This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/4OqLqSYwHbzUrUcmvl7uDHR7q2A.roa File: 4OqLqSYwHbzUrUcmvl7uDHR7q2A.roa (raw, json) Hash identifier: A6IgUlxaM8wJjh5znyMu1u3I9p23ylYlfoL0agIyKZg= Subject key identifier: E0:EA:8B:A9:26:30:1D:BC:D4:AD:47:26:BE:5E:EE:0C:74:7B:AB:60 Certificate issuer: /CN=3fa136d7643fdc0d3fb1d53467d8abb299b79171 Certificate serial: 019B7AC8444FEA1D7F7D2D67E51CEB7ECD6B Authority key identifier: 3F:A1:36:D7:64:3F:DC:0D:3F:B1:D5:34:67:D8:AB:B2:99:B7:91:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6E212Q_3A0_sdU0Z9irspm3kXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/4OqLqSYwHbzUrUcmvl7uDHR7q2A.roa Signing time: Thu 01 Jan 2026 18:18:23 +0000 ROA not before: Thu 01 Jan 2026 18:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215777 IP address blocks: 2001:67c:d74::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.crl rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft rsync://rpki.ripe.net/repository/DEFAULT/P6E212Q_3A0_sdU0Z9irspm3kXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:44:4f:ea:1d:7f:7d:2d:67:e5:1c:eb:7e:cd:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fa136d7643fdc0d3fb1d53467d8abb299b79171 Validity Not Before: Jan 1 18:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0ea8ba926301dbcd4ad4726be5eee0c747bab60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ed:26:08:3b:82:3a:48:c3:e7:ca:ce:f1:39: 35:02:63:4b:61:92:a4:ac:e1:03:e4:42:9a:99:ea: 49:5e:6b:56:5d:9c:02:a2:ba:c1:b8:28:3f:a2:81: 93:45:f6:3e:b6:21:69:94:b0:8e:ff:4c:c8:3d:42: 95:94:ad:f3:6d:5d:dc:c6:52:d8:53:7a:7d:a8:f9: 46:b8:63:7b:be:f1:cb:1f:39:7e:dd:e2:2f:71:ac: 45:b1:6a:d3:a7:75:bb:a1:57:38:84:65:2a:79:bc: f5:c9:93:4b:54:78:1f:74:5b:35:60:ae:c9:6f:24: bf:af:1e:71:06:f0:de:a0:3c:4d:7b:5e:76:4a:fb: 98:a6:be:38:68:32:f1:c4:ac:ee:d5:f9:45:81:59: ef:f1:ee:26:c2:a6:53:4c:1a:e8:a9:cb:e3:5a:88: 64:24:40:6b:f1:f6:3b:55:f1:3a:48:ba:34:3a:e2: 76:94:a4:ff:89:86:6f:9a:8f:3a:ab:7b:a5:09:4a: f3:7c:72:4d:2c:c3:36:5e:28:33:07:aa:02:e9:cc: 40:58:95:06:c0:cc:c0:24:80:9f:6b:aa:9f:d9:f7: 62:ca:e2:46:0a:41:0d:78:92:b3:78:e4:80:4b:9c: 61:b0:76:3e:b8:d3:18:cd:c5:04:66:f5:4b:c2:0d: 2c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EA:8B:A9:26:30:1D:BC:D4:AD:47:26:BE:5E:EE:0C:74:7B:AB:60 X509v3 Authority Key Identifier: keyid:3F:A1:36:D7:64:3F:DC:0D:3F:B1:D5:34:67:D8:AB:B2:99:B7:91:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6E212Q_3A0_sdU0Z9irspm3kXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/4OqLqSYwHbzUrUcmvl7uDHR7q2A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:d74::/48 