This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/aPQErA1H1tvLKOM_S7Xvs0Zudg0.roa File: aPQErA1H1tvLKOM_S7Xvs0Zudg0.roa (raw, json) Hash identifier: YgDV6lSWXJsx/Tra+FgUOmYQqBP8G4F9S/WJqO8pRPM= Subject key identifier: 68:F4:04:AC:0D:47:D6:DB:CB:28:E3:3F:4B:B5:EF:B3:46:6E:76:0D Certificate issuer: /CN=c2dd4752d79d4388c1f6b285603d40b5a4b69536 Certificate serial: 019C3260875009D5AC8268882716E8C5B005 Authority key identifier: C2:DD:47:52:D7:9D:43:88:C1:F6:B2:85:60:3D:40:B5:A4:B6:95:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/aPQErA1H1tvLKOM_S7Xvs0Zudg0.roa Signing time: Fri 06 Feb 2026 09:55:12 +0000 ROA not before: Fri 06 Feb 2026 09:55:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199109 IP address blocks: 2001:678:c64::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:32:60:87:50:09:d5:ac:82:68:88:27:16:e8:c5:b0:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2dd4752d79d4388c1f6b285603d40b5a4b69536 Validity Not Before: Feb 6 09:55:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68f404ac0d47d6dbcb28e33f4bb5efb3466e760d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8e:ea:87:4a:96:f4:6e:4c:89:29:68:12:fb: fb:4e:9b:d5:61:1c:53:e5:94:13:64:08:b0:54:3e: f1:81:15:81:5d:93:7e:2b:a3:43:7b:11:d8:14:a8: b7:2e:ae:d3:01:7e:50:e2:89:a9:cc:d8:e7:b1:87: db:66:e6:58:55:ea:24:0d:0e:b2:42:b0:6c:cd:e7: e2:fc:6b:7a:bf:d2:db:9f:a0:02:45:70:76:f7:ae: a2:8d:47:77:b0:25:1d:78:f4:f8:50:87:4e:07:79: 7b:00:72:1e:7a:85:20:bc:47:aa:7e:88:36:92:c3: bc:3d:89:b3:28:80:d4:b0:df:52:b6:be:d5:39:77: 7a:af:21:b1:ec:71:02:51:40:f4:8d:be:45:49:75: 2c:d9:47:33:33:84:1c:86:fe:83:a9:ef:39:db:2e: 4e:14:bb:b9:bd:9c:03:99:f2:d1:e9:a5:97:25:f4: fa:bc:eb:50:b9:c5:fc:5e:39:e9:e8:9f:2e:68:63: e3:69:3f:ca:a4:da:06:41:32:c5:ad:9b:88:be:bc: 5c:1b:e9:c0:89:7a:59:b2:ab:85:25:a6:41:04:d1: 70:55:3f:83:f8:7c:4e:a0:25:47:7c:9c:5a:3d:0d: 74:f4:9b:73:56:30:c2:f2:6d:28:85:3d:06:eb:fc: 4c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F4:04:AC:0D:47:D6:DB:CB:28:E3:3F:4B:B5:EF:B3:46:6E:76:0D X509v3 Authority Key Identifier: keyid:C2:DD:47:52:D7:9D:43:88:C1:F6:B2:85:60:3D:40:B5:A4:B6:95:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/aPQErA1H1tvLKOM_S7Xvs0Zudg0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:c64::/48 Signature Algorithm: sha256WithRSAEncryption 64:92:19:ef:50:60:0f:14:16:df:9e:c6:2c:4b:7d:21:04:9f: da:8f:a2:a3:a6:27:ba:7f:4f:5b:43:2a:bf:e7:5f:05:2e:e9: 