This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/F6o9j4Ie6b4y0wHKIVuz_fNCXFg.roa File: F6o9j4Ie6b4y0wHKIVuz_fNCXFg.roa (raw, json) Hash identifier: +0BcBPAOax0BdntxWWSdx/T51z6sfm76K1uE6tYz2Uk= Subject key identifier: 17:AA:3D:8F:82:1E:E9:BE:32:D3:01:CA:21:5B:B3:FD:F3:42:5C:58 Certificate issuer: /CN=9209b8dd5ea7258908378661f2ba9ef89ad3a0b1 Certificate serial: 019B79ED47C235F1B98D68E14C30242E382B Authority key identifier: 92:09:B8:DD:5E:A7:25:89:08:37:86:61:F2:BA:9E:F8:9A:D3:A0:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgm43V6nJYkIN4Zh8rqe-JrToLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/F6o9j4Ie6b4y0wHKIVuz_fNCXFg.roa Signing time: Thu 01 Jan 2026 14:19:12 +0000 ROA not before: Thu 01 Jan 2026 14:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211939 IP address blocks: 2001:678:1050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.mft rsync://rpki.ripe.net/repository/DEFAULT/kgm43V6nJYkIN4Zh8rqe-JrToLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:47:c2:35:f1:b9:8d:68:e1:4c:30:24:2e:38:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9209b8dd5ea7258908378661f2ba9ef89ad3a0b1 Validity Not Before: Jan 1 14:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17aa3d8f821ee9be32d301ca215bb3fdf3425c58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:40:6f:f6:96:b2:8b:bd:a6:35:4b:ac:cf:8b: 93:76:8d:33:94:94:79:21:58:af:d2:68:8e:a1:be: b9:2c:05:16:72:29:03:43:40:5f:53:86:15:52:f6: 14:26:8e:c0:f8:72:84:fe:f7:aa:17:af:07:d5:87: 04:69:33:a4:4b:01:02:83:c7:d0:57:1f:0e:56:ad: d4:c9:ec:43:dd:94:f5:71:ea:36:e0:d2:21:35:a8: 1c:30:50:f0:0b:48:bb:65:64:87:95:cb:e4:d6:fc: bd:31:cf:15:da:06:a1:09:f4:f2:08:69:0c:24:e2: dd:a9:40:ad:d6:99:f7:1d:e9:75:7f:60:da:12:f2: f8:0e:d9:9d:8e:dc:e8:11:1c:e0:b1:8b:ed:fb:8d: c6:7e:68:24:17:89:f8:0f:7f:3d:2a:f4:f6:60:8c: 17:ee:83:d7:f4:be:8f:95:b2:7c:6d:97:f4:f4:75: 1f:b3:bc:02:8b:ba:1f:c0:c2:db:86:23:0e:5e:19: 7e:00:64:e9:9e:10:82:dd:ad:45:c6:67:69:9e:f6: 36:14:2a:1b:10:02:cf:5a:95:4e:21:08:ab:5e:61: 9a:4a:56:b0:ea:86:21:87:03:7a:26:c2:1f:f3:0c: 23:8e:05:b2:9a:00:54:7d:63:36:5d:42:5b:5f:a5: 60:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AA:3D:8F:82:1E:E9:BE:32:D3:01:CA:21:5B:B3:FD:F3:42:5C:58 X509v3 Authority Key Identifier: keyid:92:09:B8:DD:5E:A7:25:89:08:37:86:61:F2:BA:9E:F8:9A:D3:A0:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgm43V6nJYkIN4Zh8rqe-JrToLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/F6o9j4Ie6b4y0wHKIVuz_fNCXFg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:1050::/48 