This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/PF2OCRtQsy2fSZDNKDqwzoNCB1Y.roa File: PF2OCRtQsy2fSZDNKDqwzoNCB1Y.roa (raw, json) Hash identifier: M52yhP6y8g0o+VHUIMWLcgdfgxWY8wSI1j3oDTkEbrM= Subject key identifier: 3C:5D:8E:09:1B:50:B3:2D:9F:49:90:CD:28:3A:B0:CE:83:42:07:56 Certificate issuer: /CN=d6ce7c7c219277a072ba26954d5ca3ecceb2984a Certificate serial: 019C32FB409640D1A52FC3EBD8EFEFBD9D42 Authority key identifier: D6:CE:7C:7C:21:92:77:A0:72:BA:26:95:4D:5C:A3:EC:CE:B2:98:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/PF2OCRtQsy2fSZDNKDqwzoNCB1Y.roa Signing time: Fri 06 Feb 2026 12:44:12 +0000 ROA not before: Fri 06 Feb 2026 12:44:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201501 IP address blocks: 2a0f:4a80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.crl rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:32:fb:40:96:40:d1:a5:2f:c3:eb:d8:ef:ef:bd:9d:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6ce7c7c219277a072ba26954d5ca3ecceb2984a Validity Not Before: Feb 6 12:44:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c5d8e091b50b32d9f4990cd283ab0ce83420756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:74:5d:1c:1d:00:a4:9d:be:18:4e:22:70:70: 5c:79:64:7f:24:8f:5d:1e:7c:0e:08:2e:8d:13:6a: f7:0f:c7:19:4a:eb:b2:29:18:f9:ac:a5:88:5a:59: af:f0:27:a5:27:71:f1:98:a4:c2:a5:a8:7b:d0:63: 78:c5:ab:71:2e:90:60:72:73:2e:be:1e:7a:05:dc: a9:6d:64:a4:2d:b4:ad:0d:70:66:93:dc:4f:ef:75: ae:8e:df:41:64:9e:50:c4:66:29:78:34:0a:f4:62: b9:a9:4e:a7:39:8e:60:ca:d0:c8:0c:16:8a:23:3b: e3:b3:9d:5c:f1:98:72:23:b5:e5:b5:6f:3b:e7:84: 00:41:3b:65:16:fc:c3:9e:92:6c:b2:a2:40:6b:25: da:ca:ff:6e:e1:f2:70:06:1f:c7:4a:34:f2:b5:0c: d3:5d:be:71:2c:ee:a3:e0:0b:76:d9:c0:61:ac:f1: ad:e7:24:df:6d:a0:29:59:e8:f1:49:a8:d2:69:e6: 7a:04:da:bd:81:da:5d:26:8a:1b:e3:4f:ec:98:c5: 2c:8d:e7:95:33:f4:ce:4e:bf:e3:a3:ec:b9:af:94: 48:b6:aa:44:bb:c4:92:60:51:c2:c2:40:88:b3:23: b8:2f:80:dc:16:7b:c1:72:fa:2f:2a:17:86:3a:5c: b3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5D:8E:09:1B:50:B3:2D:9F:49:90:CD:28:3A:B0:CE:83:42:07:56 X509v3 Authority Key Identifier: keyid:D6:CE:7C:7C:21:92:77:A0:72:BA:26:95:4D:5C:A3:EC:CE:B2:98:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/PF2OCRtQsy2fSZDNKDqwzoNCB1Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:4a80::/29 Signature Algorithm: sha256WithRSAEncryption 17:ec:c4:f1:62:de:21:31:50:9b:5c:96:5b:35:6f:5d:74:67: 