This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/59tmjDQfU-ncRC8Varmb6pF2lz8.roa File: 59tmjDQfU-ncRC8Varmb6pF2lz8.roa (raw, json) Hash identifier: 3aX8v2tZST5i3tJwk6iAtRnox6a+RxiF+ijUKhsx+YE= Subject key identifier: E7:DB:66:8C:34:1F:53:E9:DC:44:2F:15:6A:B9:9B:EA:91:76:97:3F Certificate issuer: /CN=0ba56abdcb4f6f0c86b832ecc13f5e249721d6f8 Certificate serial: 019B7F15358268045A2A43BFCE2139388E9B Authority key identifier: 0B:A5:6A:BD:CB:4F:6F:0C:86:B8:32:EC:C1:3F:5E:24:97:21:D6:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/59tmjDQfU-ncRC8Varmb6pF2lz8.roa Signing time: Fri 02 Jan 2026 14:20:54 +0000 ROA not before: Fri 02 Jan 2026 14:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201909 IP address blocks: 2001:67c:624::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:35:82:68:04:5a:2a:43:bf:ce:21:39:38:8e:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ba56abdcb4f6f0c86b832ecc13f5e249721d6f8 Validity Not Before: Jan 2 14:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7db668c341f53e9dc442f156ab99bea9176973f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ae:4a:71:26:5b:25:f2:07:41:b9:03:8c:35: 5e:88:cd:1d:49:95:a4:4e:ec:a6:ac:f5:45:6a:22: 94:bd:d7:c4:7d:94:85:67:e7:b5:69:2d:48:b7:46: 91:78:60:0c:cc:5f:6a:e8:f0:d6:71:e7:22:de:f4: 6f:ea:21:5f:1c:d5:dd:d1:2b:19:44:ed:b2:c2:ac: 14:d1:f6:52:d4:15:68:af:54:d2:7c:f0:e6:a9:05: d8:38:a5:28:84:b9:1d:46:15:65:dd:78:12:00:d0: ed:31:2a:29:79:fe:6e:95:49:c1:3a:c0:15:86:2e: bc:f2:2e:1b:57:d4:7b:9c:c3:59:b1:d4:93:8b:86: 37:f7:ae:bd:fd:e2:b7:7d:7c:5a:60:eb:09:c3:15: 03:8b:29:9c:06:4e:a6:1e:3c:62:9f:83:ab:ee:c5: 45:55:92:76:22:f1:38:1a:6e:e7:29:40:6f:b9:cc: a9:43:9c:55:8e:d6:25:2a:b6:8a:e8:ca:d1:78:6e: 73:24:1e:7c:f4:e0:c0:f0:f4:01:e1:07:04:8d:70: be:68:dc:da:ec:db:35:30:e7:7a:3b:d8:87:1c:0c: e2:ef:e5:24:0a:55:b6:d8:34:04:c9:a4:14:c2:59: c3:1f:f0:4d:66:df:e9:7b:a2:cf:8a:0b:b5:80:22: 24:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:DB:66:8C:34:1F:53:E9:DC:44:2F:15:6A:B9:9B:EA:91:76:97:3F X509v3 Authority Key Identifier: keyid:0B:A5:6A:BD:CB:4F:6F:0C:86:B8:32:EC:C1:3F:5E:24:97:21:D6:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/59tmjDQfU-ncRC8Varmb6pF2lz8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:624::/48 Signature Algorithm: sha256WithRSAEncryption 50:41:23:a2:bb:d1:c5:e9:18:6b:d9:ed:b2:8c:47:1b:ca:2f: a0:51:a7:30:27:f6:66:6d:50:4d:e3:ef:d3:86:9c:5d:13:f2: 