This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/lWQXyxEJYv9OPJsRSSX1CCPbFb8.roa File: lWQXyxEJYv9OPJsRSSX1CCPbFb8.roa (raw, json) Hash identifier: qyL/Gv6WkVcsE18337JVKs2VK9z6GTYDQ6GMJ2m3/WQ= Subject key identifier: 95:64:17:CB:11:09:62:FF:4E:3C:9B:11:49:25:F5:08:23:DB:15:BF Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Certificate serial: 019B7F1524DB296FED932DF4A322CE3D027E Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/lWQXyxEJYv9OPJsRSSX1CCPbFb8.roa Signing time: Fri 02 Jan 2026 14:20:50 +0000 ROA not before: Fri 02 Jan 2026 14:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208393 IP address blocks: 2a05:4741:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:24:db:29:6f:ed:93:2d:f4:a3:22:ce:3d:02:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Validity Not Before: Jan 2 14:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=956417cb110962ff4e3c9b114925f50823db15bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:65:db:4a:75:67:d6:50:23:e6:e4:6e:2f:b9: d2:05:ca:1a:8b:e6:49:2f:12:ef:e3:89:2b:c9:81: dc:95:e8:4f:d9:1a:06:4e:ee:36:a8:77:44:12:e8: df:1d:b2:74:33:bf:59:bb:fb:d4:33:71:45:ad:30: e4:ca:c2:7d:3d:7b:37:89:ed:36:1d:88:c7:38:09: 93:4a:b4:e5:25:13:e6:71:9e:eb:5d:16:17:05:d7: fb:6e:ed:00:5d:64:0e:fe:d7:51:01:08:9c:32:d2: 52:8c:81:5a:bf:37:3a:18:e8:be:29:c1:b9:fb:2d: eb:5a:47:a5:bc:1a:04:d5:68:6d:7f:b5:a4:1c:45: 50:2d:05:9d:8f:3d:79:e0:97:b9:43:95:d7:81:95: 37:f4:49:d4:56:d7:35:28:71:f9:f6:7c:aa:cf:99: ed:bf:fe:ab:09:0c:f1:a8:19:87:95:cb:d5:2b:47: 66:7a:6c:93:be:22:3f:84:75:dd:86:e4:50:82:5f: 91:76:a4:66:f1:c0:7c:36:7f:7e:49:c5:c3:f8:73: 38:56:ca:a1:d7:8a:5c:e8:ab:ef:29:c5:f0:ed:cc: 80:55:2a:23:d0:ee:3f:6d:2b:d1:5f:6c:5b:c6:d4: cb:34:fd:49:a7:21:4a:5d:f4:c5:54:6b:54:9a:31: 6d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:64:17:CB:11:09:62:FF:4E:3C:9B:11:49:25:F5:08:23:DB:15:BF X509v3 Authority Key Identifier: keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/lWQXyxEJYv9OPJsRSSX1CCPbFb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:4741:f::/48 Signature Algorithm: sha256WithRSAEncryption 74:25:93:1a:96:95:57:25:c0:42:c0:15:a0:9f:24:3f:ca:8f: 37:44:f7:f9:8f:05:e4:e9:42:26:a8:9f:eb:f6:70:12:99:a7: a6:3b:d4:38:82:cf:8e:e5:78:8e:ee:d0:81:ed:12:b6:65:80: 4f:bb:b2:27:5a:95:db:c6:d2:d2:3c:50:93:90:8a:f5:95:72: 5d:76:49:6f:d5:c6:af:61:dc:08:06:a5:18:19:7c:02:74:ab: 23:60:ff:0f:cb:30:d8:7b:f7:08:64:5b:15:9a:92:16:e1:5b: 2f:1d:52:e2:3b:26:9f:2a:72:ba:86:33:ca:83:75:b9:e5:d0: a9:79:ca:ac:0a:79:ae:26:5f:eb:af:14:41:17:b0:b0:e2:b3: c6:77:79:dc:45:09:11:43:e9:e4:f7:d1:f2:52:68:16:28:bb: 3d:29:da:c5:4c:36:0f:e8:c3:06:74:8f:25:65:51:8c:e0:37: 33:22:99:37:a5:be:3f:61:d8:a3:a2:fe:0f:04:55:98:d9:92: 4a:9d:32:ba:28:e4:f1:a6:c9:a9:c9:7d:34:3b:be:9a:2d:41: 05:4b:6e:d1:84:d8:84:80:5d:71:40:39:5b:7e:42:0e:42:f7: 03:37:3f:93:d1:ce:be:c0:1d:6e:e2:d7:90:d7:b5:26:4c:99: 86:f7:0c:fb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FSTbKW/tky30oyLOPQJ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDc0YWM3Y2E4NWUwOWMyZDQ4YjMzZTdiZjY2ZjhlZDc2 NGRlMGYwHhcNMjYwMTAyMTQyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTY0MTdjYjExMDk2MmZmNGUzYzliMTE0OTI1ZjUwODIzZGIxNWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmXbSnVn1lAj5uRuL7nSBcoai+ZJ LxLv44kryYHclehP2RoGTu42qHdEEujfHbJ0M79Zu/vUM3FFrTDkysJ9PXs3ie02 HYjHOAmTSrTlJRPmcZ7rXRYXBdf7bu0AXWQO/tdRAQicMtJSjIFavzc6GOi+KcG5 +y3rWkelvBoE1Whtf7WkHEVQLQWdjz154Je5Q5XXgZU39EnUVtc1KHH59nyqz5nt v/6rCQzxqBmHlcvVK0dmemyTviI/hHXdhuRQgl+RdqRm8cB8Nn9+ScXD+HM4Vsqh 14pc6KvvKcXw7cyAVSoj0O4/bSvRX2xbxtTLNP1JpyFKXfTFVGtUmjFtgQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJVkF8sRCWL/TjybEUkl9Qgj2xW/MB8GA1UdIwQY MBaAFDJHSsfKheCcLUizPnv2b47XZN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzkt MTJlYzIyYzljNWEyLzEvbFdRWHl4RUpZdjlPUEpzUlNTWDFDQ1BiRmI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzktMTJlYzIyYzljNWEy LzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgVHQQAP MA0GCSqGSIb3DQEBCwUAA4IBAQB0JZMalpVXJcBCwBWgnyQ/yo83RPf5jwXk6UIm qJ/r9nASmaemO9Q4gs+O5XiO7tCB7RK2ZYBPu7InWpXbxtLSPFCTkIr1lXJddklv 1cavYdwIBqUYGXwCdKsjYP8PyzDYe/cIZFsVmpIW4VsvHVLiOyafKnK6hjPKg3W5 5dCpecqsCnmuJl/rrxRBF7Cw4rPGd3ncRQkRQ+nk99HyUmgWKLs9KdrFTDYP6MMG dI8lZVGM4DczIpk3pb4/Ydijov4PBFWY2ZJKnTK6KOTxpsmpyX00O76aLUEFS27R hNiEgF1xQDlbfkIOQvcDNz+T0c6+wB1u4teQ17UmTJmG9wz7 -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:41 2026 by rpki-client