This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1vQkcMHCkliQRKl9aZ_MI-G0oZg.roa File: 1vQkcMHCkliQRKl9aZ_MI-G0oZg.roa (raw, json) Hash identifier: jJ0Z9gvnHkxzvx7TbvN1q4EtCEWPz3vfe0uvFzwej1Y= Subject key identifier: D6:F4:24:70:C1:C2:92:58:90:44:A9:7D:69:9F:CC:23:E1:B4:A1:98 Certificate issuer: /CN=f95f5a35738c3229e2f4394500c322c8275a97a2 Certificate serial: 019B7F15A307ABE12FA478F83CD70E4C2B5F Authority key identifier: F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1vQkcMHCkliQRKl9aZ_MI-G0oZg.roa Signing time: Fri 02 Jan 2026 14:21:23 +0000 ROA not before: Fri 02 Jan 2026 14:21:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212462 IP address blocks: 193.3.129.0/24 maxlen: 24 2a10:fc00::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a3:07:ab:e1:2f:a4:78:f8:3c:d7:0e:4c:2b:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f95f5a35738c3229e2f4394500c322c8275a97a2 Validity Not Before: Jan 2 14:21:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6f42470c1c292589044a97d699fcc23e1b4a198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:aa:36:64:95:42:ba:cf:bc:f0:d1:73:b5:fd: f7:63:40:4c:ba:19:75:b3:c9:10:8a:4b:84:13:41: cc:cc:16:11:e2:0c:05:55:ce:e6:2c:d6:32:14:6e: 17:fb:10:bc:8e:56:41:9d:fd:fb:72:d7:5d:c5:5b: 0f:c3:db:55:66:d0:a1:51:ae:4c:f2:1a:a1:9e:ab: 7d:e3:9e:3d:e4:2c:14:86:44:0d:66:d4:d7:d1:42: 2d:8c:f8:a5:15:a7:04:d7:ca:6f:58:f8:c9:1e:ec: 90:6f:1c:03:d9:fe:ad:ae:51:cd:0f:56:61:88:54: c4:00:4c:8d:63:07:44:f4:7d:af:04:a6:e8:7b:07: 85:73:5a:58:94:cb:75:d9:65:24:e1:1d:a6:68:2c: 0e:78:7a:f2:e3:a5:8a:a4:3c:ea:b0:d9:bd:cb:2d: ee:2f:48:65:b9:78:ba:67:39:b2:c7:c1:49:98:60: 98:89:02:7a:5b:c2:27:dd:ae:52:b1:f6:78:cb:0e: f4:37:5c:5a:33:d6:53:75:b4:9d:a3:4c:41:c6:ce: 5c:72:70:90:6e:70:cc:64:0b:82:df:74:f6:83:8e: 04:25:3b:c3:1c:75:45:c9:fb:93:60:86:92:57:f2: ba:93:27:4f:c9:91:ae:04:3b:1a:1a:60:12:a1:6e: 43:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F4:24:70:C1:C2:92:58:90:44:A9:7D:69:9F:CC:23:E1:B4:A1:98 X509v3 Authority Key Identifier: keyid:F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1vQkcMHCkliQRKl9aZ_MI-G0oZg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.3.129.0/24 IPv6: 2a10:fc00::/29 Signature Algorithm: sha256WithRSAEncryption 0f:d2:44:91:c1:c1:c1:26:c7:bf:31:e3:fb:b0:7d:71:7d:67: b7:c5:50:21:d6:96:5f:63:8b:ce:9f:39:d8:8e:54:75:7a:e1: 49:d5:5b:11:f6:80:b4:b4:25:e5:38:c2:e6:1b:f2:a0:1f:60: