This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/1-mqYp0wbZd3hGyth9JUHZNjDZwI.roa File: 1-mqYp0wbZd3hGyth9JUHZNjDZwI.roa (raw, json) Hash identifier: r3TYLoZQHdWU8RlOoG6zBAduGAPckAKmqupyfEfHJFg= Subject key identifier: FA:6A:98:A7:4C:1B:65:DD:E1:1B:2B:61:F4:95:07:64:D8:C3:67:02 Certificate issuer: /CN=dd96a97cfcd4ebba05f61524009f2c15ca343fc5 Certificate serial: 019B9455F112B21AEAB355CE224B562CE697 Authority key identifier: DD:96:A9:7C:FC:D4:EB:BA:05:F6:15:24:00:9F:2C:15:CA:34:3F:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/1-mqYp0wbZd3hGyth9JUHZNjDZwI.roa Signing time: Tue 06 Jan 2026 17:23:38 +0000 ROA not before: Tue 06 Jan 2026 17:23:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210643 IP address blocks: 2001:678:ac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:94:55:f1:12:b2:1a:ea:b3:55:ce:22:4b:56:2c:e6:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd96a97cfcd4ebba05f61524009f2c15ca343fc5 Validity Not Before: Jan 6 17:23:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa6a98a74c1b65dde11b2b61f4950764d8c36702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ff:ce:ab:5d:a2:d1:65:dc:5c:77:98:21:8d: 59:13:67:08:29:ac:fd:79:63:cd:2b:ee:23:f5:20: bf:ca:fd:15:21:14:21:75:6e:b8:e2:95:aa:a9:cb: 80:85:28:22:09:22:09:93:26:08:d0:08:dc:1b:c1: f5:47:84:65:ee:03:a0:13:27:27:c2:bc:4b:09:a9: 62:15:94:e4:93:f7:16:ba:61:5d:c0:b9:cb:a1:66: d5:d8:5c:e2:b0:c8:9c:ad:ba:31:df:dd:a7:c6:ba: 10:77:c5:9b:4b:9a:2f:29:49:d6:2c:e3:60:e8:d3: 7c:04:41:5e:ea:a8:cb:47:61:16:0f:9d:b5:60:f1: fb:9e:15:54:d9:82:ad:7b:b7:61:73:13:d1:3a:14: c3:95:f3:4f:2e:a8:cf:18:9a:4c:9c:3b:5d:3d:3f: 6f:6e:d8:02:94:0a:67:ae:3e:d7:ea:ed:4e:2e:1a: 80:26:25:07:34:9e:90:2c:16:98:ad:1e:a7:2c:ea: ba:2a:51:99:76:a3:61:dc:e0:94:71:d1:af:70:aa: 56:b6:db:d1:77:a3:98:e4:27:01:53:b5:9f:e8:b5: a9:71:f7:a0:04:db:ef:f1:34:7a:47:bc:7a:80:ad: 2c:a9:e2:f3:57:5a:41:06:f8:be:4d:33:57:b6:72: 3e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:6A:98:A7:4C:1B:65:DD:E1:1B:2B:61:F4:95:07:64:D8:C3:67:02 X509v3 Authority Key Identifier: keyid:DD:96:A9:7C:FC:D4:EB:BA:05:F6:15:24:00:9F:2C:15:CA:34:3F:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/1-mqYp0wbZd3hGyth9JUHZNjDZwI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:ac0::/48 Signature Algorithm: sha256WithRSAEncryption aa:c2:04:44:bb:4d:73:7b:d0:eb:66:f0:9a:dd:eb:be:a3:30: bd:e2:d7:3c:1d:99:71:54:97:3f:1e:b0:fc:0b:7f:c5:e4:b6: 