This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/t6Dl3JjTDFRGr87KzpfCohuGn5U.roa File: t6Dl3JjTDFRGr87KzpfCohuGn5U.roa (raw, json) Hash identifier: FSBoD9UFm0jDbZ/ExNYCxZ79dh00p0utbLFhl6lm96U= Subject key identifier: B7:A0:E5:DC:98:D3:0C:54:46:AF:CE:CA:CE:97:C2:A2:1B:86:9F:95 Certificate issuer: /CN=2ceb88d00e520ad660b416d92089c60d5c8f13e1 Certificate serial: 019B7E38F1FED7600B467D9F60133AD0E6C2 Authority key identifier: 2C:EB:88:D0:0E:52:0A:D6:60:B4:16:D9:20:89:C6:0D:5C:8F:13:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOuI0A5SCtZgtBbZIInGDVyPE-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/t6Dl3JjTDFRGr87KzpfCohuGn5U.roa Signing time: Fri 02 Jan 2026 10:20:19 +0000 ROA not before: Fri 02 Jan 2026 10:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200694 IP address blocks: 2001:67c:1344::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.mft rsync://rpki.ripe.net/repository/DEFAULT/LOuI0A5SCtZgtBbZIInGDVyPE-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f1:fe:d7:60:0b:46:7d:9f:60:13:3a:d0:e6:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ceb88d00e520ad660b416d92089c60d5c8f13e1 Validity Not Before: Jan 2 10:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7a0e5dc98d30c5446afcecace97c2a21b869f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3f:39:07:8e:7d:01:8a:1a:ee:f5:30:a0:72: b2:d2:9b:0c:a1:7c:83:39:04:ed:e6:5f:f1:3d:f7: e4:ae:66:b8:63:0d:a3:df:4b:6b:68:6e:44:b9:21: 7e:91:52:a3:0b:ef:45:b5:ab:3c:07:76:08:8b:74: ff:1d:e4:46:27:da:74:bd:70:a5:17:f9:d8:7c:c3: 00:77:5a:7c:cf:d1:7f:9d:60:0e:71:36:fc:f2:2b: b0:49:8f:24:dd:f3:a3:49:b7:89:7f:cb:87:5b:53: 1a:b5:86:3a:2e:49:91:a0:19:62:92:ce:14:bd:3b: 32:e8:40:1b:ba:a7:0a:31:c6:f4:5a:0e:22:1a:95: c5:78:88:31:64:79:2f:bb:ac:ba:22:27:22:12:f7: 88:4e:a9:0f:60:d5:84:7b:48:b7:79:0f:9b:b4:d6: f5:2b:43:71:3d:18:79:c2:d8:cc:be:61:f3:8e:53: f2:3d:2a:04:75:d2:35:d6:97:61:3f:cd:f1:a0:62: d1:ba:0c:f5:b7:53:8b:71:af:52:17:63:9d:1f:9a: 95:f1:55:f7:1c:64:4a:e1:3e:47:18:9e:d4:60:b4: 1d:ab:a6:83:3b:b5:e2:1d:c0:67:7c:37:ac:ce:68: 88:e8:e1:12:3e:7c:60:d3:e1:04:13:f4:30:4e:c2: c5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A0:E5:DC:98:D3:0C:54:46:AF:CE:CA:CE:97:C2:A2:1B:86:9F:95 X509v3 Authority Key Identifier: keyid:2C:EB:88:D0:0E:52:0A:D6:60:B4:16:D9:20:89:C6:0D:5C:8F:13:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOuI0A5SCtZgtBbZIInGDVyPE-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/t6Dl3JjTDFRGr87KzpfCohuGn5U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1344::/48 