This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/1-SaWdtO8pdOQET4wsZV_w5fiyWk.roa File: 1-SaWdtO8pdOQET4wsZV_w5fiyWk.roa (raw, json) Hash identifier: zaJRPeqwzt+WfSQ7RYOKb5vKsolyWyvGl3t7Hee8+w0= Subject key identifier: F9:26:96:76:D3:BC:A5:D3:90:11:3E:30:B1:95:7F:C3:97:E2:C9:69 Certificate issuer: /CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09 Certificate serial: 019B77C6625162891A3C2D901FF79708B732 Authority key identifier: D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/1-SaWdtO8pdOQET4wsZV_w5fiyWk.roa Signing time: Thu 01 Jan 2026 04:17:28 +0000 ROA not before: Thu 01 Jan 2026 04:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211895 IP address blocks: 2a07:52c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:62:51:62:89:1a:3c:2d:90:1f:f7:97:08:b7:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09 Validity Not Before: Jan 1 04:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9269676d3bca5d390113e30b1957fc397e2c969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:20:54:ce:78:90:be:12:3b:bc:96:ea:b2:c7: 98:29:22:30:80:bb:e4:8c:cf:80:34:4f:8a:07:41: 55:e1:8e:64:d6:bf:e7:06:53:52:1e:26:31:36:f6: 25:c3:d4:b5:a9:d5:c7:1d:a9:1d:4b:39:16:05:6e: 4d:59:bf:7f:2b:29:0a:0e:95:09:70:2d:6a:0b:56: 21:7f:f1:9e:9e:94:ae:44:7f:e6:f5:3c:45:4e:59: 06:09:9d:7f:ca:67:37:24:bc:2e:78:03:66:c1:4a: f4:d7:97:7e:0b:35:c2:c2:a2:af:51:ce:8a:a6:fb: ef:d4:c2:c5:c8:69:d5:64:d6:80:1f:f0:e0:5f:02: 62:cb:a0:2c:4d:44:d4:83:66:b5:71:48:c1:bb:81: a0:21:89:a0:73:a6:7f:ed:53:33:6c:f8:32:b4:ff: f0:a8:31:f2:fa:de:a2:5f:6d:2a:e1:09:5d:5d:8a: 70:9f:0f:04:97:f2:14:ab:88:9c:0f:37:a8:db:70: ba:17:52:b9:25:31:95:34:e6:4e:a0:c5:d2:7a:ef: b2:2a:f5:c2:76:5c:00:af:f0:8e:51:3e:8f:c2:56: bc:b8:30:18:86:95:5f:06:e0:2a:72:c9:73:14:fe: f0:74:96:97:be:3f:e0:08:c9:bd:06:77:31:ae:33: 3c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:26:96:76:D3:BC:A5:D3:90:11:3E:30:B1:95:7F:C3:97:E2:C9:69 X509v3 Authority Key Identifier: keyid:D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/1-SaWdtO8pdOQET4wsZV_w5fiyWk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:52c0::/29 Signature Algorithm: sha256WithRSAEncryption d4:f7:3f:5f:f8:04:08:fe:7c:39:0a:c4:ac:d3:dc:cf:33:7c: 3b:44:1d:ef:d3:62:11:31:ea:33:9c:56:ea:47:5b:ca:d9:d0: 1c:67:a9:38:e3:d6:af:fd:d7:af:d8:78:13:d1:80:eb:7e:05: 90:d6:a8:d5:b8:d9:cb:b0:d6:42:eb:44:e7:ee:cd:f2:20:cb: 3f:61:d0:c0:27:d4:46:e2:91:c2:2c:b5:56:93:43:16:e6:d3: bd:bb:7b:9b:d0:5c:25:8d:fd:16:c2:d2:10:d2:52:39:a3:d0: 8a:f1:37:bd:f2:97:fc:ed:6f:50:6e:ad:f5:39:23:4e:0e:6c: 54:34:a8:ca:e3:c5:df:28:25:bc:76:40:1f:45:29:0a:2b:66: 41:4b:60:be:71:c9:a5:80:ee:a2:41:86:c7:89:ac:c0:db:4b: 29:42:a7:7f:85:7f:86:61:e3:f4:b1:40:77:70:a8:f5:69:38: 3a:28:44:a0:8f:58:82:2b:f2:99:a7:06:fa:5c:2a:81:8f:07: d3:70:9b:e1:21:2f:60:bf:a3:52:bd:d5:fd:8a:37:05:8b:ad: fc:78:45:07:08:ea:12:d9:12:2f:b5:bb:10:59:af:28:7d:2c: f4:9b:d5:fd:c1:0e:49:c3:ec:8b:6e:bd:78:6f:da:22:b3:8d: 5a:38:ff:bd -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3xmJRYokaPC2QH/eXCLcyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYWJmOGY0Y2RmODk2M2ExODJkYTBjZGY5MDhjMzg0NDdm YTdhMDkwHhcNMjYwMTAxMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTI2OTY3NmQzYmNhNWQzOTAxMTNlMzBiMTk1N2ZjMzk3ZTJjOTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSBUzniQvhI7vJbqsseYKSIwgLvk jM+ANE+KB0FV4Y5k1r/nBlNSHiYxNvYlw9S1qdXHHakdSzkWBW5NWb9/KykKDpUJ cC1qC1Yhf/GenpSuRH/m9TxFTlkGCZ1/ymc3JLwueANmwUr015d+CzXCwqKvUc6K pvvv1MLFyGnVZNaAH/DgXwJiy6AsTUTUg2a1cUjBu4GgIYmgc6Z/7VMzbPgytP/w qDHy+t6iX20q4QldXYpwnw8El/IUq4icDzeo23C6F1K5JTGVNOZOoMXSeu+yKvXC dlwAr/COUT6Pwla8uDAYhpVfBuAqcslzFP7wdJaXvj/gCMm9BncxrjM80QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPkmlnbTvKXTkBE+MLGVf8OX4slpMB8GA1UdIwQY MBaAFNOr+PTN+JY6GC2gzfkIw4RH+noJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDZ2NDlNMzRsam9ZTGFETi1RakRoRWY2ZWdrLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yNmQxOTMtNDBjMi00MTdiLWJkNTIt NWMxMGJkYjg2NmUwLzEvMS1TYVdkdE84cGRPUUVUNHdzWlZfdzVmaXlXay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZGYvMjZkMTkzLTQwYzItNDE3Yi1iZDUyLTVjMTBiZGI4NjZl MC8xLzA2djQ5TTM0bGpvWUxhRE4tUWpEaEVmNmVnay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoHUsAw DQYJKoZIhvcNAQELBQADggEBANT3P1/4BAj+fDkKxKzT3M8zfDtEHe/TYhEx6jOc VupHW8rZ0BxnqTjj1q/916/YeBPRgOt+BZDWqNW42cuw1kLrROfuzfIgyz9h0MAn 1EbikcIstVaTQxbm0727e5vQXCWN/RbC0hDSUjmj0IrxN73yl/ztb1BurfU5I04O bFQ0qMrjxd8oJbx2QB9FKQorZkFLYL5xyaWA7qJBhseJrMDbSylCp3+Ff4Zh4/Sx QHdwqPVpODooRKCPWIIr8pmnBvpcKoGPB9Nwm+EhL2C/o1K91f2KNwWLrfx4RQcI 6hLZEi+1uxBZryh9LPSb1f3BDknD7ItuvXhv2iKzjVo4/70= -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:15 2026 by rpki-client