This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/l1nrHCg1JaRGqWglwBj3oSy_fj8.roa File: l1nrHCg1JaRGqWglwBj3oSy_fj8.roa (raw, json) Hash identifier: y4C2wS/8hOK+ga53wXjcr5tBKnj/Yfql4LK0XM8fOmk= Subject key identifier: 97:59:EB:1C:28:35:25:A4:46:A9:68:25:C0:18:F7:A1:2C:BF:7E:3F Certificate issuer: /CN=7e1340ed2323a9286e980f66469990a9a1e3075d Certificate serial: 019B7BA5239C6711A2524E2CE7A092F84B3A Authority key identifier: 7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/l1nrHCg1JaRGqWglwBj3oSy_fj8.roa Signing time: Thu 01 Jan 2026 22:19:38 +0000 ROA not before: Thu 01 Jan 2026 22:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213736 IP address blocks: 2a14:cc00:e001::/48 maxlen: 48 2a14:cc00:e002::/48 maxlen: 48 2a14:cc00:e003::/48 maxlen: 48 2a14:cc00:e004::/48 maxlen: 48 2a14:cc00:e005::/48 maxlen: 48 2a14:cc00:e006::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:23:9c:67:11:a2:52:4e:2c:e7:a0:92:f8:4b:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e1340ed2323a9286e980f66469990a9a1e3075d Validity Not Before: Jan 1 22:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9759eb1c283525a446a96825c018f7a12cbf7e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ea:25:9b:3a:0f:e1:3f:83:b3:fd:c0:e2:86: e0:fc:9e:18:a7:27:5b:66:06:18:f2:18:90:bf:16: 3d:a8:c4:a9:2c:1a:37:e0:07:11:4a:23:ee:89:41: 0b:65:f0:0d:1a:f3:58:94:68:5b:37:a0:ad:65:0b: 90:65:60:64:3a:a1:67:d9:0b:24:0c:05:1a:19:70: 6a:b3:f7:13:f3:f1:ca:60:bf:4a:02:6b:8e:6e:f3: d0:d8:65:27:26:fc:3e:a6:f5:d9:b8:d2:14:6a:67: f7:9a:8d:12:e4:b6:3f:3a:1d:62:0d:c5:8c:5f:44: 65:51:ea:ef:13:bd:43:d7:bf:6c:ed:06:c8:2a:2e: cf:88:71:49:91:38:c6:9d:1f:80:78:0a:e4:9f:98: 89:c3:82:89:76:e9:cc:70:e3:0f:46:51:c6:15:a2: 34:18:7f:78:83:eb:0b:83:3a:0f:9d:27:b2:b0:20: ae:1f:5a:94:b6:dc:e9:5f:a6:81:b0:9f:04:b2:cc: 20:48:3b:7e:ce:d0:50:0e:d9:12:34:d8:93:5e:48: 46:bf:57:b1:54:f0:38:86:3d:e6:97:b1:36:b9:cc: 97:e5:8a:7d:6b:8a:fb:61:22:0f:f0:43:0e:40:14: 29:2b:3d:9e:c5:97:1d:ea:1f:12:d0:8e:48:e7:59: 09:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:59:EB:1C:28:35:25:A4:46:A9:68:25:C0:18:F7:A1:2C:BF:7E:3F X509v3 Authority Key Identifier: keyid:7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/l1nrHCg1JaRGqWglwBj3oSy_fj8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:cc00:e001::-2a14:cc00:e006:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 8e:bd:80:9e:9d:b3:65:06:6b:56:6d:d3:a2:36:48:8f:4a:8f: