAwcAKgHpAQFeMA0G CSqGSIb3DQEBCwUAA4IBAQAPC9HuLK5JoPZcxfVGDeGjG5o0FNchJ6ksyT5CCcQm aWyWIiK96D4NW96mB2acZXKLkxiT/b+3T1MhJv036b1frKKeRyZbrwA0mVfa4Ms/ /vO3vd261QSjTE5Zpw8glCKjg2V2Nhs7lsqoNLD5/KCoOMTBnJ/fEtZcPE1sFPOw Hp7Kddwywtxg9BStV87sldt0zOrPxjWXv6v2OR5gzCWjIxVzKTFP7tnlRtakg5Ge CLRRYLRGp/HqxI8YQFo3VGgDVkgK/oSXrHQWBr5NBOcBpQDRZrx/UaKxkOHTCkTz /IgZ5KGAgaSUiKU/2Ac80hrR1FNA7KyMY0BHt1lThiX+ -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:31 2026 by rpki-client