This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/_2CCeE-Uv7qfwwVfdf-mFwT5gbc.roa File: _2CCeE-Uv7qfwwVfdf-mFwT5gbc.roa (raw, json) Hash identifier: TYooW/gUsVFWHXthOPEQi5a4rd+m2KssG9xszmHlKRY= Subject key identifier: FF:60:82:78:4F:94:BF:BA:9F:C3:05:5F:75:FF:A6:17:04:F9:81:B7 Certificate issuer: /CN=331a51afd4cb6682c230ded640658c113c562fd2 Certificate serial: 019B7F836AF23C9E2095FC4B47FDC2166A70 Authority key identifier: 33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/_2CCeE-Uv7qfwwVfdf-mFwT5gbc.roa Signing time: Fri 02 Jan 2026 16:21:17 +0000 ROA not before: Fri 02 Jan 2026 16:21:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198378 IP address blocks: 2001:67c:7a0::/48 maxlen: 48 2001:67c:ca8::/48 maxlen: 48 2001:67c:cac::/48 maxlen: 48 2001:67c:cb0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:6a:f2:3c:9e:20:95:fc:4b:47:fd:c2:16:6a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331a51afd4cb6682c230ded640658c113c562fd2 Validity Not Before: Jan 2 16:21:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff6082784f94bfba9fc3055f75ffa61704f981b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8c:bf:f2:07:dd:93:c9:4f:6e:d3:4b:db:b5: db:c3:8e:43:27:98:70:a9:46:cd:45:01:c3:7e:2b: 67:f2:ff:17:11:a0:08:29:e9:5e:fa:e5:cd:51:51: 4e:2c:c4:5c:a3:d8:c2:2a:e2:04:ca:83:31:b1:b3: 3b:0a:36:22:22:52:a6:4e:c2:2f:9a:84:91:a0:6e: c6:97:c1:39:e2:72:5c:af:13:6c:d8:46:02:85:47: 31:ee:4b:a5:7f:18:41:16:6f:0d:c1:ce:d2:06:d8: 8d:fc:7b:9c:f0:a4:62:6f:05:3e:17:6f:d3:0a:db: 2b:c7:c8:6d:fd:a7:a3:7c:ee:9b:26:4b:65:f7:6c: 66:46:5a:4b:72:fe:14:44:44:7a:51:cc:91:5e:62: 02:ea:b7:14:8a:d5:fc:fd:9e:05:49:25:bb:96:8d: 3d:f0:8a:c8:dc:aa:c9:a0:88:8c:ed:3d:13:ee:af: a4:aa:94:bf:2c:f1:5f:8b:a2:24:de:a1:d2:9a:8b: 5c:e6:04:73:97:01:69:7c:d1:6a:5d:14:6f:f5:c0: 15:b7:3a:47:ce:96:53:c7:3c:eb:a5:ec:39:2a:c4: 41:1a:2f:75:ad:19:08:50:29:76:a6:a8:22:ee:29: 58:14:66:80:1b:86:27:01:f1:8d:6e:6f:02:e7:15: a5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:60:82:78:4F:94:BF:BA:9F:C3:05:5F:75:FF:A6:17:04:F9:81:B7 X509v3 Authority Key Identifier: keyid:33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/_2CCeE-Uv7qfwwVfdf-mFwT5gbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:7a0::/48 2001:67c:ca8::/48 2001:67c:cac::/48 2001:67c:cb0::/48 Signature Algorithm: sha256WithRSAEncryption 3a:ac:b7:b0:52:54:a5:89:6e:f3:65:5a:98:d9:88:c1:be:22: 41:f3:21:16:d5:28:df:f6:28:26:f0:eb:6b:ea:e0:47:3b:b2: 