This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/gx2uZ0XXPbFcCe7ejPHYDh3Ihyc.roa File: gx2uZ0XXPbFcCe7ejPHYDh3Ihyc.roa (raw, json) Hash identifier: Wls9AluwC7dhLmo8YQ5NoiMkXpPPZRLUetVc4LFXk9U= Subject key identifier: 83:1D:AE:67:45:D7:3D:B1:5C:09:EE:DE:8C:F1:D8:0E:1D:C8:87:27 Certificate issuer: /CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6 Certificate serial: 019B7A5ADDD1BEEA700228930BB5B14987A9 Authority key identifier: 96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/gx2uZ0XXPbFcCe7ejPHYDh3Ihyc.roa Signing time: Thu 01 Jan 2026 16:18:54 +0000 ROA not before: Thu 01 Jan 2026 16:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210466 IP address blocks: 2001:67c:2b64::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:dd:d1:be:ea:70:02:28:93:0b:b5:b1:49:87:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6 Validity Not Before: Jan 1 16:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=831dae6745d73db15c09eede8cf1d80e1dc88727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:19:a1:2c:d6:61:d6:a6:2e:fb:12:0a:ae:29: f7:b0:ed:9d:33:54:b3:23:4d:30:ed:a1:6f:7d:48: c4:1b:50:bf:a6:f0:5c:b6:fb:72:26:cf:81:e4:79: aa:22:56:61:05:2f:7b:37:5f:a6:0b:a2:8b:97:0c: bf:df:05:b1:45:e6:12:92:b3:57:3c:65:e0:ad:3c: 89:b0:d9:03:46:71:b7:fc:28:3a:6d:ce:61:10:a7: 24:c7:5b:60:90:d8:ad:5c:63:63:aa:10:c7:f5:0e: 80:d5:37:89:ef:34:29:b9:86:0f:c9:22:9a:89:8a: 38:74:d2:24:ab:7c:de:4c:43:79:75:e8:56:38:f4: 5e:63:a1:4c:af:6a:7d:e7:6e:80:8b:fc:b7:6a:f8: 9d:b2:7d:aa:07:7a:36:37:2d:e0:d8:22:76:2a:c4: 37:d1:f5:f3:d6:b5:fc:5f:58:38:12:0c:3e:86:0a: 39:84:a2:61:91:cf:63:62:4c:8c:99:b7:8e:6d:36: e1:97:c9:7d:92:f5:8e:7b:6b:d4:0a:78:48:21:73: e4:b4:5e:c8:07:88:18:0e:ed:2a:7d:0f:a9:1f:54: ed:18:ea:c0:35:f8:68:b9:d7:8f:ab:b8:56:7e:39: e6:3b:8f:93:76:7d:b5:e3:8c:41:ce:67:4f:e0:09: 43:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:1D:AE:67:45:D7:3D:B1:5C:09:EE:DE:8C:F1:D8:0E:1D:C8:87:27 X509v3 Authority Key Identifier: keyid:96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/gx2uZ0XXPbFcCe7ejPHYDh3Ihyc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2b64::/48 Signature Algorithm: sha256WithRSAEncryption 55:8c:fb:83:f9:88:6d:e4:78:51:d3:62:3e:24:26:14:0c:4b: 32:df:da:58:0d:c7:70:f0:59:ac:2d:fd:4e:88:2e:73:29:f6: b0:d2:ab:cb:57:77:12:ea:61:68:24:03:9e:17:48:f4:92:e6: 05:ce:a7:35:7c:cb:fa:56:76:da:35:f2:9f:5d:40:a0:da:37: 34:3b:9e:65:f8:63:19:03:a4:3f:41:a5:3b:a7:f7:2f:45:e8: 1a:66:0b:84:4b:c6:54:0b:64:ca:70:45:d0:a5:71:b8:36:95: e4:32:38:b5:a1:28:9f:ca:37:7f:41:c7:23:35:8f:07:51:92: 34:60:25:e9:b9:42:c0:aa:2c:a0:ad:c1:c1:37:29:2b:62:e9: ab:c5:19:a3:58:6d:de:1f:b9:72:ea:64:e4:58:0b:2f:08:ca: 89:12:89:75:66:4f:1d:66:40:a6:69:77:05:b7:4a:e5:cf:51: d2:d4:a5:13:80:5c:33:6a:2a:fc:89:44:95:b1:1d:3f:03:d4: 44:45:f7:6a:20:0d:4b:05:1c:0d:bc:b2:e2:ca:e3:60:f8:42: 11:e1:15:38:f6:26:fe:98:9b:e5:cf:16:ef:57:31:e2:34:a2: e4:74:0b:f8:86:ba:7d:05:46:5a:c8:65:db:d0:fd:3b:17:cb: 7a:1f:09:19 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6Wt3RvupwAiiTC7WxSYepMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NjVjODExMGQwZGQ4NmE3ZWJiMDkzOGFhMzJlMDlkMWRi MTIyZjYwHhcNMjYwMTAxMTYxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzFkYWU2NzQ1ZDczZGIxNWMwOWVlZGU4Y2YxZDgwZTFkYzg4NzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBmhLNZh1qYu+xIKrin3sO2dM1Sz I00w7aFvfUjEG1C/pvBctvtyJs+B5HmqIlZhBS97N1+mC6KLlwy/3wWxReYSkrNX PGXgrTyJsNkDRnG3/Cg6bc5hEKckx1tgkNitXGNjqhDH9Q6A1TeJ7zQpuYYPySKa iYo4dNIkq3zeTEN5dehWOPReY6FMr2p9526Ai/y3avidsn2qB3o2Ny3g2CJ2KsQ3 0fXz1rX8X1g4Egw+hgo5hKJhkc9jYkyMmbeObTbhl8l9kvWOe2vUCnhIIXPktF7I B4gYDu0qfQ+pH1TtGOrANfhoudePq7hWfjnmO4+Tdn2144xBzmdP4AlDVwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIMdrmdF1z2xXAnu3ozx2A4dyIcnMB8GA1UdIwQY MBaAFJZlyBENDdhqfrsJOKoy4J0dsSL2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG1YSUVRME4yR3AtdXdrNHFqTGduUjJ4SXZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mYTgxZjQtNjYwMC00MDc5LTkzYzUt NDg5NzI2MWJhNDZiLzEvZ3gydVowWFhQYkZjQ2U3ZWpQSFlEaDNJaHljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mYTgxZjQtNjYwMC00MDc5LTkzYzUtNDg5NzI2MWJhNDZi LzEvbG1YSUVRME4yR3AtdXdrNHFqTGduUjJ4SXZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCtk MA0GCSqGSIb3DQEBCwUAA4IBAQBVjPuD+Yht5HhR02I+JCYUDEsy39pYDcdw8Fms Lf1OiC5zKfaw0qvLV3cS6mFoJAOeF0j0kuYFzqc1fMv6VnbaNfKfXUCg2jc0O55l +GMZA6Q/QaU7p/cvRegaZguES8ZUC2TKcEXQpXG4NpXkMji1oSifyjd/QccjNY8H UZI0YCXpuULAqiygrcHBNykrYumrxRmjWG3eH7ly6mTkWAsvCMqJEol1Zk8dZkCm aXcFt0rlz1HS1KUTgFwzair8iUSVsR0/A9RERfdqIA1LBRwNvLLiyuNg+EIR4RU4 9ib+mJvlzxbvVzHiNKLkdAv4hrp9BUZayGXb0P07F8t6HwkZ -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:47 2026 by rpki-client