This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/nCoIFZk2MnhEIDZZRukVQPEaSeY.roa File: nCoIFZk2MnhEIDZZRukVQPEaSeY.roa (raw, json) Hash identifier: SANVNvbHmnLZfOlrmAKYjLVvJPKFlkAkCF90MWF7jrs= Subject key identifier: 9C:2A:08:15:99:36:32:78:44:20:36:59:46:E9:15:40:F1:1A:49:E6 Certificate issuer: /CN=332aecd243bef587c879bbfe1fe4c5a5beb33455 Certificate serial: 019B77596B9DBF8C9D39E32BA5332935A9B3 Authority key identifier: 33:2A:EC:D2:43:BE:F5:87:C8:79:BB:FE:1F:E4:C5:A5:BE:B3:34:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Myrs0kO-9YfIebv-H-TFpb6zNFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/nCoIFZk2MnhEIDZZRukVQPEaSeY.roa Signing time: Thu 01 Jan 2026 02:18:27 +0000 ROA not before: Thu 01 Jan 2026 02:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214347 IP address blocks: 2001:678:7b4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.crl rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.mft rsync://rpki.ripe.net/repository/DEFAULT/Myrs0kO-9YfIebv-H-TFpb6zNFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:6b:9d:bf:8c:9d:39:e3:2b:a5:33:29:35:a9:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=332aecd243bef587c879bbfe1fe4c5a5beb33455 Validity Not Before: Jan 1 02:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c2a0815993632784420365946e91540f11a49e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bf:da:06:31:8e:4e:c0:98:5c:2b:b7:f6:b5: ba:7a:7b:b8:77:4e:02:66:48:50:bc:c5:c5:77:0d: 6a:7c:18:4b:89:56:91:64:c6:25:37:36:50:5b:cd: 3b:5e:6c:a0:c8:87:df:61:3f:5c:aa:83:9e:db:fb: 2e:f6:92:8c:2d:65:e1:b6:d0:e8:e4:81:8f:1e:ad: 58:d0:58:c7:ab:54:bd:a7:6e:7c:a6:cb:77:ff:3b: 89:b5:04:51:c3:8d:8b:97:80:fe:fc:7e:02:43:d0: 2f:bd:e3:1b:10:5e:e5:e6:c8:c2:e3:18:df:46:3e: b9:4c:7e:ab:7f:97:9f:f0:4b:ff:0e:49:0d:34:70: 84:c0:8f:ce:a4:8a:11:e5:7d:a0:5f:eb:4e:b8:7c: 3c:e9:df:2d:fa:7e:c2:57:37:48:c3:95:e2:73:a0: 6c:2f:59:4b:7f:4a:68:08:53:18:81:3d:b6:54:bd: 6b:99:a8:34:df:07:c3:b5:79:d6:10:b4:81:7d:18: 1c:63:bf:52:a9:6e:28:c7:1d:5a:b4:1e:07:84:26: af:2c:a4:98:d1:a6:e0:22:d6:72:12:a9:e0:42:ec: f0:f9:e4:0f:93:01:ce:7c:ac:dc:27:95:e9:d2:3c: 08:1b:db:92:e3:4d:e1:13:e0:39:b8:34:f7:a1:8f: 85:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:2A:08:15:99:36:32:78:44:20:36:59:46:E9:15:40:F1:1A:49:E6 X509v3 Authority Key Identifier: keyid:33:2A:EC:D2:43:BE:F5:87:C8:79:BB:FE:1F:E4:C5:A5:BE:B3:34:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Myrs0kO-9YfIebv-H-TFpb6zNFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/nCoIFZk2MnhEIDZZRukVQPEaSeY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:7b4::/48 