This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/i7O87UVvwq5p2hKdlv5sVD2zz2U.roa File: i7O87UVvwq5p2hKdlv5sVD2zz2U.roa (raw, json) Hash identifier: JTbDH8lNWNXzzw1dSdhxZOg/2hlXeshTQ26xXC84ypg= Subject key identifier: 8B:B3:BC:ED:45:6F:C2:AE:69:DA:12:9D:96:FE:6C:54:3D:B3:CF:65 Certificate issuer: /CN=553f4c4631a3385c5e395ee1d9daa076b0bccff1 Certificate serial: 019B797ED35FD5D2B597759081346ECC1519 Authority key identifier: 55:3F:4C:46:31:A3:38:5C:5E:39:5E:E1:D9:DA:A0:76:B0:BC:CF:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VT9MRjGjOFxeOV7h2dqgdrC8z_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/i7O87UVvwq5p2hKdlv5sVD2zz2U.roa Signing time: Thu 01 Jan 2026 12:18:33 +0000 ROA not before: Thu 01 Jan 2026 12:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212467 IP address blocks: 2001:67c:2fbc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.mft rsync://rpki.ripe.net/repository/DEFAULT/VT9MRjGjOFxeOV7h2dqgdrC8z_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d3:5f:d5:d2:b5:97:75:90:81:34:6e:cc:15:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=553f4c4631a3385c5e395ee1d9daa076b0bccff1 Validity Not Before: Jan 1 12:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bb3bced456fc2ae69da129d96fe6c543db3cf65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6d:09:f1:5e:db:b3:a1:0b:ac:d1:11:61:0c: 65:df:92:5e:2b:22:04:9d:c0:e7:04:d4:70:cb:a2: f3:5a:40:55:dd:52:00:91:9b:4b:7f:41:01:38:be: e1:41:b6:46:3c:37:53:58:ba:49:48:6e:e7:33:13: 16:6d:93:80:f3:7b:dc:b8:ff:86:b4:f1:69:f0:1d: 38:1f:0e:49:f6:64:ca:03:32:cf:01:d7:bc:c6:3d: 05:33:22:b2:3a:00:c2:b1:ab:fd:43:70:6e:33:27: b0:e6:0c:bf:8d:de:5d:18:2e:b7:63:dc:d8:df:79: 5b:d2:eb:40:15:67:69:d0:77:1b:d6:44:e2:3c:5f: b8:55:69:56:5a:4c:ee:53:08:f6:fb:dc:e8:db:03: ac:39:59:a0:dc:68:c0:47:0f:cc:2e:de:76:78:72: fa:f0:2d:7f:83:dd:70:e8:21:ed:b1:91:5a:b1:48: 6d:d2:67:ff:72:f9:be:8b:bd:8a:8c:c2:f1:10:62: f6:e6:1b:13:2a:d8:06:d1:34:e1:d4:69:76:d2:52: c6:d6:5f:bb:61:48:9a:0a:f4:02:7e:ab:2b:6b:ee: 83:6f:02:3f:0f:51:d9:34:cb:68:e9:6d:25:d9:5c: d8:49:be:2c:d3:b9:3f:4c:65:8c:1b:9b:f2:1f:31: d7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B3:BC:ED:45:6F:C2:AE:69:DA:12:9D:96:FE:6C:54:3D:B3:CF:65 X509v3 Authority Key Identifier: keyid:55:3F:4C:46:31:A3:38:5C:5E:39:5E:E1:D9:DA:A0:76:B0:BC:CF:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VT9MRjGjOFxeOV7h2dqgdrC8z_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/i7O87UVvwq5p2hKdlv5sVD2zz2U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2fbc::/48 