This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/E0AgYtmqvfWsCtuIwOtUo5wvcgU.roa File: E0AgYtmqvfWsCtuIwOtUo5wvcgU.roa (raw, json) Hash identifier: w2ZEYMbSnl1r9XT320uy9sGbUhpOA37NS5yHBqC4/Fs= Subject key identifier: 13:40:20:62:D9:AA:BD:F5:AC:0A:DB:88:C0:EB:54:A3:9C:2F:72:05 Certificate issuer: /CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898 Certificate serial: 019B7DCAE9368C26C3ACE28CDBBFBF643D93 Authority key identifier: 8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/E0AgYtmqvfWsCtuIwOtUo5wvcgU.roa Signing time: Fri 02 Jan 2026 08:20:08 +0000 ROA not before: Fri 02 Jan 2026 08:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31317 IP address blocks: 2001:67c:ff8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:e9:36:8c:26:c3:ac:e2:8c:db:bf:bf:64:3d:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898 Validity Not Before: Jan 2 08:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13402062d9aabdf5ac0adb88c0eb54a39c2f7205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2a:65:38:70:14:3c:74:c1:21:c3:76:ce:dc: e9:a7:55:16:94:3f:d3:c5:b0:e6:cc:8e:67:15:e9: 0f:45:54:30:09:30:9e:64:88:cc:09:5d:8b:67:36: 45:58:c9:16:c9:e0:40:06:61:16:ab:d3:14:95:64: 30:7c:cb:8e:26:dd:bb:c7:ce:87:46:01:0c:e3:dd: 59:25:9d:f7:1a:89:78:86:05:b0:c1:98:a8:5a:be: aa:a6:18:69:4f:1d:ea:96:24:14:04:d8:2d:8e:ca: 04:3f:25:c6:8a:a6:7c:48:38:65:9d:c6:34:b8:8f: d8:f9:46:57:f5:80:9e:14:3f:b2:44:ba:56:7c:d5: fe:74:83:77:e8:13:84:ac:5c:c1:f3:d0:d5:aa:6b: c7:b2:eb:dc:0a:b1:56:cd:03:0c:15:fd:50:21:24: f5:6a:6e:03:6e:a9:6c:62:b1:86:ce:74:a8:c2:bb: a9:a8:ee:c1:ea:a9:23:d2:8f:95:c8:fc:c7:9e:c1: 75:e1:df:30:89:5f:44:a1:a2:8d:ba:4a:65:12:76: 0b:74:75:c1:c4:87:e3:fb:94:6b:e8:6d:bd:a4:9e: 63:2f:98:1d:a4:6a:82:c2:7a:51:91:df:6e:53:37: 48:4a:3f:6e:04:a8:24:19:7a:b9:61:10:58:21:10: 16:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:40:20:62:D9:AA:BD:F5:AC:0A:DB:88:C0:EB:54:A3:9C:2F:72:05 X509v3 Authority Key Identifier: keyid:8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/E0AgYtmqvfWsCtuIwOtUo5wvcgU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:ff8::/48 Signature Algorithm: sha256WithRSAEncryption 3f:d3:f7:e6:70:d1:15:10:96:00:fc:7e:36:2b:72:01:3e:2f: 3b:99:e4:5e:43:f6:72:a3:85:1b:38:51:54:41:14:19:b2:1e: b3:14:20:13:e3:70:5a:09:d4:24:56:0f:b1:c4:5b:17:88:bf: a5:11:50:de:e9:74:7d:f1:67:4c:4d:17:95:54:13:58:00:58: 8a:01:19:4d:9f:f9:27:b4:1e:92:0d:15:e1:61:0c:05:a0:ec: ad:4e:7d:74:aa:47:ae:87:98:7b:d9:0c:3c:e8:8e:17:5d:1f: 45:34:dc:d4:a6:d5:d2:20:d7:14:c0:71:1d:75:db:b4:bd:98: 1f:40:b2:cc:25:4e:39:73:3f:4a:59:18:77:ad:d0:ab:3a:d6: be:8a:87:e5:e5:7b:a4:67:3d:09:c3:ea:27:9e:7e:0c:52:9b: fc:91:86:ec:a8:e8:4d:10:9a:6f:c8:f3:d0:b0:0b:4e:9b:4f: b2:9d:ec:13:89:fc:44:42:42:6f:16:80:f2:c6:6c:3b:19:99: ba:64:b2:e7:22:82:c9:10:c2:a2:2e:74:cc:8f:c9:0b:b1:88: 5f:04:ef:e2:e4:cc:0c:51:4c:b9:77:c7:85:c5:b6:57:35:30: 27:0e:44:a7:5d:42:76:76:60:40:db:e2:68:ae:a4:5a:40:b0: 0d:49:a1:57 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9yuk2jCbDrOKM27+/ZD2TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMzBlNzcyNDVjMjE1YTcwYmU0ZWY1N2QwM2JkMWQ4ZDRk YjU4OTgwHhcNMjYwMTAyMDgyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzQwMjA2MmQ5YWFiZGY1YWMwYWRiODhjMGViNTRhMzljMmY3MjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCplOHAUPHTBIcN2ztzpp1UWlD/T xbDmzI5nFekPRVQwCTCeZIjMCV2LZzZFWMkWyeBABmEWq9MUlWQwfMuOJt27x86H RgEM491ZJZ33Gol4hgWwwZioWr6qphhpTx3qliQUBNgtjsoEPyXGiqZ8SDhlncY0 uI/Y+UZX9YCeFD+yRLpWfNX+dIN36BOErFzB89DVqmvHsuvcCrFWzQMMFf1QIST1 am4DbqlsYrGGznSowrupqO7B6qkj0o+VyPzHnsF14d8wiV9EoaKNukplEnYLdHXB xIfj+5Rr6G29pJ5jL5gdpGqCwnpRkd9uUzdISj9uBKgkGXq5YRBYIRAWtwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBNAIGLZqr31rArbiMDrVKOcL3IFMB8GA1UdIwQY MBaAFI0w53JFwhWnC+TvV9A70djU21iYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalREbmNrWENGYWNMNU85WDBEdlIyTlRiV0pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82MDY4MjctYjcxMC00Y2VkLWI4MWIt NWYzY2Y5ZjNiNjE5LzEvRTBBZ1l0bXF2ZldzQ3R1SXdPdFVvNXd2Y2dVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy82MDY4MjctYjcxMC00Y2VkLWI4MWItNWYzY2Y5ZjNiNjE5 LzEvalREbmNrWENGYWNMNU85WDBEdlIyTlRiV0pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA/4 MA0GCSqGSIb3DQEBCwUAA4IBAQA/0/fmcNEVEJYA/H42K3IBPi87meReQ/Zyo4Ub OFFUQRQZsh6zFCAT43BaCdQkVg+xxFsXiL+lEVDe6XR98WdMTReVVBNYAFiKARlN n/kntB6SDRXhYQwFoOytTn10qkeuh5h72Qw86I4XXR9FNNzUptXSINcUwHEdddu0 vZgfQLLMJU45cz9KWRh3rdCrOta+iofl5XukZz0Jw+onnn4MUpv8kYbsqOhNEJpv yPPQsAtOm0+ynewTifxEQkJvFoDyxmw7GZm6ZLLnIoLJEMKiLnTMj8kLsYhfBO/i 5MwMUUy5d8eFxbZXNTAnDkSnXUJ2dmBA2+JorqRaQLANSaFX -----END CERTIFICATE-----Generated at Mon Feb 9 23:51:51 2026 by rpki-client