This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/f2zTZpEDsIvIxhsE_dnFRl5OG_8.roa File: f2zTZpEDsIvIxhsE_dnFRl5OG_8.roa (raw, json) Hash identifier: yHUBFABw75uTYWV0KIBM0hBMuveMLRvOaFfpx4Yhnrs= Subject key identifier: 7F:6C:D3:66:91:03:B0:8B:C8:C6:1B:04:FD:D9:C5:46:5E:4E:1B:FF Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7 Certificate serial: 019B7C800D54485DCCC093D6FC29AA8E6A44 Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/f2zTZpEDsIvIxhsE_dnFRl5OG_8.roa Signing time: Fri 02 Jan 2026 02:18:45 +0000 ROA not before: Fri 02 Jan 2026 02:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200718 IP address blocks: 2a13:5682::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:0d:54:48:5d:cc:c0:93:d6:fc:29:aa:8e:6a:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7 Validity Not Before: Jan 2 02:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f6cd3669103b08bc8c61b04fdd9c5465e4e1bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b5:73:bc:57:e0:1c:f1:85:67:32:63:ca:45: 47:e0:92:d9:43:c9:91:8a:af:c3:61:eb:eb:56:82: b1:3b:30:82:6a:11:ec:0c:3b:86:a8:74:95:91:44: 92:ec:26:e4:d7:2f:a4:8e:8e:7b:74:47:90:c2:f8: 7c:03:6b:27:e6:5d:3d:c4:2b:78:fc:74:5a:d4:6c: b8:42:d7:11:c7:4e:30:07:88:ea:62:ae:1f:a8:36: 99:18:fa:80:2e:2d:30:ff:22:bf:b1:52:1a:e3:f6: 4c:7f:35:e6:f8:6e:46:8b:1e:97:ea:16:86:38:5f: 11:ce:58:f8:de:a0:28:b6:b3:07:e1:aa:64:0e:05: 6b:45:bc:f8:a2:1d:5d:7e:5d:42:ca:3e:72:f3:3b: 69:d5:87:8a:4e:59:46:df:b2:96:57:7e:cb:9d:d1: 4d:ab:45:ae:6c:14:ba:a0:01:90:0b:08:88:b1:da: 69:e4:4b:84:50:c0:1f:5c:e4:f7:f0:13:d5:69:60: 35:95:82:c5:dc:86:0a:6f:83:c1:df:97:72:90:98: 82:21:34:11:29:31:12:10:11:c0:77:ac:73:a2:d3: 92:8f:9f:ac:e4:94:dc:d0:14:9f:68:2d:ed:38:97: 6b:36:dc:4e:ef:34:0b:89:6f:e7:13:a9:92:c0:e3: 2f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6C:D3:66:91:03:B0:8B:C8:C6:1B:04:FD:D9:C5:46:5E:4E:1B:FF X509v3 Authority Key Identifier: keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/f2zTZpEDsIvIxhsE_dnFRl5OG_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:5682::/40 Signature Algorithm: sha256WithRSAEncryption 5e:9a:72:e9:b5:0b:23:2f:4b:9d:16:f3:ef:81:4b:12:4c:be: fd:51:4e:ef:26:22:b4:f7:72:78:c5:df:0c:56:63:27:23:61: f5:6a:5b:71:fe:8e:f3:88:2e:b8:ee:7e:d5:40:44:9e:32:28: bc:f6:dd:87:f2:37:dd:92:08:63:19:f6:69:30:9c:33:4b:1f: 43:31:0f:59:b4:e4:d6:9e:c5:86:dc:dc:c7:aa:ff:e4:07:d9: 20:3c:cc:0e:e1:4a:b3:32:52:76:75:57:5c:eb:11:72:80:ad: 99:ea:81:4f:3e:7d:4a:c4:7f:31:d6:be:52:d4:4a:89:f2:67: 11:db:0e:e7:71:30:93:ab:e1:fa:84:e5:45:49:db:dc:fa:b6: 58:68:05:6f:04:80:61:b1:b8:a5:a1:cb:3d:3a:06:5e:2e:60: e0:8b:f7:fb:04:fe:10:3e:9e:7a:e0:de:50:79:b6:58:af:38: 85:5e:70:ed:2f:31:72:47:41:1f:a8:20:21:4e:bb:31:8c:00: 80:76:d9:18:bb:4d:81:08:10:ed:f0:9a:5e:8c:e4:47:f7:58: c7:5f:6c:15:a2:22:dc:9f:5f:65:9b:e0:0c:84:67:32:51:8a: 24:e2:24:c7:71:ca:78:bb:7a:e8:ad:1b:52:d7:bf:b8:d9:ce: 97:ac:35:9a -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8gA1USF3MwJPW/CmqjmpEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiZDg3YmJlZjU5NDM1NDZiMmE4M2QzMWVjMmI5OWFkODgz ZDUxZDcwHhcNMjYwMTAyMDIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjZjZDM2NjkxMDNiMDhiYzhjNjFiMDRmZGQ5YzU0NjVlNGUxYmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurVzvFfgHPGFZzJjykVH4JLZQ8mR iq/DYevrVoKxOzCCahHsDDuGqHSVkUSS7Cbk1y+kjo57dEeQwvh8A2sn5l09xCt4 /HRa1Gy4QtcRx04wB4jqYq4fqDaZGPqALi0w/yK/sVIa4/ZMfzXm+G5Gix6X6haG OF8Rzlj43qAotrMH4apkDgVrRbz4oh1dfl1Cyj5y8ztp1YeKTllG37KWV37LndFN q0WubBS6oAGQCwiIsdpp5EuEUMAfXOT38BPVaWA1lYLF3IYKb4PB35dykJiCITQR KTESEBHAd6xzotOSj5+s5JTc0BSfaC3tOJdrNtxO7zQLiW/nE6mSwOMvpwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFH9s02aRA7CLyMYbBP3ZxUZeThv/MB8GA1UdIwQY MBaAFKvYe771lDVGsqg9Mewrma2IPVHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYt MmY1Yzc0YzY5YWUxLzEvZjJ6VFpwRURzSXZJeGhzRV9kbkZSbDVPR184LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYtMmY1Yzc0YzY5YWUx LzEvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhNWggAw DQYJKoZIhvcNAQELBQADggEBAF6acum1CyMvS50W8++BSxJMvv1RTu8mIrT3cnjF 3wxWYycjYfVqW3H+jvOILrjuftVARJ4yKLz23YfyN92SCGMZ9mkwnDNLH0MxD1m0 5NaexYbc3Meq/+QH2SA8zA7hSrMyUnZ1V1zrEXKArZnqgU8+fUrEfzHWvlLUSony ZxHbDudxMJOr4fqE5UVJ29z6tlhoBW8EgGGxuKWhyz06Bl4uYOCL9/sE/hA+nnrg 3lB5tlivOIVecO0vMXJHQR+oICFOuzGMAIB22Ri7TYEIEO3wml6M5Ef3WMdfbBWi ItyfX2Wb4AyEZzJRiiTiJMdxyni7euitG1LXv7jZzpesNZo= -----END CERTIFICATE-----Generated at Thu Jan 22 01:14:50 2026 by rpki-client