This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/XObKO3ltJwjAm9or7k6NYiYPt_c.roa File: XObKO3ltJwjAm9or7k6NYiYPt_c.roa (raw, json) Hash identifier: 7lZy4Wbsa7zNjERhyll32LTZE7YzAMI3aWuq/di2LaU= Subject key identifier: 5C:E6:CA:3B:79:6D:27:08:C0:9B:DA:2B:EE:4E:8D:62:26:0F:B7:F7 Certificate issuer: /CN=ff2a50eedfe78040209d6c0ab95f83b5460398dd Certificate serial: 019B7CEE531440D3CE4CF70FEC9A1D274792 Authority key identifier: FF:2A:50:EE:DF:E7:80:40:20:9D:6C:0A:B9:5F:83:B5:46:03:98:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/XObKO3ltJwjAm9or7k6NYiYPt_c.roa Signing time: Fri 02 Jan 2026 04:19:12 +0000 ROA not before: Fri 02 Jan 2026 04:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207076 IP address blocks: 2001:67c:1430::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:53:14:40:d3:ce:4c:f7:0f:ec:9a:1d:27:47:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff2a50eedfe78040209d6c0ab95f83b5460398dd Validity Not Before: Jan 2 04:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ce6ca3b796d2708c09bda2bee4e8d62260fb7f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:50:22:3f:2e:24:2f:f6:e8:8c:ca:3c:a3:8e: f1:1d:be:cb:c8:d8:86:76:78:12:e3:08:6c:b0:09: 0d:05:51:83:72:18:fd:51:72:57:af:01:52:f9:64: 4e:f7:2c:e1:56:92:d8:20:b1:e3:28:0c:7f:ef:e8: 61:0c:99:2c:01:ab:76:d1:ab:87:a9:c1:0e:b6:d2: 3d:d7:d5:f1:a5:dd:2b:7c:0f:1b:28:cd:ba:95:46: 36:ee:15:99:c0:7b:91:3b:6e:9b:84:bc:23:91:35: fd:d4:b8:7d:52:af:83:07:c6:34:eb:5e:93:b5:91: 09:ab:d2:bb:a4:da:5d:7f:2e:6b:59:c1:f9:b7:cb: 4e:5c:b8:ee:95:59:20:17:57:3c:d4:11:35:99:cb: 32:fb:7a:87:6d:ea:d5:7d:0e:61:7b:9a:99:8d:0d: 26:2f:95:07:f5:da:17:59:d4:92:22:a6:e0:71:2f: 0d:d4:60:a8:36:c5:dd:da:02:66:6b:ba:f7:71:59: 3c:c1:df:2a:ef:22:cc:cc:4c:6a:e5:01:39:95:90: 69:dc:37:2e:cd:4f:e2:67:e2:d0:d6:6e:79:d7:dd: 2a:e2:cd:3a:63:68:a2:da:86:d4:3b:cb:5a:7b:e1: b6:3d:24:c8:2a:40:9a:ba:3b:d3:7f:f2:dc:f7:8e: f8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E6:CA:3B:79:6D:27:08:C0:9B:DA:2B:EE:4E:8D:62:26:0F:B7:F7 X509v3 Authority Key Identifier: keyid:FF:2A:50:EE:DF:E7:80:40:20:9D:6C:0A:B9:5F:83:B5:46:03:98:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/XObKO3ltJwjAm9or7k6NYiYPt_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1430::/48 Signature Algorithm: sha256WithRSAEncryption 44:5e:94:aa:fd:ef:90:09:42:b1:ff:86:74:c0:db:d1:9b:68: 51:82:32:11:ba:bf:58:25:9e:cf:31:44:48:23:09:21:45:2c: 