This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/834MSKGMZ57M-pHmOtnxmOs679Y.roa File: 834MSKGMZ57M-pHmOtnxmOs679Y.roa (raw, json) Hash identifier: UkqP5BZI7xAVc7q2Wx7u9sbbq4cIz5WBnS1sWMLQ5HE= Subject key identifier: F3:7E:0C:48:A1:8C:67:9E:CC:FA:91:E6:3A:D9:F1:98:EB:3A:EF:D6 Certificate issuer: /CN=2bc27de0816f7e0b87a733dd3199089e537f261c Certificate serial: 019B7834CD241B6D50B271254AFD7BAFB7C1 Authority key identifier: 2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/834MSKGMZ57M-pHmOtnxmOs679Y.roa Signing time: Thu 01 Jan 2026 06:18:04 +0000 ROA not before: Thu 01 Jan 2026 06:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201395 IP address blocks: 2001:678:740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:cd:24:1b:6d:50:b2:71:25:4a:fd:7b:af:b7:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc27de0816f7e0b87a733dd3199089e537f261c Validity Not Before: Jan 1 06:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f37e0c48a18c679eccfa91e63ad9f198eb3aefd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:16:64:77:b7:d8:c4:4a:d6:47:67:d2:6a:a8: 4c:62:14:91:cc:a5:e4:3c:3e:ad:50:f8:9f:bd:14: a4:c1:dc:06:a0:3f:e9:96:be:8a:66:98:e3:f1:55: 7b:3a:52:85:d0:2f:75:57:9d:f9:c4:de:c0:84:14: 7d:5b:bb:bc:65:2d:3b:be:e5:2b:dc:c0:f2:7f:3b: d7:d9:8f:83:cb:dc:fc:2b:06:08:a3:e2:5d:cf:82: 93:28:4f:72:ef:91:a0:7d:bb:53:60:14:8a:35:77: e6:b9:d6:98:2f:4a:1d:c3:d7:5d:01:e4:79:98:46: 7e:79:62:3b:6c:65:84:8d:37:cb:3f:ae:09:a4:c5: 89:bf:29:ce:e2:ff:08:bd:0a:26:69:a6:24:01:57: 6e:12:90:46:db:42:47:0d:95:32:cf:b2:4b:01:cd: 4e:82:e4:32:8c:00:29:2f:54:44:0a:9a:62:3f:ef: f4:ed:5c:f9:53:b6:36:c2:0b:fb:2d:6d:b8:89:66: 12:cd:2a:7e:0a:b8:8d:75:72:29:0a:49:7a:e3:6c: d2:ac:76:cf:4b:d3:16:f5:09:9a:d6:3b:03:0c:d6: bd:b9:3b:44:35:17:a1:02:f6:62:8f:0c:0c:e3:7d: c9:2e:c6:9c:35:eb:d7:f9:4d:fa:ec:40:a0:dc:8d: 72:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7E:0C:48:A1:8C:67:9E:CC:FA:91:E6:3A:D9:F1:98:EB:3A:EF:D6 X509v3 Authority Key Identifier: keyid:2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/834MSKGMZ57M-pHmOtnxmOs679Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:740::/48 Signature Algorithm: sha256WithRSAEncryption 1a:ed:6a:4e:8b:7d:ae:9e:c7:47:03:5c:39:53:6c:b2:41:df: cb:14:21:8b:2e:37:df:24:7c:c5:a8:7a:32:aa:29:57:8e:bf: e8:ec:62:2b:12:0a:ee:82:88:6e:13:ec:0a:23:67:16:1a:4c: 8f:43:49:40:52:4e:6f:71:cd:cd:ef:43:5e:d6:db:88:0d:1a: 9b:26:45:f8:d0:da:97:ba:2f:0f:ff:4d:7c:1f:bb:56:20:e1: 66:5f:14:c9:32:a1:ab:7e:5c:9d:f0:e2:82:c4:21:64:12:23: 4c:95:2c:f4:55:51:a1:32:51:12:ad:74:5b:75:97:95:55:99: a5:62:0f:ef:7b:d9:b0:68:f7:66:e2:f8:9d:be:11:b4:ef:e7: b8:89:b2:02:87:78:3e:f1:6c:96:ea:c6:b0:d2:9b:ba:63:e6: d9:22:c6:a8:2b:18:ea:bd:4e:cf:ee:00:7d:49:a5:74:0c:25: 4c:bd:aa:92:17:9f:e1:aa:54:99:39:41:04:ca:46:8f:ce:f2: 0e:c1:bf:24:70:21:c2:9e:72:8a:30:4b:b8:46:44:68:ac:2c: 9c:2d:03:30:c3:ea:ae:e1:29:7e:5e:eb:e3:29:31:f2:3f:45: 03:cf:6d:1a:53:fb:fd:88:95:5f:36:bf:75:c0:b3:be:5b:74: bd:21:33:fc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4NM0kG21QsnElSv17r7fBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYzI3ZGUwODE2ZjdlMGI4N2E3MzNkZDMxOTkwODllNTM3 ZjI2MWMwHhcNMjYwMTAxMDYxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzdlMGM0OGExOGM2NzllY2NmYTkxZTYzYWQ5ZjE5OGViM2FlZmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxZkd7fYxErWR2fSaqhMYhSRzKXk PD6tUPifvRSkwdwGoD/plr6KZpjj8VV7OlKF0C91V535xN7AhBR9W7u8ZS07vuUr 3MDyfzvX2Y+Dy9z8KwYIo+Jdz4KTKE9y75GgfbtTYBSKNXfmudaYL0odw9ddAeR5 mEZ+eWI7bGWEjTfLP64JpMWJvynO4v8IvQomaaYkAVduEpBG20JHDZUyz7JLAc1O guQyjAApL1RECppiP+/07Vz5U7Y2wgv7LW24iWYSzSp+CriNdXIpCkl642zSrHbP S9MW9Qma1jsDDNa9uTtENRehAvZijwwM433JLsacNevX+U367ECg3I1ybQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPN+DEihjGeezPqR5jrZ8ZjrOu/WMB8GA1UdIwQY MBaAFCvCfeCBb34Lh6cz3TGZCJ5TfyYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzhKOTRJRnZmZ3VIcHpQZE1aa0lubE5fSmh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82ZDg1NGMtYzUxMy00MjkwLTk1ZDQt OTNmOWFlZmVlYjEyLzEvODM0TVNLR01aNTdNLXBIbU90bnhtT3M2NzlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy82ZDg1NGMtYzUxMy00MjkwLTk1ZDQtOTNmOWFlZmVlYjEy LzEvSzhKOTRJRnZmZ3VIcHpQZE1aa0lubE5fSmh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAdA MA0GCSqGSIb3DQEBCwUAA4IBAQAa7WpOi32unsdHA1w5U2yyQd/LFCGLLjffJHzF qHoyqilXjr/o7GIrEgrugohuE+wKI2cWGkyPQ0lAUk5vcc3N70Ne1tuIDRqbJkX4 0NqXui8P/018H7tWIOFmXxTJMqGrflyd8OKCxCFkEiNMlSz0VVGhMlESrXRbdZeV VZmlYg/ve9mwaPdm4vidvhG07+e4ibICh3g+8WyW6saw0pu6Y+bZIsaoKxjqvU7P 7gB9SaV0DCVMvaqSF5/hqlSZOUEEykaPzvIOwb8kcCHCnnKKMEu4RkRorCycLQMw w+qu4Sl+XuvjKTHyP0UDz20aU/v9iJVfNr91wLO+W3S9ITP8 -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:34 2026 by rpki-client