This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/srZUUGDlWtNFxGr6_i87D_AeupI.roa File: srZUUGDlWtNFxGr6_i87D_AeupI.roa (raw, json) Hash identifier: HDXgxF2evGxQOPaC9Ztutyp90BmjyDMAfjNNqDMFf4Q= Subject key identifier: B2:B6:54:50:60:E5:5A:D3:45:C4:6A:FA:FE:2F:3B:0F:F0:1E:BA:92 Certificate issuer: /CN=ee9f79ab1d59847ff1f2e961218c159af264d835 Certificate serial: 019B7A5B9C4CBC875620127DAFD160949798 Authority key identifier: EE:9F:79:AB:1D:59:84:7F:F1:F2:E9:61:21:8C:15:9A:F2:64:D8:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/srZUUGDlWtNFxGr6_i87D_AeupI.roa Signing time: Thu 01 Jan 2026 16:19:42 +0000 ROA not before: Thu 01 Jan 2026 16:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210660 IP address blocks: 2001:678:cdc::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:9c:4c:bc:87:56:20:12:7d:af:d1:60:94:97:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee9f79ab1d59847ff1f2e961218c159af264d835 Validity Not Before: Jan 1 16:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2b6545060e55ad345c46afafe2f3b0ff01eba92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:31:3c:68:a9:da:ac:c8:05:4e:d0:31:c1:98: dd:14:70:5c:aa:11:00:d3:3d:e0:b2:3a:20:29:5c: e2:2d:43:20:13:a9:c6:77:fd:c8:86:c7:22:1c:f9: d0:8c:8f:1a:d3:f7:f7:af:e0:87:40:40:ce:bb:22: ec:54:af:81:dc:2d:cd:13:cb:75:1b:57:a7:e8:5d: 72:be:d4:4e:d4:9a:59:0d:c4:75:2a:5a:26:a3:26: d0:f8:13:85:bb:44:ff:ab:fa:56:ae:e0:77:01:5e: e2:5f:d1:cc:69:be:15:a5:8e:14:ea:79:8c:7b:60: 7d:77:c4:ab:79:c9:a6:34:29:c6:dd:1d:8f:b2:35: f8:27:b6:7c:75:bf:be:e1:de:a1:cd:99:78:56:7e: 13:0d:8a:b8:94:94:dc:56:cf:a9:b8:79:93:0b:60: 78:cd:fa:40:d8:68:15:86:8a:a2:f2:e6:c8:3e:11: 7a:b1:5a:4d:99:4e:a6:b0:3e:93:c3:7c:e3:ae:9c: ac:d7:40:78:d3:04:68:51:d7:f1:bd:34:19:90:a6: 0a:64:71:3e:f2:a7:9d:5f:49:99:c0:59:2c:e3:45: 8d:af:54:89:02:32:81:be:ab:00:07:12:ba:35:2c: 47:da:1c:d9:c0:1c:cd:6b:86:54:cf:62:a7:d9:ea: 86:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B6:54:50:60:E5:5A:D3:45:C4:6A:FA:FE:2F:3B:0F:F0:1E:BA:92 X509v3 Authority Key Identifier: keyid:EE:9F:79:AB:1D:59:84:7F:F1:F2:E9:61:21:8C:15:9A:F2:64:D8:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/srZUUGDlWtNFxGr6_i87D_AeupI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:cdc::/48 Signature Algorithm: sha256WithRSAEncryption 32:22:42:8e:70:2f:7e:8f:35:9a:57:fb:84:b8:c3:25:43:e6: 32:32:de:a3:66:ee:d1:52:b1:95:a0:3a:bb:d9:79:21:ef:8b: 