ee:93:37:c4:c4:c4:ab:c7:19:12:87:ab:9c:05:b5:93:c4:dd: dc:0e:92:13:0a:5f:c4:57:67:65:1b:85:db:12:94:4f:23:37: ba:cf:c6:4a:52:9a:d2:cf:8c:b6:a0:67:0b:97:b5:ad:51:d1: ac:2c:13:75:06:15:ab:80:b8:9a:1d:63:e5:ca:33:60:a5:4a: ba:c8:7c:ef:49:06:91:fa:44:47:50:91:42:fb:60:02:0c:b2: 4c:c1:f4:ca:93:06:b4:0b:94:7b:da:34:c7:e2:d6:57:c1:e4: 16:94:e2:c8:50:de:3d:8c:03:3c:d6:5c:95:44:58:f5:12:20: dd:22:b2:a1:92:45:26:90:cb:e2:bf:c4:07:cc:34:f8:79:1c: f2:92:41:a0:4d:48:8b:69:b1:c3:94:bf:3f:d0:8d:52:d6:a3: db:ce:97:48:74:26:70:03:50:39:7a:fd:bb:97:e2:0b:4f:7f: f7:12:b7:ac:34:c5:9c:be:5c:b8:d9:01:6b:cd:90:ff:28:54: 1d:96:00:a9:bf:f2:84:ef:6a:a9:94:65:02:f8:f3:7c:3c:bb: bf:b2:c1:aa:91:04:2f:d3:03:33:ed:ea:6e:2c:e5:d4:47:4d: b1:80:ce:5a -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt7pSOcZxGiUk4s56CS+Es6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMTM0MGVkMjMyM2E5Mjg2ZTk4MGY2NjQ2OTk5MGE5YTFl MzA3NWQwHhcNMjYwMTAxMjIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzU5ZWIxYzI4MzUyNWE0NDZhOTY4MjVjMDE4ZjdhMTJjYmY3ZTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOolmzoP4T+Ds/3A4obg/J4Ypydb ZgYY8hiQvxY9qMSpLBo34AcRSiPuiUELZfANGvNYlGhbN6CtZQuQZWBkOqFn2Qsk DAUaGXBqs/cT8/HKYL9KAmuObvPQ2GUnJvw+pvXZuNIUamf3mo0S5LY/Oh1iDcWM X0RlUervE71D179s7QbIKi7PiHFJkTjGnR+AeArkn5iJw4KJdunMcOMPRlHGFaI0 GH94g+sLgzoPnSeysCCuH1qUttzpX6aBsJ8EsswgSDt+ztBQDtkSNNiTXkhGv1ex VPA4hj3ml7E2ucyX5Yp9a4r7YSIP8EMOQBQpKz2exZcd6h8S0I5I51kJYwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFJdZ6xwoNSWkRqloJcAY96Esv34/MB8GA1UdIwQY MBaAFH4TQO0jI6kobpgPZkaZkKmh4wddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmhOQTdTTWpxU2h1bUE5bVJwbVFxYUhqQjEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xOWZjYzktY2IzMy00MjU1LTg4ODMt ZmUwMjdhMDM0NDQ5LzEvbDFuckhDZzFKYVJHcVdnbHdCajNvU3lfZmo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8xOWZjYzktY2IzMy00MjU1LTg4ODMtZmUwMjdhMDM0NDQ5 LzEvZmhOQTdTTWpxU2h1bUE5bVJwbVFxYUhqQjEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqFMwA 4AEDBwAqFMwA4AYwDQYJKoZIhvcNAQELBQADggEBAI69gJ6ds2UGa1Zt06I2SI9K j+6TN8TExKvHGRKHq5wFtZPE3dwOkhMKX8RXZ2UbhdsSlE8jN7rPxkpSmtLPjLag ZwuXta1R0awsE3UGFauAuJodY+XKM2ClSrrIfO9JBpH6REdQkUL7YAIMskzB9MqT BrQLlHvaNMfi1lfB5BaU4shQ3j2MAzzWXJVEWPUSIN0isqGSRSaQy+K/xAfMNPh5 HPKSQaBNSItpscOUvz/QjVLWo9vOl0h0JnADUDl6/buX4gtPf/cSt6w0xZy+XLjZ AWvNkP8oVB2WAKm/8oTvaqmUZQL483w8u7+ywaqRBC/TAzPt6m4s5dRHTbGAzlo= -----END CERTIFICATE-----Generated at Mon Jan 12 04:03:55 2026 by rpki-client