Signature Algorithm: sha256WithRSAEncryption 3e:60:be:ef:f1:26:a3:91:f6:f9:0c:b3:ca:ac:31:14:cf:a5: 8f:8e:20:8a:2d:0e:e2:87:8b:d1:90:e5:52:16:6d:59:c0:c6: 73:d9:47:89:c5:d1:d5:6a:1b:39:41:68:9e:0c:ea:92:db:2b: 25:c1:e2:63:21:06:87:b0:61:d0:08:64:00:a6:a2:bd:11:68: 51:70:cd:5b:1f:b7:b2:31:2b:da:ef:00:69:69:18:3c:bd:b3: ad:95:30:72:45:24:0e:97:5e:72:07:12:9a:ce:2a:bb:87:0a: 82:3f:ab:7f:47:47:7e:60:d4:8d:31:67:0a:c5:19:72:b3:5f: 99:6c:82:48:41:da:eb:45:bb:53:d8:8f:57:36:dd:7e:a6:00: 0f:f0:95:3f:7e:3f:41:a3:96:43:80:6c:39:1b:d0:13:c3:67: e7:fb:54:bb:5d:d4:06:ba:d8:f1:42:56:6b:90:cc:6e:62:90: e9:1c:52:8b:be:63:cc:e1:ac:0d:13:6f:4f:e7:b2:98:c5:cf: 9e:46:a1:12:94:6b:71:40:e6:84:79:f4:07:ea:41:98:cb:b3: c1:20:08:39:32:8a:a0:b0:d1:0f:6f:f7:f4:d7:03:9c:9a:83: 86:e4:c6:39:84:42:05:6f:dc:7f:a7:ea:8a:74:f0:53:ec:c5: a9:18:07:92 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WWudv4ydOeMrpTMpNamzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMmFlY2QyNDNiZWY1ODdjODc5YmJmZTFmZTRjNWE1YmVi MzM0NTUwHhcNMjYwMTAxMDIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzJhMDgxNTk5MzYzMjc4NDQyMDM2NTk0NmU5MTU0MGYxMWE0OWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb/aBjGOTsCYXCu39rW6enu4d04C ZkhQvMXFdw1qfBhLiVaRZMYlNzZQW807XmygyIffYT9cqoOe2/su9pKMLWXhttDo 5IGPHq1Y0FjHq1S9p258pst3/zuJtQRRw42Ll4D+/H4CQ9AvveMbEF7l5sjC4xjf Rj65TH6rf5ef8Ev/DkkNNHCEwI/OpIoR5X2gX+tOuHw86d8t+n7CVzdIw5Xic6Bs L1lLf0poCFMYgT22VL1rmag03wfDtXnWELSBfRgcY79SqW4oxx1atB4HhCavLKSY 0abgItZyEqngQuzw+eQPkwHOfKzcJ5Xp0jwIG9uS403hE+A5uDT3oY+F9wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJwqCBWZNjJ4RCA2WUbpFUDxGknmMB8GA1UdIwQY MBaAFDMq7NJDvvWHyHm7/h/kxaW+szRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXlyczBrTy05WWZJZWJ2LUgtVEZwYjZ6TkZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi80YzRmZjItYzdlYi00ZmRlLWFkNDUt MzNkZDcwMjEwZmY1LzEvbkNvSUZaazJNbmhFSURaWlJ1a1ZRUEVhU2VZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi80YzRmZjItYzdlYi00ZmRlLWFkNDUtMzNkZDcwMjEwZmY1 LzEvTXlyczBrTy05WWZJZWJ2LUgtVEZwYjZ6TkZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAe0 MA0GCSqGSIb3DQEBCwUAA4IBAQA+YL7v8Sajkfb5DLPKrDEUz6WPjiCKLQ7ih4vR kOVSFm1ZwMZz2UeJxdHVahs5QWieDOqS2yslweJjIQaHsGHQCGQApqK9EWhRcM1b H7eyMSva7wBpaRg8vbOtlTByRSQOl15yBxKaziq7hwqCP6t/R0d+YNSNMWcKxRly s1+ZbIJIQdrrRbtT2I9XNt1+pgAP8JU/fj9Bo5ZDgGw5G9ATw2fn+1S7XdQGutjx QlZrkMxuYpDpHFKLvmPM4awNE29P57KYxc+eRqESlGtxQOaEefQH6kGYy7PBIAg5 MoqgsNEPb/f01wOcmoOG5MY5hEIFb9x/p+qKdPBT7MWpGAeS -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:24 2026 by rpki-client