This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/H962oq62C4HZ1q-2ZR6ka9i7iTk.roa File: H962oq62C4HZ1q-2ZR6ka9i7iTk.roa (raw, json) Hash identifier: BBJJ5WWdTfXTRvB9xlvrZCxW2c0xyH6m419fkAsKFyU= Subject key identifier: 1F:DE:B6:A2:AE:B6:0B:81:D9:D6:AF:B6:65:1E:A4:6B:D8:BB:89:39 Certificate issuer: /CN=51626068942586ce95702103bac899d23fcf7242 Certificate serial: 019B7AC93FC9875B1C49BFBFC4735AACB2DB Authority key identifier: 51:62:60:68:94:25:86:CE:95:70:21:03:BA:C8:99:D2:3F:CF:72:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/H962oq62C4HZ1q-2ZR6ka9i7iTk.roa Signing time: Thu 01 Jan 2026 18:19:27 +0000 ROA not before: Thu 01 Jan 2026 18:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204423 IP address blocks: 2001:678:61c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.crl rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:3f:c9:87:5b:1c:49:bf:bf:c4:73:5a:ac:b2:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51626068942586ce95702103bac899d23fcf7242 Validity Not Before: Jan 1 18:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fdeb6a2aeb60b81d9d6afb6651ea46bd8bb8939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8c:01:79:4f:6f:55:d2:9f:10:74:b5:aa:92: 21:f0:62:28:76:c7:4d:c5:b6:a9:62:94:41:a4:44: 89:93:d9:90:5b:61:fb:84:0c:5f:93:73:9c:a7:11: dd:d8:ce:a9:34:18:f5:cc:ad:3d:fe:5f:f7:1c:89: ac:ce:88:be:c3:7b:8f:88:83:09:96:45:5a:d7:9f: 18:9d:ea:82:cd:5f:b8:7a:b0:c2:5e:d5:7b:2b:be: b4:33:12:b2:8a:de:62:b5:a1:00:c3:10:3e:a9:be: 19:1e:a5:1d:cb:39:aa:eb:20:4f:cd:b7:9c:d9:ad: d3:55:c7:30:81:da:dd:f1:f2:f5:42:a6:f9:b8:1c: d1:3d:3b:8f:27:8c:87:8f:08:e1:7d:73:9e:7f:79: 37:b7:d9:c2:ca:ff:2c:95:79:89:e5:b1:7f:11:c5: 70:c0:39:04:47:67:68:01:fe:9f:e6:c5:74:80:e7: 20:a7:e2:8a:46:6e:f4:fc:db:b5:20:a1:95:74:77: c2:dd:b3:82:2b:db:5a:88:eb:58:23:23:fa:be:0d: bf:07:bc:90:57:28:ad:ab:e4:a1:82:53:27:88:68: 64:e9:0c:68:70:46:7b:51:8d:b7:f5:98:cf:86:5a: 73:e9:9a:7a:5d:ef:b5:6d:20:70:a7:d2:77:a0:88: 5c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:DE:B6:A2:AE:B6:0B:81:D9:D6:AF:B6:65:1E:A4:6B:D8:BB:89:39 X509v3 Authority Key Identifier: keyid:51:62:60:68:94:25:86:CE:95:70:21:03:BA:C8:99:D2:3F:CF:72:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/H962oq62C4HZ1q-2ZR6ka9i7iTk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:61c::/48 Signature Algorithm: sha256WithRSAEncryption 3c:6f:ea:47:39:df:c1:67:f7:6d:99:3b:e0:b7:b9:ac:dd:5b: