This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/24sHVGnpfFS3J526yE1P1lITRII.roa File: 24sHVGnpfFS3J526yE1P1lITRII.roa (raw, json) Hash identifier: vWLBLF+MRaa0Y8jYeqPW6zy1hOvO6Sz2lrVc5dhkcss= Subject key identifier: DB:8B:07:54:69:E9:7C:54:B7:27:9D:BA:C8:4D:4F:D6:52:13:44:82 Certificate issuer: /CN=eeb59b791c7a11d232a95c7ef169285caea695bc Certificate serial: 019B7BA4EE147BEBB9650FEAE3410EA81C02 Authority key identifier: EE:B5:9B:79:1C:7A:11:D2:32:A9:5C:7E:F1:69:28:5C:AE:A6:95:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/24sHVGnpfFS3J526yE1P1lITRII.roa Signing time: Thu 01 Jan 2026 22:19:24 +0000 ROA not before: Thu 01 Jan 2026 22:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24641 IP address blocks: 2a02:6c20:819::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 16:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ee:14:7b:eb:b9:65:0f:ea:e3:41:0e:a8:1c:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeb59b791c7a11d232a95c7ef169285caea695bc Validity Not Before: Jan 1 22:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db8b075469e97c54b7279dbac84d4fd652134482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f0:9b:60:34:46:af:b4:b4:d7:da:fc:e3:80: 21:88:ee:36:03:09:6f:c2:1c:e0:ed:fa:74:96:49: d0:d7:87:f0:6b:49:7d:fb:bf:a9:ce:58:83:fe:51: 8a:8f:9b:51:1e:57:e6:45:2a:03:0f:27:2a:0b:9b: 7a:3a:8e:90:3c:98:35:76:1e:59:bc:cb:69:e5:8b: af:9a:f7:36:91:7e:60:3f:43:59:04:54:61:e5:35: 3a:74:14:6f:0c:4f:6c:ca:f7:9d:45:6f:0e:d3:0f: b8:9f:a3:0c:11:c0:ad:63:22:84:f8:1a:bb:95:c8: 95:b5:77:c3:ff:48:cb:3f:db:b2:86:fa:ec:ab:f4: d4:6e:4f:98:d9:c7:50:27:00:d6:84:15:58:9f:46: 58:57:48:bb:06:7e:e7:47:44:73:29:3f:51:35:27: 3b:40:c8:72:0b:e2:65:62:95:14:01:9a:3d:de:58: 90:e3:92:a7:0b:27:6f:90:12:10:28:34:14:0c:59: 07:6f:d2:bf:ba:f8:f4:57:e4:d0:af:68:ae:75:50: a2:82:58:0f:c9:92:44:e6:b0:4e:cd:46:60:2a:32: 56:ba:a6:04:60:a6:88:01:05:04:06:5f:b2:76:cf: 53:9e:da:b3:d6:80:46:23:e8:39:05:b1:e0:82:f8: ec:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8B:07:54:69:E9:7C:54:B7:27:9D:BA:C8:4D:4F:D6:52:13:44:82 X509v3 Authority Key Identifier: keyid:EE:B5:9B:79:1C:7A:11:D2:32:A9:5C:7E:F1:69:28:5C:AE:A6:95:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/24sHVGnpfFS3J526yE1P1lITRII.