This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/fQX2j2Bq9neKawngCd6r7FvsgZk.roa File: fQX2j2Bq9neKawngCd6r7FvsgZk.roa (raw, json) Hash identifier: Pq3fsjzkXawHi1RCcqpuVO4WOAWLk18WufgTudrWDU8= Subject key identifier: 7D:05:F6:8F:60:6A:F6:77:8A:6B:09:E0:09:DE:AB:EC:5B:EC:81:99 Certificate issuer: /CN=c6b36fea22c366d08a4b546ac83f4485b2b1e159 Certificate serial: 019B7F83BAFC5F5B9864D74002B236FF9E67 Authority key identifier: C6:B3:6F:EA:22:C3:66:D0:8A:4B:54:6A:C8:3F:44:85:B2:B1:E1:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/fQX2j2Bq9neKawngCd6r7FvsgZk.roa Signing time: Fri 02 Jan 2026 16:21:38 +0000 ROA not before: Fri 02 Jan 2026 16:21:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215332 IP address blocks: 2001:67c:93c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:ba:fc:5f:5b:98:64:d7:40:02:b2:36:ff:9e:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6b36fea22c366d08a4b546ac83f4485b2b1e159 Validity Not Before: Jan 2 16:21:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d05f68f606af6778a6b09e009deabec5bec8199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d9:b3:52:c4:d2:87:3d:35:5f:11:54:55:38: e0:56:2c:72:f1:25:62:a2:53:74:ca:a4:5a:3e:3a: be:7d:a9:0e:66:c3:df:67:c0:e8:da:a4:2e:32:6c: ec:c4:52:22:a8:f7:ba:9c:dd:18:f6:d8:5c:58:55: 7a:b0:5c:65:4d:14:b1:42:5c:b6:df:b6:84:93:cc: 88:de:7b:f4:ff:ab:fb:8e:a1:7e:d9:a4:9e:39:bc: 26:0b:52:91:43:b1:6d:8c:8b:ce:ef:72:c8:ac:3b: b2:40:82:53:1f:9d:5b:5d:4b:00:18:6e:b5:5f:50: 87:7d:e6:ae:47:42:ac:eb:46:ff:c1:73:02:16:53: b3:39:d5:e1:4e:83:98:48:c6:71:91:40:fa:2a:5d: 3b:b0:3a:99:a6:c2:50:68:5b:20:96:d9:2b:43:8c: e3:6e:04:cc:02:b3:ee:c4:e3:8a:f2:69:99:4c:dc: c1:f8:cf:37:47:eb:7c:bd:6e:c5:ea:80:5f:4b:23: 65:93:86:ec:c5:ff:ec:ea:7b:08:b7:fd:67:83:12: 24:b9:91:99:1e:0a:37:50:cc:00:55:d9:b9:bb:1b: e7:82:90:67:9b:36:91:9c:dc:c0:1d:50:d9:40:0b: 18:78:ca:0a:fe:1b:5b:8d:95:cd:a6:07:6e:53:85: d8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:05:F6:8F:60:6A:F6:77:8A:6B:09:E0:09:DE:AB:EC:5B:EC:81:99 X509v3 Authority Key Identifier: keyid:C6:B3:6F:EA:22:C3:66:D0:8A:4B:54:6A:C8:3F:44:85:B2:B1:E1:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/fQX2j2Bq9neKawngCd6r7FvsgZk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:93c::/48 Signature Algorithm: sha256WithRSAEncryption 73:d3:71:77:18:0b:44:75:85:d9:53:ea:b4:ca:5f:81:49:66: 1a:5d:8f:50:b6:e1:95:48:b7:ac:5c:2d:1c:e8:b5:43:cb:fd: 