This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/n_fghfm4yvkyJN0aLgQKMYifpk8.roa File: n_fghfm4yvkyJN0aLgQKMYifpk8.roa (raw, json) Hash identifier: s8M9V6kInMrZ8SN7cdYOAnlXWHjxa+Mtfe0ezUCITCc= Subject key identifier: 9F:F7:E0:85:F9:B8:CA:F9:32:24:DD:1A:2E:04:0A:31:88:9F:A6:4F Certificate issuer: /CN=6b7d1f1e877c12798274e01334554f899f38eac1 Certificate serial: 019B7834A8998691521C02A8DD62A20DC039 Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/n_fghfm4yvkyJN0aLgQKMYifpk8.roa Signing time: Thu 01 Jan 2026 06:17:55 +0000 ROA not before: Thu 01 Jan 2026 06:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40970 IP address blocks: 2a0c:7100::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 12:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a8:99:86:91:52:1c:02:a8:dd:62:a2:0d:c0:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1 Validity Not Before: Jan 1 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ff7e085f9b8caf93224dd1a2e040a31889fa64f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a7:be:93:90:13:5f:d5:0a:72:20:0c:01:11: a8:b3:36:67:ba:f2:ca:54:b1:99:66:07:b5:da:21: 53:39:0f:b9:d8:fc:e7:08:d9:f9:2e:d9:89:f2:b7: 6a:56:a9:25:d5:0b:9f:1a:7f:f6:00:bf:07:73:5f: 8b:7e:0f:c8:13:bd:6d:a4:f2:59:9f:1c:e6:24:1c: 75:51:5d:8a:af:8c:5e:79:32:12:65:67:2f:53:c4: 64:35:5a:fb:79:14:87:fc:e4:c6:e6:45:31:8d:8e: ca:9d:f8:cb:0f:e3:0f:33:c6:43:67:81:80:95:52: c8:7f:2c:36:18:ae:b4:3b:ae:b2:7c:e4:7c:04:cf: 8c:98:cf:11:98:45:3b:b1:98:27:e1:e2:81:2a:c0: 5c:f7:01:75:0c:88:5f:d4:c4:3b:0b:57:4e:fc:e2: 78:8b:99:46:04:b4:6c:80:76:36:a2:a4:82:6a:8e: 85:a5:1f:78:d3:bd:7d:a7:58:1e:b4:49:f7:ed:81: 09:29:d7:28:34:3c:26:4d:a7:41:2d:f9:23:a8:5f: 94:2e:6b:c6:2e:cf:8d:82:e7:d1:d1:a1:f1:9f:57: a7:64:79:09:7f:a7:a0:cc:04:33:e0:2f:2d:67:99: c4:43:31:b6:ca:59:79:d7:8a:97:ea:66:5d:7d:db: 4b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F7:E0:85:F9:B8:CA:F9:32:24:DD:1A:2E:04:0A:31:88:9F:A6:4F X509v3 Authority Key Identifier: keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/n_fghfm4yvkyJN0aLgQKMYifpk8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:7100::/29 Signature Algorithm: sha256WithRSAEncryption 0c:0c:0a:86:55:6e:50:7f:5a:57:81:ae:7b:df:60:41:46:71: 6a:b3:fe:c9:22:e4:6e:02:d7:56:da:33:8a:1a:d3:76:27:38: fa:1f:22:03:6f:66:b4:d2:bf:bc:6b:ae:55:28:27:7e:a6:e8: 1b:1a:a6:83:de:d3:77:64:0d:cd:f4:29:a8:1e:a3:86:71:5f: 69:a2:5b:0b:44:9d:ca:9c:08:92:df:09:e7:9c:79:44:ee:8d: 67:33:ff:c9:1e:9b:94:7c:2f:f4:94:96:0c:6c:7a:a9:22:2f: 1e:09:d2:7e:3c:bf:ff:35:9d:9b:5e:4e:72:8a:12:13:2b:c2: f5:3d:35:fb:15:48:7d:d0:35:47:8a:05:bb:a0:23:63:7a:88: 5f:25:a6:f8:7d:db:dd:7b:12:6d:53:cd:ef:95:97:38:6a:18: 2d:c1:1b:13:24:57:80:ac:fb:0c:b6:49:5b:28:6a:fe:b1:78: 70:9e:43:8f:c4:d1:ec:35:2f:8f:a5:8c:5f:52:59:03:45:4c: cf:e0:2e:ad:ad:1d:31:c3:45:bb:1a:66:a6:da:d3:7c:66:37: 0c:db:13:8e:19:9a:f0:84:0d:93:31:52:77:8b:28:8b:20:9d: e8:79:d9:b2:ef:57:18:c4:1f:cd:39:c2:b3:80:73:ba:8c:47: f7:37:e4:be -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4NKiZhpFSHAKo3WKiDcA5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiN2QxZjFlODc3YzEyNzk4Mjc0ZTAxMzM0NTU0Zjg5OWYz OGVhYzEwHhcNMjYwMTAxMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmY3ZTA4NWY5YjhjYWY5MzIyNGRkMWEyZTA0MGEzMTg4OWZhNjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ae+k5ATX9UKciAMARGoszZnuvLK VLGZZge12iFTOQ+52PznCNn5LtmJ8rdqVqkl1QufGn/2AL8Hc1+Lfg/IE71tpPJZ nxzmJBx1UV2Kr4xeeTISZWcvU8RkNVr7eRSH/OTG5kUxjY7KnfjLD+MPM8ZDZ4GA lVLIfyw2GK60O66yfOR8BM+MmM8RmEU7sZgn4eKBKsBc9wF1DIhf1MQ7C1dO/OJ4 i5lGBLRsgHY2oqSCao6FpR940719p1getEn37YEJKdcoNDwmTadBLfkjqF+ULmvG Ls+NgufR0aHxn1enZHkJf6egzAQz4C8tZ5nEQzG2yll514qX6mZdfdtLQwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFJ/34IX5uMr5MiTdGi4ECjGIn6ZPMB8GA1UdIwQY MBaAFGt9Hx6HfBJ5gnTgEzRVT4mfOOrBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9hMTNjNDAtZGM2Ny00MjNjLTk3OWUt MmZhZDlhMmZjM2VmLzEvbl9mZ2hmbTR5dmt5Sk4wYUxnUUtNWWlmcGs4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9hMTNjNDAtZGM2Ny00MjNjLTk3OWUtMmZhZDlhMmZjM2Vm LzEvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgxxADAN BgkqhkiG9w0BAQsFAAOCAQEADAwKhlVuUH9aV4Gue99gQUZxarP+ySLkbgLXVtoz ihrTdic4+h8iA29mtNK/vGuuVSgnfqboGxqmg97Td2QNzfQpqB6jhnFfaaJbC0Sd ypwIkt8J55x5RO6NZzP/yR6blHwv9JSWDGx6qSIvHgnSfjy//zWdm15OcooSEyvC 9T01+xVIfdA1R4oFu6AjY3qIXyWm+H3b3XsSbVPN75WXOGoYLcEbEyRXgKz7DLZJ Wyhq/rF4cJ5Dj8TR7DUvj6WMX1JZA0VMz+Aura0dMcNFuxpmptrTfGY3DNsTjhma 8IQNkzFSd4soiyCd6HnZsu9XGMQfzTnCs4BzuoxH9zfkvg== -----END CERTIFICATE-----Generated at Mon Feb 2 20:37:24 2026 by rpki-client