This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/H3d0QP653F6Jo-epVSXBiVH1h6k.roa File: H3d0QP653F6Jo-epVSXBiVH1h6k.roa (raw, json) Hash identifier: B2NZF4jz4UwnLzA3KbDxjNp0EF7Qv4Th+B09WImKi2I= Subject key identifier: 1F:77:74:40:FE:B9:DC:5E:89:A3:E7:A9:55:25:C1:89:51:F5:87:A9 Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Certificate serial: 019B7F152535A7E34B7B1AA51792ED842F67 Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/H3d0QP653F6Jo-epVSXBiVH1h6k.roa Signing time: Fri 02 Jan 2026 14:20:50 +0000 ROA not before: Fri 02 Jan 2026 14:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212520 IP address blocks: 2a05:4741:25::/48 maxlen: 48 2a05:4741:26::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:25:35:a7:e3:4b:7b:1a:a5:17:92:ed:84:2f:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Validity Not Before: Jan 2 14:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f777440feb9dc5e89a3e7a95525c18951f587a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bb:44:0e:3d:d2:b7:e7:fa:1c:3c:98:71:aa: 91:7a:91:d5:33:8b:40:15:6c:ae:21:ea:5f:ba:73: 0e:ed:52:a8:06:45:c5:98:0a:89:05:f4:9b:22:ee: 84:5d:0e:93:e8:59:c6:85:73:73:55:96:1a:7a:29: 40:8a:c2:b9:8f:24:2e:e9:34:ec:6e:63:40:d9:6a: 66:0b:b4:74:3c:c1:e3:ab:8f:b8:15:80:ab:33:8d: 14:bc:2d:c6:62:67:85:68:43:ef:10:33:b8:ab:31: 06:8e:f2:8f:a6:6f:1d:07:83:16:87:9b:8c:3e:ce: a4:71:55:e9:46:d8:58:ad:25:66:6f:76:26:40:97: b6:68:47:01:a0:91:04:69:dd:9b:21:d1:d7:71:ae: b2:24:e7:89:4b:aa:1d:14:11:a9:38:0d:13:24:f2: 26:74:ea:2c:3b:c4:43:49:84:4a:e5:a8:28:f0:a1: 24:97:33:78:22:e8:36:a7:3b:48:b1:df:65:ce:f8: 59:fb:fa:0b:c8:ba:e3:7a:e6:c7:8e:cf:f8:f7:56: 0d:87:69:73:47:f7:29:c5:15:ca:72:96:f7:2b:27: 94:58:33:ae:f0:90:ca:d1:5e:79:1f:d6:a3:6b:d1: ea:d5:2b:a2:6a:f1:4e:98:a6:93:fb:fa:94:ee:95: e6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:77:74:40:FE:B9:DC:5E:89:A3:E7:A9:55:25:C1:89:51:F5:87:A9 X509v3 Authority Key Identifier: keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/H3d0QP653F6Jo-epVSXBiVH1h6k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:4741:25::-2a05:4741:26:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption da:f9:5e:55:7c:10:9b:3a:50:34:5b:7a:04:95:d1:cd:a5:ac: 7e:d7:ab:c8:6c:ba:b9:db:b1:eb:38:5d:77:90:d3:d7:90:51: 7f:38:75:40:e1:b5:98:d2:cc:4c:41:24:56:2e:fb:47:b8:0f: ad:9d:97:ed:86:e7:74:5f:20:ca:7d:1b:c4:2f:37:ec:1b:35: 46:51:52:94:ed:19:60:da:36:65:e7:f5:28:3f:b5:e6:bb:c7: b4:ea:a4:db:98:84:12:b2:f2:c9:90:2b:16:44:cb:c5:c7:28: 37:9f:92:28:ad:58:b5:81:26:c3:1c:e3:78:d2:8b:61:3f:a6: 6d:fb:e5:eb:c2:73:6c:76:89:6d:d2:ad:c3:01:88:bb:97:e6: 04:4c:b0:da:43:29:80:6a:84:d9:69:e8:9b:d8:e9:b9:f4:5f: da:a5:bc:5b:7c:c6:d4:fb:6e:fc:1d:6f:46:cc:98:79:54:40: 35:c8:3d:0f:6e:50:6b:75:29:a7:6f:06:5e:4a:99:3d:90:16: 0f:51:10:0e:09:20:99:2d:19:ab:62:98:03:1a:b3:e5:5a:ce: f3:6c:5c:25:7e:d6:b3:fd:bf:d1:4b:50:35:13:0e:e7:85:9e: 1a:f7:e4:62:a2:a9:eb:90:b6:27:4f:3a:58:7d:3f:72:9a:81: 02:a7:4f:6a -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt/FSU1p+NLexqlF5LthC9nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDc0YWM3Y2E4NWUwOWMyZDQ4YjMzZTdiZjY2ZjhlZDc2 NGRlMGYwHhcNMjYwMTAyMTQyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjc3NzQ0MGZlYjlkYzVlODlhM2U3YTk1NTI1YzE4OTUxZjU4N2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2btEDj3St+f6HDyYcaqRepHVM4tA FWyuIepfunMO7VKoBkXFmAqJBfSbIu6EXQ6T6FnGhXNzVZYaeilAisK5jyQu6TTs bmNA2WpmC7R0PMHjq4+4FYCrM40UvC3GYmeFaEPvEDO4qzEGjvKPpm8dB4MWh5uM Ps6kcVXpRthYrSVmb3YmQJe2aEcBoJEEad2bIdHXca6yJOeJS6odFBGpOA0TJPIm dOosO8RDSYRK5ago8KEklzN4Iug2pztIsd9lzvhZ+/oLyLrjeubHjs/491YNh2lz R/cpxRXKcpb3KyeUWDOu8JDK0V55H9aja9Hq1SuiavFOmKaT+/qU7pXmDwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFB93dED+udxeiaPnqVUlwYlR9YepMB8GA1UdIwQY MBaAFDJHSsfKheCcLUizPnv2b47XZN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzkt MTJlYzIyYzljNWEyLzEvSDNkMFFQNjUzRjZKby1lcFZTWEJpVkgxaDZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzktMTJlYzIyYzljNWEy LzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqBUdB ACUDBwAqBUdBACYwDQYJKoZIhvcNAQELBQADggEBANr5XlV8EJs6UDRbegSV0c2l rH7Xq8hsurnbses4XXeQ09eQUX84dUDhtZjSzExBJFYu+0e4D62dl+2G53RfIMp9 G8QvN+wbNUZRUpTtGWDaNmXn9Sg/tea7x7TqpNuYhBKy8smQKxZEy8XHKDefkiit WLWBJsMc43jSi2E/pm375evCc2x2iW3SrcMBiLuX5gRMsNpDKYBqhNlp6JvY6bn0 X9qlvFt8xtT7bvwdb0bMmHlUQDXIPQ9uUGt1KadvBl5KmT2QFg9REA4JIJktGati mAMas+VazvNsXCV+1rP9v9FLUDUTDueFnhr35GKiqeuQtidPOlh9P3KagQKnT2o= -----END CERTIFICATE-----Generated at Sun Jan 25 14:40:23 2026 by rpki-client