49:81:4c:88:8e:7e:41:01:72:32:dc:20:70:df:1b:30:83:df: 27:78:7c:3a:b7:4b:8e:eb:17:b2:6c:d0:b8:f7:24:5a:b7:96: e0:17:cf:f5:6e:a3:4b:89:c1:0c:d2:61:48:72:e0:e2:e0:64: 2b:f4:ae:dd:97:d7:08:29:5a:04:4a:5e:4c:1d:01:fc:6f:4a: 30:80:b1:dc:d2:65:5b:f0:21:80:f5:b8:0d:f5:d2:e4:8a:44: e6:59:53:92:9c:c5:60:99:36:a2:32:07:17:a7:c0:e4:79:21: c9:9e:43:f0:1e:0a:fa:99:b0:58:79:c2:89:80:a3:f8:60:d7: 61:a6:84:b4:86:95:3e:4c:e7:80:45:be:c6:26:a7:e9:17:61: ca:eb:10:5a:cd:52:30:05:47:5e:ba:15:c5:7b:8d:be:c6:92: 0f:92:fa:05:17:4e:f6:8a:2f:99:0d:8e:0f:d5:bb:6d:ea:a8: 06:d9:57:25:b4:46:0d:59:f7:85:6d:10:cd:94:e2:4f:e2:f5: bc:b5:65:62:00:77:1b:18:5e:4b:10:79:cf:25:97:0e:4f:62: 7c:70:40:1a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6W5xMvIdWIBJ9r9FglJeYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlOWY3OWFiMWQ1OTg0N2ZmMWYyZTk2MTIxOGMxNTlhZjI2 NGQ4MzUwHhcNMjYwMTAxMTYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmI2NTQ1MDYwZTU1YWQzNDVjNDZhZmFmZTJmM2IwZmYwMWViYTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTE8aKnarMgFTtAxwZjdFHBcqhEA 0z3gsjogKVziLUMgE6nGd/3IhsciHPnQjI8a0/f3r+CHQEDOuyLsVK+B3C3NE8t1 G1en6F1yvtRO1JpZDcR1KlomoybQ+BOFu0T/q/pWruB3AV7iX9HMab4VpY4U6nmM e2B9d8SrecmmNCnG3R2PsjX4J7Z8db++4d6hzZl4Vn4TDYq4lJTcVs+puHmTC2B4 zfpA2GgVhoqi8ubIPhF6sVpNmU6msD6Tw3zjrpys10B40wRoUdfxvTQZkKYKZHE+ 8qedX0mZwFks40WNr1SJAjKBvqsABxK6NSxH2hzZwBzNa4ZUz2Kn2eqGmwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLK2VFBg5VrTRcRq+v4vOw/wHrqSMB8GA1UdIwQY MBaAFO6feasdWYR/8fLpYSGMFZryZNg1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3A5NXF4MVpoSF94OHVsaElZd1ZtdkprMkRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81N2NhNzYtMzQ1Ny00NmVkLTkzMjQt ZWE3YTE3MTI4YTA1LzEvc3JaVVVHRGxXdE5GeEdyNl9pODdEX0FldXBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS81N2NhNzYtMzQ1Ny00NmVkLTkzMjQtZWE3YTE3MTI4YTA1 LzEvN3A5NXF4MVpoSF94OHVsaElZd1ZtdkprMkRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAzc MA0GCSqGSIb3DQEBCwUAA4IBAQAyIkKOcC9+jzWaV/uEuMMlQ+YyMt6jZu7RUrGV oDq72Xkh74tJgUyIjn5BAXIy3CBw3xswg98neHw6t0uO6xeybNC49yRat5bgF8/1 bqNLicEM0mFIcuDi4GQr9K7dl9cIKVoESl5MHQH8b0owgLHc0mVb8CGA9bgN9dLk ikTmWVOSnMVgmTaiMgcXp8DkeSHJnkPwHgr6mbBYecKJgKP4YNdhpoS0hpU+TOeA Rb7GJqfpF2HK6xBazVIwBUdeuhXFe42+xpIPkvoFF072ii+ZDY4P1btt6qgG2Vcl tEYNWfeFbRDNlOJP4vW8tWViAHcbGF5LEHnPJZcOT2J8cEAa -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:59 2026 by rpki-client