This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/N8EyJda6rhR9QteQQOD1cmq2_LQ.roa File: N8EyJda6rhR9QteQQOD1cmq2_LQ.roa (raw, json) Hash identifier: cndG9t1x1ssBeu5ltRQC+iF8/XMVzNaV3QWE/yAHOVI= Subject key identifier: 37:C1:32:25:D6:BA:AE:14:7D:42:D7:90:40:E0:F5:72:6A:B6:FC:B4 Certificate issuer: /CN=6797412ec4b0b8fb2de9d2df17a6ac7283ededb5 Certificate serial: 019B7AC7D215D832099F430E656DA24D6D4A Authority key identifier: 67:97:41:2E:C4:B0:B8:FB:2D:E9:D2:DF:17:A6:AC:72:83:ED:ED:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/N8EyJda6rhR9QteQQOD1cmq2_LQ.roa Signing time: Thu 01 Jan 2026 18:17:54 +0000 ROA not before: Thu 01 Jan 2026 18:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202878 IP address blocks: 2001:678:1a8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.crl rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d2:15:d8:32:09:9f:43:0e:65:6d:a2:4d:6d:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6797412ec4b0b8fb2de9d2df17a6ac7283ededb5 Validity Not Before: Jan 1 18:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37c13225d6baae147d42d79040e0f5726ab6fcb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:be:f7:1a:21:37:35:79:ad:78:74:88:dd:7b: 22:16:4f:2a:f3:12:68:38:1c:d0:a1:5e:e3:08:90: 2b:d6:d7:75:6d:29:74:87:0c:b5:41:eb:95:5b:f9: 30:c7:21:3c:f4:7b:9c:1c:5d:82:09:d8:ff:20:a8: 19:29:9b:e2:a7:91:da:f3:3c:ef:68:3a:3e:9a:8b: d9:12:b3:b3:8f:5b:5b:ef:c6:f9:b2:9c:21:fe:2e: 75:dd:f2:5b:9e:b4:0e:a6:9f:17:ff:84:c0:ec:14: 3c:02:75:49:14:7d:29:d3:fb:e6:8f:62:7f:8a:25: 67:a7:0a:5e:05:5b:bd:82:7c:ea:4d:03:73:4c:02: f3:f5:98:63:e1:4e:b6:29:1d:fc:ab:ff:0b:cb:51: c3:90:74:6b:27:d2:bb:8b:4c:49:ae:88:a9:fe:1f: e0:82:d4:a4:2d:a3:a5:dc:a8:a9:40:d8:f0:0b:f2: bc:f8:ce:3a:4e:2b:53:fe:54:6a:d9:8b:71:b3:26: 89:39:13:6a:94:93:94:97:cd:fd:6a:00:20:87:60: 96:50:21:95:63:6f:07:a8:6f:87:81:85:11:84:ee: 06:bb:13:4f:8c:2f:38:d5:c2:02:0c:9d:09:62:e2: 8e:2c:68:2b:14:7c:a2:9e:7d:89:81:4e:99:d8:ec: f8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C1:32:25:D6:BA:AE:14:7D:42:D7:90:40:E0:F5:72:6A:B6:FC:B4 X509v3 Authority Key Identifier: keyid:67:97:41:2E:C4:B0:B8:FB:2D:E9:D2:DF:17:A6:AC:72:83:ED:ED:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/N8EyJda6rhR9QteQQOD1cmq2_LQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:1a8::/48 Signature Algorithm: sha256WithRSAEncryption cb:02:3c:db:40:a0:a8:cf:6c:0b:e6:66:b3:49:4a:53:ba:82: 