This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/T2mZHvF7TLgjiL-Q1DgKiQZFo_I.roa File: T2mZHvF7TLgjiL-Q1DgKiQZFo_I.roa (raw, json) Hash identifier: Zgyh/lWhi2LC0/9lTBDZMxFTlCwhP+uAru3WvOE4Wy4= Subject key identifier: 4F:69:99:1E:F1:7B:4C:B8:23:88:BF:90:D4:38:0A:89:06:45:A3:F2 Certificate issuer: /CN=ca06ff246df411643d9de3669818112f3362283b Certificate serial: 019B7B361EE8911ADD5096DD73825BB42A06 Authority key identifier: CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/T2mZHvF7TLgjiL-Q1DgKiQZFo_I.roa Signing time: Thu 01 Jan 2026 20:18:22 +0000 ROA not before: Thu 01 Jan 2026 20:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208907 IP address blocks: 2001:678:994::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:1e:e8:91:1a:dd:50:96:dd:73:82:5b:b4:2a:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca06ff246df411643d9de3669818112f3362283b Validity Not Before: Jan 1 20:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f69991ef17b4cb82388bf90d4380a890645a3f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0d:6d:5f:82:63:62:58:2e:cb:12:d9:17:a8: a1:1c:97:69:13:8a:2c:a4:0c:7f:4e:73:ce:06:7a: 62:6b:d8:12:8d:96:db:7c:b8:7d:9c:f3:1e:60:37: 51:4a:1d:d5:03:d9:d1:61:c1:a8:39:32:01:97:e4: 8a:ce:c1:29:ce:24:e1:73:47:5a:5f:5c:0b:79:c8: 38:90:c8:87:81:d7:4a:6a:cf:f2:de:58:79:34:87: 0f:00:31:7b:f5:a5:16:3b:02:5f:18:40:c3:ae:f1: 0a:bc:5c:0e:a7:0e:74:66:01:89:c1:0d:1f:ea:df: a3:a0:1d:94:ec:15:94:66:a5:4c:f8:9e:d7:79:d9: 99:30:35:3a:68:9a:b0:d2:22:26:05:77:32:f5:0b: f1:e4:a1:e4:c7:42:a1:28:ee:ef:66:6f:fe:27:33: 1e:3d:e8:8f:48:7f:5a:7e:8a:64:22:c7:a3:96:12: 94:52:3d:68:28:22:e3:71:5a:32:90:a7:b7:39:90: f2:e4:25:dd:52:ef:e8:46:19:87:75:63:4a:84:a2: e4:4f:d4:37:8a:ba:c3:f5:88:45:cf:1e:cf:f9:30: f3:a6:8a:bd:36:1a:54:87:02:d8:f5:25:a0:bd:8a: 72:04:ea:94:d7:a1:44:b1:78:a3:71:85:72:ca:83: 53:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:69:99:1E:F1:7B:4C:B8:23:88:BF:90:D4:38:0A:89:06:45:A3:F2 X509v3 Authority Key Identifier: keyid:CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/T2mZHvF7TLgjiL-Q1DgKiQZFo_I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:994::/48 Signature Algorithm: sha256WithRSAEncryption 58:01:a5:d8:31:6b:be:10:31:ba:9f:c8:57:06:8c:c1:19:9c: c2:af:c1:73:43:20:20:9b:4f:c1:fc:5d:9b:6a:d3:cd:ff:70: 50:19:00:08:69:01:25:54:5d:91:aa:44:18:6d:25:34:09:0a: de:55:ab:e8:e9:31:1b:1a:d2:74:c5:65:e2:0b:f4:66:71:4a: aa:6f:9f:66:85:a5:8a:2a:f3:33:c4:b0:50:8c:8f:f4:39:1a: d6:04:5b:9c:40:3a:70:b6:b0:55:73:90:7a:da:90:c0:02:02: 33:48:e0:be:5b:1c:39:25:ad:34:8e:bb:06:a3:a9:45:4e:2c: b4:e4:5a:ee:4e:44:69:5e:b0:50:ab:f7:d5:6c:4e:91:b8:3d: 7a:35:b3:27:61:2e:7a:9b:8e:dd:36:42:7f:f8:12:d6:8e:a6: ad:17:d6:ff:17:d5:b5:e2:ed:18:4c:78:fa:24:18:85:0b:85: 31:c9:c5:54:18:f4:d0:fb:ee:cf:6b:5d:8e:cd:08:15:a4:60: 87:5f:43:67:74:73:79:79:ca:c7:1c:8b:85:57:a2:da:72:68: 06:85:ba:14:a9:fe:f2:32:63:92:d3:3e:b6:d1:33:6d:11:85: 5a:43:b0:94:66:bd:4b:06:24:f0:97:16:ae:6f:1d:8f:bb:66: 79:5c:23:4c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7Nh7okRrdUJbdc4JbtCoGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMDZmZjI0NmRmNDExNjQzZDlkZTM2Njk4MTgxMTJmMzM2 MjI4M2IwHhcNMjYwMTAxMjAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjY5OTkxZWYxN2I0Y2I4MjM4OGJmOTBkNDM4MGE4OTA2NDVhM2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw1tX4JjYlguyxLZF6ihHJdpE4os pAx/TnPOBnpia9gSjZbbfLh9nPMeYDdRSh3VA9nRYcGoOTIBl+SKzsEpziThc0da X1wLecg4kMiHgddKas/y3lh5NIcPADF79aUWOwJfGEDDrvEKvFwOpw50ZgGJwQ0f 6t+joB2U7BWUZqVM+J7XedmZMDU6aJqw0iImBXcy9Qvx5KHkx0KhKO7vZm/+JzMe PeiPSH9afopkIsejlhKUUj1oKCLjcVoykKe3OZDy5CXdUu/oRhmHdWNKhKLkT9Q3 irrD9YhFzx7P+TDzpoq9NhpUhwLY9SWgvYpyBOqU16FEsXijcYVyyoNTKQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFE9pmR7xe0y4I4i/kNQ4CokGRaPyMB8GA1UdIwQY MBaAFMoG/yRt9BFkPZ3jZpgYES8zYig7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWdiX0pHMzBFV1E5bmVObW1CZ1JMek5pS0RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84MGE4MDYtMDk3MC00OWFjLTgyNzct MWM0M2Q0YzI3ZDZjLzEvVDJtWkh2RjdUTGdqaUwtUTFEZ0tpUVpGb19JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS84MGE4MDYtMDk3MC00OWFjLTgyNzctMWM0M2Q0YzI3ZDZj LzEveWdiX0pHMzBFV1E5bmVObW1CZ1JMek5pS0RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAmU MA0GCSqGSIb3DQEBCwUAA4IBAQBYAaXYMWu+EDG6n8hXBozBGZzCr8FzQyAgm0/B /F2batPN/3BQGQAIaQElVF2RqkQYbSU0CQreVavo6TEbGtJ0xWXiC/RmcUqqb59m haWKKvMzxLBQjI/0ORrWBFucQDpwtrBVc5B62pDAAgIzSOC+Wxw5Ja00jrsGo6lF Tiy05FruTkRpXrBQq/fVbE6RuD16NbMnYS56m47dNkJ/+BLWjqatF9b/F9W14u0Y THj6JBiFC4UxycVUGPTQ++7Pa12OzQgVpGCHX0NndHN5ecrHHIuFV6LacmgGhboU qf7yMmOS0z620TNtEYVaQ7CUZr1LBiTwlxaubx2Pu2Z5XCNM -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:34 2026 by rpki-client