14:19:6b:94:33:74:21:4e:93:91:16:44:bf:ca:4e:99:e7:f4: e8:fa:3f:dc:d0:ef:06:90:a6:e2:53:cd:1e:91:60:4b:df:c7: 09:b9:a2:74:f4:3d:a7:0d:1c:a3:65:d6:9d:5a:84:de:7f:35: c4:8c:76:f1:3d:b6:63:cf:79:f3:51:46:26:52:e4:a9:cb:f0: f3:98:ac:5e:5e:d0:91:1b:35:f5:0d:52:e0:c8:95:22:05:ba: 3b:3e:4d:65:4a:4c:c5:e8:59:46:3a:39:fe:f4:a9:6b:c2:7d: b0:a0:fe:c3:4a:fd:ee:ae:99:e7:7e:3b:49:18:43:67:4c:c9: 5b:b7:1e:eb:34:f6:b8:ff:4d:5f:fa:2e:0d:ff:19:25:1b:d4: 16:3a:c0:23:45:1c:6c:e7:6b:46:15:ca:cf:a5:fe:3d:c3:0f: 10:40:cc:19:71:5f:5e:14:7c:93:2a:93:08:b4:c4:c6:00:d0: 9c:66:bc:ed:24:9d:ec:a5:a2:bd:35:fd:0a:01:36:87:29:eb: 62:b3:65:c7:4b:27:6d:6b:2d:cf:03:5a:43:39:be:96:e4:7c: af:f8:9a:d1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZwyYIdQCdWsgmiIJxboxbAFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZGQ0NzUyZDc5ZDQzODhjMWY2YjI4NTYwM2Q0MGI1YTRi Njk1MzYwHhcNMjYwMjA2MDk1NTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGY0MDRhYzBkNDdkNmRiY2IyOGUzM2Y0YmI1ZWZiMzQ2NmU3NjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA347qh0qW9G5MiSloEvv7TpvVYRxT 5ZQTZAiwVD7xgRWBXZN+K6NDexHYFKi3Lq7TAX5Q4ompzNjnsYfbZuZYVeokDQ6y QrBszefi/Gt6v9Lbn6ACRXB2966ijUd3sCUdePT4UIdOB3l7AHIeeoUgvEeqfog2 ksO8PYmzKIDUsN9Str7VOXd6ryGx7HECUUD0jb5FSXUs2UczM4Qchv6Dqe852y5O FLu5vZwDmfLR6aWXJfT6vOtQucX8Xjnp6J8uaGPjaT/KpNoGQTLFrZuIvrxcG+nA iXpZsquFJaZBBNFwVT+D+HxOoCVHfJxaPQ109JtzVjDC8m0ohT0G6/xMYQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGj0BKwNR9bbyyjjP0u177NGbnYNMB8GA1UdIwQY MBaAFMLdR1LXnUOIwfayhWA9QLWktpU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3QxSFV0ZWRRNGpCOXJLRllEMUF0YVMybFRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9lMWIyZDctMjcwMi00ODMxLWJhNTAt NGE1NzU2NjQ5ZTAxLzEvYVBRRXJBMUgxdHZMS09NX1M3WHZzMFp1ZGcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9lMWIyZDctMjcwMi00ODMxLWJhNTAtNGE1NzU2NjQ5ZTAx LzEvd3QxSFV0ZWRRNGpCOXJLRllEMUF0YVMybFRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAxk MA0GCSqGSIb3DQEBCwUAA4IBAQBkkhnvUGAPFBbfnsYsS30hBJ/aj6Kjpie6f09b Qyq/518FLukUGWuUM3QhTpORFkS/yk6Z5/To+j/c0O8GkKbiU80ekWBL38cJuaJ0 9D2nDRyjZdadWoTefzXEjHbxPbZjz3nzUUYmUuSpy/DzmKxeXtCRGzX1DVLgyJUi Bbo7Pk1lSkzF6FlGOjn+9Klrwn2woP7DSv3urpnnfjtJGENnTMlbtx7rNPa4/01f +i4N/xklG9QWOsAjRRxs52tGFcrPpf49ww8QQMwZcV9eFHyTKpMItMTGANCcZrzt JJ3spaK9Nf0KATaHKetis2XHSydtay3PA1pDOb6W5Hyv+JrR -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:18 2026 by rpki-client