40:89:3d:41:96:5c:9e:42:4c:2f:fd:37:5a:db:f3:d7:72:e7: 2a:1c:2b:ce:77:fd:c5:88:e6:7a:a6:6e:f8:91:6e:89:32:fd: 29:41:84:cd:39:0c:b3:7b:c7:c5:42:dc:e6:34:4b:06:15:5a: e8:db:5b:9e:da:29:75:ff:b6:a7:af:53:52:5f:86:a5:8f:82: 72:f9:9c:fa:3e:c3:d7:2a:15:33:de:ab:93:99:b7:9a:75:b9: 88:2a:05:c1:fa:51:fb:b6:d2:46:60:77:ef:94:3f:3e:15:19: 3c:80:de:ec:e5:bb:6d:7b:d1:6e:ed:25:ab:92:42:8e:36:27: 44:6b:f9:e7:43:51:e2:5e:88:8f:1d:58:18:58:fb:b2:4a:7f: 1b:99:41:c7:6c:72:e7:e8:70:bb:67:2a:27:10:75:dc:f8:7b: 58:55:ef:1a:92:02:7e:f4:d8:72:00:b5:d7:c0:31:87:45:bb: c4:68:99:bf:07:0a:c6:0d:23:92:cd:d8:99:d5:c7:85:50:22: fb:1f:75:e5:71:89:d1:db:bf:d5:3e:a8:e5:47:91:49:c7:ef: 3b:37:a2:85:ee:88:0a:a5:b4:af:b0:7f:9d:0f:14:ba:92:72: f7:ee:cd:58 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6x9IV2DIJn0MOZW2iTW1KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTc0MTJlYzRiMGI4ZmIyZGU5ZDJkZjE3YTZhYzcyODNl ZGVkYjUwHhcNMjYwMTAxMTgxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2MxMzIyNWQ2YmFhZTE0N2Q0MmQ3OTA0MGUwZjU3MjZhYjZmY2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0L73GiE3NXmteHSI3XsiFk8q8xJo OBzQoV7jCJAr1td1bSl0hwy1QeuVW/kwxyE89HucHF2CCdj/IKgZKZvip5Ha8zzv aDo+movZErOzj1tb78b5spwh/i513fJbnrQOpp8X/4TA7BQ8AnVJFH0p0/vmj2J/ iiVnpwpeBVu9gnzqTQNzTALz9Zhj4U62KR38q/8Ly1HDkHRrJ9K7i0xJroip/h/g gtSkLaOl3KipQNjwC/K8+M46TitT/lRq2YtxsyaJORNqlJOUl839agAgh2CWUCGV Y28HqG+HgYURhO4GuxNPjC841cICDJ0JYuKOLGgrFHyinn2JgU6Z2Oz45QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDfBMiXWuq4UfULXkEDg9XJqtvy0MB8GA1UdIwQY MBaAFGeXQS7EsLj7LenS3xemrHKD7e21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVkQkxzU3d1UHN0NmRMZkY2YXNjb1B0N2JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jYWJlYWQtZjA4YS00MTVkLTk5Mzct NTNhODYxOWI0MmY1LzEvTjhFeUpkYTZyaFI5UXRlUVFPRDFjbXEyX0xRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9jYWJlYWQtZjA4YS00MTVkLTk5MzctNTNhODYxOWI0MmY1 LzEvWjVkQkxzU3d1UHN0NmRMZkY2YXNjb1B0N2JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAGo MA0GCSqGSIb3DQEBCwUAA4IBAQDLAjzbQKCoz2wL5mazSUpTuoJAiT1BllyeQkwv /Tda2/PXcucqHCvOd/3FiOZ6pm74kW6JMv0pQYTNOQyze8fFQtzmNEsGFVro21ue 2il1/7anr1NSX4alj4Jy+Zz6PsPXKhUz3quTmbeadbmIKgXB+lH7ttJGYHfvlD8+ FRk8gN7s5btte9Fu7SWrkkKONidEa/nnQ1HiXoiPHVgYWPuySn8bmUHHbHLn6HC7 ZyonEHXc+HtYVe8akgJ+9NhyALXXwDGHRbvEaJm/BwrGDSOSzdiZ1ceFUCL7H3Xl cYnR27/VPqjlR5FJx+87N6KF7ogKpbSvsH+dDxS6knL37s1Y -----END CERTIFICATE-----Generated at Tue Feb 10 04:16:03 2026 by rpki-client