This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/b2VOFAnqw5bF8fvnjITcw0QPySc.roa File: b2VOFAnqw5bF8fvnjITcw0QPySc.roa (raw, json) Hash identifier: p6e5jWlWStkGfYACB8q5Ip0Xm5alg3UPW1AjXMay8TY= Subject key identifier: 6F:65:4E:14:09:EA:C3:96:C5:F1:FB:E7:8C:84:DC:C3:44:0F:C9:27 Certificate issuer: /CN=d25efe544b6357c7fbc281b2e41b1cb2e743e89c Certificate serial: 019B8023A4DE54B8FBBA3C0304C555181D67 Authority key identifier: D2:5E:FE:54:4B:63:57:C7:FB:C2:81:B2:E4:1B:1C:B2:E7:43:E8:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/b2VOFAnqw5bF8fvnjITcw0QPySc.roa Signing time: Fri 02 Jan 2026 19:16:18 +0000 ROA not before: Fri 02 Jan 2026 19:16:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213605 IP address blocks: 2001:678:120::/48 maxlen: 48 2001:678:10d0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:23:a4:de:54:b8:fb:ba:3c:03:04:c5:55:18:1d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d25efe544b6357c7fbc281b2e41b1cb2e743e89c Validity Not Before: Jan 2 19:16:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f654e1409eac396c5f1fbe78c84dcc3440fc927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:84:78:15:99:6a:91:bc:cd:87:16:a1:b6:9c: c7:d6:51:84:6e:0e:fa:9e:e5:bc:af:50:b1:68:c7: 3a:48:78:46:93:c7:c2:cc:f4:56:af:3c:10:03:db: 2d:7d:63:15:18:b5:ae:8c:d7:d1:82:94:a3:de:06: 2b:83:55:eb:6b:f1:0c:24:53:65:b1:bc:30:ed:9b: 6b:d6:07:87:02:50:5e:e9:cf:58:59:0a:25:fe:02: 39:9f:af:a9:f7:5f:23:54:19:3f:9b:f8:c6:04:ec: 9f:0c:dc:06:fa:a3:ab:c7:ab:f1:fc:d4:72:99:bb: 24:0c:11:2c:df:21:9f:8b:28:f8:4e:da:44:76:10: bd:91:36:40:9d:3d:01:d2:a5:be:15:b4:26:c5:6c: cd:7c:aa:1d:92:6b:80:fa:6c:70:ad:05:8e:15:2b: f6:b8:54:5d:f5:e4:2f:ba:3a:3a:86:96:3b:3b:0a: 6c:e0:ea:fe:68:32:a6:2c:ca:70:64:e4:2a:ba:f2: ce:f9:9f:9c:b5:ca:63:c9:1c:f8:39:ed:8e:2b:86: 81:16:cf:60:23:16:12:72:75:bc:49:a1:14:cb:c7: e3:53:c0:e2:3c:5a:8d:71:f4:df:f1:4e:97:b8:3b: 59:8e:7b:89:80:0e:f5:63:e1:35:62:de:57:84:85: 96:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:65:4E:14:09:EA:C3:96:C5:F1:FB:E7:8C:84:DC:C3:44:0F:C9:27 X509v3 Authority Key Identifier: keyid:D2:5E:FE:54:4B:63:57:C7:FB:C2:81:B2:E4:1B:1C:B2:E7:43:E8:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/b2VOFAnqw5bF8fvnjITcw0QPySc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:120::/48 2001:678:10d0::/48 Signature Algorithm: sha256WithRSAEncryption 7a:c6:91:3e:b1:e3:23:49:26:a2:db:da:e9:53:36:ca:e1:09: 