This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/rEklxLhJo9S4IBAy4se1tLI3lkE.roa File: rEklxLhJo9S4IBAy4se1tLI3lkE.roa (raw, json) Hash identifier: xqvERQ2TneWjz4TWOCFTyowIh4LAz/S0+u0Tj5YT4tc= Subject key identifier: AC:49:25:C4:B8:49:A3:D4:B8:20:10:32:E2:C7:B5:B4:B2:37:96:41 Certificate issuer: /CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4 Certificate serial: 019B7DC9F5D7B857D1A6C5A1B53F8F8040D1 Authority key identifier: 1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/rEklxLhJo9S4IBAy4se1tLI3lkE.roa Signing time: Fri 02 Jan 2026 08:19:06 +0000 ROA not before: Fri 02 Jan 2026 08:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210918 IP address blocks: 2001:67c:c58::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:f5:d7:b8:57:d1:a6:c5:a1:b5:3f:8f:80:40:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4 Validity Not Before: Jan 2 08:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac4925c4b849a3d4b8201032e2c7b5b4b2379641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:94:4f:41:ac:bb:b8:92:80:ba:e8:87:d3:0a: 4b:ce:bb:a4:c3:4b:5f:98:11:a1:df:52:1c:db:94: 72:9a:75:c5:83:fb:54:4e:0a:aa:5a:58:8d:2c:5e: 71:a2:de:93:1c:a3:83:3c:30:e5:29:22:68:f8:97: 5f:97:35:86:21:61:2c:6d:57:a2:c9:9e:a4:4a:55: cd:23:99:04:86:51:8d:3f:a0:3c:0f:2d:ee:19:a2: 93:7b:0d:a0:6a:d8:0a:ac:84:ca:e9:c7:d9:a7:c3: ae:dc:bd:f0:b3:34:fa:b5:64:eb:a4:af:7d:fa:7c: 2b:47:3c:d9:fe:f7:6e:5a:92:75:6b:ce:f4:0d:74: 87:d7:b2:f9:09:1b:d7:74:d7:cb:07:cd:b9:6e:56: 65:d0:b5:c1:91:52:24:7b:c9:bb:12:8c:48:41:16: 35:31:25:8a:ef:41:52:8c:52:22:bc:33:10:0e:76: 11:d5:f7:68:b2:0f:b3:df:ab:8d:ec:fd:32:63:33: 02:7c:d0:56:1f:36:44:61:29:1c:ec:0c:48:4b:7e: 1b:89:b9:fe:6a:45:1c:39:d2:98:c1:1f:cd:1f:0c: 39:27:58:c7:b8:d5:6f:1d:f2:fa:f0:b4:2b:27:4c: d8:da:7a:2e:d7:7d:73:15:db:6f:9f:65:37:ae:05: a0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:49:25:C4:B8:49:A3:D4:B8:20:10:32:E2:C7:B5:B4:B2:37:96:41 X509v3 Authority Key Identifier: keyid:1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/rEklxLhJo9S4IBAy4se1tLI3lkE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:c58::/48 Signature Algorithm: sha256WithRSAEncryption 63:4e:37:30:d6:f8:20:48:ed:a2:1c:e9:c5:69:9f:d7:82:a5: cb:9d:24:2a:4f:aa:79:ed:c9:3f:e5:c5:86:5c:30:eb:3c:30: f6:5c:cc:03:69:ac:c4:5d:3e:31:63:73:06:32:d0:16:dc:e4: 36:f4:c1:13:74:d4:99:58:46:50:ff:d0:ca:b5:07:19:33:ee: a1:12:2a:9d:4c:55:50:95:a4:6f:21:f3:d0:af:68:29:a1:51: b6:5a:28:8e:54:51:42:66:aa:d3:ba:8e:5e:07:7b:12:89:89: e3:7c:83:e2:26:19:60:48:d0:e7:39:20:93:e6:eb:dd:b8:16: 81:fe:e1:e2:0c:66:a2:f9:a6:f3:13:7e:b7:13:09:13:d1:16: c9:b9:11:69:b7:90:53:92:69:c4:61:7a:18:88:53:d3:43:94: b2:15:e2:9a:df:ea:e8:9d:f8:cd:3f:0e:2c:7c:84:29:3e:67: 70:d6:f7:10:f4:2c:73:66:1d:77:77:73:6e:24:e7:ac:5c:ca: d5:21:30:6c:59:e0:88:07:30:79:e9:14:81:f2:ba:10:61:e4: f9:05:9b:cf:03:4c:70:2d:7f:ed:5c:ec:4c:bf:fa:e3:4e:61: d0:fa:05:ff:01:f9:2e:d8:29:f1:38:91:3e:da:b6:99:7f:47: 9c:10:db:ee -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9yfXXuFfRpsWhtT+PgEDRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYjVmYzNkODk4MzQ4ZDM1Yzc3YmYxNmMzZWQ5Y2ZlODE1 OTU1YjQwHhcNMjYwMTAyMDgxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzQ5MjVjNGI4NDlhM2Q0YjgyMDEwMzJlMmM3YjViNGIyMzc5NjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZRPQay7uJKAuuiH0wpLzrukw0tf mBGh31Ic25RymnXFg/tUTgqqWliNLF5xot6THKODPDDlKSJo+JdflzWGIWEsbVei yZ6kSlXNI5kEhlGNP6A8Dy3uGaKTew2gatgKrITK6cfZp8Ou3L3wszT6tWTrpK99 +nwrRzzZ/vduWpJ1a870DXSH17L5CRvXdNfLB825blZl0LXBkVIke8m7EoxIQRY1 MSWK70FSjFIivDMQDnYR1fdosg+z36uN7P0yYzMCfNBWHzZEYSkc7AxIS34bibn+ akUcOdKYwR/NHww5J1jHuNVvHfL68LQrJ0zY2nou131zFdtvn2U3rgWgEQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKxJJcS4SaPUuCAQMuLHtbSyN5ZBMB8GA1UdIwQY MBaAFB+1/D2Jg0jTXHe/FsPtnP6BWVW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDdYOFBZbURTTk5jZDc4V3ctMmNfb0ZaVmJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kNGViMmYtYzExNS00ZGVlLWE1ZTct ZGVkZWEzYWIwZDNiLzEvckVrbHhMaEpvOVM0SUJBeTRzZTF0TEkzbGtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kNGViMmYtYzExNS00ZGVlLWE1ZTctZGVkZWEzYWIwZDNi LzEvSDdYOFBZbURTTk5jZDc4V3ctMmNfb0ZaVmJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAxY MA0GCSqGSIb3DQEBCwUAA4IBAQBjTjcw1vggSO2iHOnFaZ/XgqXLnSQqT6p57ck/ 5cWGXDDrPDD2XMwDaazEXT4xY3MGMtAW3OQ29METdNSZWEZQ/9DKtQcZM+6hEiqd TFVQlaRvIfPQr2gpoVG2WiiOVFFCZqrTuo5eB3sSiYnjfIPiJhlgSNDnOSCT5uvd uBaB/uHiDGai+abzE363EwkT0RbJuRFpt5BTkmnEYXoYiFPTQ5SyFeKa3+ronfjN Pw4sfIQpPmdw1vcQ9CxzZh13d3NuJOesXMrVITBsWeCIBzB56RSB8roQYeT5BZvP A0xwLX/tXOxMv/rjTmHQ+gX/Afku2CnxOJE+2raZf0ecENvu -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:34 2026 by rpki-client