This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/wHDlfBopH7fz7jDzeFXZD4ZkpZo.roa File: wHDlfBopH7fz7jDzeFXZD4ZkpZo.roa (raw, json) Hash identifier: cPAx2SbQ0v1kqx0TCQ2lzpiQRVAwNSEcLw8CDwp9CuE= Subject key identifier: C0:70:E5:7C:1A:29:1F:B7:F3:EE:30:F3:78:55:D9:0F:86:64:A5:9A Certificate issuer: /CN=4ec56e25b00256e24cda324deb21aa9d13015f65 Certificate serial: 019B7DCB5722C131D1CAFC44C80ABC427EE9 Authority key identifier: 4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/wHDlfBopH7fz7jDzeFXZD4ZkpZo.roa Signing time: Fri 02 Jan 2026 08:20:36 +0000 ROA not before: Fri 02 Jan 2026 08:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205268 IP address blocks: 2001:678:10e4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:57:22:c1:31:d1:ca:fc:44:c8:0a:bc:42:7e:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ec56e25b00256e24cda324deb21aa9d13015f65 Validity Not Before: Jan 2 08:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c070e57c1a291fb7f3ee30f37855d90f8664a59a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f6:bd:75:b8:05:ae:9e:7a:34:ce:c5:2a:cb: 5d:f6:df:88:a9:4f:a2:f6:0d:a8:fd:2b:05:c9:75: d9:e8:98:70:2c:de:0d:f4:9f:4e:74:70:e9:91:ed: 6c:49:0b:d6:b6:f5:be:ca:ed:a5:be:2c:06:f8:a5: 99:f5:47:15:86:d9:95:f3:c3:b6:26:d8:d3:57:59: 7a:4f:54:3f:8c:00:b6:b9:a1:a6:e1:8c:54:52:63: 91:c5:1a:cf:41:4e:ab:a4:42:83:8a:06:fd:bd:b0: 32:af:da:ff:a3:63:b7:2d:fe:51:48:3c:80:8c:35: 62:4a:c4:ce:c2:48:c2:86:c1:87:71:1a:ad:66:00: e3:5f:2f:23:65:4e:92:42:df:e5:df:c9:bb:03:12: c5:2c:38:a8:99:aa:d3:9f:b7:bc:be:f2:34:8d:1a: 70:95:d8:bc:25:72:d0:2b:23:22:8c:3d:cb:f0:ac: 7b:45:e3:95:c7:9a:58:4e:ae:36:83:82:09:db:84: 65:e9:48:9f:d8:a4:8e:22:37:15:e5:02:91:40:94: 15:44:4f:ef:9b:36:b3:2b:5e:7b:1f:4e:7c:f8:19: 3f:8c:09:44:c3:fc:7d:4b:2e:ea:e8:62:de:26:15: 42:9a:db:31:a7:60:60:d7:bc:b7:f8:ea:44:26:6a: 04:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:70:E5:7C:1A:29:1F:B7:F3:EE:30:F3:78:55:D9:0F:86:64:A5:9A X509v3 Authority Key Identifier: keyid:4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/wHDlfBopH7fz7jDzeFXZD4ZkpZo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:10e4::/48 Signature Algorithm: sha256WithRSAEncryption 7b:38:91:36:9c:f4:06:c1:45:a1:8d:fe:90:95:3f:91:15:35: cb:ce:1c:e7:81:7f:12:6e:3d:85:41:df:f0:70:b7:2d:a8:a0: ab:b9:bb:fe:7c:10:34:d0:7b:84:12:07:b9:ef:7f:26:10:d4: ab:1a:80:c6:0d:68:7c:d3:44:50:7f:a4:3a:d7:51:cf:6b:9b: 69:d9:b3:66:b3:a9:34:70:1e:a5:5d:1c:00:9e:50:ba:c8:ec: 2f:77:2c:67:63:a3:ec:78:ba:4e:7c:05:18:78:ba:72:c9:40: cc:5e:19:41:49:04:95:b9:61:cf:93:e6:7d:d3:a0:36:a4:d3: c6:78:ce:35:72:2b:44:55:5c:f6:a0:11:f0:2d:74:e1:33:c2: a0:03:0b:1a:c8:7a:40:62:b9:72:0f:7b:06:c0:24:e5:7d:17: f7:2c:36:62:ed:eb:08:c5:87:c4:00:dd:39:d5:50:8e:e9:d6: 83:0f:fd:e8:a2:e7:9b:f7:e2:99:61:29:95:9c:ac:f6:c2:72: 8e:57:b4:36:20:5e:1f:3c:d4:0f:1c:c8:18:81:71:8e:9d:16: 1f:19:d8:26:2a:35:70:6c:06:2a:85:d4:0a:79:db:cd:cb:eb: 23:22:4a:50:46:78:7c:22:df:00:4f:09:f5:5e:41:8a:13:11: df:c0:f9:46 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9y1ciwTHRyvxEyAq8Qn7pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYzU2ZTI1YjAwMjU2ZTI0Y2RhMzI0ZGViMjFhYTlkMTMw MTVmNjUwHhcNMjYwMTAyMDgyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDcwZTU3YzFhMjkxZmI3ZjNlZTMwZjM3ODU1ZDkwZjg2NjRhNTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsva9dbgFrp56NM7FKstd9t+IqU+i 9g2o/SsFyXXZ6JhwLN4N9J9OdHDpke1sSQvWtvW+yu2lviwG+KWZ9UcVhtmV88O2 JtjTV1l6T1Q/jAC2uaGm4YxUUmORxRrPQU6rpEKDigb9vbAyr9r/o2O3Lf5RSDyA jDViSsTOwkjChsGHcRqtZgDjXy8jZU6SQt/l38m7AxLFLDiomarTn7e8vvI0jRpw ldi8JXLQKyMijD3L8Kx7ReOVx5pYTq42g4IJ24Rl6Uif2KSOIjcV5QKRQJQVRE/v mzazK157H058+Bk/jAlEw/x9Sy7q6GLeJhVCmtsxp2Bg17y3+OpEJmoEAQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMBw5XwaKR+38+4w83hV2Q+GZKWaMB8GA1UdIwQY MBaAFE7FbiWwAlbiTNoyTeshqp0TAV9lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHNWdUpiQUNWdUpNMmpKTjZ5R3FuUk1CWDJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82NmU2YmEtMDE3Ny00MmYzLWFhOTAt MDlhMmM5Y2E3MTU1LzEvd0hEbGZCb3BIN2Z6N2pEemVGWFpENFprcFpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS82NmU2YmEtMDE3Ny00MmYzLWFhOTAtMDlhMmM5Y2E3MTU1 LzEvVHNWdUpiQUNWdUpNMmpKTjZ5R3FuUk1CWDJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBDk MA0GCSqGSIb3DQEBCwUAA4IBAQB7OJE2nPQGwUWhjf6QlT+RFTXLzhzngX8Sbj2F Qd/wcLctqKCrubv+fBA00HuEEge5738mENSrGoDGDWh800RQf6Q611HPa5tp2bNm s6k0cB6lXRwAnlC6yOwvdyxnY6PseLpOfAUYeLpyyUDMXhlBSQSVuWHPk+Z906A2 pNPGeM41citEVVz2oBHwLXThM8KgAwsayHpAYrlyD3sGwCTlfRf3LDZi7esIxYfE AN051VCO6daDD/3ooueb9+KZYSmVnKz2wnKOV7Q2IF4fPNQPHMgYgXGOnRYfGdgm KjVwbAYqhdQKedvNy+sjIkpQRnh8It8ATwn1XkGKExHfwPlG -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:28 2026 by rpki-client