This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/RMbFoCYqNcmYffu8B7XKQZOpe9g.roa File: RMbFoCYqNcmYffu8B7XKQZOpe9g.roa (raw, json) Hash identifier: Bc8GrrG0ePgUPfQVi+zdsUsnCNOP4l8CwIx91Qrbgs8= Subject key identifier: 44:C6:C5:A0:26:2A:35:C9:98:7D:FB:BC:07:B5:CA:41:93:A9:7B:D8 Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a Certificate serial: 019B78A25E354D56106E09F6D732F99A0F62 Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/RMbFoCYqNcmYffu8B7XKQZOpe9g.roa Signing time: Thu 01 Jan 2026 08:17:45 +0000 ROA not before: Thu 01 Jan 2026 08:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26073 IP address blocks: 2a0e:1cc0:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:5e:35:4d:56:10:6e:09:f6:d7:32:f9:9a:0f:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a Validity Not Before: Jan 1 08:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44c6c5a0262a35c9987dfbbc07b5ca4193a97bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b2:43:86:21:11:74:c6:99:89:32:66:eb:ae: 88:b6:0a:8b:17:cd:f7:bb:bd:db:cb:87:e0:23:23: ce:1b:cb:c7:ff:a0:57:41:90:7b:8d:4c:2b:7b:a5: a7:c0:bc:f4:21:d0:74:1f:0e:b0:71:a9:03:c2:bb: ea:5b:2d:80:c9:32:84:c9:42:e0:23:e5:02:d4:de: 9e:bd:3a:42:d1:fe:cc:56:8a:1e:2c:ed:30:5f:7b: 94:54:56:96:b0:81:0e:5a:e8:94:0d:4f:8a:0a:a7: a7:a0:46:db:73:ed:86:12:3e:ba:1a:8a:21:b7:02: 1a:9b:cc:14:e6:de:ba:17:3a:b3:54:b9:a8:c5:10: 27:43:f0:26:b3:35:ad:3b:31:66:fd:f4:f0:b2:79: d5:a3:33:b4:31:d5:cf:39:4f:68:17:c7:42:31:8c: 98:74:2e:79:05:bf:04:f6:a5:f6:a6:1a:8b:ad:d1: 6d:e9:e9:7c:3a:f1:f4:a3:4d:cc:d0:3c:34:28:1f: fc:d8:9e:65:cf:50:ab:e2:e0:a8:5e:cb:aa:bc:da: 5b:c4:4f:68:41:61:32:18:57:21:1a:0a:64:c6:17: 44:dc:7d:ce:75:c1:7c:63:50:ef:73:2f:cc:b2:5b: de:4b:ba:59:ac:f0:a7:f3:43:74:5d:84:05:07:54: 93:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C6:C5:A0:26:2A:35:C9:98:7D:FB:BC:07:B5:CA:41:93:A9:7B:D8 X509v3 Authority Key Identifier: keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/RMbFoCYqNcmYffu8B7XKQZOpe9g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:1cc0:10::/48 Signature Algorithm: sha256WithRSAEncryption 00:97:13:e5:b6:f2:7a:1d:3a:26:6e:d4:70:50:5a:ae:bc:1d: f9:66:c9:91:69:24:9d:ce:ad:d2:62:ba:2a:f4:5a:73:38:a4: 83:fc:51:e4:11:e8:ad:51:d5:81:ff:7d:42:ed:43:d6:0e:65: 37:b7:45:29:40:9f:26:63:59:64:85:7d:ee:e9:6b:fc:ac:20: f5:8a:5b:29:ff:81:e0:1c:c0:d1:1a:4f:62:d1:23:b6:35:ac: 26:de:46:7f:2e:ed:cc:5a:62:40:37:25:bd:1a:1a:79:b4:ec: bf:a9:c0:e5:6f:e6:c7:5f:4f:fa:7d:37:2b:56:52:50:70:f6: db:a7:a9:0f:a8:74:c2:10:27:51:8c:8e:cf:c1:7f:ec:27:70: 99:b1:7a:20:74:d3:65:af:6c:4e:30:ab:c0:ff:4d:5c:86:9e: cf:d3:c6:4e:32:12:cd:c6:8c:f6:70:4e:02:5c:ab:51:d0:a6: 86:06:36:32:46:90:00:66:c7:60:df:96:1f:63:bf:e0:fd:e2: b7:9d:73:f6:60:92:4d:71:66:11:72:8d:c0:89:64:ca:0f:e6: 98:bd:86:35:94:9c:9e:31:f0:de:13:ad:eb:92:84:b9:75:2b: 56:84:8e:8d:da:af:ae:09:c8:ec:3c:6f:29:32:62:62:93:43: 7f:2f:db:7b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4ol41TVYQbgn21zL5mg9iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzEzNjdkZjZkMTg2MTA3MWM5MmJhZTcyNjUyMzMyNmY0 NWJhMmEwHhcNMjYwMTAxMDgxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGM2YzVhMDI2MmEzNWM5OTg3ZGZiYmMwN2I1Y2E0MTkzYTk3YmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurJDhiERdMaZiTJm666ItgqLF833 u73by4fgIyPOG8vH/6BXQZB7jUwre6WnwLz0IdB0Hw6wcakDwrvqWy2AyTKEyULg I+UC1N6evTpC0f7MVooeLO0wX3uUVFaWsIEOWuiUDU+KCqenoEbbc+2GEj66Gooh twIam8wU5t66FzqzVLmoxRAnQ/AmszWtOzFm/fTwsnnVozO0MdXPOU9oF8dCMYyY dC55Bb8E9qX2phqLrdFt6el8OvH0o03M0Dw0KB/82J5lz1Cr4uCoXsuqvNpbxE9o QWEyGFchGgpkxhdE3H3OdcF8Y1Dvcy/MslveS7pZrPCn80N0XYQFB1ST7QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFETGxaAmKjXJmH37vAe1ykGTqXvYMB8GA1UdIwQY MBaAFO4xNn320YYQcckrrnJlIzJvRboqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2It MTE1OWRiZmJlZDU0LzEvUk1iRm9DWXFOY21ZZmZ1OEI3WEtRWk9wZTlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2ItMTE1OWRiZmJlZDU0 LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg4cwAAQ MA0GCSqGSIb3DQEBCwUAA4IBAQAAlxPltvJ6HTombtRwUFquvB35ZsmRaSSdzq3S Yroq9FpzOKSD/FHkEeitUdWB/31C7UPWDmU3t0UpQJ8mY1lkhX3u6Wv8rCD1ilsp /4HgHMDRGk9i0SO2Nawm3kZ/Lu3MWmJANyW9Ghp5tOy/qcDlb+bHX0/6fTcrVlJQ cPbbp6kPqHTCECdRjI7PwX/sJ3CZsXogdNNlr2xOMKvA/01chp7P08ZOMhLNxoz2 cE4CXKtR0KaGBjYyRpAAZsdg35YfY7/g/eK3nXP2YJJNcWYRco3AiWTKD+aYvYY1 lJyeMfDeE63rkoS5dStWhI6N2q+uCcjsPG8pMmJik0N/L9t7 -----END CERTIFICATE-----Generated at Sun Jan 25 16:35:31 2026 by rpki-client