This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/r23QCb42Tz1gHCNmFF9MYh0kkS0.roa File: r23QCb42Tz1gHCNmFF9MYh0kkS0.roa (raw, json) Hash identifier: ULoM0qs6keKyvA3e5JZk0wAwuCLfnphbYK3aR4+GSfE= Subject key identifier: AF:6D:D0:09:BE:36:4F:3D:60:1C:23:66:14:5F:4C:62:1D:24:91:2D Certificate issuer: /CN=7b69efe6016f72d4592f1b0bab9186476ff3a29d Certificate serial: 019C0E4024FD6BA9DFCB4C1F7C8E8A361974 Authority key identifier: 7B:69:EF:E6:01:6F:72:D4:59:2F:1B:0B:AB:91:86:47:6F:F3:A2:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e2nv5gFvctRZLxsLq5GGR2_zop0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/r23QCb42Tz1gHCNmFF9MYh0kkS0.roa Signing time: Fri 30 Jan 2026 09:33:30 +0000 ROA not before: Fri 30 Jan 2026 09:33:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395909 IP address blocks: 2a0b:71c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.mft rsync://rpki.ripe.net/repository/DEFAULT/e2nv5gFvctRZLxsLq5GGR2_zop0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0e:40:24:fd:6b:a9:df:cb:4c:1f:7c:8e:8a:36:19:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b69efe6016f72d4592f1b0bab9186476ff3a29d Validity Not Before: Jan 30 09:33:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af6dd009be364f3d601c2366145f4c621d24912d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:87:eb:37:6c:64:cb:b6:0a:28:45:e9:07:2e: 04:4b:07:f4:fd:ca:15:81:95:3f:b9:61:ea:c3:6e: b4:a7:5f:fc:64:32:0a:94:60:1a:65:09:29:3c:98: e8:c6:62:75:92:ff:e4:e0:5d:e8:3f:69:9b:43:01: 1f:2c:92:72:20:ca:fc:0d:24:1f:21:9f:c2:97:f2: 37:a8:08:8c:48:0a:e6:c9:57:00:e7:d1:69:41:c1: bd:fe:73:8d:3f:9c:b8:52:b8:11:b1:2f:92:31:ed: d5:8f:cb:9d:ce:97:2f:40:2b:ad:b1:81:2d:a8:7e: de:32:37:6c:17:e1:92:26:10:73:2d:1b:c3:ad:37: ee:2c:62:7a:d6:b2:49:6f:81:d2:a6:0b:4c:5b:83: fa:50:97:a3:2c:8f:dd:66:03:d2:d0:90:1b:dd:49: cc:a5:cc:ce:83:a5:c6:37:bb:c0:eb:0b:4a:a9:e3: 67:27:db:23:7a:f7:58:d1:8e:10:6d:90:2d:ab:3e: 60:3f:8a:d6:0a:43:37:c3:68:6b:04:ca:0f:f0:3b: 61:23:e7:6a:b9:68:66:40:05:bf:58:47:0d:a2:69: 43:25:3b:6e:38:de:bd:20:9b:9e:b8:39:05:46:ad: 77:63:88:fc:a2:dc:42:02:32:39:4c:5c:3b:84:8c: 69:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:6D:D0:09:BE:36:4F:3D:60:1C:23:66:14:5F:4C:62:1D:24:91:2D X509v3 Authority Key Identifier: keyid:7B:69:EF:E6:01:6F:72:D4:59:2F:1B:0B:AB:91:86:47:6F:F3:A2:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2nv5gFvctRZLxsLq5GGR2_zop0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/r23QCb42Tz1gHCNmFF9MYh0kkS0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:71c0::/29 