This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/Ug2vF1vgPHmEqRhi6uOzDzFa8k4.roa File: Ug2vF1vgPHmEqRhi6uOzDzFa8k4.roa (raw, json) Hash identifier: J3X4+yL+W+OJhZWrAFHs4AhqGxikLkSzill4Qp4q87Q= Subject key identifier: 52:0D:AF:17:5B:E0:3C:79:84:A9:18:62:EA:E3:B3:0F:31:5A:F2:4E Certificate issuer: /CN=a41c96e931eee41b899d62c7db83633446a3c42b Certificate serial: 019B77C6A00EF0D8FDCA2841B11D31A04A87 Authority key identifier: A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/Ug2vF1vgPHmEqRhi6uOzDzFa8k4.roa Signing time: Thu 01 Jan 2026 04:17:44 +0000 ROA not before: Thu 01 Jan 2026 04:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200273 IP address blocks: 2001:678:7f8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a0:0e:f0:d8:fd:ca:28:41:b1:1d:31:a0:4a:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a41c96e931eee41b899d62c7db83633446a3c42b Validity Not Before: Jan 1 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=520daf175be03c7984a91862eae3b30f315af24e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:92:94:12:0f:6a:a6:e4:ce:b0:e4:a5:75:9b: 2d:61:00:13:a3:8c:66:6d:ec:ad:1a:37:54:97:68: 86:67:75:20:52:d4:34:59:56:0c:d9:af:5b:2e:87: 18:b4:fb:e1:1d:5d:1e:74:4e:98:f7:0a:b2:5f:e4: 1d:6f:5a:4b:0f:24:16:e2:26:3e:98:fb:85:93:17: 79:50:71:f8:5d:74:92:dc:0c:90:2c:c1:a6:90:41: 29:a4:4c:84:92:e7:e7:ff:1b:8d:59:1f:25:63:3b: 2a:b3:fd:f9:db:f8:15:ec:2c:39:d6:0b:00:93:cc: be:f3:e7:fe:1e:81:76:23:c5:9e:79:f3:c2:77:d0: d9:47:78:48:18:fa:f9:b9:10:d5:d8:06:44:7b:89: e9:1f:69:e2:ba:d4:e8:ed:f6:dd:e2:57:12:aa:5d: 66:4d:2f:09:a0:da:5e:fc:39:26:18:68:4b:68:78: d8:8c:59:92:d9:92:bf:ee:32:99:27:59:ba:f1:3b: 03:2b:6d:b0:c8:33:1f:37:bb:53:63:a6:eb:73:58: d7:d1:70:cd:f5:55:b3:ae:86:da:4e:e3:fa:54:d1: b3:28:47:a2:9c:f0:17:a5:44:25:89:bb:f3:b3:0b: 11:d6:e4:d6:fb:7d:99:60:d4:25:a7:b4:d8:9e:91: 6a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0D:AF:17:5B:E0:3C:79:84:A9:18:62:EA:E3:B3:0F:31:5A:F2:4E X509v3 Authority Key Identifier: keyid:A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/Ug2vF1vgPHmEqRhi6uOzDzFa8k4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:7f8::/48 Signature Algorithm: sha256WithRSAEncryption 0c:e6:58:3d:d4:45:65:4a:ad:d6:b3:9d:c0:92:32:c8:78:25: 72:e4:68:ef:be:9d:23:0c:d2:39:57:7c:19:90:41:cf:00:b4: 6f:e9:82:45:98:c2:01:68:39:77:59:7f:1f:cb:5e:32:ff:57: 