92:53:bd:07:8b:df:4d:cd:db:22:4e:ab:3c:26:2e:29:70:9e: 3f:6f:f6:a4:f0:da:9a:df:33:40:e5:ee:44:9b:5c:41:e0:24: 1c:f0:4e:78:3d:61:8b:b0:ac:7e:e1:34:93:86:2d:39:d0:c3: a9:80:55:d1:83:32:e8:dd:da:b2:d8:0a:3b:7f:66:ed:0a:4a: c8:2f:fc:bd:6a:00:1b:fb:fe:95:9b:0b:88:b7:ec:11:76:98: f7:82:72:5a:b5:75:6c:a7:14:6d:30:d1:a2:c5:ad:04:82:f2: 17:dc:bf:90:f9:2b:34:28:d6:03:c5:ed:30:1f:a4:a8:e7:a8: 3d:e0:b3:df:6f:da:21:1f:68:70:da:0f:2c:b2:f1:0b:c9:1d: a7:d4:5d:2c:9f:24:c4:2a:17:b6:87:e5:9f:73:c5:60:c0:c8: c8:ac:96:69:1a:ad:4e:b3:bc:9b:07:a3:32:5f:11:6d:b9:95: 84:46:dc:d3:1d:d7:6c:6c:30:8b:41:b2:72:0a:cb:f4:24:48: f3:00:86:ea:0f:a2:f5:0b:de:4c:1b:3b:e5:cf:a3:cd:22:ed: f7:a0:bd:bc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FTWCaARaKkO/ziE5OI6bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYTU2YWJkY2I0ZjZmMGM4NmI4MzJlY2MxM2Y1ZTI0OTcy MWQ2ZjgwHhcNMjYwMTAyMTQyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2RiNjY4YzM0MWY1M2U5ZGM0NDJmMTU2YWI5OWJlYTkxNzY5NzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq5KcSZbJfIHQbkDjDVeiM0dSZWk TuymrPVFaiKUvdfEfZSFZ+e1aS1It0aReGAMzF9q6PDWceci3vRv6iFfHNXd0SsZ RO2ywqwU0fZS1BVor1TSfPDmqQXYOKUohLkdRhVl3XgSANDtMSopef5ulUnBOsAV hi688i4bV9R7nMNZsdSTi4Y39669/eK3fXxaYOsJwxUDiymcBk6mHjxin4Or7sVF VZJ2IvE4Gm7nKUBvucypQ5xVjtYlKraK6MrReG5zJB589ODA8PQB4QcEjXC+aNza 7Ns1MOd6O9iHHAzi7+UkClW22DQEyaQUwlnDH/BNZt/pe6LPigu1gCIk4wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOfbZow0H1Pp3EQvFWq5m+qRdpc/MB8GA1UdIwQY MBaAFAular3LT28Mhrgy7ME/XiSXIdb4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzZWcXZjdFBid3lHdURMc3dUOWVKSmNoMXZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83OGE4NjEtYjkxOC00ZWE3LTg4YTgt NjAzY2IwODM3MTRiLzEvNTl0bWpEUWZVLW5jUkM4VmFybWI2cEYybHo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC83OGE4NjEtYjkxOC00ZWE3LTg4YTgtNjAzY2IwODM3MTRi LzEvQzZWcXZjdFBid3lHdURMc3dUOWVKSmNoMXZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAYk MA0GCSqGSIb3DQEBCwUAA4IBAQBQQSOiu9HF6Rhr2e2yjEcbyi+gUacwJ/ZmbVBN 4+/ThpxdE/KSU70Hi99NzdsiTqs8Ji4pcJ4/b/ak8Nqa3zNA5e5Em1xB4CQc8E54 PWGLsKx+4TSThi050MOpgFXRgzLo3dqy2Ao7f2btCkrIL/y9agAb+/6VmwuIt+wR dpj3gnJatXVspxRtMNGixa0EgvIX3L+Q+Ss0KNYDxe0wH6So56g94LPfb9ohH2hw 2g8ssvELyR2n1F0snyTEKhe2h+Wfc8VgwMjIrJZpGq1Os7ybB6MyXxFtuZWERtzT HddsbDCLQbJyCsv0JEjzAIbqD6L1C95MGzvlz6PNIu33oL28 -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:24 2026 by rpki-client