Signature Algorithm: sha256WithRSAEncryption 24:15:f2:12:48:0e:61:70:87:a3:7e:5e:09:e5:ff:39:ab:8a: ff:a2:4e:07:2e:2c:da:ca:29:13:c8:86:08:72:3d:7f:1a:87: 79:dd:65:b3:67:e1:97:bb:b9:88:db:50:1b:e3:bb:e5:e7:08: 76:fa:a9:10:f2:bb:ba:19:6e:8c:27:55:2c:79:52:20:ce:95: c4:4f:8a:f8:34:05:08:89:c8:e1:f9:8d:a3:a1:c4:dc:53:35: f7:53:ca:2c:63:96:ea:90:b9:21:15:70:56:cb:e1:25:a1:e7: ef:e9:4a:6f:7c:02:38:42:fd:8e:c7:f2:cf:10:39:65:e4:ff: 15:c1:d8:66:83:62:0c:4f:dd:e2:75:27:de:a5:a9:65:d9:be: b3:34:e1:22:1e:f2:a2:35:bd:1d:12:c6:a4:fd:2d:c0:55:5a: 7f:3b:75:44:34:85:7a:20:ad:b6:fa:48:79:56:b9:52:2d:1f: 96:f4:72:f3:aa:73:1a:fd:fc:f4:9a:c7:74:06:13:43:13:29: cc:b0:47:8d:8a:00:87:f1:24:05:a9:77:75:a4:9e:89:84:0b: 1d:db:62:99:44:15:c9:7e:38:43:a3:67:53:4b:7f:76:dd:8c: 05:d6:d8:b6:0a:cb:19:e0:1b:06:5c:18:f6:90:28:e3:df:a7: f9:32:f6:2f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57UfCNfG5jWjhTDAkLjgrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMDliOGRkNWVhNzI1ODkwODM3ODY2MWYyYmE5ZWY4OWFk M2EwYjEwHhcNMjYwMTAxMTQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2FhM2Q4ZjgyMWVlOWJlMzJkMzAxY2EyMTViYjNmZGYzNDI1YzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukBv9payi72mNUusz4uTdo0zlJR5 IViv0miOob65LAUWcikDQ0BfU4YVUvYUJo7A+HKE/veqF68H1YcEaTOkSwECg8fQ Vx8OVq3UyexD3ZT1ceo24NIhNagcMFDwC0i7ZWSHlcvk1vy9Mc8V2gahCfTyCGkM JOLdqUCt1pn3Hel1f2DaEvL4DtmdjtzoERzgsYvt+43GfmgkF4n4D389KvT2YIwX 7oPX9L6PlbJ8bZf09HUfs7wCi7ofwMLbhiMOXhl+AGTpnhCC3a1FxmdpnvY2FCob EALPWpVOIQirXmGaSlaw6oYhhwN6JsIf8wwjjgWymgBUfWM2XUJbX6Vg8wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBeqPY+CHum+MtMByiFbs/3zQlxYMB8GA1UdIwQY MBaAFJIJuN1epyWJCDeGYfK6nvia06CxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2dtNDNWNm5KWWtJTjRaaDhycWUtSnJUb0xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy82ODhkYTUtZDIzOC00N2NlLWIyZTgt ODkwZmZlYThkMGJjLzEvRjZvOWo0SWU2YjR5MHdIS0lWdXpfZk5DWEZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy82ODhkYTUtZDIzOC00N2NlLWIyZTgtODkwZmZlYThkMGJj LzEva2dtNDNWNm5KWWtJTjRaaDhycWUtSnJUb0xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBBQ MA0GCSqGSIb3DQEBCwUAA4IBAQAkFfISSA5hcIejfl4J5f85q4r/ok4HLizayikT yIYIcj1/God53WWzZ+GXu7mI21Ab47vl5wh2+qkQ8ru6GW6MJ1UseVIgzpXET4r4 NAUIicjh+Y2jocTcUzX3U8osY5bqkLkhFXBWy+Eloefv6UpvfAI4Qv2Ox/LPEDll 5P8Vwdhmg2IMT93idSfepall2b6zNOEiHvKiNb0dEsak/S3AVVp/O3VENIV6IK22 +kh5VrlSLR+W9HLzqnMa/fz0msd0BhNDEynMsEeNigCH8SQFqXd1pJ6JhAsd22KZ RBXJfjhDo2dTS3923YwF1ti2CssZ4BsGXBj2kCjj36f5MvYv -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:45 2026 by rpki-client