40:55:00:22:1a:97:7b:98:1c:7c:48:22:57:6e:5d:2f:5b:60: 29:1e:63:71:01:9d:02:5e:43:f8:5d:ee:1f:d5:01:a4:67:23: ab:49:6e:97:3e:89:74:3e:3c:fc:d3:ce:31:96:4a:d2:98:98: f5:ba:ea:e9:98:b6:f0:5e:3f:38:6c:c7:33:a4:8e:aa:59:26: 00:e4:67:31:7c:8c:43:30:3c:f0:0e:05:52:35:a2:16:42:55: c4:9a:8e:bc:80:c4:b7:3b:c7:be:ee:62:90:1e:84:c6:64:a7: 2a:25:c6:1f:2b:d2:1f:f1:8b:5a:ec:ad:32:dd:aa:32:ea:be: 17:9e:c9:73:39:a3:af:82:9e:dc:ae:fc:59:73:04:74:4a:29: c1:98:89:d5:2f:a8:20:de:f8:5e:f6:1f:08:5c:43:28:bb:6d: 05:87:99:e8:39:db:64:37:6c:ca:20:8b:2e:dc:dd:c1:0c:4d: 67:20:9d:04:10:9b:da:49:68:b0:7f:88:1b:df:aa:28:89:14: 8e:fa:1c:09:6b:d8:06:c9:13:c6:3d:90:aa:92:7c:3f:4c:c5: d4:b6:85:e5:61:6b:ea:51:31:6e:3b:fa:9c:50:a3:eb:5d:eb: 03:ff:ba:69 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZuAI6TeVLj7ujwDBMVVGB1nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNWVmZTU0NGI2MzU3YzdmYmMyODFiMmU0MWIxY2IyZTc0 M2U4OWMwHhcNMjYwMTAyMTkxNjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjY1NGUxNDA5ZWFjMzk2YzVmMWZiZTc4Yzg0ZGNjMzQ0MGZjOTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YR4FZlqkbzNhxahtpzH1lGEbg76 nuW8r1CxaMc6SHhGk8fCzPRWrzwQA9stfWMVGLWujNfRgpSj3gYrg1Xra/EMJFNl sbww7Ztr1geHAlBe6c9YWQol/gI5n6+p918jVBk/m/jGBOyfDNwG+qOrx6vx/NRy mbskDBEs3yGfiyj4TtpEdhC9kTZAnT0B0qW+FbQmxWzNfKodkmuA+mxwrQWOFSv2 uFRd9eQvujo6hpY7Owps4Or+aDKmLMpwZOQquvLO+Z+ctcpjyRz4Oe2OK4aBFs9g IxYScnW8SaEUy8fjU8DiPFqNcfTf8U6XuDtZjnuJgA71Y+E1Yt5XhIWWSQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFG9lThQJ6sOWxfH754yE3MNED8knMB8GA1UdIwQY MBaAFNJe/lRLY1fH+8KBsuQbHLLnQ+icMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGw3LVZFdGpWOGY3d29HeTVCc2NzdWRENkp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83ZDhiNDEtYmM2Ni00YTVmLTgyZTYt YTgyY2JiYzczNjc1LzEvYjJWT0ZBbnF3NWJGOGZ2bmpJVGN3MFFQeVNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83ZDhiNDEtYmM2Ni00YTVmLTgyZTYtYTgyY2JiYzczNjc1 LzEvMGw3LVZFdGpWOGY3d29HeTVCc2NzdWRENkp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGeAEg AwcAIAEGeBDQMA0GCSqGSIb3DQEBCwUAA4IBAQB6xpE+seMjSSai29rpUzbK4QlA VQAiGpd7mBx8SCJXbl0vW2ApHmNxAZ0CXkP4Xe4f1QGkZyOrSW6XPol0Pjz8084x lkrSmJj1uurpmLbwXj84bMczpI6qWSYA5GcxfIxDMDzwDgVSNaIWQlXEmo68gMS3 O8e+7mKQHoTGZKcqJcYfK9If8Yta7K0y3aoy6r4XnslzOaOvgp7crvxZcwR0SinB mInVL6gg3vhe9h8IXEMou20Fh5noOdtkN2zKIIsu3N3BDE1nIJ0EEJvaSWiwf4gb 36ooiRSO+hwJa9gGyRPGPZCqknw/TMXUtoXlYWvqUTFuO/qcUKPrXesD/7pp -----END CERTIFICATE-----Generated at Sun Jan 25 16:10:25 2026 by rpki-client