This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/eCt1ukGdwDTlQatY4BtcnZOutqg.roa File: eCt1ukGdwDTlQatY4BtcnZOutqg.roa (raw, json) Hash identifier: jUioXzkDEnZcp7VMTk2cW0iuDalR1NZtQ0/IgZsYx3A= Subject key identifier: 78:2B:75:BA:41:9D:C0:34:E5:41:AB:58:E0:1B:5C:9D:93:AE:B6:A8 Certificate issuer: /CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd Certificate serial: 019B7758A84571A63F68F24A594A43F37D63 Authority key identifier: 6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/eCt1ukGdwDTlQatY4BtcnZOutqg.roa Signing time: Thu 01 Jan 2026 02:17:37 +0000 ROA not before: Thu 01 Jan 2026 02:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205055 IP address blocks: 2a07:9443::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a8:45:71:a6:3f:68:f2:4a:59:4a:43:f3:7d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd Validity Not Before: Jan 1 02:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=782b75ba419dc034e541ab58e01b5c9d93aeb6a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b5:db:74:09:e3:70:8d:80:95:47:84:0d:33: d6:11:1b:ee:17:91:d7:6b:ae:21:ab:e1:a6:51:48: eb:c6:4c:a0:c8:4c:ba:8c:1c:b3:6a:79:75:a7:ae: 91:ae:c9:53:af:f2:50:ad:cc:5a:83:0b:34:c3:26: cf:9c:18:53:52:3d:0e:de:d9:df:3e:56:fe:4e:14: fd:94:00:5d:d8:1f:29:62:48:cf:62:4c:49:68:55: 7f:42:67:f6:1b:32:d6:73:6d:2e:8b:ad:7d:d9:b8: 54:ba:3c:b2:6f:7b:b6:ad:4a:28:17:80:a5:0d:0c: f7:85:78:29:a2:27:c2:d9:45:8a:24:94:64:db:9c: e3:86:e1:a6:fb:28:7b:a4:34:8f:63:c0:59:06:0d: 1e:09:c4:06:1c:85:d3:d3:08:22:91:46:04:a2:fe: eb:89:d6:38:f6:b8:96:e6:ef:0f:e1:97:dd:0f:82: 27:da:5b:ad:d8:83:3d:e6:2d:d2:4e:e3:51:2c:ad: 75:9a:f5:10:54:64:6f:61:b2:14:e5:b4:23:e8:50: 96:ae:64:09:40:04:97:2c:00:ef:7b:bb:6c:8d:dc: 47:9d:fd:70:34:d9:6a:32:a0:f1:93:85:96:46:cc: d5:23:75:f1:bd:a6:10:e1:8a:45:78:db:90:d1:b9: c7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:2B:75:BA:41:9D:C0:34:E5:41:AB:58:E0:1B:5C:9D:93:AE:B6:A8 X509v3 Authority Key Identifier: keyid:6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/eCt1ukGdwDTlQatY4BtcnZOutqg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:9443::/32 Signature Algorithm: sha256WithRSAEncryption c2:11:0f:f5:51:06:a6:e3:77:80:53:6c:9e:b2:d9:58:79:ce: 7e:2e:b3:9f:27:cc:fb:53:46:30:cc:d8:d2:49:a9:bb:35:5e: d1:93:2a:0a:db:a4:0a:99:4a:be:b8:7a:52:e9:f3:46:17:73: d7:3f:9a:44:a5:57:c1:f4:f2:4c:85:88:fb:cb:48:2f:37:4d: 56:31:5f:a7:d1:56:31:18:6d:46:3a:8d:34:61:f5:6d:39:23: 4c:c7:ef:db:33:24:3c:05:09:74:75:c3:b1:4c:82:f6:b6:4c: f6:94:45:55:17:20:dd:8f:e8:d5:20:8d:31:08:14:ed:5c:34: 4a:24:65:d1:d9:50:71:2b:0a:8b:f8:e9:a9:e6:8c:78:69:e1: 42:c7:a8:6c:ab:a4:31:84:87:c0:f5:84:60:43:6a:0a:9c:17: a5:9c:10:fe:f3:ab:cc:b6:77:d0:ce:fe:5d:21:f0:e5:6b:f7: d5:85:7c:a8:c6:37:a1:4d:63:8b:7d:dd:3d:58:4d:3d:da:ab: 61:0e:d6:44:13:d9:52:68:19:b6:fa:67:ab:33:de:9c:4a:df: 55:ef:c4:38:34:9c:e2:ec:21:d9:79:8a:4e:54:ce:82:81:2e: 06:70:b8:0a:e5:0a:c8:9e:a2:d4:f4:34:fc:ae:8a:3d:7d:13: 54:62:76:ab -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3WKhFcaY/aPJKWUpD831jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNTc2MmNkNTNhMDNlMzIyNDIwNDZhMDFhOGUxY2NhYzk0 NmI2ZGQwHhcNMjYwMTAxMDIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODJiNzViYTQxOWRjMDM0ZTU0MWFiNThlMDFiNWM5ZDkzYWViNmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrXbdAnjcI2AlUeEDTPWERvuF5HX a64hq+GmUUjrxkygyEy6jByzanl1p66RrslTr/JQrcxagws0wybPnBhTUj0O3tnf Plb+ThT9lABd2B8pYkjPYkxJaFV/Qmf2GzLWc20ui6192bhUujyyb3u2rUooF4Cl DQz3hXgpoifC2UWKJJRk25zjhuGm+yh7pDSPY8BZBg0eCcQGHIXT0wgikUYEov7r idY49riW5u8P4ZfdD4In2lut2IM95i3STuNRLK11mvUQVGRvYbIU5bQj6FCWrmQJ QASXLADve7tsjdxHnf1wNNlqMqDxk4WWRszVI3XxvaYQ4YpFeNuQ0bnHbQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFHgrdbpBncA05UGrWOAbXJ2TrraoMB8GA1UdIwQY MBaAFG9XYs1ToD4yJCBGoBqOHMrJRrbdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjFkaXpWT2dQaklrSUVhZ0dvNGN5c2xHdHQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mNmZkYzMtOWNmYy00N2ZkLWJiYTgt NzljYmYzOTVkNzI2LzEvZUN0MXVrR2R3RFRsUWF0WTRCdGNuWk91dHFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mNmZkYzMtOWNmYy00N2ZkLWJiYTgtNzljYmYzOTVkNzI2 LzEvYjFkaXpWT2dQaklrSUVhZ0dvNGN5c2xHdHQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgeUQzAN BgkqhkiG9w0BAQsFAAOCAQEAwhEP9VEGpuN3gFNsnrLZWHnOfi6znyfM+1NGMMzY 0kmpuzVe0ZMqCtukCplKvrh6UunzRhdz1z+aRKVXwfTyTIWI+8tILzdNVjFfp9FW MRhtRjqNNGH1bTkjTMfv2zMkPAUJdHXDsUyC9rZM9pRFVRcg3Y/o1SCNMQgU7Vw0 SiRl0dlQcSsKi/jpqeaMeGnhQseobKukMYSHwPWEYENqCpwXpZwQ/vOrzLZ30M7+ XSHw5Wv31YV8qMY3oU1ji33dPVhNPdqrYQ7WRBPZUmgZtvpnqzPenErfVe/EODSc 4uwh2XmKTlTOgoEuBnC4CuUKyJ6i1PQ0/K6KPX0TVGJ2qw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:59 2026 by rpki-client