1d:f3:bf:46:4a:7a:76:1a:1e:a6:b7:16:01:7b:e4:37:12:61: f6:54:eb:44:c1:ec:ec:eb:ff:24:df:30:e8:ad:82:c4:f8:71: 7d:3c:0e:dc:42:ee:c7:f0:36:9d:0d:93:e2:5a:de:9c:77:e9: cc:3a:bf:69:24:c0:b2:f4:2b:c7:6b:2d:bf:90:aa:2f:a5:28: b4:cf:1f:a1:8e:0e:9c:ff:ea:57:db:f5:40:43:b4:d8:cf:5a: f2:3d:fa:93:42:1b:0b:9d:40:68:cd:40:89:ac:57:22:17:f7: 6a:10:e4:25:e2:49:4a:97:77:49:5f:18:36:0e:3c:b5:43:79: 99:85:a0:f2:08:f4:bc:9d:a6:40:60:87:96:b4:f6:4f:41:76: 29:6f:3b:0f:b5:a8:44:4a:05:41:34:f4:be:a7:3c:3c:13:cf: 67:76:06:49:73:d5:00:f4:72:81:c0:4f:23:b8:3c:91:ce:d2: b7:2f:8d:57:dc:d1:6a:b2:df:06:af:83:a6:f6:6b:7c:b3:f2: 2a:b1:e2:9d:e7:07:f3:ae:f2:b9:e5:d0:93:8f:bd:8d:3c:44: a9:d6:08:33 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZuUVfESshrqs1XOIktWLOaXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOTZhOTdjZmNkNGViYmEwNWY2MTUyNDAwOWYyYzE1Y2Ez NDNmYzUwHhcNMjYwMTA2MTcyMzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTZhOThhNzRjMWI2NWRkZTExYjJiNjFmNDk1MDc2NGQ4YzM2NzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P/Oq12i0WXcXHeYIY1ZE2cIKaz9 eWPNK+4j9SC/yv0VIRQhdW644pWqqcuAhSgiCSIJkyYI0AjcG8H1R4Rl7gOgEycn wrxLCaliFZTkk/cWumFdwLnLoWbV2FzisMicrbox392nxroQd8WbS5ovKUnWLONg 6NN8BEFe6qjLR2EWD521YPH7nhVU2YKte7dhcxPROhTDlfNPLqjPGJpMnDtdPT9v btgClApnrj7X6u1OLhqAJiUHNJ6QLBaYrR6nLOq6KlGZdqNh3OCUcdGvcKpWttvR d6OY5CcBU7Wf6LWpcfegBNvv8TR6R7x6gK0sqeLzV1pBBvi+TTNXtnI+xwIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPpqmKdMG2Xd4RsrYfSVB2TYw2cCMB8GA1UdIwQY MBaAFN2WqXz81Ou6BfYVJACfLBXKND/FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1phcGZQelU2N29GOWhVa0FKOHNGY28wUDhVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80MzZiMTAtOTJlMS00ZDFkLThlZmIt YzFjNTQ4NjZiNjE2LzEvMS1tcVlwMHdiWmQzaEd5dGg5SlVIWk5qRFp3SS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYjEvNDM2YjEwLTkyZTEtNGQxZC04ZWZiLWMxYzU0ODY2YjYx Ni8xLzNaYXBmUHpVNjdvRjloVWtBSjhzRmNvMFA4VS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBngK wDANBgkqhkiG9w0BAQsFAAOCAQEAqsIERLtNc3vQ62bwmt3rvqMwveLXPB2ZcVSX Px6w/At/xeS2HfO/Rkp6dhoeprcWAXvkNxJh9lTrRMHs7Ov/JN8w6K2CxPhxfTwO 3ELux/A2nQ2T4lrenHfpzDq/aSTAsvQrx2stv5CqL6UotM8foY4OnP/qV9v1QEO0 2M9a8j36k0IbC51AaM1AiaxXIhf3ahDkJeJJSpd3SV8YNg48tUN5mYWg8gj0vJ2m QGCHlrT2T0F2KW87D7WoREoFQTT0vqc8PBPPZ3YGSXPVAPRygcBPI7g8kc7Sty+N V9zRarLfBq+DpvZrfLPyKrHinecH867yueXQk4+9jTxEqdYIMw== -----END CERTIFICATE-----Generated at Mon Jan 12 12:09:13 2026 by rpki-client