This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/tDCU6ZgNXedbQkRlGgvKQfQ0bkA.roa File: tDCU6ZgNXedbQkRlGgvKQfQ0bkA.roa (raw, json) Hash identifier: ykQgW4xkDJKWChMwCNu3fS7+mAyaTQKGalisZpyZIPQ= Subject key identifier: B4:30:94:E9:98:0D:5D:E7:5B:42:44:65:1A:0B:CA:41:F4:34:6E:40 Certificate issuer: /CN=66ed3ba68c78bff2c4724400ade6348482fb4364 Certificate serial: 019B7E381EB50F757A7999FB85AAA9E2BCD4 Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/tDCU6ZgNXedbQkRlGgvKQfQ0bkA.roa Signing time: Fri 02 Jan 2026 10:19:25 +0000 ROA not before: Fri 02 Jan 2026 10:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214709 IP address blocks: 2a14:3f87:9000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:1e:b5:0f:75:7a:79:99:fb:85:aa:a9:e2:bc:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364 Validity Not Before: Jan 2 10:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b43094e9980d5de75b4244651a0bca41f4346e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d9:ca:16:c5:97:b1:11:8c:1a:b3:24:bd:6f: 9c:72:ab:71:16:01:64:03:93:ea:9f:9b:2b:2d:8d: 66:e5:f8:6f:26:23:76:31:82:0a:e3:a0:ab:8b:30: ac:c7:82:60:81:dd:fb:70:92:a6:44:c0:e2:6f:f1: b5:ec:c6:94:23:cb:34:e9:9a:17:c8:aa:54:00:24: 29:98:ed:b5:dc:b4:15:f2:32:aa:64:8e:0d:c9:58: 4b:59:7c:37:80:13:9c:ab:06:df:38:33:c8:c9:20: da:52:b9:dd:19:63:e3:b3:d2:f0:c1:b9:00:ae:4b: 1f:89:d3:2e:32:83:e2:3c:13:34:8f:f4:39:7f:13: 5f:ee:66:6a:d1:a9:eb:f7:7a:48:73:89:72:c6:6b: f7:23:b6:86:29:e6:10:d0:50:5f:78:53:12:1b:eb: 98:95:46:f4:94:73:42:26:f6:aa:05:8f:f8:b2:4c: 95:98:09:d7:4c:95:cd:6e:70:6e:dc:f8:3b:25:3f: a2:0e:e5:53:88:5d:12:91:9a:58:01:73:ec:c2:d2: c7:61:3b:0b:5a:3c:cb:88:6d:3b:de:b3:b1:18:cf: 0e:d6:e8:21:3a:64:ea:70:73:2e:4f:4b:97:8d:4e: ca:fa:6f:e0:e8:29:67:fa:05:ff:d7:1f:d5:95:fe: cb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:30:94:E9:98:0D:5D:E7:5B:42:44:65:1A:0B:CA:41:F4:34:6E:40 X509v3 Authority Key Identifier: keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/tDCU6ZgNXedbQkRlGgvKQfQ0bkA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:3f87:9000::/38 Signature Algorithm: sha256WithRSAEncryption 5a:54:90:7a:62:d9:83:56:ed:7e:a3:a8:d4:fe:09:f8:0a:46: 56:d6:0f:e8:2d:05:0a:37:b6:70:2c:2e:bd:45:f4:08:e9:8c: da:dc:8f:99:7f:45:51:d0:b3:61:0c:f3:74:4c:57:a0:1e:bc: 3f:92:ef:8c:28:d8:cf:2a:20:6f:a4:83:23:b7:dd:cb:22:56: 68:b2:de:50:f8:d3:8e:58:32:f0:08:e4:a4:03:e3:48:34:0f: 80:b9:3f:9f:3c:18:77:6a:c8:6e:ee:30:f3:fb:4c:a9:4d:5f: 5e:a8:a7:9e:46:3e:0f:2e:3a:8e:32:4c:90:f3:bc:5d:90:0b: 4a:7d:7e:18:b1:13:2d:0c:4f:fc:25:09:3e:78:f8:7b:93:c0: c2:5f:0c:c1:2a:8f:14:6b:52:78:5e:4e:b4:f1:ba:bc:ab:1e: 56:5f:5f:fe:01:c3:64:9a:1c:06:fe:d7:a2:c4:ed:0d:a2:c5: 25:ac:ec:67:1c:a3:a9:f5:ec:2e:0c:18:6a:62:1d:ab:ff:6c: 90:f3:4f:9d:77:0f:54:d8:80:8b:9c:fd:22:72:8b:8d:ce:9e: 30:41:95:2d:e5:fc:44:a4:19:ae:ca:ca:48:b8:8f:47:c4:80: ce:45:eb:67:a0:94:48:a1:66:ac:6d:71:06:86:93:cc:37:97: d8:c8:ae:43 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OB61D3V6eZn7haqp4rzUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZWQzYmE2OGM3OGJmZjJjNDcyNDQwMGFkZTYzNDg0ODJm YjQzNjQwHhcNMjYwMTAyMTAxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDMwOTRlOTk4MGQ1ZGU3NWI0MjQ0NjUxYTBiY2E0MWY0MzQ2ZTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdnKFsWXsRGMGrMkvW+ccqtxFgFk A5Pqn5srLY1m5fhvJiN2MYIK46CrizCsx4Jggd37cJKmRMDib/G17MaUI8s06ZoX yKpUACQpmO213LQV8jKqZI4NyVhLWXw3gBOcqwbfODPIySDaUrndGWPjs9LwwbkA rksfidMuMoPiPBM0j/Q5fxNf7mZq0anr93pIc4lyxmv3I7aGKeYQ0FBfeFMSG+uY lUb0lHNCJvaqBY/4skyVmAnXTJXNbnBu3Pg7JT+iDuVTiF0SkZpYAXPswtLHYTsL WjzLiG073rOxGM8O1ughOmTqcHMuT0uXjU7K+m/g6Cln+gX/1x/Vlf7LmQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFLQwlOmYDV3nW0JEZRoLykH0NG5AMB8GA1UdIwQY MBaAFGbtO6aMeL/yxHJEAK3mNISC+0NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnUwN3BveDR2X0xFY2tRQXJlWTBoSUw3UTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iNzlhNjgtNWIwMi00MDk3LWEyZTMt MGE0M2I3YTNlYjU0LzEvdERDVTZaZ05YZWRiUWtSbEdndktRZlEwYmtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9iNzlhNjgtNWIwMi00MDk3LWEyZTMtMGE0M2I3YTNlYjU0 LzEvWnUwN3BveDR2X0xFY2tRQXJlWTBoSUw3UTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKhQ/h5Aw DQYJKoZIhvcNAQELBQADggEBAFpUkHpi2YNW7X6jqNT+CfgKRlbWD+gtBQo3tnAs Lr1F9AjpjNrcj5l/RVHQs2EM83RMV6AevD+S74wo2M8qIG+kgyO33csiVmiy3lD4 045YMvAI5KQD40g0D4C5P588GHdqyG7uMPP7TKlNX16op55GPg8uOo4yTJDzvF2Q C0p9fhixEy0MT/wlCT54+HuTwMJfDMEqjxRrUnheTrTxuryrHlZfX/4Bw2SaHAb+ 16LE7Q2ixSWs7Gcco6n17C4MGGpiHav/bJDzT513D1TYgIuc/SJyi43OnjBBlS3l /ESkGa7Kyki4j0fEgM5F62eglEihZqxtcQaGk8w3l9jIrkM= -----END CERTIFICATE-----Generated at Mon Feb 2 17:37:34 2026 by rpki-client