This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/mEVvhwiNz6QqGLc9f-BWMr-sDwM.roa File: mEVvhwiNz6QqGLc9f-BWMr-sDwM.roa (raw, json) Hash identifier: h1jacdxfF70jEn15fnToAbzAGwIESAy79zZWfqs5+II= Subject key identifier: 98:45:6F:87:08:8D:CF:A4:2A:18:B7:3D:7F:E0:56:32:BF:AC:0F:03 Certificate issuer: /CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508 Certificate serial: 019B79ECBA9AB9F6D0D1166D0063CF5A8239 Authority key identifier: A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/mEVvhwiNz6QqGLc9f-BWMr-sDwM.roa Signing time: Thu 01 Jan 2026 14:18:36 +0000 ROA not before: Thu 01 Jan 2026 14:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214044 IP address blocks: 2001:678:d18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ba:9a:b9:f6:d0:d1:16:6d:00:63:cf:5a:82:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508 Validity Not Before: Jan 1 14:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98456f87088dcfa42a18b73d7fe05632bfac0f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4b:3f:3c:28:98:2f:00:7e:5a:3d:30:ef:5e: 39:61:87:ba:57:03:84:19:52:b0:cd:52:d4:15:03: cb:11:48:4e:e1:5e:88:0b:37:c8:9e:b3:40:e9:73: 24:a3:1a:c8:3b:c0:c8:68:62:27:d7:26:a8:de:5f: a2:06:0f:c8:42:51:43:a6:7a:e2:0c:08:50:85:da: 1f:52:18:f1:46:80:97:58:c9:9a:39:dc:34:b1:af: 85:73:60:81:94:14:e9:c8:0b:e9:ff:0b:be:b6:6f: 25:5c:0c:6e:ed:d8:fb:54:b6:59:d9:82:23:99:4f: 02:c2:45:7b:76:a6:4a:c6:71:d2:e4:83:68:4e:e0: fb:11:6a:97:9b:90:09:a6:23:86:a1:ec:35:24:6f: aa:a4:46:1e:06:8a:36:f6:54:a8:fd:87:d7:b2:34: 71:32:b7:7f:91:c0:0f:4b:ee:5b:fc:4b:ee:b5:84: a9:a2:d3:6a:35:d2:ef:da:22:2c:22:d9:a3:a1:ba: ef:c9:2d:b5:df:95:93:68:78:e4:4b:10:f6:09:2a: 57:c4:4f:b2:92:c8:67:d5:4d:77:25:1f:ca:05:9d: a6:5c:90:5a:eb:c6:1d:6a:bd:dd:c0:8e:f2:ae:94: f3:e8:c9:f9:96:63:86:04:f0:ce:cc:fa:7a:35:f7: 2c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:45:6F:87:08:8D:CF:A4:2A:18:B7:3D:7F:E0:56:32:BF:AC:0F:03 X509v3 Authority Key Identifier: keyid:A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/mEVvhwiNz6QqGLc9f-BWMr-sDwM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:d18::/48 Signature Algorithm: sha256WithRSAEncryption af:cf:54:2d:7d:ef:e7:84:75:2f:05:a4:66:e0:ed:2e:22:40: 94:64:86:88:29:68:f5:10:04:09:31:58:59:35:96:86:ad:bd: 77:c7:d2:ca:eb:9c:11:d8:67:be:9a:a0:4f:05:e9:71:85:c2: 04:5a:4f:e0:4a:91:c1:76:2f:58:59:0f:52:c5:a8:46:43:76: b7:98:6f:b7:11:e4:ca:52:88:6c:c3:cc:1d:7f:45:e8:2c:fc: ab:04:89:f5:4d:97:d4:31:74:02:51:32:fb:26:52:2f:df:2c: 20:06:13:79:f1:42:82:0e:ca:c0:a4:2a:a9:e4:8d:48:aa:8f: cb:81:ea:96:4c:97:3e:96:8e:4d:a6:3d:14:7b:65:b6:24:39: 55:dc:a6:06:21:43:0c:dd:21:c6:fe:ea:f7:14:ff:fb:cc:4c: 6a:38:1a:f5:aa:48:cd:26:15:d8:49:85:a0:7c:2e:f5:d2:b2: 2a:5d:93:47:19:19:48:b5:c9:3d:5d:24:5d:60:c4:dd:c0:a9: ef:c3:20:9b:e8:9e:3a:82:ba:63:fa:22:44:50:e6:4d:a3:9e: f6:7d:1c:75:49:dd:a7:87:1f:3a:83:aa:35:4f:1a:3a:4c:7d: a0:e4:10:07:75:6c:31:93:84:56:77:b6:73:ef:fa:7e:96:58: c2:45:65:42 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57LqaufbQ0RZtAGPPWoI5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyYjYyZDNiZjZiMGM1MjQ3ZWRkZjQ0OThjMmNjZTYwYzBk MWU1MDgwHhcNMjYwMTAxMTQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODQ1NmY4NzA4OGRjZmE0MmExOGI3M2Q3ZmUwNTYzMmJmYWMwZjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUs/PCiYLwB+Wj0w7145YYe6VwOE GVKwzVLUFQPLEUhO4V6ICzfInrNA6XMkoxrIO8DIaGIn1yao3l+iBg/IQlFDpnri DAhQhdofUhjxRoCXWMmaOdw0sa+Fc2CBlBTpyAvp/wu+tm8lXAxu7dj7VLZZ2YIj mU8CwkV7dqZKxnHS5INoTuD7EWqXm5AJpiOGoew1JG+qpEYeBoo29lSo/YfXsjRx Mrd/kcAPS+5b/EvutYSpotNqNdLv2iIsItmjobrvyS2135WTaHjkSxD2CSpXxE+y kshn1U13JR/KBZ2mXJBa68Ydar3dwI7yrpTz6Mn5lmOGBPDOzPp6NfcsiQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJhFb4cIjc+kKhi3PX/gVjK/rA8DMB8GA1UdIwQY MBaAFKK2LTv2sMUkft30SYwszmDA0eUIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3JZdE9fYXd4U1ItM2ZSSmpDek9ZTURSNVFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS84M2RjMmQtNTMxMS00NWE2LWEwOGEt NjJiZjE1YzQ2NzRhLzEvbUVWdmh3aU56NlFxR0xjOWYtQldNci1zRHdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS84M2RjMmQtNTMxMS00NWE2LWEwOGEtNjJiZjE1YzQ2NzRh LzEvb3JZdE9fYXd4U1ItM2ZSSmpDek9ZTURSNVFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA0Y MA0GCSqGSIb3DQEBCwUAA4IBAQCvz1Qtfe/nhHUvBaRm4O0uIkCUZIaIKWj1EAQJ MVhZNZaGrb13x9LK65wR2Ge+mqBPBelxhcIEWk/gSpHBdi9YWQ9SxahGQ3a3mG+3 EeTKUohsw8wdf0XoLPyrBIn1TZfUMXQCUTL7JlIv3ywgBhN58UKCDsrApCqp5I1I qo/LgeqWTJc+lo5Npj0Ue2W2JDlV3KYGIUMM3SHG/ur3FP/7zExqOBr1qkjNJhXY SYWgfC710rIqXZNHGRlItck9XSRdYMTdwKnvwyCb6J46grpj+iJEUOZNo572fRx1 Sd2nhx86g6o1Txo6TH2g5BAHdWwxk4RWd7Zz7/p+lljCRWVC -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:32 2026 by rpki-client