This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/0ko9UBY3qaWw4RiEppaPRG8PLpg.roa File: 0ko9UBY3qaWw4RiEppaPRG8PLpg.roa (raw, json) Hash identifier: A/2dJRQ4DKhZbhuSe8F7VZVq5LLcY4OTIT5i7IA9sYI= Subject key identifier: D2:4A:3D:50:16:37:A9:A5:B0:E1:18:84:A6:96:8F:44:6F:0F:2E:98 Certificate issuer: /CN=3c2a267dce072238e9c04515e67eb992672e351b Certificate serial: 019B7910A5AAF926AF90753AEEFCBC6823EA Authority key identifier: 3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/0ko9UBY3qaWw4RiEppaPRG8PLpg.roa Signing time: Thu 01 Jan 2026 10:18:12 +0000 ROA not before: Thu 01 Jan 2026 10:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204867 IP address blocks: 2001:678:b28::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a5:aa:f9:26:af:90:75:3a:ee:fc:bc:68:23:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c2a267dce072238e9c04515e67eb992672e351b Validity Not Before: Jan 1 10:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d24a3d501637a9a5b0e11884a6968f446f0f2e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3f:83:a2:8e:c2:57:bb:7c:b3:f8:db:2c:3f: 5c:63:23:b1:f4:82:1d:c5:11:3a:1f:d2:a9:bb:c3: 4f:b2:44:71:2a:34:f4:89:6f:65:cc:b1:a9:b1:60: 5a:50:50:a8:5b:23:c7:19:3c:56:43:31:67:e0:ce: ba:8d:76:6a:ca:51:e1:05:5b:6b:b0:fa:e4:65:2a: 30:a8:49:ce:61:aa:3a:31:3b:99:66:db:2d:bc:da: 9c:a0:b3:a3:c6:8f:6a:97:d1:d5:a7:9f:53:b4:c9: 69:f5:ed:f5:eb:14:5a:c5:20:60:85:46:71:c6:b8: 42:66:3e:9a:6e:f5:02:40:60:80:ff:51:a9:8e:de: 08:7f:fa:38:c1:cb:9d:e6:c2:99:06:5f:c9:b0:e8: f9:e3:c6:05:67:ad:16:1b:99:38:11:45:0b:b7:a1: f1:21:bf:8a:a6:4e:be:43:31:07:99:a2:76:a1:b6: 8e:c1:9f:ed:48:ea:47:9a:52:13:04:61:52:6b:25: 86:4b:f4:ad:cd:40:b9:7a:e7:b5:87:5d:b1:b6:ff: 84:8f:12:42:54:ea:17:e4:0f:38:46:3b:e8:fb:fe: 04:d4:5f:68:2d:be:30:33:78:74:c2:2f:fe:7b:c5: c1:29:8f:ee:17:d8:d5:f1:94:14:fc:ae:ae:b4:01: d9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4A:3D:50:16:37:A9:A5:B0:E1:18:84:A6:96:8F:44:6F:0F:2E:98 X509v3 Authority Key Identifier: keyid:3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/0ko9UBY3qaWw4RiEppaPRG8PLpg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:b28::/48 Signature Algorithm: sha256WithRSAEncryption 06:d0:8b:20:b8:b8:af:2a:ab:f1:f3:8f:39:5d:09:04:f7:76: 11:fb:d1:d9:f6:2c:99:dc:88:7c:1f:18:d6:e9:cb:56:08:2e: c1:dd:5a:4f:3f:13:a6:a3:34:d6:bf:f5:ea:01:cf:89:b2:b8: 18:d4:78:56:3a:cf:b7:c8:92:1d:76:02:cb:b3:bc:5d:8a:b7: e8:d6:ad:30:32:0d:65:d6:63:13:c7:3e:e9:a1:59:d5:85:53: 12:24:53:44:9f:b8:57:da:ea:82:26:10:99:8c:9c:6e:d1:f8: d8:9c:21:a2:8a:75:fa:ff:c9:35:0a:b7:7f:ad:ed:11:60:0a: 73:da:82:88:96:24:68:ca:f3:a8:50:5a:ba:a8:b8:87:57:e3: 90:a1:8c:b7:be:ab:a5:02:41:6a:cc:f2:05:ec:cc:10:3c:1c: 77:bc:02:2c:6f:b4:ea:37:26:94:9d:ee:04:2f:81:fd:da:d2: d5:74:2f:e1:04:0e:62:d4:ef:08:6d:e8:92:cd:b5:b1:87:04: 2d:46:93:b6:bc:4e:18:af:27:53:e6:bb:7d:ee:84:20:f3:60: f8:8e:ac:f8:82:a0:2c:15:97:87:8c:01:ab:d3:17:ba:09:01: 52:2b:f1:bb:68:90:a7:c1:e9:c2:d9:9f:34:86:ce:c7:8e:a9: 69:6b:8f:68 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EKWq+SavkHU67vy8aCPqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMmEyNjdkY2UwNzIyMzhlOWMwNDUxNWU2N2ViOTkyNjcy ZTM1MWIwHhcNMjYwMTAxMTAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjRhM2Q1MDE2MzdhOWE1YjBlMTE4ODRhNjk2OGY0NDZmMGYyZTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj+Doo7CV7t8s/jbLD9cYyOx9IId xRE6H9Kpu8NPskRxKjT0iW9lzLGpsWBaUFCoWyPHGTxWQzFn4M66jXZqylHhBVtr sPrkZSowqEnOYao6MTuZZtstvNqcoLOjxo9ql9HVp59TtMlp9e316xRaxSBghUZx xrhCZj6abvUCQGCA/1Gpjt4If/o4wcud5sKZBl/JsOj548YFZ60WG5k4EUULt6Hx Ib+Kpk6+QzEHmaJ2obaOwZ/tSOpHmlITBGFSayWGS/StzUC5eue1h12xtv+EjxJC VOoX5A84Rjvo+/4E1F9oLb4wM3h0wi/+e8XBKY/uF9jV8ZQU/K6utAHZPQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNJKPVAWN6mlsOEYhKaWj0RvDy6YMB8GA1UdIwQY MBaAFDwqJn3OByI46cBFFeZ+uZJnLjUbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUENvbWZjNEhJampwd0VVVjVuNjVrbWN1TlJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jZDZhN2ItMTU4MC00MTAyLTlhYTYt YTRiNmUzZDBkODMwLzEvMGtvOVVCWTNxYVd3NFJpRXBwYVBSRzhQTHBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9jZDZhN2ItMTU4MC00MTAyLTlhYTYtYTRiNmUzZDBkODMw LzEvUENvbWZjNEhJampwd0VVVjVuNjVrbWN1TlJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAso MA0GCSqGSIb3DQEBCwUAA4IBAQAG0IsguLivKqvx8485XQkE93YR+9HZ9iyZ3Ih8 HxjW6ctWCC7B3VpPPxOmozTWv/XqAc+JsrgY1HhWOs+3yJIddgLLs7xdirfo1q0w Mg1l1mMTxz7poVnVhVMSJFNEn7hX2uqCJhCZjJxu0fjYnCGiinX6/8k1Crd/re0R YApz2oKIliRoyvOoUFq6qLiHV+OQoYy3vqulAkFqzPIF7MwQPBx3vAIsb7TqNyaU ne4EL4H92tLVdC/hBA5i1O8IbeiSzbWxhwQtRpO2vE4YrydT5rt97oQg82D4jqz4 gqAsFZeHjAGr0xe6CQFSK/G7aJCnwenC2Z80hs7Hjqlpa49o -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:26 2026 by rpki-client