This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/1-H2i97DY6VzCiu9H7OgVzQ-Jd9s.roa File: 1-H2i97DY6VzCiu9H7OgVzQ-Jd9s.roa (raw, json) Hash identifier: lP4WKQ/Dq546EBUx3DAqZW0kzkRHyk7qyZMudeX4Mck= Subject key identifier: F8:7D:A2:F7:B0:D8:E9:5C:C2:8A:EF:47:EC:E8:15:CD:0F:89:77:DB Certificate issuer: /CN=7365ec12014f911f7205eecbc2fc818b9b35723c Certificate serial: 019B797EB4C01F5132E8C53DCB02E4392045 Authority key identifier: 73:65:EC:12:01:4F:91:1F:72:05:EE:CB:C2:FC:81:8B:9B:35:72:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2XsEgFPkR9yBe7LwvyBi5s1cjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/1-H2i97DY6VzCiu9H7OgVzQ-Jd9s.roa Signing time: Thu 01 Jan 2026 12:18:25 +0000 ROA not before: Thu 01 Jan 2026 12:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216364 IP address blocks: 2001:3300::/29 maxlen: 29 2001:3300::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.crl rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.mft rsync://rpki.ripe.net/repository/DEFAULT/c2XsEgFPkR9yBe7LwvyBi5s1cjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b4:c0:1f:51:32:e8:c5:3d:cb:02:e4:39:20:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7365ec12014f911f7205eecbc2fc818b9b35723c Validity Not Before: Jan 1 12:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f87da2f7b0d8e95cc28aef47ece815cd0f8977db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:97:f3:7c:e2:49:34:f7:82:ac:ef:d4:95:7f: 17:ad:63:c5:01:13:68:ff:37:5c:41:92:08:ef:2a: 93:50:08:b7:f9:05:34:65:ca:d1:f9:14:ea:4d:5d: c7:f9:58:74:3f:50:f4:5e:f6:00:3d:46:b2:6f:2d: 3f:20:b2:51:21:73:e8:54:02:d1:41:f5:d0:6d:78: a0:7a:07:e6:84:ba:e4:17:9f:a7:a6:4a:e7:96:36: 33:29:2c:5e:89:47:bc:c7:20:5e:97:bb:b7:1f:47: da:5e:7e:2b:06:e3:37:3f:be:7e:61:a9:dc:48:41: 44:7f:38:55:d6:37:89:61:1f:40:b1:d7:d3:1d:58: 30:03:6b:d9:51:36:3a:ce:26:2a:79:56:98:85:4d: a5:bf:c0:32:a5:84:43:7f:1c:92:50:56:32:e0:32: ba:48:91:91:04:bc:a5:41:ea:eb:5e:10:70:31:91: 6d:18:c1:d6:50:6d:76:50:7b:a8:63:31:5a:a4:cc: 1e:16:d1:2d:47:77:aa:59:d8:00:77:cf:9e:f5:8c: 59:f8:7a:cc:0c:2f:ed:76:4f:44:1c:55:f0:84:aa: a8:cd:b0:dc:92:d6:a6:8c:6a:b2:fb:e2:6a:26:5e: cd:a2:d3:1b:3e:ca:15:16:62:94:2a:d0:7c:df:c2: 3f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7D:A2:F7:B0:D8:E9:5C:C2:8A:EF:47:EC:E8:15:CD:0F:89:77:DB X509v3 Authority Key Identifier: keyid:73:65:EC:12:01:4F:91:1F:72:05:EE:CB:C2:FC:81:8B:9B:35:72:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2XsEgFPkR9yBe7LwvyBi5s1cjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/1-H2i97DY6VzCiu9H7OgVzQ-Jd9s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3300::/29 