This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/1-k1xGgOg7cmIBXcd0nrvnJw4RcA.roa File: 1-k1xGgOg7cmIBXcd0nrvnJw4RcA.roa (raw, json) Hash identifier: anNr7e/JBnUYMhLfqMEUI0X/lqFcUzw3+8qk1SByStk= Subject key identifier: FA:4D:71:1A:03:A0:ED:C9:88:05:77:1D:D2:7A:EF:9C:9C:38:45:C0 Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Certificate serial: 019B7A5B670C298D0E965643919622AF3C8A Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/1-k1xGgOg7cmIBXcd0nrvnJw4RcA.roa Signing time: Thu 01 Jan 2026 16:19:29 +0000 ROA not before: Thu 01 Jan 2026 16:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2043 IP address blocks: 2001:67c:1d4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:67:0c:29:8d:0e:96:56:43:91:96:22:af:3c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Validity Not Before: Jan 1 16:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa4d711a03a0edc98805771dd27aef9c9c3845c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:17:60:ce:45:4c:75:62:08:c1:33:af:02:ea: d1:01:5e:bc:86:03:02:06:ec:e5:8f:ef:e5:42:c8: 75:7b:ae:88:8a:0c:f9:8f:6e:d3:dd:82:71:1f:75: 51:25:ea:bc:0e:ef:08:aa:7e:bd:d9:ba:24:ad:70: 6b:60:5a:93:cb:09:c0:56:ea:b3:16:b1:51:a3:4b: fe:ad:d0:e9:a4:8b:96:8a:53:2e:94:ca:36:47:c7: 78:90:a8:89:97:c5:84:a8:a5:2e:a3:85:41:58:42: 05:2a:1c:a4:0b:03:a9:40:cd:d0:2f:a9:72:6f:7e: 53:8c:61:7a:05:22:ba:ca:8c:a4:ed:5f:1c:ac:cd: 0d:01:ce:de:45:a6:99:03:1f:64:2e:ce:ad:9a:d9: a9:f0:00:fc:5f:c7:bc:06:0d:a4:70:ab:8f:22:b2: 36:49:f8:f7:e0:70:4e:a2:fe:00:ea:e0:dd:4f:a6: 52:f6:69:7a:24:c0:da:1d:16:89:b1:2c:a6:84:97: 7d:c8:6f:44:a2:10:46:82:99:84:cd:85:2d:04:10: bf:fe:5d:cc:e9:e0:e1:d1:1e:77:7a:95:8e:3f:ec: 02:ba:6b:19:70:92:5d:ab:40:4e:0a:3a:0a:0a:3b: 4e:ba:25:3f:a7:59:72:19:73:31:18:a5:8f:f6:cf: e8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4D:71:1A:03:A0:ED:C9:88:05:77:1D:D2:7A:EF:9C:9C:38:45:C0 X509v3 Authority Key Identifier: keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/1-k1xGgOg7cmIBXcd0nrvnJw4RcA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1d4::/48 Signature Algorithm: sha256WithRSAEncryption 31:11:ce:b9:16:aa:02:1e:16:11:33:2d:99:71:43:1e:c1:6f: 14:e4:0b:fa:07:6e:fe:ec:42:0e:c7:51:4e:ae:9e:9d:52:1e: 79:57:78:50:fe:cf:fd:1c:f3:02:3d:a1:04:ba:68:e0:c9:73: 57:64:35:8f:cb:6c:11:c5:47:53:d8:1f:cf:9d:f1:36:68:ab: 2c:03:12:6b:29:01:64:e9:75:8d:bd:29:5f:00:cb:07:7b:69: d2:f2:2e:72:18:3e:88:8b:22:42:df:91:08:c8:88:99:73:64: d7:0c:70:11:a8:ab:98:4b:88:f8:4a:c4:02:8a:ba:23:58:5e: 03:68:30:1c:b4:51:fa:0d:68:72:27:c1:ea:3b:b8:c0:a0:19: 0a:a0:c6:aa:c9:86:18:70:9f:39:3c:71:16:9c:4f:7d:88:6c: 1f:ea:94:3b:12:64:9a:53:7b:6d:13:1c:d8:e7:50:34:2a:da: 75:ec:c0:c9:22:e8:04:67:75:bc:5e:5e:be:ee:20:24:6b:c9: 6f:4b:5d:e2:64:e1:9c:18:e4:2a:21:94:46:76:5b:44:f8:af: 83:52:d3:d3:2d:8b:8f:30:60:da:d6:df:be:a3:7f:00:09:37: 40:98:9f:fc:55:92:73:10:e9:37:5b:44:7a:34:b4:de:d1:a0: 2f:39:18:ba -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt6W2cMKY0OllZDkZYirzyKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOTgwNjBmMWJmMjJmMDk5OWNiMDcxYjFiNDI2OTZkYmM0 M2UxMGMwHhcNMjYwMTAxMTYxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTRkNzExYTAzYTBlZGM5ODgwNTc3MWRkMjdhZWY5YzljMzg0NWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BdgzkVMdWIIwTOvAurRAV68hgMC Buzlj+/lQsh1e66Iigz5j27T3YJxH3VRJeq8Du8Iqn692bokrXBrYFqTywnAVuqz FrFRo0v+rdDppIuWilMulMo2R8d4kKiJl8WEqKUuo4VBWEIFKhykCwOpQM3QL6ly b35TjGF6BSK6yoyk7V8crM0NAc7eRaaZAx9kLs6tmtmp8AD8X8e8Bg2kcKuPIrI2 Sfj34HBOov4A6uDdT6ZS9ml6JMDaHRaJsSymhJd9yG9EohBGgpmEzYUtBBC//l3M 6eDh0R53epWOP+wCumsZcJJdq0BOCjoKCjtOuiU/p1lyGXMxGKWP9s/oCQIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPpNcRoDoO3JiAV3HdJ675ycOEXAMB8GA1UdIwQY MBaAFMOYBg8b8i8JmcsHGxtCaW28Q+EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAt YzkyN2I4YzJjN2M0LzEvMS1rMXhHZ09nN2NtSUJYY2QwbnJ2bkp3NFJjQS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYjAvM2JmYzMxLWRjMzItNDU0MS04NDYwLWM5MjdiOGMyYzdj NC8xL3c1Z0dEeHZ5THdtWnl3Y2JHMEpwYmJ4RDRRdy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwB 1DANBgkqhkiG9w0BAQsFAAOCAQEAMRHOuRaqAh4WETMtmXFDHsFvFOQL+gdu/uxC DsdRTq6enVIeeVd4UP7P/RzzAj2hBLpo4MlzV2Q1j8tsEcVHU9gfz53xNmirLAMS aykBZOl1jb0pXwDLB3tp0vIuchg+iIsiQt+RCMiImXNk1wxwEairmEuI+ErEAoq6 I1heA2gwHLRR+g1ocifB6ju4wKAZCqDGqsmGGHCfOTxxFpxPfYhsH+qUOxJkmlN7 bRMc2OdQNCradezAySLoBGd1vF5evu4gJGvJb0td4mThnBjkKiGURnZbRPivg1LT 0y2LjzBg2tbfvqN/AAk3QJif/FWScxDpN1tEejS03tGgLzkYug== -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:12 2026 by rpki-client