66:f0:39:e4:bb:db:6b:9f:04:07:35:f0:ee:fd:7b:16:b4:48: 71:d7:b2:5d:88:aa:52:d2:4a:81:5e:fb:1b:aa:3e:b8:9c:fc: 2b:dc:c8:ab:73:30:e4:7b:74:ce:3d:68:72:de:7a:95:6e:7e: c1:12:04:09:b0:04:1e:9a:08:c4:7e:e5:9c:3e:0d:0c:c6:cf: bc:ef:35:04:e1:81:2c:39:4d:84:13:22:95:74:db:6a:81:18: 2d:42:67:a5:25:f6:fc:9e:15:ec:48:52:b6:78:c8:04:6d:a2: e7:eb:cb:f1:e5:22:09:5a:1d:38:26:3a:3b:9f:31:37:9c:e5: 40:ef:50:c0:0c:7c:60:a7:89:05:5c:d7:89:ed:40:b6:8b:2d: 1a:34:0d:87:ab:5c:45:c1:b8:b0:65:bb:19:16:95:ba:ea:88: 1c:71:d9:d2:1d:4a:1c:62:6a:88:1f:91:c4:f5:ab:78:8d:93: 55:44:a5:90:83:3d:08:d5:55:40:b3:38:03:f0:d1:05:55:2b: 2c:1d:64:aa:23:e2:21:50:6f:39:2f:c1:39:40:62:44:47:6a: 9d:67:b1:75 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/g7r8X1uYZNdAArI2/55nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YjM2ZmVhMjJjMzY2ZDA4YTRiNTQ2YWM4M2Y0NDg1YjJi MWUxNTkwHhcNMjYwMTAyMTYyMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDA1ZjY4ZjYwNmFmNjc3OGE2YjA5ZTAwOWRlYWJlYzViZWM4MTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdmzUsTShz01XxFUVTjgVixy8SVi olN0yqRaPjq+fakOZsPfZ8Do2qQuMmzsxFIiqPe6nN0Y9thcWFV6sFxlTRSxQly2 37aEk8yI3nv0/6v7jqF+2aSeObwmC1KRQ7FtjIvO73LIrDuyQIJTH51bXUsAGG61 X1CHfeauR0Ks60b/wXMCFlOzOdXhToOYSMZxkUD6Kl07sDqZpsJQaFsgltkrQ4zj bgTMArPuxOOK8mmZTNzB+M83R+t8vW7F6oBfSyNlk4bsxf/s6nsIt/1ngxIkuZGZ Hgo3UMwAVdm5uxvngpBnmzaRnNzAHVDZQAsYeMoK/htbjZXNpgduU4XYcwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFH0F9o9gavZ3imsJ4Aneq+xb7IGZMB8GA1UdIwQY MBaAFMazb+oiw2bQiktUasg/RIWyseFZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHJOdjZpTERadENLUzFScXlEOUVoYkt4NFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jYzA4M2MtZmU3Ni00NDNmLWEyMTQt NTRkMjBkODg5MTVkLzEvZlFYMmoyQnE5bmVLYXduZ0NkNnI3RnZzZ1prLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jYzA4M2MtZmU3Ni00NDNmLWEyMTQtNTRkMjBkODg5MTVk LzEveHJOdjZpTERadENLUzFScXlEOUVoYkt4NFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAk8 MA0GCSqGSIb3DQEBCwUAA4IBAQBz03F3GAtEdYXZU+q0yl+BSWYaXY9QtuGVSLes XC0c6LVDy/1m8Dnku9trnwQHNfDu/XsWtEhx17JdiKpS0kqBXvsbqj64nPwr3Mir czDke3TOPWhy3nqVbn7BEgQJsAQemgjEfuWcPg0Mxs+87zUE4YEsOU2EEyKVdNtq gRgtQmelJfb8nhXsSFK2eMgEbaLn68vx5SIJWh04Jjo7nzE3nOVA71DADHxgp4kF XNeJ7UC2iy0aNA2Hq1xFwbiwZbsZFpW66ogccdnSHUocYmqIH5HE9at4jZNVRKWQ gz0I1VVAszgD8NEFVSssHWSqI+IhUG85L8E5QGJER2qdZ7F1 -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:18 2026 by rpki-client