This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/RkG3qch8pEJIDv3JOGIWd52X2iU.roa File: RkG3qch8pEJIDv3JOGIWd52X2iU.roa (raw, json) Hash identifier: M5MoWtPVqA3Ex0e6k8hDbIXhQvvVk+rf1YW1Yh7X0/M= Subject key identifier: 46:41:B7:A9:C8:7C:A4:42:48:0E:FD:C9:38:62:16:77:9D:97:DA:25 Certificate issuer: /CN=668e9b2eefb205342382b6072a903f9d9837071a Certificate serial: 019B79EC8419E959DE6796F2780210BA0077 Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/RkG3qch8pEJIDv3JOGIWd52X2iU.roa Signing time: Thu 01 Jan 2026 14:18:22 +0000 ROA not before: Thu 01 Jan 2026 14:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57988 IP address blocks: 2a13:2947::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:84:19:e9:59:de:67:96:f2:78:02:10:ba:00:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a Validity Not Before: Jan 1 14:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4641b7a9c87ca442480efdc9386216779d97da25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f4:d5:29:21:a6:b1:79:18:65:e8:ab:79:35: ba:07:aa:b4:29:ba:36:a2:05:84:34:f5:cd:51:9b: 7b:bb:dd:e2:48:be:6b:9e:6a:5f:7b:81:49:83:90: 2c:3b:7c:0d:81:2e:1e:3b:89:c3:f7:b9:50:3c:86: 80:f3:f4:4d:53:f2:a9:cf:25:bc:08:fe:3d:3c:f6: fe:a2:bf:92:a3:8e:1b:a8:4f:97:ed:1d:27:18:a8: b1:0f:6e:f2:a5:61:92:80:15:b8:73:a7:d7:9c:78: ff:33:93:7a:f5:7b:fe:05:ca:1b:a8:35:93:2d:ed: 1b:b5:85:ec:91:33:15:79:18:19:08:00:3b:84:e9: 86:12:00:4f:35:6a:49:f0:a5:40:10:c6:2a:d6:c2: 2c:b9:03:78:fd:91:1f:81:cd:b7:44:c9:2e:38:7a: e0:b8:44:df:81:40:c6:24:ff:2a:c8:91:4f:24:33: 83:c0:1f:9b:51:c3:c3:a8:42:58:7b:9c:8d:6a:5d: b3:8b:7d:d1:82:3d:29:de:dd:af:0a:b0:99:9e:c5: c7:14:0a:8a:af:63:58:28:cf:8e:da:af:99:9c:ee: ac:75:12:7c:d9:53:46:e4:30:2e:3d:90:41:66:2e: cd:fc:79:7e:09:b6:3e:aa:76:d0:7e:0b:c7:f2:bd: 8a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:41:B7:A9:C8:7C:A4:42:48:0E:FD:C9:38:62:16:77:9D:97:DA:25 X509v3 Authority Key Identifier: keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/RkG3qch8pEJIDv3JOGIWd52X2iU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:2947::/48 Signature Algorithm: sha256WithRSAEncryption 76:62:de:f4:47:d0:27:3c:db:e8:1a:22:10:15:23:59:e7:7a: 5c:88:e5:95:f0:f6:d0:cf:0b:2a:55:d7:0c:33:fc:ec:61:55: 14:89:44:4c:09:5f:eb:b1:27:6e:35:8e:f6:9c:f4:74:70:04: 45:5d:b0:90:05:df:cd:04:9f:b4:99:e6:5b:d2:7a:6e:15:48: eb:d7:77:3f:90:a9:9d:8c:46:e4:c3:c2:fc:47:1e:a5:b1:18: 79:62:eb:e1:29:6e:22:73:d1:cc:52:ea:64:df:55:fc:5f:40: d2:6c:cf:33:61:4b:a7:04:38:c1:7e:46:87:c8:81:88:e8:7f: cd:e3:0b:25:e6:5d:8f:c7:bf:65:da:ca:9a:6e:53:e4:4a:1e: d5:46:77:13:ff:8b:7a:89:8e:20:75:f1:b4:39:89:c8:8d:d7: 42:e6:b3:e8:15:f4:c4:69:98:2f:4a:75:48:b2:03:ba:cd:5b: 77:52:7e:e9:f2:97:9a:95:e9:07:83:da:79:72:bd:22:43:e3: 9a:22:30:f4:4e:ba:2e:95:65:26:38:ac:b9:1e:ed:21:85:7a: 4a:ea:59:86:00:14:bf:52:af:3e:49:ab:cc:54:d3:78:d1:68: 03:22:19:d2:0d:a1:23:77:b3:5c:97:e5:03:1c:a3:cb:72:96: 47:bd:9c:4b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57IQZ6VneZ5byeAIQugB3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OGU5YjJlZWZiMjA1MzQyMzgyYjYwNzJhOTAzZjlkOTgz NzA3MWEwHhcNMjYwMTAxMTQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjQxYjdhOWM4N2NhNDQyNDgwZWZkYzkzODYyMTY3NzlkOTdkYTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvTVKSGmsXkYZeireTW6B6q0Kbo2 ogWENPXNUZt7u93iSL5rnmpfe4FJg5AsO3wNgS4eO4nD97lQPIaA8/RNU/KpzyW8 CP49PPb+or+So44bqE+X7R0nGKixD27ypWGSgBW4c6fXnHj/M5N69Xv+BcobqDWT Le0btYXskTMVeRgZCAA7hOmGEgBPNWpJ8KVAEMYq1sIsuQN4/ZEfgc23RMkuOHrg uETfgUDGJP8qyJFPJDODwB+bUcPDqEJYe5yNal2zi33Rgj0p3t2vCrCZnsXHFAqK r2NYKM+O2q+ZnO6sdRJ82VNG5DAuPZBBZi7N/Hl+CbY+qnbQfgvH8r2K4QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEZBt6nIfKRCSA79yThiFnedl9olMB8GA1UdIwQY MBaAFGaOmy7vsgU0I4K2ByqQP52YNwcaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm82Ykx1LXlCVFFqZ3JZSEtwQV9uWmczQnhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80YTEzMDUtMzkxYy00NDZjLTlhMzMt NGMwOGZmZTEwMDc2LzEvUmtHM3FjaDhwRUpJRHYzSk9HSVdkNTJYMmlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC80YTEzMDUtMzkxYy00NDZjLTlhMzMtNGMwOGZmZTEwMDc2 LzEvWm82Ykx1LXlCVFFqZ3JZSEtwQV9uWmczQnhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhMpRwAA MA0GCSqGSIb3DQEBCwUAA4IBAQB2Yt70R9AnPNvoGiIQFSNZ53pciOWV8PbQzwsq VdcMM/zsYVUUiURMCV/rsSduNY72nPR0cARFXbCQBd/NBJ+0meZb0npuFUjr13c/ kKmdjEbkw8L8Rx6lsRh5YuvhKW4ic9HMUupk31X8X0DSbM8zYUunBDjBfkaHyIGI 6H/N4wsl5l2Px79l2sqablPkSh7VRncT/4t6iY4gdfG0OYnIjddC5rPoFfTEaZgv SnVIsgO6zVt3Un7p8pealekHg9p5cr0iQ+OaIjD0TroulWUmOKy5Hu0hhXpK6lmG ABS/Uq8+SavMVNN40WgDIhnSDaEjd7Ncl+UDHKPLcpZHvZxL -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:42 2026 by rpki-client