Signature Algorithm: sha256WithRSAEncryption 0f:2d:6e:b8:af:4a:ac:04:a5:a3:06:71:4e:b6:63:62:bf:1d: c3:67:0d:14:d0:64:14:b2:0b:4c:0a:da:ed:34:a1:b5:b5:7e: 22:1e:39:31:34:d8:62:6a:56:63:3d:2e:46:ce:fe:8f:a7:c0: a7:e5:54:c8:00:b6:0e:12:5c:8c:ad:c3:63:62:ba:e0:ff:41: 38:9e:bd:50:5a:93:33:ed:46:f7:18:b0:28:45:1c:61:52:bc: 20:dc:d3:64:65:e9:b2:ff:1d:c3:0a:f1:35:21:0f:c8:07:af: f1:cf:7f:3f:e4:a1:93:a4:91:48:7d:9d:f6:61:44:7c:e1:02: ed:70:fd:6a:b9:20:5f:75:fe:49:a7:b2:3f:29:f7:8a:26:80: e1:d8:aa:97:71:7f:28:1d:52:ab:d7:61:a6:57:50:a1:45:1c: 5b:7d:88:0e:89:ee:ab:b0:d2:44:49:21:01:59:7c:3c:c7:8c: f7:68:d2:79:23:2e:c6:6b:08:92:2d:f0:c4:d5:71:e3:51:68: 82:cf:ae:4c:13:f8:7c:b4:8a:71:4b:d5:9a:2b:9b:e7:f9:69: a9:89:e4:0e:11:2c:91:28:92:a4:27:20:7b:3e:f8:58:ab:b1: c7:a0:c5:b1:e1:22:5e:6b:33:70:db:bb:28:e7:04:4f:f6:b2: e5:b1:ea:94 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OPH+12ALRn2fYBM60ObCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZWI4OGQwMGU1MjBhZDY2MGI0MTZkOTIwODljNjBkNWM4 ZjEzZTEwHhcNMjYwMTAyMTAyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2EwZTVkYzk4ZDMwYzU0NDZhZmNlY2FjZTk3YzJhMjFiODY5Zjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D85B459AYoa7vUwoHKy0psMoXyD OQTt5l/xPffkrma4Yw2j30traG5EuSF+kVKjC+9Ftas8B3YIi3T/HeRGJ9p0vXCl F/nYfMMAd1p8z9F/nWAOcTb88iuwSY8k3fOjSbeJf8uHW1MatYY6LkmRoBliks4U vTsy6EAbuqcKMcb0Wg4iGpXFeIgxZHkvu6y6IiciEveITqkPYNWEe0i3eQ+btNb1 K0NxPRh5wtjMvmHzjlPyPSoEddI11pdhP83xoGLRugz1t1OLca9SF2OdH5qV8VX3 HGRK4T5HGJ7UYLQdq6aDO7XiHcBnfDeszmiI6OESPnxg0+EEE/QwTsLFmwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLeg5dyY0wxURq/Oys6XwqIbhp+VMB8GA1UdIwQY MBaAFCzriNAOUgrWYLQW2SCJxg1cjxPhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE91STBBNVNDdFpndEJiWklJbkdEVnlQRS1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iMjM4ZTMtMGFkOC00YTk5LWJmMmYt Y2U3ODJhZWQzMGI0LzEvdDZEbDNKalRERlJHcjg3S3pwZkNvaHVHbjVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9iMjM4ZTMtMGFkOC00YTk5LWJmMmYtY2U3ODJhZWQzMGI0 LzEvTE91STBBNVNDdFpndEJiWklJbkdEVnlQRS1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBNE MA0GCSqGSIb3DQEBCwUAA4IBAQAPLW64r0qsBKWjBnFOtmNivx3DZw0U0GQUsgtM CtrtNKG1tX4iHjkxNNhialZjPS5Gzv6Pp8Cn5VTIALYOElyMrcNjYrrg/0E4nr1Q WpMz7Ub3GLAoRRxhUrwg3NNkZemy/x3DCvE1IQ/IB6/xz38/5KGTpJFIfZ32YUR8 4QLtcP1quSBfdf5Jp7I/KfeKJoDh2KqXcX8oHVKr12GmV1ChRRxbfYgOie6rsNJE SSEBWXw8x4z3aNJ5Iy7GawiSLfDE1XHjUWiCz65ME/h8tIpxS9WaK5vn+WmpieQO ESyRKJKkJyB7PvhYq7HHoMWx4SJeazNw27so5wRP9rLlseqU -----END CERTIFICATE-----Generated at Mon Jan 26 19:35:03 2026 by rpki-client