This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/dAQr9ygVW7afaoDzLId5HtYFpKw.roa File: dAQr9ygVW7afaoDzLId5HtYFpKw.roa (raw, json) Hash identifier: gWNR3pSMI8yeOAqKnvOXgWPtPa0bDKYn5eIcfvgVCNQ= Subject key identifier: 74:04:2B:F7:28:15:5B:B6:9F:6A:80:F3:2C:87:79:1E:D6:05:A4:AC Certificate issuer: /CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971 Certificate serial: 019B7C7FD127F979D8EF7F214EFC36789B9F Authority key identifier: A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/dAQr9ygVW7afaoDzLId5HtYFpKw.roa Signing time: Fri 02 Jan 2026 02:18:29 +0000 ROA not before: Fri 02 Jan 2026 02:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202560 IP address blocks: 2001:67c:74::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:d1:27:f9:79:d8:ef:7f:21:4e:fc:36:78:9b:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971 Validity Not Before: Jan 2 02:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74042bf728155bb69f6a80f32c87791ed605a4ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:93:0d:ee:0f:b1:90:5b:86:c3:8e:f6:37:57: 7b:c3:b9:c9:3f:d5:c5:7a:a9:6b:14:42:4b:15:ab: e3:3e:ff:7f:c4:b4:2e:0f:38:c2:ee:b4:82:8d:66: e1:ba:56:c5:7c:69:f2:7e:4c:7a:85:ea:6d:16:e9: 36:4f:33:ea:e5:9b:2d:30:0d:f0:2e:5d:37:da:f6: 16:2b:8c:0c:b7:74:a7:3d:f1:f3:25:f9:cc:d1:83: fa:6f:73:52:52:8d:99:65:1d:d5:d7:de:f8:13:8b: 34:45:b0:cc:b1:7c:4a:77:ff:22:cb:56:c7:d6:b6: 2f:2f:64:5d:87:2a:93:06:9b:f6:08:90:f3:af:49: 34:83:64:df:be:97:3e:0f:75:1a:e6:e5:a2:36:39: 97:78:8f:0a:da:96:af:49:6f:38:38:f9:32:20:fc: bf:7a:e3:e9:98:62:53:73:86:dd:1b:de:c8:30:d4: 8d:59:bf:3d:e3:c5:d4:2f:b8:ba:2b:03:54:14:c8: d1:7e:50:67:44:ee:5c:30:9a:f9:02:21:33:1f:79: cc:98:3c:4b:a2:58:41:b6:11:20:c4:2b:3a:47:b9: 4e:e6:63:02:d1:b7:4b:85:89:f5:ba:a1:56:3e:87: 9d:dd:97:e8:47:31:d7:55:0d:8e:db:f7:7e:3b:80: 93:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:04:2B:F7:28:15:5B:B6:9F:6A:80:F3:2C:87:79:1E:D6:05:A4:AC X509v3 Authority Key Identifier: keyid:A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/dAQr9ygVW7afaoDzLId5HtYFpKw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:74::/48 Signature Algorithm: sha256WithRSAEncryption 2f:ef:83:ed:58:64:d5:88:ae:30:cd:1e:42:27:1e:2b:d4:22: f5:a1:1e:f3:22:7c:f1:5a:3b:67:a0:64:da:3f:93:1f:7d:ea: ac:5b:da:e4:48:fb:aa:a3:1b:45:ff:39:23:0c:8e:21:a9:2c: 09:c6:42:ee:55:67:74:b9:d9:46:7e:10:69:dc:6f:a3:32:25: fa:9a:f7:bb:f4:b2:53:87:4f:c4:9c:b1:af:0e:4a:bd:09:f3: 4b:53:43:e7:b2:9f:e1:61:3e:be:05:ac:0a:18:77:a3:9f:cb: 55:ca:35:60:22:ea:9b:92:76:f6:3f:14:23:2f:88:5a:cd:eb: bb:b2:4f:cb:2e:f0:07:65:aa:18:9d:d5:60:2c:f2:6c:5e:0c: fe:18:70:df:d8:5d:f5:80:1c:1b:64:39:a7:85:a4:6b:19:0e: 6d:39:39:26:5c:1a:aa:e6:a7:e1:bf:aa:c2:45:a3:af:de:c5: 3c:5b:0e:d8:fe:89:c8:42:71:ec:09:04:34:bf:79:75:ea:cd: 85:c4:bf:ca:9f:55:b4:60:84:1c:28:c5:31:49:a2:91:69:af: 2a:0b:43:1c:fc:c7:e2:90:aa:01:4c:21:76:7c:7d:bc:6f:6a: 6b:c0:ae:78:ef:1a:34:6e:33:c3:94:44:35:0a:9a:74:af:18: 6e:ba:d6:d3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8f9En+XnY738hTvw2eJufMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZGRmYWYxM2I3ZGJlMDVkYWEzMmI1ODc4YjhiNjgwMjQw NDU5NzEwHhcNMjYwMTAyMDIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDA0MmJmNzI4MTU1YmI2OWY2YTgwZjMyYzg3NzkxZWQ2MDVhNGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZMN7g+xkFuGw472N1d7w7nJP9XF eqlrFEJLFavjPv9/xLQuDzjC7rSCjWbhulbFfGnyfkx6heptFuk2TzPq5ZstMA3w Ll032vYWK4wMt3SnPfHzJfnM0YP6b3NSUo2ZZR3V1974E4s0RbDMsXxKd/8iy1bH 1rYvL2RdhyqTBpv2CJDzr0k0g2Tfvpc+D3Ua5uWiNjmXeI8K2pavSW84OPkyIPy/ euPpmGJTc4bdG97IMNSNWb8948XUL7i6KwNUFMjRflBnRO5cMJr5AiEzH3nMmDxL olhBthEgxCs6R7lO5mMC0bdLhYn1uqFWPoed3ZfoRzHXVQ2O2/d+O4CT1QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHQEK/coFVu2n2qA8yyHeR7WBaSsMB8GA1UdIwQY MBaAFKfd+vE7fb4F2qMrWHi4toAkBFlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDkzNjhUdDl2Z1hhb3l0WWVMaTJnQ1FFV1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMmIwODMtYjNiOS00YWE2LWExNDkt ZmJiNTUzYjg0NjQxLzEvZEFRcjl5Z1ZXN2FmYW9EekxJZDVIdFlGcEt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mMmIwODMtYjNiOS00YWE2LWExNDktZmJiNTUzYjg0NjQx LzEvcDkzNjhUdDl2Z1hhb3l0WWVMaTJnQ1FFV1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAB0 MA0GCSqGSIb3DQEBCwUAA4IBAQAv74PtWGTViK4wzR5CJx4r1CL1oR7zInzxWjtn oGTaP5MffeqsW9rkSPuqoxtF/zkjDI4hqSwJxkLuVWd0udlGfhBp3G+jMiX6mve7 9LJTh0/EnLGvDkq9CfNLU0Pnsp/hYT6+BawKGHejn8tVyjVgIuqbknb2PxQjL4ha zeu7sk/LLvAHZaoYndVgLPJsXgz+GHDf2F31gBwbZDmnhaRrGQ5tOTkmXBqq5qfh v6rCRaOv3sU8Ww7Y/onIQnHsCQQ0v3l16s2FxL/Kn1W0YIQcKMUxSaKRaa8qC0Mc /MfikKoBTCF2fH28b2prwK547xo0bjPDlEQ1Cpp0rxhuutbT -----END CERTIFICATE-----Generated at Tue Feb 10 07:12:41 2026 by rpki-client