3d:52:e0:11:21:92:55:b1:9e:69:5f:16:6b:cb:00:3b:69:b1: 63:b4:28:19:4a:fa:61:9b:62:ca:d8:46:f7:1c:0a:f0:44:67: 9b:5b:93:3c:b4:83:53:fe:f5:a6:da:c0:68:5f:eb:ef:cc:c7: b2:e4:a7:dc:52:53:1c:b8:5c:d5:d2:47:58:03:f2:61:a4:6c: 43:4d:ac:d5:22:d4:fd:c7:ec:37:ab:ce:75:de:8c:72:16:fa: 5c:f9:26:3c:0e:2c:08:d3:05:51:95:6c:0f:d2:f7:fd:b0:a5: 2d:63:72:c3:c5:17:2f:59:a4:fa:0d:19:33:c8:00:93:b9:eb: d6:3a:46:c7:47:9c:f1:1a:de:b6:72:ee:99:63:dc:1c:3f:17: c9:04:7b:4d:6e:b1:1b:9b:4e:bd:07:c4:6d:ae:4a:89:4f:5c: c8:3c:0b:54:1d:d7:88:48:bb:cc:5b:6b:b2:e8:a0:7d:df:14: e0:7c:a6:91:6d:9d:e6:25:68:4b:98:bd:f3:a4:5c:e5:ac:6a: ba:13:2f:cc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3xqAO8Nj9yihBsR0xoEqHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MWM5NmU5MzFlZWU0MWI4OTlkNjJjN2RiODM2MzM0NDZh M2M0MmIwHhcNMjYwMTAxMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjBkYWYxNzViZTAzYzc5ODRhOTE4NjJlYWUzYjMwZjMxNWFmMjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJKUEg9qpuTOsOSldZstYQATo4xm beytGjdUl2iGZ3UgUtQ0WVYM2a9bLocYtPvhHV0edE6Y9wqyX+Qdb1pLDyQW4iY+ mPuFkxd5UHH4XXSS3AyQLMGmkEEppEyEkufn/xuNWR8lYzsqs/352/gV7Cw51gsA k8y+8+f+HoF2I8WeefPCd9DZR3hIGPr5uRDV2AZEe4npH2niutTo7fbd4lcSql1m TS8JoNpe/DkmGGhLaHjYjFmS2ZK/7jKZJ1m68TsDK22wyDMfN7tTY6brc1jX0XDN 9VWzrobaTuP6VNGzKEeinPAXpUQlibvzswsR1uTW+32ZYNQlp7TYnpFqPQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFINrxdb4Dx5hKkYYurjsw8xWvJOMB8GA1UdIwQY MBaAFKQclukx7uQbiZ1ix9uDYzRGo8QrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEJ5VzZUSHU1QnVKbldMSDI0TmpORWFqeENzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82YmRkNzQtOGNkMC00Y2M0LThiNjct ZjgzZTNjNzFlZmNiLzEvVWcydkYxdmdQSG1FcVJoaTZ1T3pEekZhOGs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy82YmRkNzQtOGNkMC00Y2M0LThiNjctZjgzZTNjNzFlZmNi LzEvcEJ5VzZUSHU1QnVKbldMSDI0TmpORWFqeENzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAf4 MA0GCSqGSIb3DQEBCwUAA4IBAQAM5lg91EVlSq3Ws53AkjLIeCVy5Gjvvp0jDNI5 V3wZkEHPALRv6YJFmMIBaDl3WX8fy14y/1c9UuARIZJVsZ5pXxZrywA7abFjtCgZ Svphm2LK2Eb3HArwRGebW5M8tINT/vWm2sBoX+vvzMey5KfcUlMcuFzV0kdYA/Jh pGxDTazVItT9x+w3q8513oxyFvpc+SY8DiwI0wVRlWwP0vf9sKUtY3LDxRcvWaT6 DRkzyACTuevWOkbHR5zxGt62cu6ZY9wcPxfJBHtNbrEbm069B8RtrkqJT1zIPAtU HdeISLvMW2uy6KB93xTgfKaRbZ3mJWhLmL3zpFzlrGq6Ey/M -----END CERTIFICATE-----Generated at Tue Feb 10 01:15:15 2026 by rpki-client