Signature Algorithm: sha256WithRSAEncryption 88:eb:6d:42:cb:45:8c:d9:6e:b4:c4:34:20:65:77:94:6c:c1: 4f:1b:28:1c:2c:b7:ba:44:b1:46:7a:fb:a5:0a:8f:b3:43:f1: ec:58:4b:65:10:29:1e:db:0e:fb:69:b6:3c:b2:55:45:46:5a: 15:40:d5:72:2a:83:d6:6e:b5:70:db:78:e8:c3:0b:bf:5b:0d: 98:ef:70:be:55:a2:3b:30:f3:32:4e:aa:09:6c:53:56:20:47: de:59:27:10:c8:60:eb:07:f2:97:be:c9:7a:a1:53:61:69:f4: c1:e7:13:1a:7b:95:af:15:09:99:96:40:c1:22:d8:24:07:06: 08:13:fb:03:de:a3:ea:85:7b:18:e7:50:73:43:fd:ad:0b:35: a2:ad:1e:ee:c1:16:bb:2e:13:75:70:c6:8b:36:fd:bf:58:3f: 8a:7b:05:49:34:a5:25:eb:eb:1d:38:55:4c:8d:1a:f0:2f:bc: 24:12:36:8a:61:24:53:fb:2c:a0:99:be:6c:fa:44:6a:a6:62: c3:de:7d:9f:4d:ae:9a:4f:e4:c1:5e:78:58:09:47:d3:ff:f3: 98:de:39:c5:c4:d2:6c:4d:5a:e8:a5:38:bb:ff:1b:08:f4:1c: ca:da:9a:1d:d4:55:a4:76:cb:e1:af:35:50:f4:bf:61:a3:2c: 02:b3:ba:6f -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5frTAH1Ey6MU9ywLkOSBFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNjVlYzEyMDE0ZjkxMWY3MjA1ZWVjYmMyZmM4MThiOWIz NTcyM2MwHhcNMjYwMTAxMTIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODdkYTJmN2IwZDhlOTVjYzI4YWVmNDdlY2U4MTVjZDBmODk3N2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5fzfOJJNPeCrO/UlX8XrWPFARNo /zdcQZII7yqTUAi3+QU0ZcrR+RTqTV3H+Vh0P1D0XvYAPUayby0/ILJRIXPoVALR QfXQbXigegfmhLrkF5+npkrnljYzKSxeiUe8xyBel7u3H0faXn4rBuM3P75+Yanc SEFEfzhV1jeJYR9AsdfTHVgwA2vZUTY6ziYqeVaYhU2lv8AypYRDfxySUFYy4DK6 SJGRBLylQerrXhBwMZFtGMHWUG12UHuoYzFapMweFtEtR3eqWdgAd8+e9YxZ+HrM DC/tdk9EHFXwhKqozbDcktamjGqy++JqJl7NotMbPsoVFmKUKtB838I/0wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPh9ovew2OlcworvR+zoFc0PiXfbMB8GA1UdIwQY MBaAFHNl7BIBT5EfcgXuy8L8gYubNXI8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzJYc0VnRlBrUjl5QmU3THd2eUJpNXMxY2p3LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85ZjYzYWMtYjFlNC00ZGJkLTk5OTYt NWExOWFmZGIwNmE3LzEvMS1IMmk5N0RZNlZ6Q2l1OUg3T2dWelEtSmQ5cy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTUvOWY2M2FjLWIxZTQtNGRiZC05OTk2LTVhMTlhZmRiMDZh Ny8xL2MyWHNFZ0ZQa1I5eUJlN0x3dnlCaTVzMWNqdy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyABMwAw DQYJKoZIhvcNAQELBQADggEBAIjrbULLRYzZbrTENCBld5RswU8bKBwst7pEsUZ6 +6UKj7ND8exYS2UQKR7bDvtptjyyVUVGWhVA1XIqg9ZutXDbeOjDC79bDZjvcL5V ojsw8zJOqglsU1YgR95ZJxDIYOsH8pe+yXqhU2Fp9MHnExp7la8VCZmWQMEi2CQH BggT+wPeo+qFexjnUHND/a0LNaKtHu7BFrsuE3Vwxos2/b9YP4p7BUk0pSXr6x04 VUyNGvAvvCQSNophJFP7LKCZvmz6RGqmYsPefZ9NrppP5MFeeFgJR9P/85jeOcXE 0mxNWuilOLv/Gwj0HMramh3UVaR2y+GvNVD0v2GjLAKzum8= -----END CERTIFICATE-----Generated at Sun Jan 25 14:40:16 2026 by rpki-client