This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/cSt6K46EMy2J87fQrUxV7kuln7s.roa File: cSt6K46EMy2J87fQrUxV7kuln7s.roa (raw, json) Hash identifier: bwoUNClS8M/uJi71mCDhu+Re3L2VQt/bSmzn5caPq7c= Subject key identifier: 71:2B:7A:2B:8E:84:33:2D:89:F3:B7:D0:AD:4C:55:EE:4B:A5:9F:BB Certificate issuer: /CN=e27a53053841e62f3787302bd3b3dc17ae8347a3 Certificate serial: 019B7E377D90F31EC910F03FB044B012EE12 Authority key identifier: E2:7A:53:05:38:41:E6:2F:37:87:30:2B:D3:B3:DC:17:AE:83:47:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4npTBThB5i83hzAr07PcF66DR6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/cSt6K46EMy2J87fQrUxV7kuln7s.roa Signing time: Fri 02 Jan 2026 10:18:44 +0000 ROA not before: Fri 02 Jan 2026 10:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210882 IP address blocks: 2001:678:e20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.crl rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft rsync://rpki.ripe.net/repository/DEFAULT/4npTBThB5i83hzAr07PcF66DR6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:7d:90:f3:1e:c9:10:f0:3f:b0:44:b0:12:ee:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e27a53053841e62f3787302bd3b3dc17ae8347a3 Validity Not Before: Jan 2 10:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=712b7a2b8e84332d89f3b7d0ad4c55ee4ba59fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:48:b5:7c:9a:35:e1:1e:05:25:99:b6:2c:ae: 56:30:fd:8b:ed:7c:a2:8b:6a:cd:32:87:3d:61:13: c9:a9:2e:d6:d8:73:d8:fd:8c:70:ef:89:c1:7d:01: af:3c:a6:b8:31:05:6d:97:8f:e6:91:63:34:e9:13: d6:20:bc:28:d3:e8:96:47:53:ef:09:32:d0:4d:2d: 6d:f9:5e:61:21:19:f6:7f:f0:b4:b0:fe:cf:4e:67: 00:24:17:ab:02:28:18:ef:2d:8d:75:f0:5f:e1:b1: 8f:86:ba:6a:89:22:a8:42:6c:c1:9e:c7:74:e5:98: 1c:fc:65:9e:10:2f:aa:5e:67:06:b8:f3:48:b9:04: 53:a5:ae:7d:e5:d7:17:af:17:9c:d7:3c:63:5f:ce: 78:3e:69:f4:74:ca:54:3f:79:e5:5b:20:55:10:0a: aa:d1:37:57:e0:f9:c1:ba:2f:11:24:11:bc:5f:29: 53:52:e0:65:eb:f4:51:1b:54:78:00:af:21:2e:be: 8c:d3:f4:57:fb:70:a3:0d:fe:e8:db:f9:59:c0:f0: 9e:62:bc:c1:69:4b:79:40:b0:5e:00:37:2f:06:a6: 32:d7:a6:82:1c:94:92:11:6f:a8:e8:ef:fa:e6:b2: b8:7b:20:a0:af:c1:80:a6:d7:c3:f4:8f:64:c8:a1: c8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2B:7A:2B:8E:84:33:2D:89:F3:B7:D0:AD:4C:55:EE:4B:A5:9F:BB X509v3 Authority Key Identifier: keyid:E2:7A:53:05:38:41:E6:2F:37:87:30:2B:D3:B3:DC:17:AE:83:47:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4npTBThB5i83hzAr07PcF66DR6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/cSt6K46EMy2J87fQrUxV7kuln7s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:e20::/48 