This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/1SNNaJd-_nZGjSy8KhTgEu_TWEY.roa File: 1SNNaJd-_nZGjSy8KhTgEu_TWEY.roa (raw, json) Hash identifier: DTRv2jcApfzQZK3kJVDp954M/vKt+twRMmk7r67fyZA= Subject key identifier: D5:23:4D:68:97:7E:FE:76:46:8D:2C:BC:2A:14:E0:12:EF:D3:58:46 Certificate issuer: /CN=4cbfd3e72d4a0396f95347336b42678f68c26430 Certificate serial: 019BEAA5266D639F01C267D35E1F35E606F4 Authority key identifier: 4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/1SNNaJd-_nZGjSy8KhTgEu_TWEY.roa Signing time: Fri 23 Jan 2026 11:37:30 +0000 ROA not before: Fri 23 Jan 2026 11:37:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199984 IP address blocks: 2a04:8340:8340::/48 maxlen: 48 2a04:8340:8341::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:a5:26:6d:63:9f:01:c2:67:d3:5e:1f:35:e6:06:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cbfd3e72d4a0396f95347336b42678f68c26430 Validity Not Before: Jan 23 11:37:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5234d68977efe76468d2cbc2a14e012efd35846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7a:27:3a:72:a5:02:3c:7d:4d:06:c8:da:42: 27:65:3a:18:1a:88:cb:6e:0f:a8:9b:c8:af:8d:54: 31:0b:f6:55:f1:0c:55:89:d9:ff:98:19:7d:fb:d5: 21:01:8d:d0:ce:b8:51:a3:74:23:01:ae:7b:0e:40: 46:b2:ec:25:09:e2:7f:08:5f:cb:fd:09:11:8f:04: 7e:6c:19:d4:5d:37:07:30:36:bd:f4:13:0d:df:ab: 86:e9:b8:20:f5:ac:9c:83:95:ff:30:ea:42:00:5c: 4a:82:d9:fe:c8:6f:a2:49:24:5b:64:d9:dc:d6:1a: 48:6e:fd:37:8f:e1:16:8b:6a:4c:7e:64:0c:bd:7f: 83:1d:11:f2:21:64:ff:f4:bf:5e:39:70:06:d6:1a: 97:38:5c:9b:00:85:b8:25:58:30:33:8b:bd:3f:a9: ef:d0:f1:47:17:c9:11:93:d0:47:9a:7e:e2:38:93: a0:5c:64:43:32:30:7a:8b:f6:89:9c:ac:64:c6:41: fe:87:10:1c:f7:65:6f:74:86:c2:6e:7c:d3:0f:20: 5f:ad:84:5f:a6:81:bf:4f:58:39:c7:d2:0f:6b:af: 72:50:49:35:e8:43:06:0a:a0:b2:52:30:c6:3e:d1: f1:bb:ca:cf:77:94:07:d4:75:aa:16:6c:4c:02:dd: be:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:23:4D:68:97:7E:FE:76:46:8D:2C:BC:2A:14:E0:12:EF:D3:58:46 X509v3 Authority Key Identifier: keyid:4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/1SNNaJd-_nZGjSy8KhTgEu_TWEY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:8340:8340::/47 Signature Algorithm: sha256WithRSAEncryption 3f:ac:68:4a:c6:3a:e9:bc:75:0b:7f:8b:8d:91:82:2e:40:3b: da:97:c0:19:c4:c6:fc:19:40:14:bd:6f:5b:cb:ea:76:c4:45: ac:e9:ea:fc:ad:d0:4d:69:c2:ff:5e:97:fd:05:50:d1:9a:a4: 4a:50:af:d2:c2:9a:8f:ac:cc:cd:d1:6a:f3:e5:7b:21:2e:b5: 3a:18:3b:46:6b:33:14:78:76:51:0c:0f:d2:fa:93:6a:7a:09: f3:c6:26:97:ee:59:84:b5:ad:2e:cb:bd:d8:99:1a:d4:a5:ce: a9:de:08:34:8b:6c:8e:c7:21:6f:19:12:fb:72:f2:ba:7a:54: 96:b4:ab:dc:aa:7e:2c:7f:7a:49:93:1a:90:7f:11:de:16:25: 64:f9:ca:91:9c:50:fd:5a:87:42:68:0c:d0:58:54:d2:f9:7f: 71:cc:0c:40:ba:b2:5e:07:34:53:f7:c6:4f:29:13:d4:22:55: a4:ee:59:19:78:90:cc:f1:6d:fb:54:2d:79:07:80:b9:0f:9e: 72:16:60:0c:1d:4d:56:61:86:04:71:7b:8e:a6:4d:06:0e:af: eb:f1:9b:f4:76:a8:98:d9:ba:58:17:18:41:7a:15:ae:c1:8c: dc:78:18:06:5b:ad:64:9c:83:58:93:3e:b3:82:57:5e:64:c4: a5:36:e7:74 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZvqpSZtY58BwmfTXh815gb0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYmZkM2U3MmQ0YTAzOTZmOTUzNDczMzZiNDI2NzhmNjhj MjY0MzAwHhcNMjYwMTIzMTEzNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTIzNGQ2ODk3N2VmZTc2NDY4ZDJjYmMyYTE0ZTAxMmVmZDM1ODQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23onOnKlAjx9TQbI2kInZToYGojL bg+om8ivjVQxC/ZV8QxVidn/mBl9+9UhAY3QzrhRo3QjAa57DkBGsuwlCeJ/CF/L /QkRjwR+bBnUXTcHMDa99BMN36uG6bgg9aycg5X/MOpCAFxKgtn+yG+iSSRbZNnc 1hpIbv03j+EWi2pMfmQMvX+DHRHyIWT/9L9eOXAG1hqXOFybAIW4JVgwM4u9P6nv 0PFHF8kRk9BHmn7iOJOgXGRDMjB6i/aJnKxkxkH+hxAc92VvdIbCbnzTDyBfrYRf poG/T1g5x9IPa69yUEk16EMGCqCyUjDGPtHxu8rPd5QH1HWqFmxMAt2+bwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNUjTWiXfv52Ro0svCoU4BLv01hGMB8GA1UdIwQY MBaAFEy/0+ctSgOW+VNHM2tCZ49owmQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVExfVDV5MUtBNWI1VTBjemEwSm5qMmpDWkRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iNTczM2ItMzg5MS00NDliLTk5NTAt ZmY2MGUyMThlZDQxLzEvMVNOTmFKZC1fblpHalN5OEtoVGdFdV9UV0VZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iNTczM2ItMzg5MS00NDliLTk5NTAtZmY2MGUyMThlZDQx LzEvVExfVDV5MUtBNWI1VTBjemEwSm5qMmpDWkRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgSDQINA MA0GCSqGSIb3DQEBCwUAA4IBAQA/rGhKxjrpvHULf4uNkYIuQDval8AZxMb8GUAU vW9by+p2xEWs6er8rdBNacL/Xpf9BVDRmqRKUK/SwpqPrMzN0Wrz5XshLrU6GDtG azMUeHZRDA/S+pNqegnzxiaX7lmEta0uy73YmRrUpc6p3gg0i2yOxyFvGRL7cvK6 elSWtKvcqn4sf3pJkxqQfxHeFiVk+cqRnFD9WodCaAzQWFTS+X9xzAxAurJeBzRT 98ZPKRPUIlWk7lkZeJDM8W37VC15B4C5D55yFmAMHU1WYYYEcXuOpk0GDq/r8Zv0 dqiY2bpYFxhBehWuwYzceBgGW61knINYkz6zgldeZMSlNud0 -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:45 2026 by rpki-client