This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/cdeFuWyYmKq-NITUk1xFwNRwvME.roa File: cdeFuWyYmKq-NITUk1xFwNRwvME.roa (raw, json) Hash identifier: tspp8mRY6jLgo96MjdF9goms44Q9iexmKxyPPOVUDNQ= Subject key identifier: 71:D7:85:B9:6C:98:98:AA:BE:34:84:D4:93:5C:45:C0:D4:70:BC:C1 Certificate issuer: /CN=93fa1a1d917a3041739a2dee0f41ccf80c554dde Certificate serial: 019B7F1571DB02571DEA4D3176A3E79C1314 Authority key identifier: 93:FA:1A:1D:91:7A:30:41:73:9A:2D:EE:0F:41:CC:F8:0C:55:4D:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/cdeFuWyYmKq-NITUk1xFwNRwvME.roa Signing time: Fri 02 Jan 2026 14:21:10 +0000 ROA not before: Fri 02 Jan 2026 14:21:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215833 IP address blocks: 2001:67c:2b44::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:71:db:02:57:1d:ea:4d:31:76:a3:e7:9c:13:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93fa1a1d917a3041739a2dee0f41ccf80c554dde Validity Not Before: Jan 2 14:21:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71d785b96c9898aabe3484d4935c45c0d470bcc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a8:6d:03:d6:4f:29:e7:31:b4:09:43:7c:19: 63:7a:bc:95:5b:d7:be:eb:ca:12:90:97:35:4e:9b: e8:48:c8:16:53:63:e1:ad:e6:48:a7:9f:5d:30:ff: bc:1f:fa:bd:6d:55:38:ea:01:63:9c:9a:2a:3d:51: 83:69:32:69:10:10:db:c0:6a:f8:2a:04:2e:c5:a3: 62:d9:3a:1d:ee:37:47:6f:a4:e0:e0:94:bd:b6:b2: 1f:d0:64:50:c2:4c:80:d2:33:ce:81:e6:dd:f6:55: 20:9f:9e:16:32:11:41:a6:cd:c2:b4:18:9d:c8:8b: f6:00:4b:7a:d0:4a:4c:6c:bf:e6:27:32:88:97:28: 55:fc:df:9e:0b:a8:ba:a0:15:81:87:2d:37:fa:79: d3:5a:58:52:88:3e:4f:00:b3:8f:fd:d3:29:08:13: 80:68:81:d0:fb:22:bc:2e:2e:65:8c:50:c7:bd:b8: 9b:40:53:b7:e8:05:4a:c5:e9:a2:77:74:43:19:b2: 45:df:ef:25:bd:c6:db:fd:34:39:95:54:41:89:b4: d5:5b:2a:2d:5f:51:ca:7d:ab:e3:67:64:7b:d4:fe: 14:aa:75:ae:ca:b6:e1:9c:25:bc:d3:5d:f0:bb:1c: d6:ec:11:7f:56:c1:8e:7b:97:66:3e:2a:20:56:07: e5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D7:85:B9:6C:98:98:AA:BE:34:84:D4:93:5C:45:C0:D4:70:BC:C1 X509v3 Authority Key Identifier: keyid:93:FA:1A:1D:91:7A:30:41:73:9A:2D:EE:0F:41:CC:F8:0C:55:4D:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/cdeFuWyYmKq-NITUk1xFwNRwvME.