This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/CNtUCdbHYVJYM90-O1mKKO2CEmA.roa File: CNtUCdbHYVJYM90-O1mKKO2CEmA.roa (raw, json) Hash identifier: obwLgv1NBdrIy8lfJRJyvaXbfk0zSRfq9qV7ZZ7iDjM= Subject key identifier: 08:DB:54:09:D6:C7:61:52:58:33:DD:3E:3B:59:8A:28:ED:82:12:60 Certificate issuer: /CN=06e2d27d30ecff42771c4ab977a82aea58a76b4e Certificate serial: 019B7EA4F434DF7B7BD9138860774313F879 Authority key identifier: 06:E2:D2:7D:30:EC:FF:42:77:1C:4A:B9:77:A8:2A:EA:58:A7:6B:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/CNtUCdbHYVJYM90-O1mKKO2CEmA.roa Signing time: Fri 02 Jan 2026 12:18:18 +0000 ROA not before: Fri 02 Jan 2026 12:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64424 IP address blocks: 2001:67c:774::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:f4:34:df:7b:7b:d9:13:88:60:77:43:13:f8:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06e2d27d30ecff42771c4ab977a82aea58a76b4e Validity Not Before: Jan 2 12:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08db5409d6c761525833dd3e3b598a28ed821260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:18:6e:67:29:fd:6d:3a:e7:2c:3c:64:81:68: c4:c8:0f:d7:48:7d:d8:af:a6:61:bd:8b:d7:ea:4c: 42:eb:ad:8f:85:c7:2a:5d:3f:6e:bb:05:c1:6e:02: 55:17:f7:58:0e:6a:04:4b:ea:56:81:19:05:49:14: 11:e3:7e:0f:cb:d9:0a:b6:4e:bb:77:59:2d:82:1e: 72:a6:c5:0a:88:c3:12:02:8a:4d:29:ce:9d:37:71: 28:96:f1:71:f5:4c:81:e6:15:6d:a7:63:1f:92:08: 05:7e:86:0c:ce:2f:45:e3:aa:48:11:d3:0f:eb:3b: d6:13:e8:16:45:3f:98:e0:70:32:54:8a:e6:4b:3a: 95:ef:cb:51:a4:11:5e:7b:be:22:06:33:ee:63:77: ce:7f:8a:ed:25:b7:09:e4:ab:c2:34:12:5c:43:83: 9f:f4:95:98:5a:0d:c3:4b:58:41:f3:32:9d:38:6f: b3:4a:df:39:79:b0:c7:a8:7d:c8:24:a8:37:df:e4: b5:10:a5:54:58:dc:4f:10:de:4f:d8:9f:a7:26:53: 40:1f:be:f4:df:0d:2c:81:c5:e0:1f:fa:bf:3a:b9: e0:3a:40:77:81:27:a7:fc:47:a5:91:89:aa:59:08: 70:f7:49:62:dd:4a:2c:f5:85:66:fa:02:88:2b:37: 1d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DB:54:09:D6:C7:61:52:58:33:DD:3E:3B:59:8A:28:ED:82:12:60 X509v3 Authority Key Identifier: keyid:06:E2:D2:7D:30:EC:FF:42:77:1C:4A:B9:77:A8:2A:EA:58:A7:6B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/CNtUCdbHYVJYM90-O1mKKO2CEmA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:774::/48 Signature Algorithm: sha256WithRSAEncryption 02:5e:42:2f:43:00:37:06:98:d3:3c:ce:40:54:43:71:a0:d3: 16:b8:ba:c3:d7:4e:f4:d0:3b:bc:29:2c:7a:f8:09:d2:70:ff: 