Signature Algorithm: sha256WithRSAEncryption 31:4c:e2:2a:0f:7b:9d:d4:cd:e5:a0:84:ab:08:90:44:69:12: 65:ce:b3:0e:55:01:c3:fa:d0:19:60:31:ce:dc:a4:eb:0b:41: 97:95:e1:5d:c8:45:f2:bb:1f:9c:26:62:eb:6b:73:31:2a:e2: 75:d4:8b:d4:20:76:64:0d:95:2d:11:22:b7:7b:3b:f5:99:c9: b2:7c:c2:11:3c:a4:80:f6:66:60:cc:02:d0:28:7c:59:5b:26: 11:84:6f:a9:54:54:51:2d:03:2e:7c:d1:9b:8c:2f:0b:45:2b: 5b:a1:73:ee:e2:23:ac:af:18:b0:7b:3a:aa:39:09:44:b6:08: 58:a1:22:28:9c:55:0e:1e:9b:b8:c7:94:cd:82:5a:2b:e9:90: 82:1a:ea:1d:48:6f:13:8c:21:08:c9:7c:59:f0:49:53:1d:29: 25:46:c9:ef:de:f9:7b:54:97:32:10:30:c7:db:89:62:0f:60: c1:d3:8a:4c:25:10:b9:dc:85:81:c0:0d:3e:39:ce:72:cf:04: 24:99:74:eb:76:34:19:65:4e:21:d1:84:c9:97:80:18:d0:6e: 5d:85:b7:ba:c7:9a:f1:1c:1c:e5:db:ef:50:52:d4:59:8e:bd: ee:e9:c1:74:7b:46:74:a9:03:e2:6d:06:22:5e:71:d7:59:7e: 99:54:c9:ed -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZwOQCT9a6nfy0wffI6KNhl0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNjllZmU2MDE2ZjcyZDQ1OTJmMWIwYmFiOTE4NjQ3NmZm M2EyOWQwHhcNMjYwMTMwMDkzMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjZkZDAwOWJlMzY0ZjNkNjAxYzIzNjYxNDVmNGM2MjFkMjQ5MTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArofrN2xky7YKKEXpBy4ESwf0/coV gZU/uWHqw260p1/8ZDIKlGAaZQkpPJjoxmJ1kv/k4F3oP2mbQwEfLJJyIMr8DSQf IZ/Cl/I3qAiMSArmyVcA59FpQcG9/nONP5y4UrgRsS+SMe3Vj8udzpcvQCutsYEt qH7eMjdsF+GSJhBzLRvDrTfuLGJ61rJJb4HSpgtMW4P6UJejLI/dZgPS0JAb3UnM pczOg6XGN7vA6wtKqeNnJ9sjevdY0Y4QbZAtqz5gP4rWCkM3w2hrBMoP8DthI+dq uWhmQAW/WEcNomlDJTtuON69IJueuDkFRq13Y4j8otxCAjI5TFw7hIxp2QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFK9t0Am+Nk89YBwjZhRfTGIdJJEtMB8GA1UdIwQY MBaAFHtp7+YBb3LUWS8bC6uRhkdv86KdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTJudjVnRnZjdFJaTHhzTHE1R0dSMl96b3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9mZjM0YmItMTBmOS00NTkzLTljYWYt MWQ4YjlhMWFhNGFkLzEvcjIzUUNiNDJUejFnSENObUZGOU1ZaDBra1MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9mZjM0YmItMTBmOS00NTkzLTljYWYtMWQ4YjlhMWFhNGFk LzEvZTJudjVnRnZjdFJaTHhzTHE1R0dSMl96b3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgtxwDAN BgkqhkiG9w0BAQsFAAOCAQEAMUziKg97ndTN5aCEqwiQRGkSZc6zDlUBw/rQGWAx ztyk6wtBl5XhXchF8rsfnCZi62tzMSriddSL1CB2ZA2VLREit3s79ZnJsnzCETyk gPZmYMwC0Ch8WVsmEYRvqVRUUS0DLnzRm4wvC0UrW6Fz7uIjrK8YsHs6qjkJRLYI WKEiKJxVDh6buMeUzYJaK+mQghrqHUhvE4whCMl8WfBJUx0pJUbJ7975e1SXMhAw x9uJYg9gwdOKTCUQudyFgcANPjnOcs8EJJl063Y0GWVOIdGEyZeAGNBuXYW3usea 8Rwc5dvvUFLUWY697unBdHtGdKkD4m0GIl5x11l+mVTJ7Q== -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:22 2026 by rpki-client