This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/v771GeyNgX8nGwdtWcu_uqIvlNQ.roa File: v771GeyNgX8nGwdtWcu_uqIvlNQ.roa (raw, json) Hash identifier: IbjhPMn2XPA4zOpsRCebepuf+zqEg/SUZ1JUHbn0vfo= Subject key identifier: BF:BE:F5:19:EC:8D:81:7F:27:1B:07:6D:59:CB:BF:BA:A2:2F:94:D4 Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b Certificate serial: 019C30838A4476EF68D6691294EB7094B63B Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/v771GeyNgX8nGwdtWcu_uqIvlNQ.roa Signing time: Fri 06 Feb 2026 01:14:12 +0000 ROA not before: Fri 06 Feb 2026 01:14:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201539 IP address blocks: 2a06:9801:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 19:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:30:83:8a:44:76:ef:68:d6:69:12:94:eb:70:94:b6:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b Validity Not Before: Feb 6 01:14:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfbef519ec8d817f271b076d59cbbfbaa22f94d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:09:9e:9e:44:f1:04:50:bb:db:db:ef:01:e7: 3e:18:c0:af:12:5a:e9:38:3c:26:b9:c2:58:31:ad: 44:f5:77:8e:f4:ee:14:0f:e1:39:d2:3a:fc:e9:cf: e0:6d:31:34:9f:06:18:37:92:d3:a1:bb:5d:0d:4f: 41:ec:fd:cc:5d:27:5a:a5:ed:2d:51:ec:91:54:a9: c7:8d:1a:64:aa:62:a3:45:dc:34:f2:8e:19:80:e4: fa:bc:d4:2b:72:57:c4:c6:74:6e:9d:50:1b:7c:ea: 2a:fe:4c:f5:d4:5f:b9:89:9b:6a:3a:04:f5:5e:f0: 21:75:4f:d2:6e:1d:48:cc:88:23:dd:51:23:7d:55: f5:54:7c:df:f2:46:66:cd:77:ff:f0:2d:76:67:7a: 67:6a:9b:8c:19:69:6f:06:46:76:87:db:fc:9f:9d: 3c:c9:21:07:5f:3f:ae:fe:87:20:01:c4:23:9d:6c: cc:1b:f2:59:c9:14:1a:95:12:f9:52:a9:ce:3f:c3: 52:bc:b2:8e:6b:b2:44:78:aa:29:a8:17:32:e7:dc: 40:c5:aa:09:f5:96:78:64:c6:27:4d:12:f0:4f:16: 78:0e:f7:58:fa:e2:fb:fa:e2:f2:41:96:6c:c7:c2: 68:6e:c4:b1:b2:c1:6a:5e:81:a4:ab:10:9a:95:d4: 4f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BE:F5:19:EC:8D:81:7F:27:1B:07:6D:59:CB:BF:BA:A2:2F:94:D4 X509v3 Authority Key Identifier: keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/v771GeyNgX8nGwdtWcu_uqIvlNQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9801:10::/48 Signature Algorithm: sha256WithRSAEncryption 90:3d:e0:12:48:7d:49:2b:0c:2e:6c:91:d9:a3:61:a8:75:66: 85:ec:4d:29:be:f2:08:f4:6e:01:59:3f:d2:a3:c6:4e:19:96: 99:90:7d:07:c9:dd:89:ba:14:af:5e:a2:fd:3c:38:f2:ae:7d: 79:38:de:5d:22:75:41:d8:cd:d7:18:f8:89:04:e3:12:be:e0: be:1c:ed:af:22:40:f4:34:05:3c:32:d6:00:56:f9:57:1d:3f: cc:6a:59:61:70:bf:32:1b:ae:f8:5b:2b:6d:54:55:c2:5d:24: eb:eb:13:43:6c:c8:80:99:7e:7b:62:5b:3e:7e:c5:a7:5f:e6: 06:0f:dd:5d:d5:9b:04:a3:6a:c6:e7:fc:7d:2e:7f:03:b5:f9: 0f:3c:c6:c4:23:d0:05:ff:ec:c0:a8:54:05:e7:21:44:3d:24: a7:fe:43:f9:b7:28:88:d7:fa:e3:a8:47:6e:6d:13:b2:3c:52: db:99:20:54:1e:f5:c7:5f:67:97:a5:ac:06:ae:a8:24:2a:4e: f1:21:94:65:c8:dd:7a:25:00:22:bd:0b:f4:a5:ef:fb:da:c7: 56:56:66:70:da:fe:39:ac:18:58:82:f9:68:a3:35:5b:0e:dd: 32:31:e3:8e:c3:8f:51:cd:17:ec:f5:b5:7e:bd:64:e8:16:6b: f5:eb:db:9f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZwwg4pEdu9o1mkSlOtwlLY7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3 Y2EzNmIwHhcNMjYwMjA2MDExNDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmJlZjUxOWVjOGQ4MTdmMjcxYjA3NmQ1OWNiYmZiYWEyMmY5NGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgmenkTxBFC729vvAec+GMCvElrp ODwmucJYMa1E9XeO9O4UD+E50jr86c/gbTE0nwYYN5LTobtdDU9B7P3MXSdape0t UeyRVKnHjRpkqmKjRdw08o4ZgOT6vNQrclfExnRunVAbfOoq/kz11F+5iZtqOgT1 XvAhdU/Sbh1IzIgj3VEjfVX1VHzf8kZmzXf/8C12Z3pnapuMGWlvBkZ2h9v8n508 ySEHXz+u/ocgAcQjnWzMG/JZyRQalRL5UqnOP8NSvLKOa7JEeKopqBcy59xAxaoJ 9ZZ4ZMYnTRLwTxZ4DvdY+uL7+uLyQZZsx8JobsSxssFqXoGkqxCaldRP5QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFL++9RnsjYF/JxsHbVnLv7qiL5TUMB8GA1UdIwQY MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt ZWQ4Y2ZhZjFiODFmLzEvdjc3MUdleU5nWDhuR3dkdFdjdV91cUl2bE5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQAQ MA0GCSqGSIb3DQEBCwUAA4IBAQCQPeASSH1JKwwubJHZo2GodWaF7E0pvvII9G4B WT/So8ZOGZaZkH0Hyd2JuhSvXqL9PDjyrn15ON5dInVB2M3XGPiJBOMSvuC+HO2v IkD0NAU8MtYAVvlXHT/MallhcL8yG674WyttVFXCXSTr6xNDbMiAmX57Yls+fsWn X+YGD91d1ZsEo2rG5/x9Ln8DtfkPPMbEI9AF/+zAqFQF5yFEPSSn/kP5tyiI1/rj qEdubROyPFLbmSBUHvXHX2eXpawGrqgkKk7xIZRlyN16JQAivQv0pe/72sdWVmZw 2v45rBhYgvloozVbDt0yMeOOw49RzRfs9bV+vWToFmv169uf -----END CERTIFICATE-----Generated at Sun Feb 8 04:51:15 2026 by rpki-client