Signature Algorithm: sha256WithRSAEncryption 36:4b:a3:74:e5:53:73:69:82:37:ee:30:c3:31:d6:7c:76:12: 98:cf:28:67:5d:39:21:1e:47:6b:af:b7:f2:d7:bf:9f:d0:de: 32:7d:23:c3:a8:c4:73:d5:45:25:7f:79:0c:f7:00:4f:78:f0: c7:26:bb:56:57:5c:38:d8:00:39:8f:dd:bd:4e:3c:29:fb:71: f1:1f:98:ab:bb:d0:76:73:9b:0c:ac:27:5f:eb:3a:ce:18:96: 26:09:33:1c:b3:78:cd:4a:04:ca:a1:18:ef:35:f1:93:7e:93: ad:4c:19:eb:86:4a:4a:cd:79:01:94:e0:d5:44:a8:8b:4e:a5: d4:97:d3:bf:64:0b:ad:9e:ef:d6:ca:f0:b4:69:e1:fa:2d:c3: bb:ed:57:f6:6c:6d:bd:e9:5e:6e:39:0b:f5:e4:34:ae:b4:e9: 57:31:b5:fc:4a:4a:9f:67:43:38:01:f9:30:bd:8a:2a:5b:70: f3:94:23:6d:eb:39:3d:a8:7b:d0:06:9c:4b:68:3c:d2:03:15: 4c:88:65:31:88:02:42:d9:6e:1a:0d:82:14:6a:0b:b5:06:e7: 42:91:7a:13:4c:20:36:85:ee:9b:e6:ce:db:b4:a0:7e:8a:ae: d6:f8:14:5f:89:3c:2c:6c:9f:1b:41:de:7d:5d:e6:e6:03:5b: 0d:95:b5:11 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+N32Q8x7JEPA/sESwEu4SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyN2E1MzA1Mzg0MWU2MmYzNzg3MzAyYmQzYjNkYzE3YWU4 MzQ3YTMwHhcNMjYwMTAyMTAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTJiN2EyYjhlODQzMzJkODlmM2I3ZDBhZDRjNTVlZTRiYTU5ZmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxki1fJo14R4FJZm2LK5WMP2L7Xyi i2rNMoc9YRPJqS7W2HPY/Yxw74nBfQGvPKa4MQVtl4/mkWM06RPWILwo0+iWR1Pv CTLQTS1t+V5hIRn2f/C0sP7PTmcAJBerAigY7y2NdfBf4bGPhrpqiSKoQmzBnsd0 5Zgc/GWeEC+qXmcGuPNIuQRTpa595dcXrxec1zxjX854Pmn0dMpUP3nlWyBVEAqq 0TdX4PnBui8RJBG8XylTUuBl6/RRG1R4AK8hLr6M0/RX+3CjDf7o2/lZwPCeYrzB aUt5QLBeADcvBqYy16aCHJSSEW+o6O/65rK4eyCgr8GAptfD9I9kyKHInwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHEreiuOhDMtifO30K1MVe5LpZ+7MB8GA1UdIwQY MBaAFOJ6UwU4QeYvN4cwK9Oz3Beug0ejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNG5wVEJUaEI1aTgzaHpBcjA3UGNGNjZEUjZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny84NzYyZjUtZmFlMy00NWY2LWE3OWIt Y2FlZGJkNzE0MGU5LzEvY1N0Nks0NkVNeTJKODdmUXJVeFY3a3VsbjdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny84NzYyZjUtZmFlMy00NWY2LWE3OWItY2FlZGJkNzE0MGU5 LzEvNG5wVEJUaEI1aTgzaHpBcjA3UGNGNjZEUjZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA4g MA0GCSqGSIb3DQEBCwUAA4IBAQA2S6N05VNzaYI37jDDMdZ8dhKYzyhnXTkhHkdr r7fy17+f0N4yfSPDqMRz1UUlf3kM9wBPePDHJrtWV1w42AA5j929Tjwp+3HxH5ir u9B2c5sMrCdf6zrOGJYmCTMcs3jNSgTKoRjvNfGTfpOtTBnrhkpKzXkBlODVRKiL TqXUl9O/ZAutnu/WyvC0aeH6LcO77Vf2bG296V5uOQv15DSutOlXMbX8SkqfZ0M4 AfkwvYoqW3DzlCNt6zk9qHvQBpxLaDzSAxVMiGUxiAJC2W4aDYIUagu1BudCkXoT TCA2he6b5s7btKB+iq7W+BRfiTwsbJ8bQd59XebmA1sNlbUR -----END CERTIFICATE-----Generated at Tue Jan 27 05:34:12 2026 by rpki-client