23:82:1c:4f:7f:5d:ac:53:20:f5:67:d9:5f:cb:8b:10:7c:0a: 5d:0f:66:dd:d8:a2:08:08:a2:61:ce:d1:5f:94:11:73:ba:a3: 5c:5f:94:c4:90:64:49:ee:bd:8d:96:3b:a0:11:df:e9:41:95: 90:d3:5e:d9:f2:7e:de:2c:d0:ef:7e:13:56:cb:07:5b:92:ca: 4a:21:dd:01:e7:67:3d:1f:5a:ee:06:ff:f5:d8:21:0b:36:bf: b5:94:93:0a:f7:89:64:c2:cf:42:e0:e5:88:ce:3c:53:4c:8d: 64:fa:15:e7:77:33:6b:35:61:6e:e9:17:b9:30:56:d0:5a:de: 40:01:bc:fe:eb:46:07:e3:e7:78:d8:68:a2:8d:4b:fc:cc:a3: 5b:31:b6:9b:2f:ad:1b:91:23:d1:84:19:1e:57:90:ff:52:c3: e3:42:5b:80:17:e2:ca:42:9a:1f:00:38:a9:12:99:b4:ac:12: c6:03:bc:49:03:13:9b:98:28:06:e2:00:c5:c7:4d:ec:e3:79: e1:92:e8:a2:3c:13:67:e6:bc:5b:50:35:e9:bd:7a:d2:f7:34: 81:d5:36:95 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pPQ033t72ROIYHdDE/h5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ZTJkMjdkMzBlY2ZmNDI3NzFjNGFiOTc3YTgyYWVhNThh NzZiNGUwHhcNMjYwMTAyMTIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGRiNTQwOWQ2Yzc2MTUyNTgzM2RkM2UzYjU5OGEyOGVkODIxMjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRhuZyn9bTrnLDxkgWjEyA/XSH3Y r6ZhvYvX6kxC662PhccqXT9uuwXBbgJVF/dYDmoES+pWgRkFSRQR434Py9kKtk67 d1ktgh5ypsUKiMMSAopNKc6dN3EolvFx9UyB5hVtp2MfkggFfoYMzi9F46pIEdMP 6zvWE+gWRT+Y4HAyVIrmSzqV78tRpBFee74iBjPuY3fOf4rtJbcJ5KvCNBJcQ4Of 9JWYWg3DS1hB8zKdOG+zSt85ebDHqH3IJKg33+S1EKVUWNxPEN5P2J+nJlNAH770 3w0sgcXgH/q/OrngOkB3gSen/EelkYmqWQhw90li3Uos9YVm+gKIKzcdAwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAjbVAnWx2FSWDPdPjtZiijtghJgMB8GA1UdIwQY MBaAFAbi0n0w7P9CdxxKuXeoKupYp2tOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnVMU2ZURHNfMEozSEVxNWQ2Z3E2bGluYTA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8yMDkxM2ItZTUwNi00NzYwLTg4YjYt NmQ5ODMyNGI5OTE2LzEvQ050VUNkYkhZVkpZTTkwLU8xbUtLTzJDRW1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8yMDkxM2ItZTUwNi00NzYwLTg4YjYtNmQ5ODMyNGI5OTE2 LzEvQnVMU2ZURHNfMEozSEVxNWQ2Z3E2bGluYTA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAd0 MA0GCSqGSIb3DQEBCwUAA4IBAQACXkIvQwA3BpjTPM5AVENxoNMWuLrD10700Du8 KSx6+AnScP8jghxPf12sUyD1Z9lfy4sQfApdD2bd2KIICKJhztFflBFzuqNcX5TE kGRJ7r2NljugEd/pQZWQ017Z8n7eLNDvfhNWywdbkspKId0B52c9H1ruBv/12CEL Nr+1lJMK94lkws9C4OWIzjxTTI1k+hXndzNrNWFu6Re5MFbQWt5AAbz+60YH4+d4 2GiijUv8zKNbMbabL60bkSPRhBkeV5D/UsPjQluAF+LKQpofADipEpm0rBLGA7xJ AxObmCgG4gDFx03s43nhkuiiPBNn5rxbUDXpvXrS9zSB1TaV -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:14 2026 by rpki-client