This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/85ygelHoe93EjxIHR7CAs1kFj3E.roa File: 85ygelHoe93EjxIHR7CAs1kFj3E.roa (raw, json) Hash identifier: 4AEHh4JYm6TE6R2Mi6uw2MPqpLWQVkYear/TQS+RVPo= Subject key identifier: F3:9C:A0:7A:51:E8:7B:DD:C4:8F:12:07:47:B0:80:B3:59:05:8F:71 Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b Certificate serial: 019C30838C02AD4A51BD920BA187B7998D65 Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/85ygelHoe93EjxIHR7CAs1kFj3E.roa Signing time: Fri 06 Feb 2026 01:14:13 +0000 ROA not before: Fri 06 Feb 2026 01:14:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201666 IP address blocks: 2a06:9801:16::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 18:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:30:83:8c:02:ad:4a:51:bd:92:0b:a1:87:b7:99:8d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b Validity Not Before: Feb 6 01:14:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f39ca07a51e87bddc48f120747b080b359058f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:16:5f:51:11:ee:8b:f4:26:cc:7b:21:51:a4: 75:f0:62:3e:9b:80:8f:d2:b1:68:49:1f:14:91:96: 62:8f:7c:b0:84:ec:c3:13:5a:32:de:8c:09:8a:b8: 43:e3:e6:83:1d:f4:a1:03:b7:23:6c:6e:28:31:91: be:98:f8:bc:f3:33:85:a8:c2:f6:84:56:ba:cf:15: 47:cf:2b:f8:61:f3:91:79:48:d7:18:af:5d:d6:ed: 42:bd:97:4f:97:7b:eb:0a:82:e5:e4:3f:c6:20:06: 04:68:ec:8b:d4:5d:a8:31:da:e9:b7:71:48:bf:be: a5:3c:db:14:ff:b2:de:bf:d8:19:6e:06:36:5d:b0: b5:70:4c:30:d5:22:86:a1:92:50:ed:03:4d:db:62: 1d:31:70:4e:54:77:92:27:bf:fe:da:66:dc:d1:40: 14:a6:6d:62:31:c7:dc:cd:3f:63:c9:4d:3a:4d:96: 9a:0f:01:db:c2:e6:31:dd:84:e0:34:f4:c7:18:bb: 27:c3:b9:26:6c:8d:4d:7f:4f:8e:21:63:18:b7:a4: 81:fd:4c:c9:14:0e:52:38:58:ef:59:42:af:4c:45: 54:e4:80:7d:a2:36:33:a8:b7:ac:fc:45:f9:54:95: f0:04:7c:a6:68:07:cc:fd:35:9e:d4:21:e0:94:51: 5a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9C:A0:7A:51:E8:7B:DD:C4:8F:12:07:47:B0:80:B3:59:05:8F:71 X509v3 Authority Key Identifier: keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/85ygelHoe93EjxIHR7CAs1kFj3E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9801:16::/48 Signature Algorithm: sha256WithRSAEncryption 28:8c:fa:9f:3d:6f:e0:1e:5e:6b:b3:0a:41:3c:5d:4b:ce:e5: 09:7d:55:62:3a:df:34:93:5d:1c:18:84:e0:85:8d:48:e2:83: 0b:62:3e:cc:60:70:9f:c1:85:4c:fe:fd:82:95:be:79:7c:c4: 4e:53:73:f4:8b:b1:18:ae:df:72:29:92:70:44:af:b8:b0:f7: b9:cf:04:36:a7:0e:69:5d:15:75:5e:7c:60:fd:e3:bf:91:65: 69:94:d3:e5:73:7a:d3:f5:84:1c:a2:50:c3:4c:76:5b:e7:3f: c7:98:00:41:89:38:a1:a5:61:c0:fe:ff:3e:17:31:8d:9b:29: a9:94:13:83:82:b6:0e:76:b1:d0:ed:d9:a3:79:91:d1:39:60: bb:f7:5f:bd:f1:7e:df:f2:ce:7f:af:05:91:a8:83:7d:b0:a2: 45:6f:12:b9:48:a3:6f:dc:e8:2b:3d:cf:f1:35:9a:1d:ab:1e: 77:c3:63:59:6d:43:66:ac:e1:10:5d:0e:67:3e:d1:77:2e:20: d2:03:02:fd:79:c6:52:ef:42:2e:15:9e:80:77:21:d7:7d:3b: 48:88:74:ec:d2:33:c5:ca:bd:57:3b:34:63:c8:83:e9:77:f2: 97:2d:e8:0c:3e:54:6d:42:6c:74:8e:45:97:82:e8:19:2a:45: ad:94:da:3a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZwwg4wCrUpRvZILoYe3mY1lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3 Y2EzNmIwHhcNMjYwMjA2MDExNDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzljYTA3YTUxZTg3YmRkYzQ4ZjEyMDc0N2IwODBiMzU5MDU4ZjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhZfURHui/QmzHshUaR18GI+m4CP 0rFoSR8UkZZij3ywhOzDE1oy3owJirhD4+aDHfShA7cjbG4oMZG+mPi88zOFqML2 hFa6zxVHzyv4YfOReUjXGK9d1u1CvZdPl3vrCoLl5D/GIAYEaOyL1F2oMdrpt3FI v76lPNsU/7Lev9gZbgY2XbC1cEww1SKGoZJQ7QNN22IdMXBOVHeSJ7/+2mbc0UAU pm1iMcfczT9jyU06TZaaDwHbwuYx3YTgNPTHGLsnw7kmbI1Nf0+OIWMYt6SB/UzJ FA5SOFjvWUKvTEVU5IB9ojYzqLes/EX5VJXwBHymaAfM/TWe1CHglFFaTwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPOcoHpR6HvdxI8SB0ewgLNZBY9xMB8GA1UdIwQY MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt ZWQ4Y2ZhZjFiODFmLzEvODV5Z2VsSG9lOTNFanhJSFI3Q0FzMWtGajNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQAW MA0GCSqGSIb3DQEBCwUAA4IBAQAojPqfPW/gHl5rswpBPF1LzuUJfVViOt80k10c GITghY1I4oMLYj7MYHCfwYVM/v2Clb55fMROU3P0i7EYrt9yKZJwRK+4sPe5zwQ2 pw5pXRV1Xnxg/eO/kWVplNPlc3rT9YQcolDDTHZb5z/HmABBiTihpWHA/v8+FzGN mymplBODgrYOdrHQ7dmjeZHROWC791+98X7f8s5/rwWRqIN9sKJFbxK5SKNv3Ogr Pc/xNZodqx53w2NZbUNmrOEQXQ5nPtF3LiDSAwL9ecZS70IuFZ6AdyHXfTtIiHTs 0jPFyr1XOzRjyIPpd/KXLegMPlRtQmx0jkWXgugZKkWtlNo6 -----END CERTIFICATE-----Generated at Sun Feb 8 01:57:26 2026 by rpki-client