d2:2e:f4:62:69:77:d0:c2:b8:4c:db:63:bb:05:bd:5a:8f:88: 85:a8:80:cc:e2:fc:a6:76:87:d4:15:6f:71:8b:db:9d:bf:f9: 3b:c4:74:4b:e2:87:79:ca:c6:4b:75:67:be:ed:f5:04:3a:fd: 84:e6:20:77:2d:d3:ef:38:34:e1:24:89:ac:a2:b6:79:b9:de: b8:0b:e2:b4:9e:ed:7c:3e:07:03:e2:82:24:f3:46:6d:96:fa: a4:e5:83:89:4e:60:57:fc:0f:b3:16:f5:fc:0e:f8:02:41:37: 53:11:fd:28:8e:f7:31:59:9c:57:56:e9:ed:0f:c1:94:de:f0: 95:5f:e7:1d:4a:f2:c7:b2:86:40:f1:fc:45:2b:68:fe:ca:ff: 57:f0:7c:fa:91:6a:c3:b1:fc:8c:37:25:fe:fb:a0:37:9b:b3: 98:0d:b9:ad:54:70:59:f7:0d:39:a4:71:0a:01:0c:5b:09:e6: 7a:11:e7:b3:c1:92:82:3a:29:a6:51:fc:6b:ba:25:27:ed:70: 4d:02:8d:d7 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/FaMHq+EvpHj4PNcOTCtfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NWY1YTM1NzM4YzMyMjllMmY0Mzk0NTAwYzMyMmM4Mjc1 YTk3YTIwHhcNMjYwMTAyMTQyMTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmY0MjQ3MGMxYzI5MjU4OTA0NGE5N2Q2OTlmY2MyM2UxYjRhMTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26o2ZJVCus+88NFztf33Y0BMuhl1 s8kQikuEE0HMzBYR4gwFVc7mLNYyFG4X+xC8jlZBnf37ctddxVsPw9tVZtChUa5M 8hqhnqt945495CwUhkQNZtTX0UItjPilFacE18pvWPjJHuyQbxwD2f6trlHND1Zh iFTEAEyNYwdE9H2vBKboeweFc1pYlMt12WUk4R2maCwOeHry46WKpDzqsNm9yy3u L0hluXi6Zzmyx8FJmGCYiQJ6W8In3a5SsfZ4yw70N1xaM9ZTdbSdo0xBxs5ccnCQ bnDMZAuC33T2g44EJTvDHHVFyfuTYIaSV/K6kydPyZGuBDsaGmASoW5DRwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNb0JHDBwpJYkESpfWmfzCPhtKGYMB8GA1UdIwQY MBaAFPlfWjVzjDIp4vQ5RQDDIsgnWpeiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1WOWFOWE9NTWluaTlEbEZBTU1peUNkYWw2SS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvZDQ5YzIxLWRlYWQtNGRjNC05NDc4 LWExMGI3Y2M5OGJjOC8xLzF2UWtjTUhDa2xpUVJLbDlhWl9NSS1HMG9aZy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZDEvZDQ5YzIxLWRlYWQtNGRjNC05NDc4LWExMGI3Y2M5OGJj OC8xLzEtVjlhTlhPTU1pbmk5RGxGQU1NaXlDZGFsNkkuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBADBA4Ew DQQCAAIwBwMFAyoQ/AAwDQYJKoZIhvcNAQELBQADggEBAA/SRJHBwcEmx78x4/uw fXF9Z7fFUCHWll9ji86fOdiOVHV64UnVWxH2gLS0JeU4wuYb8qAfYNIu9GJpd9DC uEzbY7sFvVqPiIWogMzi/KZ2h9QVb3GL252/+TvEdEvih3nKxkt1Z77t9QQ6/YTm IHct0+84NOEkiayitnm53rgL4rSe7Xw+BwPigiTzRm2W+qTlg4lOYFf8D7MW9fwO +AJBN1MR/SiO9zFZnFdW6e0PwZTe8JVf5x1K8seyhkDx/EUraP7K/1fwfPqRasOx /Iw3Jf77oDebs5gNua1UcFn3DTmkcQoBDFsJ5noR57PBkoI6KaZR/Gu6JSftcE0C jdc= -----END CERTIFICATE-----Generated at Mon Jan 26 15:01:43 2026 by rpki-client