2c:63:65:65:c2:05:25:03:7e:e7:1e:35:19:a0:ba:92:69:22: c3:b7:7d:50:9a:7a:f8:5f:62:6a:ac:76:28:4b:99:7e:b0:e7: 51:49:dc:c8:bd:5e:24:13:67:97:c1:0d:8f:f4:e0:cb:31:8e: df:08:db:99:0f:7e:b0:a0:c7:f3:7f:f2:a8:3d:12:1e:42:68: 11:b3:e9:b9:c7:95:cd:fe:3b:fa:ad:70:03:de:b3:04:84:02: ae:a6:4d:8b:7a:d8:2a:00:d8:67:e6:9c:d3:41:8d:c6:76:7a: 05:d1:17:93:c4:df:76:dd:4a:d0:fd:4c:78:5a:9a:a8:95:19: e2:5a:57:96:d9:27:09:93:0a:b0:1f:28:4f:77:39:a4:76:e2: a5:d7:41:82:23:74:82:82:27:b3:66:7a:48:23:ca:bb:a4:3b: 69:cb:91:82:49:be:d2:6a:ff:02:3f:bd:d6:ee:e1:1b:3e:ab: bf:b5:86:3f:40:91:ff:f9:38:2d:c2:49:9e:b1:8a:0d:88:2d: 76:74:00:e2:8b:da:8b:3c:6c:c1:f7:68:c8:b0:9d:8b:e0:6e: 8d:cf:9f:e9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87lMUQNPOTPcP7JodJ0eSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMmE1MGVlZGZlNzgwNDAyMDlkNmMwYWI5NWY4M2I1NDYw Mzk4ZGQwHhcNMjYwMTAyMDQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2U2Y2EzYjc5NmQyNzA4YzA5YmRhMmJlZTRlOGQ2MjI2MGZiN2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVAiPy4kL/bojMo8o47xHb7LyNiG dngS4whssAkNBVGDchj9UXJXrwFS+WRO9yzhVpLYILHjKAx/7+hhDJksAat20auH qcEOttI919Xxpd0rfA8bKM26lUY27hWZwHuRO26bhLwjkTX91Lh9Uq+DB8Y0616T tZEJq9K7pNpdfy5rWcH5t8tOXLjulVkgF1c81BE1mcsy+3qHberVfQ5he5qZjQ0m L5UH9doXWdSSIqbgcS8N1GCoNsXd2gJma7r3cVk8wd8q7yLMzExq5QE5lZBp3Dcu zU/iZ+LQ1m55190q4s06Y2ii2obUO8tae+G2PSTIKkCaujvTf/Lc9474yQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFzmyjt5bScIwJvaK+5OjWImD7f3MB8GA1UdIwQY MBaAFP8qUO7f54BAIJ1sCrlfg7VGA5jdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3lwUTd0X25nRUFnbld3S3VWLUR0VVlEbU4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8wMTdmODktOTEzMC00YTRlLTg1NDct ZjNiOTc0MWQxZDRmLzEvWE9iS08zbHRKd2pBbTlvcjdrNk5ZaVlQdF9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8wMTdmODktOTEzMC00YTRlLTg1NDctZjNiOTc0MWQxZDRm LzEvX3lwUTd0X25nRUFnbld3S3VWLUR0VVlEbU4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBQw MA0GCSqGSIb3DQEBCwUAA4IBAQBEXpSq/e+QCUKx/4Z0wNvRm2hRgjIRur9YJZ7P MURIIwkhRSwsY2VlwgUlA37nHjUZoLqSaSLDt31Qmnr4X2JqrHYoS5l+sOdRSdzI vV4kE2eXwQ2P9ODLMY7fCNuZD36woMfzf/KoPRIeQmgRs+m5x5XN/jv6rXAD3rME hAKupk2LetgqANhn5pzTQY3GdnoF0ReTxN923UrQ/Ux4WpqolRniWleW2ScJkwqw HyhPdzmkduKl10GCI3SCgiezZnpII8q7pDtpy5GCSb7Sav8CP73W7uEbPqu/tYY/ QJH/+TgtwkmesYoNiC12dADii9qLPGzB92jIsJ2L4G6Nz5/p -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:22 2026 by rpki-client