Signature Algorithm: sha256WithRSAEncryption 55:d0:f1:55:a1:fc:dc:72:d0:58:5c:ed:bc:e5:73:32:69:be: 0e:7b:39:09:f1:87:ab:5b:f5:b6:18:61:92:93:64:52:b2:b1: 39:0b:49:2c:9b:77:83:43:33:3e:19:82:17:e1:b5:9d:1a:fc: 65:97:79:d3:bd:91:45:bf:97:3b:63:72:93:ac:f7:f2:62:65: 84:83:ff:3e:2b:89:7b:b3:48:03:81:a9:bc:ac:81:9c:92:ab: 91:d9:06:b3:18:78:03:86:17:d3:8c:75:81:0d:76:2a:54:d9: de:53:37:c4:56:e2:2b:5e:e9:7e:a3:63:a6:b1:d6:40:de:9d: da:36:6f:6c:f8:b7:1a:28:9f:05:5e:e2:e2:ca:ee:43:1c:12: d2:b6:12:af:f8:be:34:6b:d9:64:a7:96:de:b8:8c:2e:a9:35: 44:14:ac:23:f5:2e:82:bd:58:ee:ff:b9:54:62:9d:ce:92:45: d9:b9:e1:91:f5:a7:6a:f6:b8:a3:39:fa:6a:83:2e:ce:c1:9e: 69:30:2e:2a:39:3c:23:7e:cd:b8:57:74:11:0c:13:28:bc:b0: 81:d0:eb:f0:7b:fe:16:1b:7c:a8:a9:77:67:20:97:79:8a:a5: ed:1e:c1:a7:c6:5d:36:cb:bc:74:4b:0b:71:3d:f8:2e:6d:76: 19:c9:df:07 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yERP6h1/fS1n5Rzrfs1rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmYTEzNmQ3NjQzZmRjMGQzZmIxZDUzNDY3ZDhhYmIyOTli NzkxNzEwHhcNMjYwMTAxMTgxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGVhOGJhOTI2MzAxZGJjZDRhZDQ3MjZiZTVlZWUwYzc0N2JhYjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3O0mCDuCOkjD58rO8Tk1AmNLYZKk rOED5EKamepJXmtWXZwCorrBuCg/ooGTRfY+tiFplLCO/0zIPUKVlK3zbV3cxlLY U3p9qPlGuGN7vvHLHzl+3eIvcaxFsWrTp3W7oVc4hGUqebz1yZNLVHgfdFs1YK7J byS/rx5xBvDeoDxNe152SvuYpr44aDLxxKzu1flFgVnv8e4mwqZTTBroqcvjWohk JEBr8fY7VfE6SLo0OuJ2lKT/iYZvmo86q3ulCUrzfHJNLMM2XigzB6oC6cxAWJUG wMzAJICfa6qf2fdiyuJGCkENeJKzeOSAS5xhsHY+uNMYzcUEZvVLwg0smQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFODqi6kmMB281K1HJr5e7gx0e6tgMB8GA1UdIwQY MBaAFD+hNtdkP9wNP7HVNGfYq7KZt5FxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDZFMjEyUV8zQTBfc2RVMFo5aXJzcG0za1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC82NTVkNTMtOTRjNS00YTk3LTg4YTEt ZDI3N2E1ZjNiOWUwLzEvNE9xTHFTWXdIYnpVclVjbXZsN3VESFI3cTJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC82NTVkNTMtOTRjNS00YTk3LTg4YTEtZDI3N2E1ZjNiOWUw LzEvUDZFMjEyUV8zQTBfc2RVMFo5aXJzcG0za1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA10 MA0GCSqGSIb3DQEBCwUAA4IBAQBV0PFVofzcctBYXO285XMyab4OezkJ8YerW/W2 GGGSk2RSsrE5C0ksm3eDQzM+GYIX4bWdGvxll3nTvZFFv5c7Y3KTrPfyYmWEg/8+ K4l7s0gDgam8rIGckquR2QazGHgDhhfTjHWBDXYqVNneUzfEVuIrXul+o2OmsdZA 3p3aNm9s+LcaKJ8FXuLiyu5DHBLSthKv+L40a9lkp5beuIwuqTVEFKwj9S6CvVju /7lUYp3OkkXZueGR9adq9rijOfpqgy7OwZ5pMC4qOTwjfs24V3QRDBMovLCB0Ovw e/4WG3yoqXdnIJd5iqXtHsGnxl02y7x0SwtxPfgubXYZyd8H -----END CERTIFICATE-----Generated at Tue Feb 10 00:08:58 2026 by rpki-client