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:6c20:819::/48 Signature Algorithm: sha256WithRSAEncryption 6c:38:f6:25:42:ea:6c:a2:8f:92:50:03:ae:10:77:18:95:ed: fc:52:91:95:1a:d1:db:5c:7e:a2:02:ce:60:5b:bf:b8:9d:ef: 5b:d2:7b:6d:dc:5c:b9:d7:76:ba:cf:0f:35:28:24:0c:54:22: 2f:f6:2f:98:1c:f7:b0:de:88:a1:15:e2:f4:0a:bb:98:90:85: 1d:1d:6e:f2:20:ac:4a:1e:b0:e0:b5:1f:2c:18:da:ef:ab:59: 00:5b:54:82:a7:ee:c2:af:8e:d0:b2:ea:7b:b8:bc:02:c0:a8: 2e:a6:6d:f9:56:5a:46:b2:53:94:23:3a:49:9f:b3:37:ba:08: 27:9c:79:9c:90:89:cb:f9:35:02:66:29:b9:90:d3:f5:5a:04: 19:25:46:34:20:be:9b:ee:01:2b:58:01:ab:55:82:d3:ff:9e: 8b:0b:09:92:ba:8c:b0:3c:4b:9a:e5:96:56:44:d5:d9:c6:6e: 44:12:cc:b8:07:d5:a1:e6:85:97:54:88:19:5e:96:46:a4:33: f7:45:31:48:e4:39:d6:82:0a:00:1e:fa:96:ad:2b:c5:c9:5f: c5:11:8c:e1:2b:d4:6d:a4:d7:13:7e:b5:c4:59:d8:53:60:7c: 6c:61:67:ea:08:ad:a9:32:d8:fd:ad:74:e6:77:f0:06:6e:88: a0:b1:17:8e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7pO4Ue+u5ZQ/q40EOqBwCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYjU5Yjc5MWM3YTExZDIzMmE5NWM3ZWYxNjkyODVjYWVh Njk1YmMwHhcNMjYwMTAxMjIxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjhiMDc1NDY5ZTk3YzU0YjcyNzlkYmFjODRkNGZkNjUyMTM0NDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvCbYDRGr7S019r844AhiO42Awlv whzg7fp0lknQ14fwa0l9+7+pzliD/lGKj5tRHlfmRSoDDycqC5t6Oo6QPJg1dh5Z vMtp5Yuvmvc2kX5gP0NZBFRh5TU6dBRvDE9syvedRW8O0w+4n6MMEcCtYyKE+Bq7 lciVtXfD/0jLP9uyhvrsq/TUbk+Y2cdQJwDWhBVYn0ZYV0i7Bn7nR0RzKT9RNSc7 QMhyC+JlYpUUAZo93liQ45KnCydvkBIQKDQUDFkHb9K/uvj0V+TQr2iudVCiglgP yZJE5rBOzUZgKjJWuqYEYKaIAQUEBl+yds9Tntqz1oBGI+g5BbHggvjsQQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNuLB1Rp6XxUtyedushNT9ZSE0SCMB8GA1UdIwQY MBaAFO61m3kcehHSMqlcfvFpKFyuppW8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3JXYmVSeDZFZEl5cVZ4LThXa29YSzZtbGJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lZmZmNzEtN2QxMS00YTFhLThhZDMt YTY3ZDhjN2VkN2NhLzEvMjRzSFZHbnBmRlMzSjUyNnlFMVAxbElUUklJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9lZmZmNzEtN2QxMS00YTFhLThhZDMtYTY3ZDhjN2VkN2Nh LzEvN3JXYmVSeDZFZEl5cVZ4LThXa29YSzZtbGJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgJsIAgZ MA0GCSqGSIb3DQEBCwUAA4IBAQBsOPYlQupsoo+SUAOuEHcYle38UpGVGtHbXH6i As5gW7+4ne9b0ntt3Fy513a6zw81KCQMVCIv9i+YHPew3oihFeL0CruYkIUdHW7y IKxKHrDgtR8sGNrvq1kAW1SCp+7Cr47Qsup7uLwCwKgupm35VlpGslOUIzpJn7M3 uggnnHmckInL+TUCZim5kNP1WgQZJUY0IL6b7gErWAGrVYLT/56LCwmSuoywPEua 5ZZWRNXZxm5EEsy4B9Wh5oWXVIgZXpZGpDP3RTFI5DnWggoAHvqWrSvFyV/FEYzh K9RtpNcTfrXEWdhTYHxsYWfqCK2pMtj9rXTmd/AGboigsReO -----END CERTIFICATE-----Generated at Tue Jan 27 02:07:16 2026 by rpki-client