This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/15d89d-b9d1-4034-b88c-44256f7f2ce6/1/L9Frwtp3y9J9orpf147yoe-Tyr0.roa File: L9Frwtp3y9J9orpf147yoe-Tyr0.roa (raw, json) Hash identifier: POgvv3guoi89kV3dVMswqbK01pH72kXEXSFin0qGmsc= Subject key identifier: 2F:D1:6B:C2:DA:77:CB:D2:7D:A2:BA:5F:D7:8E:F2:A1:EF:93:CA:BD Certificate issuer: /CN=ee53b27cf15d350459473a790db5db76feb40a43 Certificate serial: 019C0F1BDD80D3B8717D39090DAC41678A59 Authority key identifier: EE:53:B2:7C:F1:5D:35:04:59:47:3A:79:0D:B5:DB:76:FE:B4:0A:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7lOyfPFdNQRZRzp5DbXbdv60CkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/15d89d-b9d1-4034-b88c-44256f7f2ce6/1/L9Frwtp3y9J9orpf147yoe-Tyr0.roa Signing time: Fri 30 Jan 2026 13:33:30 +0000 ROA not before: Fri 30 Jan 2026 13:33:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203138 IP address blocks: 2001:678:116c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/15d89d-b9d1-4034-b88c-44256f7f2ce6/1/7lOyfPFdNQRZRzp5DbXbdv60CkM.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/15d89d-b9d1-4034-b88c-44256f7f2ce6/1/7lOyfPFdNQRZRzp5DbXbdv60CkM.mft rsync://rpki.ripe.net/repository/DEFAULT/7lOyfPFdNQRZRzp5DbXbdv60CkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0f:1b:dd:80:d3:b8:71:7d:39:09:0d:ac:41:67:8a:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee53b27cf15d350459473a790db5db76feb40a43 Validity Not Before: Jan 30 13:33:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2fd16bc2da77cbd27da2ba5fd78ef2a1ef93cabd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:38:cf:c9:9e:ee:99:51:ad:8d:7b:5b:67:92: 32:c0:ac:e1:d0:25:89:8e:74:96:11:f7:bd:4d:4b: d9:e8:8c:90:6d:66:ec:6d:3c:16:e5:32:38:32:51: 17:92:7a:5d:e7:64:1a:51:d9:5a:ea:40:8e:fd:c4: 18:de:40:bc:33:cb:5b:bf:42:f5:df:5c:e9:ad:7f: 99:95:f6:ab:34:62:d1:b6:f8:e0:b6:64:c0:4b:01: b6:2a:85:20:0a:11:47:40:9c:7b:ef:84:9a:f2:ac: 62:7e:4c:e9:cf:05:be:25:23:2d:6f:1d:0d:0c:e3: 5e:b7:c7:e9:1b:40:55:fc:f5:e9:fc:6d:07:f5:16: 25:3c:1b:eb:4b:63:25:92:14:33:71:b4:b5:fb:fe: db:b1:0d:8b:56:f0:6f:23:16:13:3d:25:af:06:aa: 08:e7:d3:85:1b:24:09:02:1c:25:ca:cd:10:af:0e: 05:56:41:bf:fc:ac:f1:3b:9b:70:c4:44:14:68:f3: a3:6e:01:60:4e:d7:e0:7f:1f:97:13:f9:b7:d9:8d: cc:fd:af:fa:44:a2:83:ec:84:3b:6d:f0:d3:b9:e8: 72:4b:51:a8:ce:ce:56:15:e8:43:56:c8:01:e6:52: 33:4f:c3:58:88:de:f9:05:be:77:00:ba:9c:dc:33: 90:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D1:6B:C2:DA:77:CB:D2:7D:A2:BA:5F:D7:8E:F2:A1:EF:93:CA:BD X509v3 Authority Key Identifier: keyid:EE:53:B2:7C:F1:5D:35:04:59:47:3A:79:0D:B5:DB:76:FE:B4:0A:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7lOyfPFdNQRZRzp5DbXbdv60CkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/15d89d-b9d1-4034-b88c-44256f7f2ce6/1/L9Frwtp3y9J9orpf147yoe-Tyr0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/15d89d-b9d1-4034-b88c-44256f7f2ce6/1/7lOyfPFdNQRZRzp5DbXbdv60CkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:116c::/48 