41:30:91:f5:fd:95:91:4a:d6:d7:0f:cb:0e:97:e8:c2:be:cc: 8a:ff:89:41:cb:55:76:55:cd:33:f3:da:21:d5:0e:35:93:af: 83:1f:00:9b:7a:3c:d4:c9:bd:22:ca:d8:d4:47:76:7a:ae:9d: 01:b5:2a:08:11:05:45:3a:14:a6:59:61:5a:49:e9:97:b9:76: a4:a7:2a:0f:c9:0a:a1:3a:c0:e6:26:06:a4:26:fa:d0:8a:fc: b7:16:75:33:69:7f:b9:07:35:2a:2b:93:27:47:37:3d:98:e5: e9:98:6c:28:97:a6:da:c2:52:17:7a:ed:d4:b8:a9:9a:64:66: 4d:50:85:9c:47:d7:13:0b:1f:43:46:26:a8:72:87:d9:92:7f: ec:c7:8f:6e:6f:32:f7:1a:0d:4f:ea:a6:2b:15:71:24:6c:85: 49:b6:68:fb:ce:7c:24:fb:28:b2:0d:d7:e9:4a:d5:89:d4:ec: f3:f5:7d:cc:8f:8d:ac:f4:66:ff:5a:9f:b5:24:91:44:26:4c: 94:8f:f7:2d:d2:59:7d:19:1f:bb:67:ed:9f:0a:b2:b5:56:5e: 35:92:ae:39 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt/g2ryPJ4glfxLR/3CFmpwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMWE1MWFmZDRjYjY2ODJjMjMwZGVkNjQwNjU4YzExM2M1 NjJmZDIwHhcNMjYwMTAyMTYyMTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjYwODI3ODRmOTRiZmJhOWZjMzA1NWY3NWZmYTYxNzA0Zjk4MWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04y/8gfdk8lPbtNL27Xbw45DJ5hw qUbNRQHDfitn8v8XEaAIKele+uXNUVFOLMRco9jCKuIEyoMxsbM7CjYiIlKmTsIv moSRoG7Gl8E54nJcrxNs2EYChUcx7kulfxhBFm8Nwc7SBtiN/Huc8KRibwU+F2/T Ctsrx8ht/aejfO6bJktl92xmRlpLcv4URER6UcyRXmIC6rcUitX8/Z4FSSW7lo09 8IrI3KrJoIiM7T0T7q+kqpS/LPFfi6Ik3qHSmotc5gRzlwFpfNFqXRRv9cAVtzpH zpZTxzzrpew5KsRBGi91rRkIUCl2pqgi7ilYFGaAG4YnAfGNbm8C5xWlOwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFP9ggnhPlL+6n8MFX3X/phcE+YG3MB8GA1UdIwQY MBaAFDMaUa/Uy2aCwjDe1kBljBE8Vi/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXhwUnI5VExab0xDTU43V1FHV01FVHhXTDlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xY2RiYjEtZTI2NS00NGM1LWI5ODAt NGE1NjZhZGQ1NGIyLzEvXzJDQ2VFLVV2N3Fmd3dWZmRmLW1Gd1Q1Z2JjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xY2RiYjEtZTI2NS00NGM1LWI5ODAtNGE1NjZhZGQ1NGIy LzEvTXhwUnI5VExab0xDTU43V1FHV01FVHhXTDlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAIAEGfAeg AwcAIAEGfAyoAwcAIAEGfAysAwcAIAEGfAywMA0GCSqGSIb3DQEBCwUAA4IBAQA6 rLewUlSliW7zZVqY2YjBviJB8yEW1Sjf9igm8Otr6uBHO7JBMJH1/ZWRStbXD8sO l+jCvsyK/4lBy1V2Vc0z89oh1Q41k6+DHwCbejzUyb0iytjUR3Z6rp0BtSoIEQVF OhSmWWFaSemXuXakpyoPyQqhOsDmJgakJvrQivy3FnUzaX+5BzUqK5MnRzc9mOXp mGwol6bawlIXeu3UuKmaZGZNUIWcR9cTCx9DRiaocofZkn/sx49ubzL3Gg1P6qYr FXEkbIVJtmj7znwk+yiyDdfpStWJ1Ozz9X3Mj42s9Gb/Wp+1JJFEJkyUj/ct0ll9 GR+7Z+2fCrK1Vl41kq45 -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:39 2026 by rpki-client