This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/J2ac7yBZ1rddlP4OYM3qXYokeC4.roa File: J2ac7yBZ1rddlP4OYM3qXYokeC4.roa (raw, json) Hash identifier: 661rctvmo5buxvwD1rNnJJOMy13YlgHsaEVyiDN+3aA= Subject key identifier: 27:66:9C:EF:20:59:D6:B7:5D:94:FE:0E:60:CD:EA:5D:8A:24:78:2E Certificate issuer: /CN=c1173f47ec1d92e7886ea2907ff927ee17cbf2f4 Certificate serial: 019B7C12EC333E070B1039C1C55E825A728E Authority key identifier: C1:17:3F:47:EC:1D:92:E7:88:6E:A2:90:7F:F9:27:EE:17:CB:F2:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRc_R-wdkueIbqKQf_kn7hfL8vQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/J2ac7yBZ1rddlP4OYM3qXYokeC4.roa Signing time: Fri 02 Jan 2026 00:19:33 +0000 ROA not before: Fri 02 Jan 2026 00:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 2001:67c:444::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wRc_R-wdkueIbqKQf_kn7hfL8vQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ec:33:3e:07:0b:10:39:c1:c5:5e:82:5a:72:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1173f47ec1d92e7886ea2907ff927ee17cbf2f4 Validity Not Before: Jan 2 00:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27669cef2059d6b75d94fe0e60cdea5d8a24782e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f2:5d:f5:af:05:5b:08:96:83:b3:55:ae:fb: cd:19:23:ca:a0:3e:af:3f:3a:da:a7:76:f3:8c:09: a0:9c:52:27:24:5b:24:36:31:ef:37:78:a9:4e:17: 2d:af:d3:06:02:6f:77:4a:7c:6d:f9:52:36:3e:88: f0:2a:30:bc:71:4d:79:5b:00:49:aa:d2:25:53:1b: b4:96:58:57:a2:f2:8f:45:92:a1:29:e7:2b:70:81: 1f:1d:81:96:18:30:1c:33:af:24:60:ff:71:3c:91: 82:87:ca:1f:53:21:64:04:bc:05:67:c2:92:01:cb: 5a:65:7c:40:b6:72:bb:7a:97:e7:2f:f3:ce:12:03: 22:c3:4b:12:bc:46:24:93:d3:f2:97:3e:41:b2:cd: 3c:25:0f:52:92:f5:86:84:6f:06:7f:b0:b0:0b:87: 81:61:ae:88:38:ae:b7:5f:e6:9d:7b:6c:a6:37:b6: 63:ae:c4:e5:5a:75:5c:aa:9e:97:6f:d8:2e:6c:5e: 17:e1:aa:01:fd:51:9a:d2:ad:8d:30:85:ed:40:8f: 98:76:81:7a:cc:32:bf:ae:6e:f7:b6:ae:f8:5d:c4: 0e:54:26:11:24:45:49:34:f4:c9:c2:aa:17:24:a1: 0a:38:2f:da:4e:76:60:37:b8:03:16:ba:97:d6:92: 07:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:66:9C:EF:20:59:D6:B7:5D:94:FE:0E:60:CD:EA:5D:8A:24:78:2E X509v3 Authority Key Identifier: keyid:C1:17:3F:47:EC:1D:92:E7:88:6E:A2:90:7F:F9:27:EE:17:CB:F2:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRc_R-wdkueIbqKQf_kn7hfL8vQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/J2ac7yBZ1rddlP4OYM3qXYokeC4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:444::/48 Signature Algorithm: sha256WithRSAEncryption