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2b44::/48 Signature Algorithm: sha256WithRSAEncryption 16:3c:db:ed:fd:ac:a2:35:a0:1e:4e:45:d8:9b:cf:20:84:e5: 44:15:cc:9b:e9:85:8d:33:b9:df:56:b9:db:2d:a0:1f:ab:39: 9b:f8:75:b1:65:72:4d:f2:69:ee:69:3c:6f:24:ed:0c:f3:8e: d9:94:5d:ac:5d:ba:96:68:9c:0d:2b:93:72:c3:a3:92:ab:0d: 09:af:5d:60:46:0f:d2:39:d9:97:ed:92:67:5b:4f:c7:c7:0f: e7:9a:07:87:b4:e1:7b:74:cb:df:51:3a:89:29:8f:97:46:09: e0:57:46:35:76:47:c8:40:65:2d:61:5d:ca:33:13:19:a9:10: e5:f4:c2:cc:75:5d:93:6d:78:30:f2:3f:31:a1:f4:68:f5:9b: 29:ee:c9:e8:95:88:6e:c7:49:3f:d4:4b:53:17:c8:f8:d5:4e: 62:85:82:f6:17:81:f5:b2:d0:18:a5:e3:b7:7f:51:e2:2a:12: ef:40:3d:1d:39:43:3a:41:93:02:79:5b:1e:02:e8:37:c1:53: bc:dc:bb:d4:08:bb:c6:8e:79:27:a9:f3:b8:5a:fb:c6:84:55: 7d:23:70:6f:62:d9:81:18:d5:0b:ca:17:a1:02:19:d2:05:37: d8:5a:3e:9c:c5:2b:c8:b7:88:70:d3:dd:d6:71:f8:3e:7b:bf: e7:b4:d9:b8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FXHbAlcd6k0xdqPnnBMUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZmExYTFkOTE3YTMwNDE3MzlhMmRlZTBmNDFjY2Y4MGM1 NTRkZGUwHhcNMjYwMTAyMTQyMTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWQ3ODViOTZjOTg5OGFhYmUzNDg0ZDQ5MzVjNDVjMGQ0NzBiY2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKhtA9ZPKecxtAlDfBljeryVW9e+ 68oSkJc1TpvoSMgWU2PhreZIp59dMP+8H/q9bVU46gFjnJoqPVGDaTJpEBDbwGr4 KgQuxaNi2Tod7jdHb6Tg4JS9trIf0GRQwkyA0jPOgebd9lUgn54WMhFBps3CtBid yIv2AEt60EpMbL/mJzKIlyhV/N+eC6i6oBWBhy03+nnTWlhSiD5PALOP/dMpCBOA aIHQ+yK8Li5ljFDHvbibQFO36AVKxemid3RDGbJF3+8lvcbb/TQ5lVRBibTVWyot X1HKfavjZ2R71P4UqnWuyrbhnCW8013wuxzW7BF/VsGOe5dmPiogVgfl8wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHHXhblsmJiqvjSE1JNcRcDUcLzBMB8GA1UdIwQY MBaAFJP6Gh2RejBBc5ot7g9BzPgMVU3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva19vYUhaRjZNRUZ6bWkzdUQwSE0tQXhWVGQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jMzlhMDctYTk3My00N2Y4LTliOWYt ZmVkMjFlZmYyMzM4LzEvY2RlRnVXeVltS3EtTklUVWsxeEZ3TlJ3dk1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9jMzlhMDctYTk3My00N2Y4LTliOWYtZmVkMjFlZmYyMzM4 LzEva19vYUhaRjZNRUZ6bWkzdUQwSE0tQXhWVGQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCtE MA0GCSqGSIb3DQEBCwUAA4IBAQAWPNvt/ayiNaAeTkXYm88ghOVEFcyb6YWNM7nf VrnbLaAfqzmb+HWxZXJN8mnuaTxvJO0M847ZlF2sXbqWaJwNK5Nyw6OSqw0Jr11g Rg/SOdmX7ZJnW0/Hxw/nmgeHtOF7dMvfUTqJKY+XRgngV0Y1dkfIQGUtYV3KMxMZ qRDl9MLMdV2TbXgw8j8xofRo9Zsp7snolYhux0k/1EtTF8j41U5ihYL2F4H1stAY peO3f1HiKhLvQD0dOUM6QZMCeVseAug3wVO83LvUCLvGjnknqfO4WvvGhFV9I3Bv YtmBGNULyhehAhnSBTfYWj6cxSvIt4hw093Wcfg+e7/ntNm4 -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:56 2026 by rpki-client