This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/V28H0ZfckG6mvV8fgEWARHQ005Q.roa File: V28H0ZfckG6mvV8fgEWARHQ005Q.roa (raw, json) Hash identifier: a7hGbUrG8AhoVOElPdPYhppzpINkuZLIOxOAlEQmwD4= Subject key identifier: 57:6F:07:D1:97:DC:90:6E:A6:BD:5F:1F:80:45:80:44:74:34:D3:94 Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce Certificate serial: 019B7CEDF77348185235C6D85E6503917895 Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/V28H0ZfckG6mvV8fgEWARHQ005Q.roa Signing time: Fri 02 Jan 2026 04:18:48 +0000 ROA not before: Fri 02 Jan 2026 04:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213262 IP address blocks: 2a0d:2580::/40 maxlen: 48 2a0d:2580::/48 maxlen: 48 2a0d:2580:1000::/36 maxlen: 48 2a0d:2580:a000::/37 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 19:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:f7:73:48:18:52:35:c6:d8:5e:65:03:91:78:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce Validity Not Before: Jan 2 04:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=576f07d197dc906ea6bd5f1f804580447434d394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8e:f6:4a:63:a5:59:2c:30:c7:37:60:0f:05: 60:b6:c7:57:d6:9a:32:80:c1:b4:86:86:b5:10:3f: d5:e0:c9:63:14:3d:95:bb:d1:aa:1d:16:a4:80:be: af:d6:23:a8:05:c4:d1:81:43:d3:3c:7e:bf:bb:13: d4:8a:06:ef:21:0e:ac:ac:6f:07:cd:37:1e:65:6c: b4:e9:36:a8:f4:74:a0:78:c4:c5:53:dc:88:fa:c0: 22:93:19:6f:22:99:25:7a:88:12:ec:ce:07:15:f7: ee:6b:16:62:79:39:c0:61:4e:0a:6e:3b:a0:ea:14: bf:4c:20:4f:91:5c:18:24:10:07:60:f3:e1:06:bd: 57:34:d6:6b:a9:96:b9:87:3c:91:87:c3:8e:d6:b0: 68:4c:b5:fa:8f:ba:0a:5b:db:21:56:74:3b:11:b6: e2:c0:20:7e:f2:0e:8e:84:dd:96:68:53:8b:c4:40: 2e:20:49:75:d1:07:1b:df:c0:1e:23:36:c9:2b:be: 3b:fb:be:45:a8:a5:2c:a0:8c:92:9d:3c:ff:d7:37: f3:e4:9f:b6:a5:33:5d:3a:21:ad:d0:08:b3:e5:59: b8:4a:d1:12:1b:97:40:cd:10:da:6b:ac:e2:e4:bb: 92:e2:1c:3d:ff:a3:84:07:88:8a:07:ba:91:e3:86: 54:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:6F:07:D1:97:DC:90:6E:A6:BD:5F:1F:80:45:80:44:74:34:D3:94 X509v3 Authority Key Identifier: keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/V28H0ZfckG6mvV8fgEWARHQ005Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:2580::/40 2a0d:2580:1000::/36 2a0d:2580:a000::/37 Signature Algorithm: sha256WithRSAEncryption 92:8c:84:48:7f:6b:0d:c7:7a:91:97:2f:c9:02:fb:c4:4d:1c: 03:60:24:eb:d0:a3:32:9b:b1:1d:3c:9c:bb:20:0c:da:10:05: 26:ad:0b:6d:bc:7a:3e:81:61:47:5e:3c:86:a9:08:9c:3c:2f: 76:3c:7a:71:b7:f9:af:45:2e:8b:35:13:76:0f:eb:f4:6e:97: a7:af:04:84:73:85:3b:5f:83:86:4e:1d:7b:93:b1:61:2a:33: fc:f2:12:5e:67:ab:0a:8d:f0:ee:92:07:40:ec:01:0f:66:2c: 60:95:0d:2a:37:e7:d6:f3:62:f7:eb:d6:29:89:a2:bf:7e:ac: 44:c5:98:8f:92:cf:88:89:90:29:84:06:1a:58:a4:2e:d0:20: d3:5d:c5:eb:ee:8c:d8:27:b1:9d:d4:f7:9d:19:10:88:45:93: 45:b3:88:b1:ca:c4:2d:8b:f1:7b:89:d2:40:f0:d7:bd:a0:f0: e8:03:a0:8f:eb:f8:e4:89:56:11:59:38:f8:74:70:b8:1b:71: e7:86:5e:8d:4d:98:9e:f2:0e:3a:fd:c3:cf:64:f7:4c:8a:db: bc:90:e4:75:b0:cd:3c:bd:bd:b6:32:4d:3c:bb:c6:32:75:53: 03:97:a1:bd:77:9a:e8:7d:29:59:90:85:98:21:5f:db:09:3b: fb:5c:2f:e4 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt87fdzSBhSNcbYXmUDkXiVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi Yjg2Y2UwHhcNMjYwMTAyMDQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzZmMDdkMTk3ZGM5MDZlYTZiZDVmMWY4MDQ1ODA0NDc0MzRkMzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro72SmOlWSwwxzdgDwVgtsdX1poy gMG0hoa1ED/V4MljFD2Vu9GqHRakgL6v1iOoBcTRgUPTPH6/uxPUigbvIQ6srG8H zTceZWy06Tao9HSgeMTFU9yI+sAikxlvIpkleogS7M4HFffuaxZieTnAYU4Kbjug 6hS/TCBPkVwYJBAHYPPhBr1XNNZrqZa5hzyRh8OO1rBoTLX6j7oKW9shVnQ7Ebbi wCB+8g6OhN2WaFOLxEAuIEl10Qcb38AeIzbJK747+75FqKUsoIySnTz/1zfz5J+2 pTNdOiGt0Aiz5Vm4StESG5dAzRDaa6zi5LuS4hw9/6OEB4iKB7qR44ZUOQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFFdvB9GX3JBupr1fH4BFgER0NNOUMB8GA1UdIwQY MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt ZjljYjBhN2IyMDZjLzEvVjI4SDBaZmNrRzZtdlY4ZmdFV0FSSFEwMDVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAAjAYAwYAKg0lgAAD BgQqDSWAEAMGAyoNJYCgMA0GCSqGSIb3DQEBCwUAA4IBAQCSjIRIf2sNx3qRly/J AvvETRwDYCTr0KMym7EdPJy7IAzaEAUmrQttvHo+gWFHXjyGqQicPC92PHpxt/mv RS6LNRN2D+v0bpenrwSEc4U7X4OGTh17k7FhKjP88hJeZ6sKjfDukgdA7AEPZixg lQ0qN+fW82L369YpiaK/fqxExZiPks+IiZAphAYaWKQu0CDTXcXr7ozYJ7Gd1Ped GRCIRZNFs4ixysQti/F7idJA8Ne9oPDoA6CP6/jkiVYRWTj4dHC4G3Hnhl6NTZie 8g46/cPPZPdMitu8kOR1sM08vb22Mk08u8YydVMDl6G9d5rofSlZkIWYIV/bCTv7 XC/k -----END CERTIFICATE-----Generated at Thu Jan 22 03:22:50 2026 by rpki-client