This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/b-ebn6zLu3GuH8uLj7d6RtFbQ4U.roa File: b-ebn6zLu3GuH8uLj7d6RtFbQ4U.roa (raw, json) Hash identifier: Jt8I4ezV9R2CkeR6m5P+uKpuBlYvmmoeQqrhJ2b0Xk4= Subject key identifier: 6F:E7:9B:9F:AC:CB:BB:71:AE:1F:CB:8B:8F:B7:7A:46:D1:5B:43:85 Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019C397287F2BF306D3F88548A59F5C383B7 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/b-ebn6zLu3GuH8uLj7d6RtFbQ4U.roa Signing time: Sat 07 Feb 2026 18:52:13 +0000 ROA not before: Sat 07 Feb 2026 18:52:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211507 IP address blocks: 2a06:5fc0::/29 maxlen: 29 2a14:42c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:39:72:87:f2:bf:30:6d:3f:88:54:8a:59:f5:c3:83:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Feb 7 18:52:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fe79b9faccbbb71ae1fcb8b8fb77a46d15b4385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ec:2b:ff:22:43:17:80:7e:6d:22:a3:8d:e7: b7:27:ac:05:13:12:59:bc:12:37:ab:38:f0:ea:1f: f2:ce:30:ad:5f:b8:6d:9f:7c:5e:d9:f4:87:c8:03: d8:37:43:47:4b:5b:e4:8a:ea:63:42:a7:13:01:85: 8d:6e:15:68:d0:9f:5d:34:e3:97:ac:6b:9e:77:37: a5:f1:18:4d:64:4d:76:ff:fa:e0:a9:dc:22:ea:8e: 9a:cd:73:8b:f9:80:54:0c:11:8f:9d:75:d5:35:8d: 51:a7:34:a4:a3:58:26:0d:c3:23:41:51:7d:7d:8a: db:38:ea:69:86:c1:31:4f:62:99:2b:13:92:3f:86: d5:4b:63:77:e3:36:35:72:67:9e:00:79:7e:ee:cf: 9c:82:47:fe:28:dc:39:2b:4c:86:f5:19:7d:0d:c3: c5:f3:33:eb:63:a3:7f:4c:15:28:ff:51:a2:76:ff: 8b:2d:a2:f7:e4:7c:01:9e:d5:d3:87:35:1e:ca:06: dd:81:38:de:b0:95:da:1f:ed:e8:9a:c3:0b:a6:14: ef:bf:7f:ba:08:d1:01:73:19:0d:71:7f:5c:b0:e8: a4:f9:c1:a7:93:95:e6:62:e6:c0:dd:79:cd:03:f9: e0:97:19:1a:0d:e3:d2:b8:d2:d4:82:2c:6d:67:01: 04:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E7:9B:9F:AC:CB:BB:71:AE:1F:CB:8B:8F:B7:7A:46:D1:5B:43:85 X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/b-ebn6zLu3GuH8uLj7d6RtFbQ4U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:5fc0::/29 2a14:42c0::/29 Signature Algorithm: sha256WithRSAEncryption 3c:a4:a1:33:2b:b6:75:de:01:9c:9a:b8:5d:e8:3e:41:ca:97: f6:18:6d:f9:d0:fe:e8:94:58:b2:18:ae:24:da:95:85:dc:7e: 2e:21:9f:ff:eb:25:29:1d:7e:29:35:06:87:c8:5e:83:83:5f: fb:73:80:00:15:53:a2:fb:48:a8:b5:13:bd:63:c1:2f:ff:4e: bc:39:e7:17:2a:8d:b2:b7:4a:c5:01:cd:fd:6a:9c:d6:6d:a1: fe:12:aa:d2:da:46:a5:b1:e2:e4:94:d7:38:9e:42:6d:93:c5: 96:c4:82:e8:de:2f:31:27:35:8d:6c:92:57:ec:01:3c:f1:a2: 37:0e:b7:89:07:83:f0:05:8d:c8:ac:eb:d3:76:5e:ee:42:06: b6:9d:1a:8c:9f:be:5a:aa:ce:d2:d8:ed:ff:33:ea:bc:49:49: 9c:20:50:f3:9d:24:f9:90:8c:62:a6:6c:84:a8:77:3e:c1:da: 15:f4:5c:84:55:65:69:47:44:5b:04:98:4d:7b:05:0e:fb:85: 0c:a3:cf:f7:85:dc:9a:e8:3b:ba:a4:29:a3:3a:9b:7e:bc:ee: ea:94:5a:5a:62:6a:55:a1:b2:db:06:03:dc:98:e5:d3:20:15: 41:79:32:f9:ce:79:4b:94:12:1f:b2:31:6c:f5:bd:d6:60:82: 23:3a:b4:10 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZw5cofyvzBtP4hUiln1w4O3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMjA3MTg1MjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmU3OWI5ZmFjY2JiYjcxYWUxZmNiOGI4ZmI3N2E0NmQxNWI0Mzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquwr/yJDF4B+bSKjjee3J6wFExJZ vBI3qzjw6h/yzjCtX7htn3xe2fSHyAPYN0NHS1vkiupjQqcTAYWNbhVo0J9dNOOX rGuedzel8RhNZE12//rgqdwi6o6azXOL+YBUDBGPnXXVNY1RpzSko1gmDcMjQVF9 fYrbOOpphsExT2KZKxOSP4bVS2N34zY1cmeeAHl+7s+cgkf+KNw5K0yG9Rl9DcPF 8zPrY6N/TBUo/1Gidv+LLaL35HwBntXThzUeygbdgTjesJXaH+3omsMLphTvv3+6 CNEBcxkNcX9csOik+cGnk5XmYubA3XnNA/nglxkaDePSuNLUgixtZwEEWwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFG/nm5+sy7txrh/Li4+3ekbRW0OFMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvYi1lYm42ekx1M0d1SDh1TGo3ZDZSdEZiUTRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKgZfwAMF AyoUQsAwDQYJKoZIhvcNAQELBQADggEBADykoTMrtnXeAZyauF3oPkHKl/YYbfnQ /uiUWLIYriTalYXcfi4hn//rJSkdfik1BofIXoODX/tzgAAVU6L7SKi1E71jwS// Trw55xcqjbK3SsUBzf1qnNZtof4SqtLaRqWx4uSU1zieQm2TxZbEgujeLzEnNY1s klfsATzxojcOt4kHg/AFjcis69N2Xu5CBradGoyfvlqqztLY7f8z6rxJSZwgUPOd JPmQjGKmbISodz7B2hX0XIRVZWlHRFsEmE17BQ77hQyjz/eF3JroO7qkKaM6m368 7uqUWlpialWhstsGA9yY5dMgFUF5MvnOeUuUEh+yMWz1vdZggiM6tBA= -----END CERTIFICATE-----Generated at Mon Feb 9 18:15:12 2026 by rpki-client