de:96:f0:3b:70:54:04:7f:4c:e8:82:8a:d1:3a:4a:1a:c7:09: 75:a7:4a:3a:7c:07:58:84:77:da:5d:04:77:39:58:f6:bb:5b: ea:7a:c0:88:ca:5c:17:05:52:76:90:29:b4:36:c6:66:f6:12: 7c:f9:c2:16:15:bd:e8:07:2b:3a:d9:77:9b:3c:bc:da:24:5b: 6b:78:90:7e:95:d6:d5:a3:44:b0:0b:0b:de:b4:dd:ae:f4:1f: 68:89:d5:1b:80:7b:d4:68:a7:a2:ae:ed:bf:ab:a7:24:8a:69: f0:62:46:17:63:e8:7b:78:cd:6f:d9:90:6c:4d:a7:9f:eb:5b: 9d:c3:ec:81:32:de:67:9b:72:b5:e2:d8:38:0f:b2:c1:9c:51: 8f:ef:5d:62:ec:93:1f:ab:8d:4f:e3:1d:6d:a3:9f:84:e8:59: 80:6e:8c:71:9e:ac:72:87:01:22:92:37:cf:d6:3b:90:73:9d: 99:43:0c:e3:b4:e2:fa:4a:ab:b5:68:4b:fa:50:d1:0a:73:1d: 3e:cf:02:f3:14:f3:45:c4:c7:84:46:83:17:ec:a0:42:49:f9: 8e:84:85:40:b3:2c:e6:25:5f:92:e3:2d:7c:f5:a8:81:e3:c1: 21:22:c6:cd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yT/Jh1scSb+/xHNarLLbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxNjI2MDY4OTQyNTg2Y2U5NTcwMjEwM2JhYzg5OWQyM2Zj ZjcyNDIwHhcNMjYwMTAxMTgxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmRlYjZhMmFlYjYwYjgxZDlkNmFmYjY2NTFlYTQ2YmQ4YmI4OTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYwBeU9vVdKfEHS1qpIh8GIodsdN xbapYpRBpESJk9mQW2H7hAxfk3OcpxHd2M6pNBj1zK09/l/3HImszoi+w3uPiIMJ lkVa158YneqCzV+4erDCXtV7K760MxKyit5itaEAwxA+qb4ZHqUdyzmq6yBPzbec 2a3TVccwgdrd8fL1Qqb5uBzRPTuPJ4yHjwjhfXOef3k3t9nCyv8slXmJ5bF/EcVw wDkER2doAf6f5sV0gOcgp+KKRm70/Nu1IKGVdHfC3bOCK9taiOtYIyP6vg2/B7yQ Vyitq+ShglMniGhk6QxocEZ7UY239ZjPhlpz6Zp6Xe+1bSBwp9J3oIhc4wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFB/etqKutguB2davtmUepGvYu4k5MB8GA1UdIwQY MBaAFFFiYGiUJYbOlXAhA7rImdI/z3JCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVdKZ2FKUWxoczZWY0NFRHVzaVowal9QY2tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jNjJkMDAtZmZhOC00M2JlLWEyYmQt N2JkOWU1ZjQ2N2FkLzEvSDk2Mm9xNjJDNEhaMXEtMlpSNmthOWk3aVRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9jNjJkMDAtZmZhOC00M2JlLWEyYmQtN2JkOWU1ZjQ2N2Fk LzEvVVdKZ2FKUWxoczZWY0NFRHVzaVowal9QY2tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAYc MA0GCSqGSIb3DQEBCwUAA4IBAQA8b+pHOd/BZ/dtmTvgt7ms3VvelvA7cFQEf0zo gorROkoaxwl1p0o6fAdYhHfaXQR3OVj2u1vqesCIylwXBVJ2kCm0NsZm9hJ8+cIW Fb3oBys62XebPLzaJFtreJB+ldbVo0SwCwvetN2u9B9oidUbgHvUaKeiru2/q6ck imnwYkYXY+h7eM1v2ZBsTaef61udw+yBMt5nm3K14tg4D7LBnFGP711i7JMfq41P 4x1to5+E6FmAboxxnqxyhwEikjfP1juQc52ZQwzjtOL6Squ1aEv6UNEKcx0+zwLz FPNFxMeERoMX7KBCSfmOhIVAsyzmJV+S4y189aiB48EhIsbN -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:17 2026 by rpki-client