b7:8f:af:b9:bc:18:dd:b6:e7:99:8a:1f:aa:f5:5e:22:28:4c: 42:7c:d3:38:c2:ea:45:d5:97:c4:3c:64:97:3c:76:a7:f9:65: 3d:91:19:b2:2f:95:fc:c0:a7:0c:ed:8a:80:06:ce:9f:3e:4f: f5:b7:6e:a3:e3:28:96:6c:60:fb:5f:8b:5d:42:d1:da:aa:cd: a5:63:a7:6f:57:05:33:2a:50:44:77:db:3b:ba:70:39:2f:b8: dd:4c:1c:b4:ae:76:28:44:3f:3d:d8:8c:3f:e7:11:a6:06:47: a3:1c:aa:bf:1f:b5:f8:63:f8:48:a9:87:2b:0a:fc:7e:a0:5c: 8b:1a:10:b1:71:00:64:9d:24:fa:ca:18:0f:db:4b:5c:8b:d6: 30:ea:79:5e:ae:6e:fa:56:d2:40:ff:76:b1:07:e4:c4:df:37: ef:bf:49:42:63:a6:68:b9:c3:f2:4d:2d:ae:80:f1:44:d5:64: 76:95:42:95:9f:cd:71:dc:11:a5:f8:c9:87:e0:c7:78:8f:e7: 98:92:1c:5e:e0:f4:79:5d:96:29:82:55:3d:0a:96:6c:ba:4d: b7:33:ba:fc:e7:48:ab:42:76:9d:f6:61:55:cd:b4:65:f8:cb: 37:af:b4:40:38:71:f0:53:ca:97:7c:d2:3a:ba:56:19:12:3f: 0e:f1:6e:43 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8EuwzPgcLEDnBxV6CWnKOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMTczZjQ3ZWMxZDkyZTc4ODZlYTI5MDdmZjkyN2VlMTdj YmYyZjQwHhcNMjYwMTAyMDAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzY2OWNlZjIwNTlkNmI3NWQ5NGZlMGU2MGNkZWE1ZDhhMjQ3ODJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/Jd9a8FWwiWg7NVrvvNGSPKoD6v Pzrap3bzjAmgnFInJFskNjHvN3ipThctr9MGAm93Snxt+VI2PojwKjC8cU15WwBJ qtIlUxu0llhXovKPRZKhKecrcIEfHYGWGDAcM68kYP9xPJGCh8ofUyFkBLwFZ8KS ActaZXxAtnK7epfnL/POEgMiw0sSvEYkk9Pylz5Bss08JQ9SkvWGhG8Gf7CwC4eB Ya6IOK63X+ade2ymN7ZjrsTlWnVcqp6Xb9gubF4X4aoB/VGa0q2NMIXtQI+YdoF6 zDK/rm73tq74XcQOVCYRJEVJNPTJwqoXJKEKOC/aTnZgN7gDFrqX1pIHzQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCdmnO8gWda3XZT+DmDN6l2KJHguMB8GA1UdIwQY MBaAFMEXP0fsHZLniG6ikH/5J+4Xy/L0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1JjX1Itd2RrdWVJYnFLUWZfa243aGZMOHZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lZjE4OGItNjJlOS00ZmQ2LTk3ZjAt YmIzOTMyOWY4N2YzLzEvSjJhYzd5QloxcmRkbFA0T1lNM3FYWW9rZUM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lZjE4OGItNjJlOS00ZmQ2LTk3ZjAtYmIzOTMyOWY4N2Yz LzEvd1JjX1Itd2RrdWVJYnFLUWZfa243aGZMOHZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfARE MA0GCSqGSIb3DQEBCwUAA4IBAQC3j6+5vBjdtueZih+q9V4iKExCfNM4wupF1ZfE PGSXPHan+WU9kRmyL5X8wKcM7YqABs6fPk/1t26j4yiWbGD7X4tdQtHaqs2lY6dv VwUzKlBEd9s7unA5L7jdTBy0rnYoRD892Iw/5xGmBkejHKq/H7X4Y/hIqYcrCvx+ oFyLGhCxcQBknST6yhgP20tci9Yw6nlerm76VtJA/3axB+TE3zfvv0lCY6ZoucPy TS2ugPFE1WR2lUKVn81x3BGl+MmH4Md4j+eYkhxe4PR5XZYpglU9CpZsuk23M7r8 50irQnad9mFVzbRl+Ms3r7RAOHHwU8qXfNI6ulYZEj8O8W5D -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:27 2026 by rpki-client