Signature Algorithm: sha256WithRSAEncryption 26:03:fa:bf:22:2d:3b:c8:19:37:f5:92:cd:9e:0e:88:58:0e: e4:25:1c:0d:b8:e7:89:e5:fe:db:65:42:8f:27:cc:2c:b4:34: 20:eb:c6:b6:46:a7:52:d4:c0:5f:fd:79:d1:bc:e5:1a:ff:94: e3:0a:08:49:ea:92:f9:69:63:2e:1a:9e:e1:28:3d:1a:79:62: aa:f5:a7:c6:57:ba:58:40:a7:07:cc:fc:52:08:00:35:5c:30: 20:c4:20:f5:4e:41:60:f2:91:ce:72:10:a6:22:ec:8b:12:ec: 0f:3e:6c:07:1d:e5:0b:69:fe:13:e4:4c:24:50:57:f0:81:f6: 04:6d:53:79:0f:5f:81:3a:0b:fb:9e:0a:67:3e:9c:19:49:8b: e8:dd:16:8c:2b:d6:17:c3:00:5d:5b:01:9a:1e:fa:4f:9f:1e: 09:dc:c2:68:ee:6a:68:f6:d6:c9:0f:80:b5:76:0f:a8:49:15: 83:e5:99:05:1b:9b:e8:00:51:7e:52:f8:12:a4:21:cd:9b:ff: 89:fc:b6:9b:43:62:45:fe:5e:c5:ed:f2:31:5f:0e:30:63:70: 88:b4:91:d8:91:92:5b:0b:d1:30:02:34:8d:73:95:96:7b:57: 9f:4b:63:a3:73:a1:b8:c7:58:87:f6:4e:df:60:96:c3:3f:a6: bc:a1:37:7b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5ftNf1dK1l3WQgTRuzBUZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1M2Y0YzQ2MzFhMzM4NWM1ZTM5NWVlMWQ5ZGFhMDc2YjBi Y2NmZjEwHhcNMjYwMTAxMTIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmIzYmNlZDQ1NmZjMmFlNjlkYTEyOWQ5NmZlNmM1NDNkYjNjZjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG0J8V7bs6ELrNERYQxl35JeKyIE ncDnBNRwy6LzWkBV3VIAkZtLf0EBOL7hQbZGPDdTWLpJSG7nMxMWbZOA83vcuP+G tPFp8B04Hw5J9mTKAzLPAde8xj0FMyKyOgDCsav9Q3BuMyew5gy/jd5dGC63Y9zY 33lb0utAFWdp0Hcb1kTiPF+4VWlWWkzuUwj2+9zo2wOsOVmg3GjARw/MLt52eHL6 8C1/g91w6CHtsZFasUht0mf/cvm+i72KjMLxEGL25hsTKtgG0TTh1Gl20lLG1l+7 YUiaCvQCfqsra+6DbwI/D1HZNMto6W0l2VzYSb4s07k/TGWMG5vyHzHXDQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIuzvO1Fb8KuadoSnZb+bFQ9s89lMB8GA1UdIwQY MBaAFFU/TEYxozhcXjle4dnaoHawvM/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlQ5TVJqR2pPRnhlT1Y3aDJkcWdkckM4el9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy85YThkMDgtZTRiYi00OTJmLTk4NjMt NDU0Zjk5Yzc0ZjExLzEvaTdPODdVVnZ3cTVwMmhLZGx2NXNWRDJ6ejJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy85YThkMDgtZTRiYi00OTJmLTk4NjMtNDU0Zjk5Yzc0ZjEx LzEvVlQ5TVJqR2pPRnhlT1Y3aDJkcWdkckM4el9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC+8 MA0GCSqGSIb3DQEBCwUAA4IBAQAmA/q/Ii07yBk39ZLNng6IWA7kJRwNuOeJ5f7b ZUKPJ8wstDQg68a2RqdS1MBf/XnRvOUa/5TjCghJ6pL5aWMuGp7hKD0aeWKq9afG V7pYQKcHzPxSCAA1XDAgxCD1TkFg8pHOchCmIuyLEuwPPmwHHeULaf4T5EwkUFfw gfYEbVN5D1+BOgv7ngpnPpwZSYvo3RaMK9YXwwBdWwGaHvpPnx4J3MJo7mpo9tbJ D4C1dg+oSRWD5ZkFG5voAFF+UvgSpCHNm/+J/LabQ2JF/l7F7fIxXw4wY3CItJHY kZJbC9EwAjSNc5WWe1efS2Ojc6G4x1iH9k7fYJbDP6a8oTd7 -----END CERTIFICATE-----Generated at Tue Feb 10 08:41:32 2026 by rpki-client