This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/fN_qyC3q0DgZifOUjvgGUIVLuLE.roa File: fN_qyC3q0DgZifOUjvgGUIVLuLE.roa (raw, json) Hash identifier: Ghng4SHLOPaXZFJc/gZf2VJ82XHj4yYptmX1zNVV1oI= Subject key identifier: 7C:DF:EA:C8:2D:EA:D0:38:19:89:F3:94:8E:F8:06:50:85:4B:B8:B1 Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601 Certificate serial: 019B797EA929DCE390BB358040A4EEF65728 Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/fN_qyC3q0DgZifOUjvgGUIVLuLE.roa Signing time: Thu 01 Jan 2026 12:18:22 +0000 ROA not before: Thu 01 Jan 2026 12:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198149 IP address blocks: 2a13:1c47:caf0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a9:29:dc:e3:90:bb:35:80:40:a4:ee:f6:57:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601 Validity Not Before: Jan 1 12:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cdfeac82dead0381989f3948ef80650854bb8b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8c:87:17:44:cd:dd:c7:1d:85:ff:bf:f4:6b: 83:5d:b9:59:31:25:a8:46:ee:18:91:52:a9:28:6d: 29:1c:f3:1a:a2:c6:61:28:d5:b7:41:c6:d6:07:f3: b5:3f:23:40:c8:e9:1c:40:13:93:4e:ed:dd:01:e1: 98:26:c9:ed:14:52:a5:ab:36:fe:e0:60:d7:6f:85: b5:da:80:3a:82:64:94:e1:9d:50:e3:c4:29:3f:13: 19:7e:c2:3f:23:22:cd:77:ef:c3:b5:83:32:64:6c: 7c:7b:b0:ec:e1:af:ac:7c:65:e4:e5:02:ef:dd:79: c9:4d:59:1f:3f:16:23:12:8c:96:0f:f8:f9:00:8e: 88:62:2d:3f:14:1f:36:3e:27:91:ba:ec:f5:f4:fc: 52:cc:e2:b9:10:82:fd:0c:61:f2:84:f1:1a:45:37: 75:74:46:9a:c1:5e:d1:16:97:16:9e:3b:4c:95:1d: 33:54:d5:41:0d:7c:96:99:f7:5f:d1:6a:0a:7e:20: c0:8b:31:6d:e3:45:28:a7:4b:1a:d2:e9:4d:be:6c: 58:b2:66:16:86:81:a8:9b:46:5e:2a:4d:a6:1c:3e: 65:4d:08:34:6a:48:a1:8b:4c:ea:a9:61:b0:92:39: c8:80:c9:5c:80:d7:5d:81:16:23:75:44:a5:f1:93: 95:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DF:EA:C8:2D:EA:D0:38:19:89:F3:94:8E:F8:06:50:85:4B:B8:B1 X509v3 Authority Key Identifier: keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/fN_qyC3q0DgZifOUjvgGUIVLuLE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:1c47:caf0::/44 Signature Algorithm: sha256WithRSAEncryption b7:3d:60:45:f6:40:70:c2:a1:96:2c:09:7f:f1:93:48:51:db: e8:77:c7:9a:d6:d2:01:a0:34:8e:4d:17:c1:5e:d9:61:f6:ee: ef:90:20:43:40:7b:cc:49:4e:95:b6:01:ee:b9:0f:ca:36:be: ec:12:a1:ef:a0:c2:38:59:7e:57:02:bd:bf:8f:2a:e1:69:11: 1d:cc:75:c2:9f:d1:1e:ed:9d:13:a0:f7:7f:1e:c9:4e:fa:9f: b4:6f:83:b5:39:61:a2:44:8a:36:5e:97:cd:e1:c3:6a:b0:55: 37:35:44:72:e5:a7:46:6b:6f:53:2a:7d:12:5c:d4:e3:7f:33: 29:54:9f:bc:a1:ac:2f:be:cd:44:66:1e:cf:82:ca:3c:3c:73: 1c:ed:0e:4a:68:6f:25:96:0c:56:c4:47:b4:f1:08:e2:7c:7b: 47:11:5f:68:0f:3d:88:c4:e9:ae:a6:90:18:30:9b:77:3e:04: 35:6e:41:c1:1a:b6:c5:fb:b3:62:be:67:66:8d:09:4d:47:f4: 94:e9:12:b8:a8:70:d8:2e:8d:59:fe:6b:f8:41:21:ba:e5:f7: db:55:d8:6d:3f:82:5c:65:0e:8e:22:5d:64:52:e9:6a:d1:b7: f5:81:89:b4:b8:d8:f7:29:04:61:eb:d6:b3:cb:49:1a:c3:18: 58:25:1d:2d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fqkp3OOQuzWAQKTu9lcoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3Y2UxNzljYmUxM2RkYjE0MDEyOTg1YTA2NzEwMGVmOThh NTU2MDEwHhcNMjYwMTAxMTIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2RmZWFjODJkZWFkMDM4MTk4OWYzOTQ4ZWY4MDY1MDg1NGJiOGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54yHF0TN3ccdhf+/9GuDXblZMSWo Ru4YkVKpKG0pHPMaosZhKNW3QcbWB/O1PyNAyOkcQBOTTu3dAeGYJsntFFKlqzb+ 4GDXb4W12oA6gmSU4Z1Q48QpPxMZfsI/IyLNd+/DtYMyZGx8e7Ds4a+sfGXk5QLv 3XnJTVkfPxYjEoyWD/j5AI6IYi0/FB82PieRuuz19PxSzOK5EIL9DGHyhPEaRTd1 dEaawV7RFpcWnjtMlR0zVNVBDXyWmfdf0WoKfiDAizFt40Uop0sa0ulNvmxYsmYW hoGom0ZeKk2mHD5lTQg0akihi0zqqWGwkjnIgMlcgNddgRYjdUSl8ZOVYwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHzf6sgt6tA4GYnzlI74BlCFS7ixMB8GA1UdIwQY MBaAFGfOF5y+E92xQBKYWgZxAO+YpVYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEt NjJjMDFkYzY5Y2NhLzEvZk5fcXlDM3EwRGdaaWZPVWp2Z0dVSVZMdUxFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEtNjJjMDFkYzY5Y2Nh LzEvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhMcR8rw MA0GCSqGSIb3DQEBCwUAA4IBAQC3PWBF9kBwwqGWLAl/8ZNIUdvod8ea1tIBoDSO TRfBXtlh9u7vkCBDQHvMSU6VtgHuuQ/KNr7sEqHvoMI4WX5XAr2/jyrhaREdzHXC n9Ee7Z0ToPd/HslO+p+0b4O1OWGiRIo2XpfN4cNqsFU3NURy5adGa29TKn0SXNTj fzMpVJ+8oawvvs1EZh7Pgso8PHMc7Q5KaG8llgxWxEe08QjifHtHEV9oDz2IxOmu ppAYMJt3PgQ1bkHBGrbF+7NivmdmjQlNR/SU6RK4qHDYLo1Z/mv4QSG65ffbVdht P4JcZQ6OIl1kUulq0bf1gYm0uNj3KQRh69azy0kawxhYJR0t -----END CERTIFICATE-----Generated at Mon Jan 26 00:24:20 2026 by rpki-client