This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/_e_Zokrtlt_aju5Wh034zgAkl8I.roa File: _e_Zokrtlt_aju5Wh034zgAkl8I.roa (raw, json) Hash identifier: +uQejsCjn3rFp2s+ELCiuSbZ+f8sp3uWgsCAiuje2M0= Subject key identifier: FD:EF:D9:A2:4A:ED:96:DF:DA:8E:EE:56:87:4D:F8:CE:00:24:97:C2 Certificate issuer: /CN=62fce7e5a815616cb6a8ba03c48abc49429b7e01 Certificate serial: 019B7B36B88DC41A073317AE94355C0111BB Authority key identifier: 62:FC:E7:E5:A8:15:61:6C:B6:A8:BA:03:C4:8A:BC:49:42:9B:7E:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvzn5agVYWy2qLoDxIq8SUKbfgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/_e_Zokrtlt_aju5Wh034zgAkl8I.roa Signing time: Thu 01 Jan 2026 20:19:02 +0000 ROA not before: Thu 01 Jan 2026 20:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208231 IP address blocks: 2a06:6c40::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.crl rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.mft rsync://rpki.ripe.net/repository/DEFAULT/Yvzn5agVYWy2qLoDxIq8SUKbfgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b8:8d:c4:1a:07:33:17:ae:94:35:5c:01:11:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fce7e5a815616cb6a8ba03c48abc49429b7e01 Validity Not Before: Jan 1 20:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fdefd9a24aed96dfda8eee56874df8ce002497c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:af:39:55:64:b5:e6:05:5a:59:65:36:f6:92: b2:af:4b:74:bd:dd:87:a7:95:7e:4c:60:ca:d4:0e: da:d2:cc:6a:fd:9a:00:0e:56:13:43:bf:60:e7:d3: 73:66:61:d3:c9:19:5e:dd:5f:a1:6d:55:9e:3f:db: 39:9d:66:3e:e8:da:8f:37:10:7c:82:41:72:c1:9a: fe:83:33:5b:5b:52:89:83:61:86:d2:a2:41:e7:37: 26:4a:93:b7:c3:00:be:be:11:83:d9:0a:8d:c6:5f: 7e:e1:b7:2d:70:01:4f:bf:b1:5b:0f:ed:dc:46:bb: 71:07:4e:e4:00:c5:ca:25:9b:38:69:2d:65:67:bf: 6c:71:de:b0:e0:01:d6:14:d2:71:99:6b:b0:88:2c: e0:21:2b:9d:80:b6:bf:37:59:77:9f:8f:2e:95:3a: f1:9e:a1:e6:68:2a:61:46:ad:e2:f1:fe:5a:b7:4c: 8a:c8:f7:8d:37:92:6c:26:ef:37:6b:6d:19:05:2f: 99:a8:5b:5a:3e:35:fd:40:99:84:15:6e:a7:63:70: 6c:1d:e0:ee:f1:33:03:3d:73:70:13:49:30:9d:04: d8:d9:f6:bf:72:db:b2:8e:d1:41:3b:48:9b:67:60: 8f:08:6c:f3:fb:df:9a:3d:3f:9c:5f:5d:2b:99:fb: 6d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:EF:D9:A2:4A:ED:96:DF:DA:8E:EE:56:87:4D:F8:CE:00:24:97:C2 X509v3 Authority Key Identifier: keyid:62:FC:E7:E5:A8:15:61:6C:B6:A8:BA:03:C4:8A:BC:49:42:9B:7E:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvzn5agVYWy2qLoDxIq8SUKbfgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/_e_Zokrtlt_aju5Wh034zgAkl8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:6c40::/29 