This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/iEGrmEBr_XYHG10FFaz1pHlElzU.roa File: iEGrmEBr_XYHG10FFaz1pHlElzU.roa (raw, json) Hash identifier: Cm2PlN0NZyKWye3mjv4O21ycHAo7BA8ZMRSr0N03Zos= Subject key identifier: 88:41:AB:98:40:6B:FD:76:07:1B:5D:05:15:AC:F5:A4:79:44:97:35 Certificate issuer: /CN=f7b7c2e8453ed4c0929c7504baf046043159d105 Certificate serial: 019B7A5B8456E520EB3BF490FC7EB3D5599D Authority key identifier: F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/iEGrmEBr_XYHG10FFaz1pHlElzU.roa Signing time: Thu 01 Jan 2026 16:19:36 +0000 ROA not before: Thu 01 Jan 2026 16:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12360 IP address blocks: 2001:678:78c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:84:56:e5:20:eb:3b:f4:90:fc:7e:b3:d5:59:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7b7c2e8453ed4c0929c7504baf046043159d105 Validity Not Before: Jan 1 16:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8841ab98406bfd76071b5d0515acf5a479449735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b7:63:58:c8:e7:48:a8:db:fb:4d:d1:15:1c: ca:49:53:b4:f9:8e:b7:39:3f:75:73:c5:e8:fd:63: 27:86:5b:e7:4f:7f:86:e8:ae:9c:52:15:d2:24:51: 48:78:69:f4:19:33:af:9d:1a:e4:17:2b:7e:50:c8: e7:a4:5e:91:1e:b5:c8:94:a9:92:7e:7c:0a:df:ba: 69:e8:f6:26:27:2a:ba:99:93:68:42:8b:fc:92:3f: 8f:27:0d:82:67:0a:e4:8e:b4:bf:63:6d:c9:9d:32: 69:68:e1:60:b9:37:4d:2e:92:3d:1c:fe:01:6f:7a: db:38:24:91:2a:ce:30:d9:b3:14:7b:ff:da:8d:1b: 73:9d:89:0a:42:00:54:28:53:3b:f1:70:ed:3c:10: aa:45:e4:dc:85:d7:ed:09:26:e3:58:f7:eb:2c:4a: 02:ec:fb:08:da:77:4d:8d:41:70:ec:7b:69:29:9a: ce:53:a0:6c:2e:65:d1:f6:62:ad:70:a8:2e:dd:b9: 12:a7:23:72:c4:a6:8d:1b:d0:a2:f4:40:19:83:ce: 22:e6:14:91:d5:26:72:0e:e8:09:bf:22:45:4f:14: 98:83:40:11:bc:2b:4f:33:7a:e9:56:6b:f1:5c:b5: 38:19:8f:13:1f:b0:62:54:b0:90:fc:56:d1:9e:7c: 1a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:41:AB:98:40:6B:FD:76:07:1B:5D:05:15:AC:F5:A4:79:44:97:35 X509v3 Authority Key Identifier: keyid:F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/iEGrmEBr_XYHG10FFaz1pHlElzU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:78c::/48 Signature Algorithm: sha256WithRSAEncryption 19:a3:2f:c0:32:56:14:f9:da:e5:d0:58:9a:63:4f:c6:c5:5b: 1e:f9:e0:dc:95:d5:1a:26:c5:ff:8a:59:49:27:a4:6a:e8:de: ee:b1:97:ad:8a:b7:0e:8d:f2:47:04:26:42:d1:7e:b9:16:59: 91:e8:86:5e:db:00:04:67:88:e2:8a:32:f3:11:cf:a5:f7:53: ed:d7:5b:e4:9c:4f:e5:07:c1:96:49:d3:7f:09:dd:bf:0a:3b: 30:44:65:15:88:90:52:dc:e6:3b:c6:82:07:60:0b:0a:42:65: a4:80:a3:7d:d0:b8:07:0b:5e:ba:5c:aa:aa:a2:db:51:ec:64: af:8d:68:2c:0b:9e:11:e9:81:79:30:be:d6:e7:b1:f7:61:f0: f7:07:f8:c4:d9:64:f5:38:96:02:97:58:27:2c:54:94:d7:00: cc:2e:1b:f8:d8:cc:4d:9e:34:83:bf:58:e7:90:3e:95:61:9b: ce:4c:f5:1e:a0:4e:86:3c:39:a9:d4:a6:04:e8:42:60:f9:1d: 2e:cc:9b:88:9a:08:2d:95:36:75:b8:f5:46:07:b8:98:d0:2a: 5b:53:bd:5f:6b:5c:4a:ff:57:2a:47:84:77:5e:54:df:9b:fa: 7b:25:86:ec:f3:8c:82:7a:eb:bf:b1:06:58:4e:78:7a:0e:7d: 0c:da:3e:25 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6W4RW5SDrO/SQ/H6z1VmdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YjdjMmU4NDUzZWQ0YzA5MjljNzUwNGJhZjA0NjA0MzE1 OWQxMDUwHhcNMjYwMTAxMTYxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODQxYWI5ODQwNmJmZDc2MDcxYjVkMDUxNWFjZjVhNDc5NDQ5NzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LdjWMjnSKjb+03RFRzKSVO0+Y63 OT91c8Xo/WMnhlvnT3+G6K6cUhXSJFFIeGn0GTOvnRrkFyt+UMjnpF6RHrXIlKmS fnwK37pp6PYmJyq6mZNoQov8kj+PJw2CZwrkjrS/Y23JnTJpaOFguTdNLpI9HP4B b3rbOCSRKs4w2bMUe//ajRtznYkKQgBUKFM78XDtPBCqReTchdftCSbjWPfrLEoC 7PsI2ndNjUFw7HtpKZrOU6BsLmXR9mKtcKgu3bkSpyNyxKaNG9Ci9EAZg84i5hSR 1SZyDugJvyJFTxSYg0ARvCtPM3rpVmvxXLU4GY8TH7BiVLCQ/FbRnnwamwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIhBq5hAa/12BxtdBRWs9aR5RJc1MB8GA1UdIwQY MBaAFPe3wuhFPtTAkpx1BLrwRgQxWdEFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTdmQzZFVS0xTUNTbkhVRXV2QkdCREZaMFFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82NjE2NzktYWMyNS00M2VlLTljYmYt OGNmMjU0YjQ4Nzk0LzEvaUVHcm1FQnJfWFlIRzEwRkZhejFwSGxFbHpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC82NjE2NzktYWMyNS00M2VlLTljYmYtOGNmMjU0YjQ4Nzk0 LzEvOTdmQzZFVS0xTUNTbkhVRXV2QkdCREZaMFFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAeM MA0GCSqGSIb3DQEBCwUAA4IBAQAZoy/AMlYU+drl0FiaY0/GxVse+eDcldUaJsX/ illJJ6Rq6N7usZetircOjfJHBCZC0X65FlmR6IZe2wAEZ4jiijLzEc+l91Pt11vk nE/lB8GWSdN/Cd2/CjswRGUViJBS3OY7xoIHYAsKQmWkgKN90LgHC166XKqqottR 7GSvjWgsC54R6YF5ML7W57H3YfD3B/jE2WT1OJYCl1gnLFSU1wDMLhv42MxNnjSD v1jnkD6VYZvOTPUeoE6GPDmp1KYE6EJg+R0uzJuImggtlTZ1uPVGB7iY0CpbU71f a1xK/1cqR4R3XlTfm/p7JYbs84yCeuu/sQZYTnh6Dn0M2j4l -----END CERTIFICATE-----Generated at Mon Feb 9 21:19:42 2026 by rpki-client