Signature Algorithm: sha256WithRSAEncryption 8b:a9:29:5c:5b:04:f4:79:7c:5f:de:41:aa:e6:12:6e:23:85: 1a:fe:de:18:9c:ff:21:e5:7d:32:1f:d9:dc:ac:55:d9:85:4d: fb:32:3c:16:db:5c:6d:0f:6d:09:f9:28:13:52:63:5a:da:be: 3b:9c:a6:5e:78:c6:ae:3f:a2:39:e7:7f:ed:79:b4:c1:62:18: 2f:0e:79:78:98:6c:75:28:50:42:01:d1:ae:2c:a8:3c:03:b8: 51:82:e9:bb:b8:b8:db:ff:16:47:28:dc:77:33:1d:8f:e6:bb: ae:c6:fa:3c:98:d5:a1:d8:8f:0a:06:c2:5a:f5:d1:f9:34:8e: 42:62:17:3e:54:68:16:ac:50:04:80:b0:9f:e0:07:6f:c9:cf: 09:d7:ff:d3:69:13:a4:ec:84:c6:e6:44:1e:d6:d3:99:62:f7: 9e:6a:31:1f:1c:1e:fb:22:ec:76:03:db:6d:91:30:f8:37:0f: 33:20:6f:0c:84:ac:be:42:47:f6:83:34:87:1b:a6:48:81:4b: a1:10:f7:79:2e:59:ca:ed:87:6d:f3:c8:9a:46:8a:f4:3b:20: f0:32:1f:03:2b:e3:76:bc:b0:af:99:ec:24:61:cc:2a:49:b2: a5:a8:a0:71:aa:d5:fa:8c:93:5c:53:3c:f9:40:e9:db:e7:7d: e7:be:80:fd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZwPG92A07hxfTkJDaxBZ4pZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlNTNiMjdjZjE1ZDM1MDQ1OTQ3M2E3OTBkYjVkYjc2ZmVi NDBhNDMwHhcNMjYwMTMwMTMzMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmQxNmJjMmRhNzdjYmQyN2RhMmJhNWZkNzhlZjJhMWVmOTNjYWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozjPyZ7umVGtjXtbZ5IywKzh0CWJ jnSWEfe9TUvZ6IyQbWbsbTwW5TI4MlEXknpd52QaUdla6kCO/cQY3kC8M8tbv0L1 31zprX+ZlfarNGLRtvjgtmTASwG2KoUgChFHQJx774Sa8qxifkzpzwW+JSMtbx0N DONet8fpG0BV/PXp/G0H9RYlPBvrS2MlkhQzcbS1+/7bsQ2LVvBvIxYTPSWvBqoI 59OFGyQJAhwlys0Qrw4FVkG//KzxO5twxEQUaPOjbgFgTtfgfx+XE/m32Y3M/a/6 RKKD7IQ7bfDTuehyS1Gozs5WFehDVsgB5lIzT8NYiN75Bb53ALqc3DOQUwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFC/Ra8Lad8vSfaK6X9eO8qHvk8q9MB8GA1UdIwQY MBaAFO5TsnzxXTUEWUc6eQ2123b+tApDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2xPeWZQRmROUVJaUnpwNURiWGJkdjYwQ2tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xNWQ4OWQtYjlkMS00MDM0LWI4OGMt NDQyNTZmN2YyY2U2LzEvTDlGcnd0cDN5OUo5b3JwZjE0N3lvZS1UeXIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8xNWQ4OWQtYjlkMS00MDM0LWI4OGMtNDQyNTZmN2YyY2U2 LzEvN2xPeWZQRmROUVJaUnpwNURiWGJkdjYwQ2tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBFs MA0GCSqGSIb3DQEBCwUAA4IBAQCLqSlcWwT0eXxf3kGq5hJuI4Ua/t4YnP8h5X0y H9ncrFXZhU37MjwW21xtD20J+SgTUmNa2r47nKZeeMauP6I553/tebTBYhgvDnl4 mGx1KFBCAdGuLKg8A7hRgum7uLjb/xZHKNx3Mx2P5ruuxvo8mNWh2I8KBsJa9dH5 NI5CYhc+VGgWrFAEgLCf4Advyc8J1//TaROk7ITG5kQe1tOZYveeajEfHB77Iux2 A9ttkTD4Nw8zIG8MhKy+Qkf2gzSHG6ZIgUuhEPd5LlnK7Ydt88iaRor0OyDwMh8D K+N2vLCvmewkYcwqSbKlqKBxqtX6jJNcUzz5QOnb533nvoD9 -----END CERTIFICATE-----Generated at Mon Feb 9 20:51:25 2026 by rpki-client