This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/kE6tecKZ0fG9qC_JtCBXfpG4g1A.roa File: kE6tecKZ0fG9qC_JtCBXfpG4g1A.roa (raw, json) Hash identifier: CDpFmGMaqgiUJFuGVEP8AvEce972KDkWrlC2GvXzIOA= Subject key identifier: 90:4E:AD:79:C2:99:D1:F1:BD:A8:2F:C9:B4:20:57:7E:91:B8:83:50 Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d Certificate serial: 019B7C7FDE370B6E845C4233BA09BB3FE8EF Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/kE6tecKZ0fG9qC_JtCBXfpG4g1A.roa Signing time: Fri 02 Jan 2026 02:18:33 +0000 ROA not before: Fri 02 Jan 2026 02:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209844 IP address blocks: 2001:67c:2960::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:de:37:0b:6e:84:5c:42:33:ba:09:bb:3f:e8:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d Validity Not Before: Jan 2 02:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=904ead79c299d1f1bda82fc9b420577e91b88350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:21:c0:e1:94:a2:eb:b6:0f:3a:5a:b3:c0:5d: 84:95:ff:7b:2d:06:88:9f:bb:04:fe:e1:93:67:2c: 53:d6:d9:09:70:b2:a3:36:bf:23:61:14:e9:7d:8c: 2e:c4:ba:cf:88:b3:8b:aa:41:a5:8d:37:68:f2:12: 0c:83:36:e1:f9:ae:82:8f:76:b3:81:98:51:ce:ae: fd:4f:05:40:f6:de:68:d5:a3:4e:09:d9:87:c7:5f: 4d:d1:fa:18:00:cd:ea:4c:f1:24:68:a8:cd:03:55: f3:3b:76:e5:48:31:bc:bf:06:60:91:0a:2e:b4:1e: 8b:94:d8:2e:f2:82:5b:14:7d:c5:09:88:4f:cb:33: 46:8c:4c:bc:25:8d:cb:1b:e8:fb:14:5b:60:86:8c: 55:77:2c:63:aa:fb:e4:fe:4a:19:b2:5c:ef:50:55: ca:b5:2c:26:18:34:d0:41:6e:3c:77:5a:20:c0:76: e8:ee:36:62:f4:11:dc:9e:36:b0:9b:fa:eb:9b:b8: 92:93:b5:21:f9:c7:9d:98:eb:11:94:05:d7:34:06: b2:b0:ec:ee:f0:0c:0a:66:af:5e:f5:b2:9a:85:16: f8:0a:d9:3c:f6:34:a6:fc:bb:13:39:07:97:7f:6d: 79:8e:21:1e:ea:b0:ac:5c:66:61:f3:f6:cd:8d:7b: da:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4E:AD:79:C2:99:D1:F1:BD:A8:2F:C9:B4:20:57:7E:91:B8:83:50 X509v3 Authority Key Identifier: keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/kE6tecKZ0fG9qC_JtCBXfpG4g1A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2960::/48 Signature Algorithm: sha256WithRSAEncryption 95:40:f1:bc:14:86:aa:9c:68:17:f2:4b:6d:a8:9f:87:6a:96: 7c:ae:cf:c6:44:62:e9:c4:df:0a:bf:55:46:45:6e:2c:4c:5f: 9f:56:10:25:05:dd:17:54:6b:39:3a:37:e3:ca:55:06:5f:9e: 2d:5c:31:3f:ff:fe:21:14:39:d5:4f:33:c3:0c:0c:1c:0f:99: 67:41:6f:d3:a8:6c:94:2e:7a:3e:e6:12:eb:36:6a:2a:dd:6d: c9:2d:7c:bf:48:ef:53:80:7c:23:f6:12:2d:62:2a:5d:00:36: e7:f9:b9:d9:37:1a:49:16:68:0a:14:74:70:d2:a5:3f:72:a3: 20:48:17:93:5b:3b:1f:fc:28:09:7a:43:7c:80:fe:e3:bf:bb: de:ee:9c:93:83:85:75:29:d7:52:40:9d:bd:4f:61:16:28:fe: ff:a5:1c:89:a5:0b:b0:d2:64:ab:5e:ba:8d:07:9a:70:3d:8e: a6:c2:aa:7e:8a:c8:55:d0:05:60:12:dd:5e:8f:b1:33:b5:48: 1e:cc:6f:41:a6:ad:e8:31:47:52:2f:d4:4f:f8:8e:a0:d1:64: 8f:df:b2:f8:ab:c4:4a:00:a5:23:6a:77:af:81:fa:94:04:b8: f8:c6:a6:23:ed:8f:50:ea:2a:dc:3f:c4:d7:00:0d:18:ae:3b: ce:c8:93:9c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8f943C26EXEIzugm7P+jvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGViMjA0ZjM1ODAwNDc4ODIyNGUyZmIxOGU0ZDVlNzRi ZWJmOGQwHhcNMjYwMTAyMDIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDRlYWQ3OWMyOTlkMWYxYmRhODJmYzliNDIwNTc3ZTkxYjg4MzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriHA4ZSi67YPOlqzwF2Elf97LQaI n7sE/uGTZyxT1tkJcLKjNr8jYRTpfYwuxLrPiLOLqkGljTdo8hIMgzbh+a6Cj3az gZhRzq79TwVA9t5o1aNOCdmHx19N0foYAM3qTPEkaKjNA1XzO3blSDG8vwZgkQou tB6LlNgu8oJbFH3FCYhPyzNGjEy8JY3LG+j7FFtghoxVdyxjqvvk/koZslzvUFXK tSwmGDTQQW48d1ogwHbo7jZi9BHcnjawm/rrm7iSk7Uh+cedmOsRlAXXNAaysOzu 8AwKZq9e9bKahRb4Ctk89jSm/LsTOQeXf215jiEe6rCsXGZh8/bNjXvaywIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJBOrXnCmdHxvagvybQgV36RuINQMB8GA1UdIwQY MBaAFPBOsgTzWABHiCJOL7GOTV50vr+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMt NWM1ODkyYWZhNDg3LzEva0U2dGVjS1owZkc5cUNfSnRDQlhmcEc0ZzFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMtNWM1ODkyYWZhNDg3 LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfClg MA0GCSqGSIb3DQEBCwUAA4IBAQCVQPG8FIaqnGgX8kttqJ+HapZ8rs/GRGLpxN8K v1VGRW4sTF+fVhAlBd0XVGs5OjfjylUGX54tXDE///4hFDnVTzPDDAwcD5lnQW/T qGyULno+5hLrNmoq3W3JLXy/SO9TgHwj9hItYipdADbn+bnZNxpJFmgKFHRw0qU/ cqMgSBeTWzsf/CgJekN8gP7jv7ve7pyTg4V1KddSQJ29T2EWKP7/pRyJpQuw0mSr XrqNB5pwPY6mwqp+ishV0AVgEt1ej7EztUgezG9Bpq3oMUdSL9RP+I6g0WSP37L4 q8RKAKUjanevgfqUBLj4xqYj7Y9Q6ircP8TXAA0YrjvOyJOc -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:11 2026 by rpki-client