This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/RuPHE7oDax0LZ7QwIWaSeo3i7Jw.roa File: RuPHE7oDax0LZ7QwIWaSeo3i7Jw.roa (raw, json) Hash identifier: XqmTRgeYBpKi+R9MtbM6hui7gHIH9RIwhXh6Z4pFfDQ= Subject key identifier: 46:E3:C7:13:BA:03:6B:1D:0B:67:B4:30:21:66:92:7A:8D:E2:EC:9C Certificate issuer: /CN=66ed3ba68c78bff2c4724400ade6348482fb4364 Certificate serial: 019B7E381E415AF13B2C65A23BE8365B3D7F Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/RuPHE7oDax0LZ7QwIWaSeo3i7Jw.roa Signing time: Fri 02 Jan 2026 10:19:25 +0000 ROA not before: Fri 02 Jan 2026 10:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213756 IP address blocks: 2a14:3f87:8800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:1e:41:5a:f1:3b:2c:65:a2:3b:e8:36:5b:3d:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364 Validity Not Before: Jan 2 10:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46e3c713ba036b1d0b67b4302166927a8de2ec9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5f:59:9b:db:1c:c3:a9:8f:81:0f:53:40:69: ed:80:b0:04:8e:af:89:03:7a:b3:95:59:5a:c5:2f: 00:f7:f6:27:c4:e9:0c:e8:84:83:b4:d5:52:30:93: 25:d7:95:2b:62:f9:e8:29:bf:5b:6c:b4:ac:07:e8: e0:bd:45:16:4a:a4:aa:5b:39:1f:03:f8:d3:02:6c: 42:db:99:ad:4d:ec:42:45:06:bf:bb:5c:c4:8b:31: f9:12:96:be:1f:4a:ff:b7:37:d3:d5:e7:70:28:fd: d0:6e:97:c8:98:4d:be:06:57:b1:ca:0c:dd:07:0d: f8:78:87:8d:fa:a7:6c:1b:a7:79:a7:03:4d:5d:96: 2f:90:4c:ab:72:5e:de:93:5c:07:df:6e:f2:18:9b: b3:05:5b:15:14:82:49:30:19:97:ff:da:f0:69:58: 57:01:a0:03:ae:3e:f7:c3:f8:b4:f4:35:14:60:81: ab:90:cf:91:0f:99:28:78:62:30:13:02:a5:b5:c5: e6:4b:91:e3:d0:97:2b:0f:ec:a4:87:94:a6:dd:3f: c0:bf:74:4b:1f:17:e6:c0:bd:bf:16:55:ec:8b:c8: 5a:a0:b8:70:6e:a0:a3:c6:02:de:1b:da:2a:51:35: 2a:26:59:4c:1d:42:bc:b6:ba:75:fb:83:92:f4:e5: 35:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E3:C7:13:BA:03:6B:1D:0B:67:B4:30:21:66:92:7A:8D:E2:EC:9C X509v3 Authority Key Identifier: keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/RuPHE7oDax0LZ7QwIWaSeo3i7Jw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:3f87:8800::/38 Signature Algorithm: sha256WithRSAEncryption 5b:46:6b:96:19:5f:26:8b:e8:c2:4d:88:2c:73:0d:ee:7f:3c: 36:01:98:98:5f:77:67:ad:7f:d0:7f:5d:b0:08:ab:3f:c5:a1: 90:2a:f1:cf:36:5f:e3:35:c0:3f:dc:d8:a5:a2:c0:85:87:62: 5a:89:1a:27:77:2b:4f:9f:62:6e:fe:0a:48:d3:fe:08:ad:30: 1b:09:7b:fe:de:0c:1f:fe:c6:de:ec:24:fd:4e:2e:9c:f9:77: 9e:70:a8:12:89:56:78:44:20:cf:6b:ab:4e:7e:7e:a4:35:dd: 5a:15:b3:34:00:b2:a8:1b:e0:51:3a:94:75:31:ff:2a:34:ce: 80:fa:31:52:59:d2:00:d6:3e:7c:a1:7d:b2:c3:82:c0:00:42: af:1e:8f:0d:47:a0:5d:72:22:2d:ea:4b:e7:0b:c1:b9:eb:22: 6b:f8:bf:c4:56:96:1e:18:2c:09:9b:0a:6c:5c:97:6e:07:cb: 94:f3:ce:02:eb:99:68:02:7b:f1:7a:dc:81:3c:8f:46:9a:b9: dc:70:bc:7e:31:00:2d:65:06:24:7a:80:b2:5b:2a:ec:b7:df: 45:25:a5:8f:d6:10:48:b5:cf:9d:58:6a:fc:24:3f:ce:d0:75: 43:16:56:08:2c:c4:4e:b7:f2:92:e2:08:bc:af:9b:51:45:65: 1c:d6:39:3c -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OB5BWvE7LGWiO+g2Wz1/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZWQzYmE2OGM3OGJmZjJjNDcyNDQwMGFkZTYzNDg0ODJm YjQzNjQwHhcNMjYwMTAyMTAxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmUzYzcxM2JhMDM2YjFkMGI2N2I0MzAyMTY2OTI3YThkZTJlYzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF9Zm9scw6mPgQ9TQGntgLAEjq+J A3qzlVlaxS8A9/YnxOkM6ISDtNVSMJMl15UrYvnoKb9bbLSsB+jgvUUWSqSqWzkf A/jTAmxC25mtTexCRQa/u1zEizH5Epa+H0r/tzfT1edwKP3QbpfImE2+Blexygzd Bw34eIeN+qdsG6d5pwNNXZYvkEyrcl7ek1wH327yGJuzBVsVFIJJMBmX/9rwaVhX AaADrj73w/i09DUUYIGrkM+RD5koeGIwEwKltcXmS5Hj0JcrD+ykh5Sm3T/Av3RL HxfmwL2/FlXsi8haoLhwbqCjxgLeG9oqUTUqJllMHUK8trp1+4OS9OU1vQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFEbjxxO6A2sdC2e0MCFmknqN4uycMB8GA1UdIwQY MBaAFGbtO6aMeL/yxHJEAK3mNISC+0NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnUwN3BveDR2X0xFY2tRQXJlWTBoSUw3UTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iNzlhNjgtNWIwMi00MDk3LWEyZTMt MGE0M2I3YTNlYjU0LzEvUnVQSEU3b0RheDBMWjdRd0lXYVNlbzNpN0p3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9iNzlhNjgtNWIwMi00MDk3LWEyZTMtMGE0M2I3YTNlYjU0 LzEvWnUwN3BveDR2X0xFY2tRQXJlWTBoSUw3UTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKhQ/h4gw DQYJKoZIhvcNAQELBQADggEBAFtGa5YZXyaL6MJNiCxzDe5/PDYBmJhfd2etf9B/ XbAIqz/FoZAq8c82X+M1wD/c2KWiwIWHYlqJGid3K0+fYm7+CkjT/gitMBsJe/7e DB/+xt7sJP1OLpz5d55wqBKJVnhEIM9rq05+fqQ13VoVszQAsqgb4FE6lHUx/yo0 zoD6MVJZ0gDWPnyhfbLDgsAAQq8ejw1HoF1yIi3qS+cLwbnrImv4v8RWlh4YLAmb Cmxcl24Hy5TzzgLrmWgCe/F63IE8j0aaudxwvH4xAC1lBiR6gLJbKuy330UlpY/W EEi1z51YavwkP87QdUMWVggsxE638pLiCLyvm1FFZRzWOTw= -----END CERTIFICATE-----Generated at Mon Feb 2 17:36:52 2026 by rpki-client