This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/pA1ePqI7SD5ojrPp_XCatoiq2zo.roa File: pA1ePqI7SD5ojrPp_XCatoiq2zo.roa (raw, json) Hash identifier: CAWXsP1JZ/KW0NUUE6ss0n5HsqgH1Gk+g+22Bws1Rqk= Subject key identifier: A4:0D:5E:3E:A2:3B:48:3E:68:8E:B3:E9:FD:70:9A:B6:88:AA:DB:3A Certificate issuer: /CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4 Certificate serial: 019B7C80498F4E95FDA1125C2CACBFB9007C Authority key identifier: 81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/pA1ePqI7SD5ojrPp_XCatoiq2zo.roa Signing time: Fri 02 Jan 2026 02:19:00 +0000 ROA not before: Fri 02 Jan 2026 02:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34601 IP address blocks: 2001:678:b94::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:49:8f:4e:95:fd:a1:12:5c:2c:ac:bf:b9:00:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4 Validity Not Before: Jan 2 02:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a40d5e3ea23b483e688eb3e9fd709ab688aadb3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e6:36:b5:f2:74:0e:fe:51:ea:fa:f9:f7:4e: 4e:91:b9:93:99:4c:33:da:cf:6d:1b:53:c6:00:e5: 18:e4:a6:e2:92:83:f8:1a:e1:0d:36:7f:3f:76:6e: 6e:fc:91:15:87:10:17:b8:6f:1a:aa:30:a4:0b:ca: a6:54:6a:d3:8a:2d:8b:a8:ce:f2:c5:00:ba:cd:8f: 1a:47:9c:44:61:b1:bc:a1:2f:d4:d2:aa:41:3b:75: 75:da:a3:14:81:3e:fd:0a:4d:33:27:a6:35:df:9b: 9e:2f:98:1f:e4:e5:4f:3a:73:2a:e9:e5:3f:f4:7b: bb:99:c7:a2:ab:34:24:4c:b1:35:30:2f:de:19:37: 60:64:1e:10:57:80:95:2f:7d:a5:ee:b9:62:e0:28: 91:26:bd:a2:d5:be:ec:b7:e9:f1:e2:4c:59:2c:32: a7:1c:4f:2d:2b:dc:93:f9:f5:90:95:cb:23:56:28: 22:ad:d3:88:f9:7e:37:48:f7:75:ec:ea:ff:3a:d6: 02:e5:63:5d:82:1b:48:f0:b3:94:6b:dc:88:6e:77: 6a:d4:7d:4a:27:00:68:de:73:94:7c:96:98:5f:17: 6b:da:c7:29:62:4a:06:91:14:16:6e:5a:4f:d0:85: 18:9a:c4:75:66:df:79:1c:42:e8:d4:3e:0c:4b:da: 20:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:0D:5E:3E:A2:3B:48:3E:68:8E:B3:E9:FD:70:9A:B6:88:AA:DB:3A X509v3 Authority Key Identifier: keyid:81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/pA1ePqI7SD5ojrPp_XCatoiq2zo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:b94::/48 Signature Algorithm: sha256WithRSAEncryption 6e:5f:42:70:fd:da:f2:5b:83:9f:7b:22:c4:0b:4b:00:79:c2: 84:ae:96:0d:63:d4:97:86:70:26:16:5b:18:ff:1e:c0:a4:80: b7:53:de:33:0e:db:5c:86:b6:5f:18:4a:3b:28:fa:dd:31:ad: 6c:ed:cd:5d:d5:72:61:f9:67:fd:ac:0e:93:44:04:74:cb:90: fc:88:77:d0:59:80:36:0c:43:2a:a4:3c:81:30:42:71:07:66: 31:3c:b9:f7:53:35:b0:9f:f3:c2:9f:c4:08:28:e3:09:8b:67: 83:4c:57:c5:4e:10:99:3b:23:b5:c9:8b:2b:cb:5f:87:65:ad: c2:7a:da:7d:0c:40:80:41:70:32:85:6e:21:2e:a9:ef:e8:08: 4c:ac:10:91:a6:6d:d5:da:12:34:d9:ce:65:84:0c:89:58:1f: fe:b4:19:19:41:61:8c:03:03:9d:78:60:22:21:4c:e5:fe:d1: 71:dd:b0:99:75:a5:45:fa:ae:9d:5d:93:39:2d:95:28:fd:84: 60:c7:c2:6d:00:26:2d:46:1d:dc:c6:a2:f6:bd:b2:e5:4c:3c: d8:96:82:dd:db:a8:70:2a:8a:a8:f8:c8:7f:63:9f:90:ee:32: 96:fa:3e:86:53:2c:13:c5:eb:92:64:35:3b:6d:4b:b2:7d:19: 66:dd:c9:2f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gEmPTpX9oRJcLKy/uQB8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYzFhZWQ3NGFhZDA2YjFiODVjNWJhNjc3OWMxNjFmNGE1 MmIzYzQwHhcNMjYwMTAyMDIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDBkNWUzZWEyM2I0ODNlNjg4ZWIzZTlmZDcwOWFiNjg4YWFkYjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOY2tfJ0Dv5R6vr5905OkbmTmUwz 2s9tG1PGAOUY5KbikoP4GuENNn8/dm5u/JEVhxAXuG8aqjCkC8qmVGrTii2LqM7y xQC6zY8aR5xEYbG8oS/U0qpBO3V12qMUgT79Ck0zJ6Y135ueL5gf5OVPOnMq6eU/ 9Hu7mceiqzQkTLE1MC/eGTdgZB4QV4CVL32l7rli4CiRJr2i1b7st+nx4kxZLDKn HE8tK9yT+fWQlcsjVigirdOI+X43SPd17Or/OtYC5WNdghtI8LOUa9yIbndq1H1K JwBo3nOUfJaYXxdr2scpYkoGkRQWblpP0IUYmsR1Zt95HELo1D4MS9oguQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKQNXj6iO0g+aI6z6f1wmraIqts6MB8GA1UdIwQY MBaAFIHBrtdKrQaxuFxbpnecFh9KUrPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2NHdTEwcXRCckc0WEZ1bWQ1d1dIMHBTczhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8wOTE1Y2YtYzZkOC00MTAwLTkwYjMt OWQ1M2FjMmY4ZTdmLzEvcEExZVBxSTdTRDVvanJQcF9YQ2F0b2lxMnpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS8wOTE1Y2YtYzZkOC00MTAwLTkwYjMtOWQ1M2FjMmY4ZTdm LzEvZ2NHdTEwcXRCckc0WEZ1bWQ1d1dIMHBTczhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAuU MA0GCSqGSIb3DQEBCwUAA4IBAQBuX0Jw/dryW4OfeyLEC0sAecKErpYNY9SXhnAm FlsY/x7ApIC3U94zDttchrZfGEo7KPrdMa1s7c1d1XJh+Wf9rA6TRAR0y5D8iHfQ WYA2DEMqpDyBMEJxB2YxPLn3UzWwn/PCn8QIKOMJi2eDTFfFThCZOyO1yYsry1+H Za3Cetp9DECAQXAyhW4hLqnv6AhMrBCRpm3V2hI02c5lhAyJWB/+tBkZQWGMAwOd eGAiIUzl/tFx3bCZdaVF+q6dXZM5LZUo/YRgx8JtACYtRh3cxqL2vbLlTDzYloLd 26hwKoqo+Mh/Y5+Q7jKW+j6GUywTxeuSZDU7bUuyfRlm3ckv -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:00 2026 by rpki-client