This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/l226mFgK6T2Z60Q9UPJ4UVEXvGI.roa File: l226mFgK6T2Z60Q9UPJ4UVEXvGI.roa (raw, json) Hash identifier: sMVz2G2/suJpzTvieIkpkHigX+RGGXDj8VHYY+8cT9Q= Subject key identifier: 97:6D:BA:98:58:0A:E9:3D:99:EB:44:3D:50:F2:78:51:51:17:BC:62 Certificate issuer: /CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633 Certificate serial: 019B77C70DD50C7B5522E0C95102F0DE4629 Authority key identifier: F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/l226mFgK6T2Z60Q9UPJ4UVEXvGI.roa Signing time: Thu 01 Jan 2026 04:18:12 +0000 ROA not before: Thu 01 Jan 2026 04:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207110 IP address blocks: 2a09:5e80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0d:d5:0c:7b:55:22:e0:c9:51:02:f0:de:46:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633 Validity Not Before: Jan 1 04:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=976dba98580ae93d99eb443d50f278515117bc62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:75:4d:2b:0f:48:1b:fe:37:41:84:da:f3:1b: a6:01:e9:b6:40:5f:84:37:3a:e5:08:f3:a2:98:dc: 68:3a:9c:59:b6:41:5d:15:74:be:b3:c6:8b:b1:8c: 2a:13:76:7d:ad:26:f3:40:50:9a:1f:ed:06:31:b5: f3:81:7f:e5:95:86:70:b9:46:48:e4:17:79:76:c0: ca:31:ea:e5:05:c1:e7:79:f0:7d:ab:ca:d2:97:31: 4a:96:aa:c5:53:a0:92:78:f7:77:91:92:f0:9a:d9: 8b:3b:5f:c7:3c:82:cf:ac:8d:52:9d:ad:5b:f7:b1: 8c:73:29:4f:02:a3:70:ad:ae:0c:8f:45:5c:70:ed: 22:d9:3d:53:f8:8f:ce:24:3f:f8:05:33:9b:ab:84: a0:3c:b0:87:f5:e8:9f:bd:aa:01:ea:fd:df:cc:be: 6f:8f:72:76:f4:32:80:b3:46:fd:4a:bc:9a:25:d3: 6a:2f:3e:00:d0:9f:ed:77:53:db:c5:a9:8c:99:62: cf:d4:b1:82:af:2e:fc:36:20:dd:79:af:10:f2:d2: aa:e1:b0:e4:db:11:7f:c2:21:93:5a:36:83:58:09: 4c:6a:46:34:3a:17:b0:5d:10:6e:bb:04:31:19:1a: b8:2f:1c:e6:6c:e3:28:58:b4:ec:01:e6:8c:3b:09: a0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:6D:BA:98:58:0A:E9:3D:99:EB:44:3D:50:F2:78:51:51:17:BC:62 X509v3 Authority Key Identifier: keyid:F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/l226mFgK6T2Z60Q9UPJ4UVEXvGI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:5e80::/29 Signature Algorithm: sha256WithRSAEncryption db:46:9a:89:76:69:73:a3:b4:a1:3d:02:fa:7f:0f:c9:5e:77: f5:94:f3:53:e0:9e:5d:f7:e4:92:22:0c:50:d0:8a:8e:39:34: ca:ef:df:42:67:c9:4d:c3:c4:5d:aa:3b:66:df:16:2e:ab:b3: a9:1e:e9:06:31:aa:82:df:a4:6c:1b:60:42:8e:ab:af:ac:6b: ee:f6:09:ff:25:f1:ee:44:33:e9:e7:78:50:c1:96:31:45:94: 65:7f:2a:f2:07:9d:1b:c2:f4:22:b9:c5:a0:40:98:86:40:e6: e6:19:d0:88:65:95:ad:96:7e:64:65:1b:72:64:8a:37:cd:c9: cf:30:2e:38:c9:4c:8a:3b:14:c4:7f:53:27:32:cc:cc:a1:60: fa:90:06:51:76:1a:64:fc:ab:4d:c6:61:ce:84:55:f3:ed:2e: 98:ae:12:8d:e5:10:7e:ab:b0:d5:f2:e8:34:4c:aa:9d:db:ed: b2:4e:b6:83:a1:7c:4e:c8:a2:06:39:81:57:7d:5e:d0:ff:71: d3:8a:f6:e8:f5:57:d4:3d:52:97:68:90:a9:ec:21:63:2a:b5: 59:9f:9c:3b:2d:7c:dd:2c:8d:b7:d7:da:90:5c:50:91:89:65: 82:7e:62:79:68:c0:25:07:a2:ae:6d:0e:49:05:db:20:15:1e: 67:b7:93:46 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3xw3VDHtVIuDJUQLw3kYpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNGI5ZjRhN2MwY2ViYjFmOTdmYTI0MDNiNjMxZWU2ZDE2 ZWM2MzMwHhcNMjYwMTAxMDQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzZkYmE5ODU4MGFlOTNkOTllYjQ0M2Q1MGYyNzg1MTUxMTdiYzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXVNKw9IG/43QYTa8xumAem2QF+E NzrlCPOimNxoOpxZtkFdFXS+s8aLsYwqE3Z9rSbzQFCaH+0GMbXzgX/llYZwuUZI 5Bd5dsDKMerlBcHnefB9q8rSlzFKlqrFU6CSePd3kZLwmtmLO1/HPILPrI1Sna1b 97GMcylPAqNwra4Mj0VccO0i2T1T+I/OJD/4BTObq4SgPLCH9eifvaoB6v3fzL5v j3J29DKAs0b9SryaJdNqLz4A0J/td1PbxamMmWLP1LGCry78NiDdea8Q8tKq4bDk 2xF/wiGTWjaDWAlMakY0OhewXRBuuwQxGRq4LxzmbOMoWLTsAeaMOwmgMQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFJdtuphYCuk9metEPVDyeFFRF7xiMB8GA1UdIwQY MBaAFPJLn0p8DOux+X+iQDtjHubRbsYzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGt1ZlNud002N0g1ZjZKQU8yTWU1dEZ1eGpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zZGUyMDgtMzQ3ZS00NmQ3LTljYzkt OWM4ZWFiNzZkYTk4LzEvbDIyNm1GZ0s2VDJaNjBROVVQSjRVVkVYdkdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zZGUyMDgtMzQ3ZS00NmQ3LTljYzktOWM4ZWFiNzZkYTk4 LzEvOGt1ZlNud002N0g1ZjZKQU8yTWU1dEZ1eGpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKglegDAN BgkqhkiG9w0BAQsFAAOCAQEA20aaiXZpc6O0oT0C+n8PyV539ZTzU+CeXffkkiIM UNCKjjk0yu/fQmfJTcPEXao7Zt8WLquzqR7pBjGqgt+kbBtgQo6rr6xr7vYJ/yXx 7kQz6ed4UMGWMUWUZX8q8gedG8L0IrnFoECYhkDm5hnQiGWVrZZ+ZGUbcmSKN83J zzAuOMlMijsUxH9TJzLMzKFg+pAGUXYaZPyrTcZhzoRV8+0umK4SjeUQfquw1fLo NEyqndvtsk62g6F8TsiiBjmBV31e0P9x04r26PVX1D1Sl2iQqewhYyq1WZ+cOy18 3SyNt9fakFxQkYllgn5ieWjAJQeirm0OSQXbIBUeZ7eTRg== -----END CERTIFICATE-----Generated at Tue Feb 10 06:06:22 2026 by rpki-client