70:e7:e5:86:18:53:56:5e:b4:6a:2b:e9:7a:31:a8:e8:94:d1: 1c:56:f1:14:d2:79:84:5d:c6:14:5a:1b:e2:bd:dc:e3:9a:10: 82:cc:ff:88:48:fc:1a:92:0f:68:19:ec:d5:df:8b:41:59:15: d7:ce:1d:0c:49:c0:08:70:ab:09:70:69:ce:22:50:38:6b:9a: df:d2:65:f9:f6:e3:42:6b:3a:91:cc:ee:14:6a:2d:54:cb:92: d9:ad:f5:53:cf:d7:06:1a:b8:6a:7b:67:ee:95:14:8a:6a:93: bd:9e:16:f1:09:12:3f:1f:f0:cf:ca:71:97:44:13:37:dd:1b: 6c:d4:f3:0f:32:42:d4:8f:52:f6:ca:9b:59:3b:51:e0:e3:aa: 68:4e:ac:7d:7e:6a:f7:3c:31:34:30:c0:f9:1a:cc:a2:db:bc: f1:be:00:80:44:e8:d9:c2:7b:b9:db:19:8a:66:24:20:40:86: cc:35:a5:3b:c0:66:23:ac:80:eb:35:eb:52:24:05:42:be:ab: 1c:37:d9:88:9d:1c:df:04:6f:48:ec:fc:39:53:7e:b6:d5:0a: 53:2d:9e:38:90:2e:e4:cf:d4:08:4a:41:1d:7d:65:ef:38:83: 61:7c:d8:e8 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZwy+0CWQNGlL8Pr2O/vvZ1CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2Y2U3YzdjMjE5Mjc3YTA3MmJhMjY5NTRkNWNhM2VjY2Vi Mjk4NGEwHhcNMjYwMjA2MTI0NDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzVkOGUwOTFiNTBiMzJkOWY0OTkwY2QyODNhYjBjZTgzNDIwNzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HRdHB0ApJ2+GE4icHBceWR/JI9d HnwOCC6NE2r3D8cZSuuyKRj5rKWIWlmv8CelJ3HxmKTCpah70GN4xatxLpBgcnMu vh56BdypbWSkLbStDXBmk9xP73Wujt9BZJ5QxGYpeDQK9GK5qU6nOY5gytDIDBaK Izvjs51c8ZhyI7XltW8754QAQTtlFvzDnpJssqJAayXayv9u4fJwBh/HSjTytQzT Xb5xLO6j4At22cBhrPGt5yTfbaApWejxSajSaeZ6BNq9gdpdJoob40/smMUsjeeV M/TOTr/jo+y5r5RItqpEu8SSYFHCwkCIsyO4L4DcFnvBcvovKheGOlyzHwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFDxdjgkbULMtn0mQzSg6sM6DQgdWMB8GA1UdIwQY MBaAFNbOfHwhknegcromlU1co+zOsphKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXM1OGZDR1NkNkJ5dWlhVlRWeWo3TTZ5bUVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zM2M3NzEtNzcwNC00NmI5LWJjZDAt OTNhZTBjM2UyNzM2LzEvUEYyT0NSdFFzeTJmU1pETktEcXd6b05DQjFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8zM2M3NzEtNzcwNC00NmI5LWJjZDAtOTNhZTBjM2UyNzM2 LzEvMXM1OGZDR1NkNkJ5dWlhVlRWeWo3TTZ5bUVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg9KgDAN BgkqhkiG9w0BAQsFAAOCAQEAF+zE8WLeITFQm1yWWzVvXXRncOflhhhTVl60aivp ejGo6JTRHFbxFNJ5hF3GFFob4r3c45oQgsz/iEj8GpIPaBns1d+LQVkV184dDEnA CHCrCXBpziJQOGua39Jl+fbjQms6kczuFGotVMuS2a31U8/XBhq4antn7pUUimqT vZ4W8QkSPx/wz8pxl0QTN90bbNTzDzJC1I9S9sqbWTtR4OOqaE6sfX5q9zwxNDDA +RrMotu88b4AgETo2cJ7udsZimYkIECGzDWlO8BmI6yA6zXrUiQFQr6rHDfZiJ0c 3wRvSOz8OVN+ttUKUy2eOJAu5M/UCEpBHX1l7ziDYXzY6A== -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:41 2026 by rpki-client