This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/682zs4Hcg3A9tAlB0aIHnZEDnoM.roa File: 682zs4Hcg3A9tAlB0aIHnZEDnoM.roa (raw, json) Hash identifier: C08P14YIy9ohegdz9OY/EiQStApMK1bKQ9gOr6T/J5E= Subject key identifier: EB:CD:B3:B3:81:DC:83:70:3D:B4:09:41:D1:A2:07:9D:91:03:9E:83 Certificate issuer: /CN=f4dcb5741e29352ddd42469270178506008a4140 Certificate serial: 019B7F8502CB74EA19CE35C8E46E131CF004 Authority key identifier: F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/682zs4Hcg3A9tAlB0aIHnZEDnoM.roa Signing time: Fri 02 Jan 2026 16:23:02 +0000 ROA not before: Fri 02 Jan 2026 16:23:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12792 IP address blocks: 2a0a:e140::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:02:cb:74:ea:19:ce:35:c8:e4:6e:13:1c:f0:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4dcb5741e29352ddd42469270178506008a4140 Validity Not Before: Jan 2 16:23:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ebcdb3b381dc83703db40941d1a2079d91039e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c1:86:76:28:42:b3:46:51:0f:b4:67:b4:99: 15:e0:17:f3:62:97:a6:1f:03:75:5e:aa:84:ec:39: 53:25:a7:d7:08:28:83:f0:df:40:4e:cc:f2:ba:56: 9f:bd:da:96:17:7d:e7:21:3c:e6:06:53:2a:9f:1c: 30:ac:4b:ae:8e:2e:c9:85:4b:dd:03:93:b3:b1:a7: 68:d9:c9:83:86:7d:69:5e:dc:c2:5e:30:5e:42:fa: 95:72:cb:9e:43:f9:62:16:4f:68:12:f2:95:ce:3b: 25:82:9a:d0:fd:2b:b0:2e:4b:87:5b:83:75:9f:11: 8e:06:ad:d9:75:89:6a:74:00:3b:ed:d7:f0:de:72: 1a:43:8a:5b:c3:75:fb:66:9b:9a:b0:0a:2d:2c:f6: 3c:6f:18:61:e9:e7:e3:2e:25:55:ed:1d:3a:72:07: ee:f3:7a:82:ed:7d:69:95:99:7f:c6:55:61:cb:fc: 4d:a6:5a:d7:50:ff:f1:29:93:80:10:14:9f:1f:1f: 1c:0c:30:d8:39:33:6a:f7:3b:ae:e9:cb:a0:69:bc: 03:3d:c9:9b:1b:88:69:00:e4:a5:22:f4:31:27:63: 9d:a0:ee:be:88:88:06:4a:af:64:85:94:22:84:78: d3:3d:66:91:2f:26:ea:5b:1e:a0:c1:15:fd:13:92: d1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:CD:B3:B3:81:DC:83:70:3D:B4:09:41:D1:A2:07:9D:91:03:9E:83 X509v3 Authority Key Identifier: keyid:F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/682zs4Hcg3A9tAlB0aIHnZEDnoM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:e140::/29 Signature Algorithm: sha256WithRSAEncryption 63:c1:8a:9e:b4:f5:64:74:5b:38:08:02:f2:f7:85:71:ca:64: 6e:eb:53:72:94:a9:97:2a:b6:27:ff:0c:5b:2e:1c:6d:d9:31: 02:06:e2:0e:57:34:15:5c:be:94:34:51:86:dd:a8:37:60:64: 72:6d:a3:22:c7:bb:2e:3d:ac:45:ad:4d:8f:bb:c9:ab:f8:b0: 44:4f:b4:45:78:3e:7c:07:b3:f6:f0:87:48:a8:fa:48:ab:35: 94:de:8a:0a:c5:38:36:52:24:04:04:16:7b:9e:3a:07:a6:ac: 25:ef:d8:15:dd:01:2b:68:ee:9d:42:1c:56:62:f6:c2:3b:03: 62:fc:b7:04:dc:0a:09:8d:95:75:36:b5:2e:f9:87:e3:43:1a: 51:a7:12:4a:e1:a5:d8:bb:c2:9e:79:22:41:31:98:02:93:32: d4:a8:68:57:f7:3c:37:5c:fc:7b:91:20:e9:a6:06:4b:b5:81: 34:c1:98:44:43:e4:01:21:16:e4:9c:da:fa:44:b4:09:fe:d0: 19:eb:95:56:5a:d3:38:22:fc:e9:ea:d2:82:34:89:ad:0f:0f: ff:29:d8:fe:5e:c0:f6:0d:0c:31:f5:ec:17:02:b6:cf:d3:01: 6e:9f:f2:50:8a:98:6e:41:e7:0c:56:55:87:8a:39:74:95:47: 9f:8e:d3:8c -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/hQLLdOoZzjXI5G4THPAEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZGNiNTc0MWUyOTM1MmRkZDQyNDY5MjcwMTc4NTA2MDA4 YTQxNDAwHhcNMjYwMTAyMTYyMzAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmNkYjNiMzgxZGM4MzcwM2RiNDA5NDFkMWEyMDc5ZDkxMDM5ZTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcGGdihCs0ZRD7RntJkV4BfzYpem HwN1XqqE7DlTJafXCCiD8N9ATszyulafvdqWF33nITzmBlMqnxwwrEuuji7JhUvd A5Ozsado2cmDhn1pXtzCXjBeQvqVcsueQ/liFk9oEvKVzjslgprQ/SuwLkuHW4N1 nxGOBq3ZdYlqdAA77dfw3nIaQ4pbw3X7ZpuasAotLPY8bxhh6efjLiVV7R06cgfu 83qC7X1plZl/xlVhy/xNplrXUP/xKZOAEBSfHx8cDDDYOTNq9zuu6cugabwDPcmb G4hpAOSlIvQxJ2OdoO6+iIgGSq9khZQihHjTPWaRLybqWx6gwRX9E5LR3QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFOvNs7OB3INwPbQJQdGiB52RA56DMB8GA1UdIwQY MBaAFPTctXQeKTUt3UJGknAXhQYAikFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU55MWRCNHBOUzNkUWthU2NCZUZCZ0NLUVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMDczZjEtOTZlZC00YjM1LWEzZjQt ZjgzMDc3Nzk5NDViLzEvNjgyenM0SGNnM0E5dEFsQjBhSUhuWkVEbm9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9kMDczZjEtOTZlZC00YjM1LWEzZjQtZjgzMDc3Nzk5NDVi LzEvOU55MWRCNHBOUzNkUWthU2NCZUZCZ0NLUVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgrhQDAN BgkqhkiG9w0BAQsFAAOCAQEAY8GKnrT1ZHRbOAgC8veFccpkbutTcpSplyq2J/8M Wy4cbdkxAgbiDlc0FVy+lDRRht2oN2Bkcm2jIse7Lj2sRa1Nj7vJq/iwRE+0RXg+ fAez9vCHSKj6SKs1lN6KCsU4NlIkBAQWe546B6asJe/YFd0BK2junUIcVmL2wjsD Yvy3BNwKCY2VdTa1LvmH40MaUacSSuGl2LvCnnkiQTGYApMy1KhoV/c8N1z8e5Eg 6aYGS7WBNMGYREPkASEW5Jza+kS0Cf7QGeuVVlrTOCL86erSgjSJrQ8P/ynY/l7A 9g0MMfXsFwK2z9MBbp/yUIqYbkHnDFZVh4o5dJVHn47TjA== -----END CERTIFICATE-----Generated at Mon Jan 26 06:33:17 2026 by rpki-client