This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/dbi31yJdjzH-gnfiJixAWom7O2Y.roa File: dbi31yJdjzH-gnfiJixAWom7O2Y.roa (raw, json) Hash identifier: wv59+nx6Q7SMg8qYiivt/O65l/1UFWdvKThzkz1L+E8= Subject key identifier: 75:B8:B7:D7:22:5D:8F:31:FE:82:77:E2:26:2C:40:5A:89:BB:3B:66 Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Certificate serial: 019B7834F79BA0B83527D4BD2E3F2B52D75D Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/dbi31yJdjzH-gnfiJixAWom7O2Y.roa Signing time: Thu 01 Jan 2026 06:18:15 +0000 ROA not before: Thu 01 Jan 2026 06:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41047 IP address blocks: 2a0e:a6c0::/32 maxlen: 32 2a0e:a6c1::/32 maxlen: 32 2a0e:a6c2::/32 maxlen: 32 2a0e:a6c3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f7:9b:a0:b8:35:27:d4:bd:2e:3f:2b:52:d7:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Validity Not Before: Jan 1 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75b8b7d7225d8f31fe8277e2262c405a89bb3b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:20:74:df:0a:ce:21:bd:22:f1:53:2d:a1:cc: b4:43:a8:14:a9:d8:ab:37:b5:be:c0:d1:8b:02:33: a4:e6:08:6d:67:32:0f:d1:b2:8f:62:f8:67:9b:5a: 71:f9:bf:c5:82:ce:c9:81:71:27:19:da:16:79:e4: 2d:92:20:25:cb:f7:86:2a:a1:59:00:4c:88:3e:44: 17:ec:e9:94:d8:30:4b:df:31:f8:58:03:25:c4:6e: 8a:85:83:6b:2f:f7:dc:2b:ef:72:cd:63:48:1b:b2: 98:9c:6a:99:b6:89:be:3d:bd:91:16:6d:69:b3:06: 14:d3:5d:28:60:b7:ab:df:d3:8c:0c:95:b7:9d:d8: 5d:9c:1a:77:5a:f6:02:14:62:37:5c:0a:9d:db:91: f9:c8:b9:bc:2a:52:01:e9:16:44:17:5d:57:05:2e: 18:1e:b3:15:ed:2f:22:16:f3:51:0e:31:66:bf:d3: 9a:05:41:6f:f2:72:07:c0:03:df:96:68:5b:b2:6d: 3b:b1:06:b0:c1:0f:ab:a4:ae:aa:65:03:21:0b:e4: 7c:57:70:50:ee:97:ad:7e:30:01:80:c7:a8:b5:fb: 1e:88:6a:ea:c8:bb:d9:54:57:1e:38:a1:48:57:b8: 48:37:05:a9:dc:cd:b4:42:fe:12:19:2d:4a:6e:a2: 74:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B8:B7:D7:22:5D:8F:31:FE:82:77:E2:26:2C:40:5A:89:BB:3B:66 X509v3 Authority Key Identifier: keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/dbi31yJdjzH-gnfiJixAWom7O2Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:a6c0::/30 Signature Algorithm: sha256WithRSAEncryption 08:99:e3:5f:af:0d:15:18:72:a2:75:bc:14:73:1b:16:9e:d6: 89:90:71:45:3d:96:62:a4:47:76:03:95:be:51:ce:d1:09:cc: 9e:d9:20:b4:82:79:7a:5c:b2:e1:d6:9a:bc:13:35:16:7a:c6: d9:1c:d8:a4:34:3d:60:e2:81:e3:8c:bc:8f:ae:b1:31:70:0e: 75:c7:04:ea:4d:16:66:7d:66:38:2c:e0:7b:02:3f:d5:5d:21: ee:7c:3e:02:9c:d6:c2:65:fb:ef:6f:57:53:37:5a:e5:6c:a2: e9:dd:16:64:e6:72:f0:29:1b:65:41:bf:c5:f0:71:0a:7d:99: f4:7e:e2:12:b6:57:73:5f:3f:69:9d:d0:8d:b4:be:78:14:14: 9e:8e:39:a0:b8:87:5f:e6:e1:4c:ba:ec:f1:df:7a:5b:f6:cb: f4:d1:02:59:2e:4b:80:12:fc:04:ca:c3:81:c8:82:72:2e:09: 1a:81:44:e9:75:3e:37:8b:38:bb:57:9b:1e:37:1d:37:69:1c: 9b:a9:86:2d:69:82:a0:76:e9:84:af:fd:dd:59:93:a1:ba:f9: 83:e6:d0:6a:16:92:e1:9c:2e:cc:da:22:00:41:48:6a:05:d4: 7a:a4:e5:5b:1d:a5:29:e0:3f:cf:a1:b2:e2:f3:62:02:be:9e: 94:b5:31:1c -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4NPeboLg1J9S9Lj8rUtddMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNmI0MjAyMTg4NmQ4ZWVkYmFlOTBkOWU2YWIxZGU1MzNj NTBkMjAwHhcNMjYwMTAxMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWI4YjdkNzIyNWQ4ZjMxZmU4Mjc3ZTIyNjJjNDA1YTg5YmIzYjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryB03wrOIb0i8VMtocy0Q6gUqdir N7W+wNGLAjOk5ghtZzIP0bKPYvhnm1px+b/Fgs7JgXEnGdoWeeQtkiAly/eGKqFZ AEyIPkQX7OmU2DBL3zH4WAMlxG6KhYNrL/fcK+9yzWNIG7KYnGqZtom+Pb2RFm1p swYU010oYLer39OMDJW3ndhdnBp3WvYCFGI3XAqd25H5yLm8KlIB6RZEF11XBS4Y HrMV7S8iFvNRDjFmv9OaBUFv8nIHwAPflmhbsm07sQawwQ+rpK6qZQMhC+R8V3BQ 7petfjABgMeotfseiGrqyLvZVFceOKFIV7hINwWp3M20Qv4SGS1KbqJ0vwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFHW4t9ciXY8x/oJ34iYsQFqJuztmMB8GA1UdIwQY MBaAFOxrQgIYhtju266Q2earHeUzxQ0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQt YTY4NzNiMzc0ZTI2LzEvZGJpMzF5SmRqekgtZ25maUppeEFXb203TzJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQtYTY4NzNiMzc0ZTI2 LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCKg6mwDAN BgkqhkiG9w0BAQsFAAOCAQEACJnjX68NFRhyonW8FHMbFp7WiZBxRT2WYqRHdgOV vlHO0QnMntkgtIJ5elyy4daavBM1FnrG2RzYpDQ9YOKB44y8j66xMXAOdccE6k0W Zn1mOCzgewI/1V0h7nw+ApzWwmX7729XUzda5Wyi6d0WZOZy8CkbZUG/xfBxCn2Z 9H7iErZXc18/aZ3QjbS+eBQUno45oLiHX+bhTLrs8d96W/bL9NECWS5LgBL8BMrD gciCci4JGoFE6XU+N4s4u1ebHjcdN2kcm6mGLWmCoHbphK/93VmTobr5g+bQahaS 4ZwuzNoiAEFIagXUeqTlWx2lKeA/z6Gy4vNiAr6elLUxHA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:09 2026 by rpki-client