Signature Algorithm: sha256WithRSAEncryption 56:28:25:e8:28:de:91:e8:84:70:10:3f:d2:4e:78:5a:60:83: 7a:c9:e1:04:2a:6e:ea:8e:fa:c3:e9:9f:60:07:7b:1c:8f:d4: b7:af:d1:2f:42:cb:d9:f2:45:20:fc:26:85:b1:9c:ed:a2:7a: 6a:2a:4a:e1:82:7c:cb:9a:c1:5f:9f:5b:90:33:1c:f0:e2:cf: b9:3b:0f:2f:7f:56:8a:bd:ec:61:8b:11:3b:7f:db:4e:6c:d3: 09:28:29:25:52:e4:cb:91:06:a9:67:a1:0e:16:16:f3:1c:06: 79:32:83:24:4c:04:50:0c:74:21:bb:69:bb:95:f6:52:58:07: 48:71:3b:32:8d:a7:53:73:e3:39:a3:cc:b1:cb:65:57:f5:6e: 24:52:52:f5:84:f8:e9:ee:9c:32:0f:8a:ce:24:b8:c4:62:26: 3c:40:50:2d:56:c8:f6:64:98:b7:d8:ff:60:f8:59:c3:4f:9b: bf:7f:3e:f5:f2:b7:ee:c3:f7:83:58:e6:b2:4c:02:f8:3a:70: ab:66:22:9b:15:7d:8c:58:56:9a:45:e5:1c:c2:55:66:93:ec: 7e:80:a2:d8:35:54:9b:bf:77:f4:7c:df:33:86:ce:18:60:95: 39:8e:ea:1d:60:24:81:16:09:29:e7:e1:26:46:ff:36:e6:ac: 93:2d:a3:73 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7NriNxBoHMxeulDVcARG7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmNlN2U1YTgxNTYxNmNiNmE4YmEwM2M0OGFiYzQ5NDI5 YjdlMDEwHhcNMjYwMTAxMjAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGVmZDlhMjRhZWQ5NmRmZGE4ZWVlNTY4NzRkZjhjZTAwMjQ5N2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa85VWS15gVaWWU29pKyr0t0vd2H p5V+TGDK1A7a0sxq/ZoADlYTQ79g59NzZmHTyRle3V+hbVWeP9s5nWY+6NqPNxB8 gkFywZr+gzNbW1KJg2GG0qJB5zcmSpO3wwC+vhGD2QqNxl9+4bctcAFPv7FbD+3c RrtxB07kAMXKJZs4aS1lZ79scd6w4AHWFNJxmWuwiCzgISudgLa/N1l3n48ulTrx nqHmaCphRq3i8f5at0yKyPeNN5JsJu83a20ZBS+ZqFtaPjX9QJmEFW6nY3BsHeDu 8TMDPXNwE0kwnQTY2fa/ctuyjtFBO0ibZ2CPCGzz+9+aPT+cX10rmfttBwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFP3v2aJK7Zbf2o7uVodN+M4AJJfCMB8GA1UdIwQY MBaAFGL85+WoFWFstqi6A8SKvElCm34BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXZ6bjVhZ1ZZV3kycUxvRHhJcThTVUtiZmdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9mMWFmODEtZmExZi00YzdmLWFkYTgt OTJiODQyYTk2NDk1LzEvX2VfWm9rcnRsdF9hanU1V2gwMzR6Z0FrbDhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9mMWFmODEtZmExZi00YzdmLWFkYTgtOTJiODQyYTk2NDk1 LzEvWXZ6bjVhZ1ZZV3kycUxvRHhJcThTVUtiZmdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgZsQDAN BgkqhkiG9w0BAQsFAAOCAQEAVigl6CjekeiEcBA/0k54WmCDesnhBCpu6o76w+mf YAd7HI/Ut6/RL0LL2fJFIPwmhbGc7aJ6aipK4YJ8y5rBX59bkDMc8OLPuTsPL39W ir3sYYsRO3/bTmzTCSgpJVLky5EGqWehDhYW8xwGeTKDJEwEUAx0Ibtpu5X2UlgH SHE7Mo2nU3PjOaPMsctlV/VuJFJS9YT46e6cMg+KziS4xGImPEBQLVbI9mSYt9j/ YPhZw0+bv38+9fK37sP3g1jmskwC+Dpwq2YimxV9jFhWmkXlHMJVZpPsfoCi2DVU m7939HzfM4bOGGCVOY7qHWAkgRYJKefhJkb/Nuasky2jcw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:57 2026 by rpki-client