This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/inWJjPlJFW21pp4od2z3iY_uZEk.roa File: inWJjPlJFW21pp4od2z3iY_uZEk.roa (raw, json) Hash identifier: Xd/E3RLJuGMfSPzPkg4w1pBvrrWPKd6B6O8itEqhX1M= Subject key identifier: 8A:75:89:8C:F9:49:15:6D:B5:A6:9E:28:77:6C:F7:89:8F:EE:64:49 Certificate issuer: /CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2 Certificate serial: 019B7D5D0E49544CD90666162165E406B7A5 Authority key identifier: 06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/inWJjPlJFW21pp4od2z3iY_uZEk.roa Signing time: Fri 02 Jan 2026 06:20:09 +0000 ROA not before: Fri 02 Jan 2026 06:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208925 IP address blocks: 2a12:d340::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:0e:49:54:4c:d9:06:66:16:21:65:e4:06:b7:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2 Validity Not Before: Jan 2 06:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a75898cf949156db5a69e28776cf7898fee6449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:7f:dd:f6:2a:10:d2:d1:df:52:ad:cf:0c:91: e2:ac:af:2e:ac:9a:4b:e6:33:c8:39:13:3c:b9:01: bf:b8:28:14:43:01:e7:26:76:82:00:da:2b:53:f9: d9:c4:34:6b:68:e9:14:ac:39:b6:ad:28:2c:7c:7c: b7:c6:af:a1:8e:c2:9e:ef:0d:87:17:4b:80:67:55: 5f:05:56:22:cd:07:ff:c5:43:63:32:40:d6:fe:d2: 57:1e:c9:d9:98:0a:48:fb:4f:4e:ee:aa:d8:72:07: 48:92:c6:fe:fe:73:8b:cb:07:2f:d7:50:25:02:96: 67:b9:e2:ac:aa:89:66:00:e0:38:7c:7d:89:8b:85: b5:3e:fd:fe:25:b1:bd:6d:20:74:93:d7:37:8d:df: f7:ee:b7:ff:30:5d:02:db:f5:86:b8:17:00:c1:39: a1:a3:95:7c:2b:ee:39:b1:12:1c:7e:a0:f4:2a:f1: 3f:b1:cd:14:fb:f8:52:99:21:94:f3:62:35:f4:be: 40:f3:db:19:e7:f5:1d:b9:4b:fc:ff:0a:f6:1b:9c: f8:ef:01:20:0e:ae:50:ec:8d:66:9c:d2:67:94:fe: 09:7e:74:ee:bc:d6:4b:ff:44:47:1a:63:98:7f:d1: a0:60:a1:63:28:db:5e:82:4e:a2:34:86:5e:79:55: f2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:75:89:8C:F9:49:15:6D:B5:A6:9E:28:77:6C:F7:89:8F:EE:64:49 X509v3 Authority Key Identifier: keyid:06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/inWJjPlJFW21pp4od2z3iY_uZEk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:d340::/29 Signature Algorithm: sha256WithRSAEncryption a5:f5:cb:99:c8:c2:5c:1e:38:88:a5:65:d6:05:70:57:cd:3c: 50:20:20:a3:9d:ae:5c:1d:88:14:79:e0:77:60:6c:14:ec:cf: 86:4e:dc:14:66:92:dc:93:6f:94:a1:9f:29:d1:28:c9:52:ed: f6:88:d1:5f:67:76:31:97:be:4e:a7:8f:e8:16:73:ef:63:8d: 3d:7e:a1:73:6b:51:e7:93:f6:52:9a:9e:00:95:53:ea:7c:74: 5e:a6:11:03:cb:84:e9:49:e5:74:f6:1a:25:f2:80:c0:fe:d3: 29:10:4a:da:42:69:57:2e:d6:ca:09:84:82:a5:31:a0:e5:da: ba:78:1a:2c:43:fc:06:cc:01:40:71:a1:83:5c:df:de:b0:bf: fc:8e:d7:4d:98:85:4e:8c:25:df:ba:66:85:05:6f:5a:9d:3e: 6c:70:4f:5c:0e:e3:09:3c:33:19:31:63:da:e2:b6:86:a0:83: 28:19:c3:13:53:9e:0b:bf:83:10:b0:27:c6:a3:f4:eb:12:64: 36:ee:d9:3b:3f:bf:a2:8a:bb:09:43:0b:a0:44:10:dd:93:24: 47:1f:40:ff:a6:9e:0b:be:20:06:16:8c:b6:d2:83:e0:4c:ec: b3:1b:19:18:f4:c1:a9:90:b9:32:49:07:8e:66:49:48:ea:b8: 80:4f:f9:68 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9XQ5JVEzZBmYWIWXkBrelMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MTQ3NGNlY2RmNWY1MDNhZGFiNjBmYzU1ZWU3Zjc4YTBk YmE5ZjIwHhcNMjYwMTAyMDYyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTc1ODk4Y2Y5NDkxNTZkYjVhNjllMjg3NzZjZjc4OThmZWU2NDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83/d9ioQ0tHfUq3PDJHirK8urJpL 5jPIORM8uQG/uCgUQwHnJnaCANorU/nZxDRraOkUrDm2rSgsfHy3xq+hjsKe7w2H F0uAZ1VfBVYizQf/xUNjMkDW/tJXHsnZmApI+09O7qrYcgdIksb+/nOLywcv11Al ApZnueKsqolmAOA4fH2Ji4W1Pv3+JbG9bSB0k9c3jd/37rf/MF0C2/WGuBcAwTmh o5V8K+45sRIcfqD0KvE/sc0U+/hSmSGU82I19L5A89sZ5/UduUv8/wr2G5z47wEg Dq5Q7I1mnNJnlP4JfnTuvNZL/0RHGmOYf9GgYKFjKNtegk6iNIZeeVXy8QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFIp1iYz5SRVttaaeKHds94mP7mRJMB8GA1UdIwQY MBaAFAYUdM7N9fUDratg/FXuf3ig26nyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmhSMHpzMzE5UU90cTJEOFZlNV9lS0RicWZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi85NmRmZjMtYWJlNS00OGZiLWFhMjUt NTI2ZTdmNmQ3ZjViLzEvaW5XSmpQbEpGVzIxcHA0b2QyejNpWV91WkVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi85NmRmZjMtYWJlNS00OGZiLWFhMjUtNTI2ZTdmNmQ3ZjVi LzEvQmhSMHpzMzE5UU90cTJEOFZlNV9lS0RicWZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhLTQDAN BgkqhkiG9w0BAQsFAAOCAQEApfXLmcjCXB44iKVl1gVwV808UCAgo52uXB2IFHng d2BsFOzPhk7cFGaS3JNvlKGfKdEoyVLt9ojRX2d2MZe+TqeP6BZz72ONPX6hc2tR 55P2UpqeAJVT6nx0XqYRA8uE6UnldPYaJfKAwP7TKRBK2kJpVy7WygmEgqUxoOXa ungaLEP8BswBQHGhg1zf3rC//I7XTZiFTowl37pmhQVvWp0+bHBPXA7jCTwzGTFj 2uK2hqCDKBnDE1OeC7+DELAnxqP06xJkNu7ZOz+/ooq7CUMLoEQQ3ZMkRx9A/6ae C74gBhaMttKD4EzssxsZGPTBqZC5MkkHjmZJSOq4gE/5aA== -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:41 2026 by rpki-client