This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/2Lj6KAHa7H9f4SxUIEO7Uz1pweY.roa File: 2Lj6KAHa7H9f4SxUIEO7Uz1pweY.roa (raw, json) Hash identifier: gFIOx1qhwOYwQbgborzlAfR9qq8vv6N65dglePA77l4= Subject key identifier: D8:B8:FA:28:01:DA:EC:7F:5F:E1:2C:54:20:43:BB:53:3D:69:C1:E6 Certificate issuer: /CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e Certificate serial: 019B791090B573CE90F69BA94CEEFFB02DF5 Authority key identifier: CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/2Lj6KAHa7H9f4SxUIEO7Uz1pweY.roa Signing time: Thu 01 Jan 2026 10:18:07 +0000 ROA not before: Thu 01 Jan 2026 10:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206253 IP address blocks: 2001:678:968::/48 maxlen: 48 2001:678:968::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:90:b5:73:ce:90:f6:9b:a9:4c:ee:ff:b0:2d:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e Validity Not Before: Jan 1 10:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8b8fa2801daec7f5fe12c542043bb533d69c1e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5a:7a:b7:d2:27:bb:0f:6e:f1:62:01:0e:d8: a5:fa:17:49:a4:7b:0b:bf:c0:ea:5f:71:3b:40:3b: 6d:0f:aa:a2:3f:d3:4e:38:7d:12:d3:18:3f:f2:73: bd:a8:77:6f:af:24:ce:0a:20:f3:80:91:f6:51:59: a7:58:e8:1e:c0:3e:7e:df:2a:db:91:ba:03:5d:4e: 0a:4c:8e:e1:23:f9:00:79:6f:6d:da:ca:28:61:db: ab:63:a0:f6:f1:be:da:c8:b9:8e:5d:34:be:ab:be: e4:5d:7e:cb:55:9b:dc:76:a7:74:ec:75:a7:b2:b7: 59:23:02:bd:8e:45:58:a5:f1:97:9c:c3:1f:44:b6: 67:47:48:75:37:68:3f:dc:dc:fd:b4:78:3b:bf:23: 33:ec:53:e8:10:9b:94:4d:7b:34:51:3f:63:0c:91: ad:77:24:90:52:62:29:d2:c2:d1:c0:d6:ff:67:38: fe:e9:82:37:9e:6b:54:04:ad:e7:ce:cb:32:4e:79: 1d:3e:0b:b3:fd:1b:90:54:f8:d3:4f:e5:a2:f0:23: 65:03:95:eb:6e:ad:df:a6:6e:24:3f:34:9f:cb:c5: f7:3a:c1:6f:7f:cd:4e:88:a8:ec:0e:82:36:58:87: 1c:ef:f5:3e:6a:87:9c:c2:5a:c4:bb:b7:db:51:7c: 42:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B8:FA:28:01:DA:EC:7F:5F:E1:2C:54:20:43:BB:53:3D:69:C1:E6 X509v3 Authority Key Identifier: keyid:CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/2Lj6KAHa7H9f4SxUIEO7Uz1pweY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:968::/48 Signature Algorithm: sha256WithRSAEncryption 8b:5a:66:63:1a:81:19:3d:e4:66:7c:f4:b1:c4:c6:8a:71:0f: fb:51:68:41:d2:95:0b:53:8d:b6:f5:5d:ae:ea:26:9f:30:1e: 27:b2:79:44:fa:97:40:a8:d6:06:14:d1:09:16:b5:0f:08:25: 60:e4:12:07:4c:76:f3:63:da:e1:5f:db:86:24:c8:65:05:81: 4e:87:c3:35:1a:ea:c8:b9:40:01:53:86:73:1a:7b:33:77:7b: 11:2d:8a:22:8c:2f:8f:ac:8d:3f:ef:54:8a:f4:fa:63:92:6d: 57:a4:05:5c:a2:94:b9:17:25:ae:f6:a2:da:08:f2:5e:e4:7d: 35:eb:49:6b:c4:0e:d2:f7:03:90:b4:a3:a0:fb:b7:2a:d6:d8: 3c:73:d5:0d:94:69:62:0d:52:67:be:f5:27:9f:8d:4d:16:dc: 47:3e:e1:42:00:ba:b2:7c:c8:29:3c:3b:ed:e0:ce:9b:7e:9a: 27:ea:fe:e8:cd:e1:6e:7e:8a:4f:e3:3e:95:d7:13:16:d1:d0: 90:00:70:ac:a3:64:95:07:c5:37:2b:a2:c2:55:25:b3:4f:5b: df:1d:42:af:a6:05:5b:79:d7:2e:38:97:7c:b5:4c:e3:d3:bb: c8:1b:62:4f:4c:fe:44:ac:ca:f7:55:e8:69:1e:67:10:af:70: 59:36:22:ce -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EJC1c86Q9pupTO7/sC31MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjOWZhMGIzMGQ1NDU1YWQ2N2ZiMDdlMDk5ZjBmYTk1Zjhi NmMxOWUwHhcNMjYwMTAxMTAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGI4ZmEyODAxZGFlYzdmNWZlMTJjNTQyMDQzYmI1MzNkNjljMWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFp6t9Inuw9u8WIBDtil+hdJpHsL v8DqX3E7QDttD6qiP9NOOH0S0xg/8nO9qHdvryTOCiDzgJH2UVmnWOgewD5+3yrb kboDXU4KTI7hI/kAeW9t2sooYdurY6D28b7ayLmOXTS+q77kXX7LVZvcdqd07HWn srdZIwK9jkVYpfGXnMMfRLZnR0h1N2g/3Nz9tHg7vyMz7FPoEJuUTXs0UT9jDJGt dySQUmIp0sLRwNb/Zzj+6YI3nmtUBK3nzssyTnkdPguz/RuQVPjTT+Wi8CNlA5Xr bq3fpm4kPzSfy8X3OsFvf81OiKjsDoI2WIcc7/U+aoecwlrEu7fbUXxC9QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNi4+igB2ux/X+EsVCBDu1M9acHmMB8GA1UdIwQY MBaAFMyfoLMNVFWtZ/sH4Jnw+pX4tsGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekotZ3N3MVVWYTFuLXdmZ21mRDZsZmkyd1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC80ODgzZDQtODQ3OS00NDQ3LWFmNjct MWU2Y2EyZjBkMTU1LzEvMkxqNktBSGE3SDlmNFN4VUlFTzdVejFwd2VZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC80ODgzZDQtODQ3OS00NDQ3LWFmNjctMWU2Y2EyZjBkMTU1 LzEvekotZ3N3MVVWYTFuLXdmZ21mRDZsZmkyd1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAlo MA0GCSqGSIb3DQEBCwUAA4IBAQCLWmZjGoEZPeRmfPSxxMaKcQ/7UWhB0pULU422 9V2u6iafMB4nsnlE+pdAqNYGFNEJFrUPCCVg5BIHTHbzY9rhX9uGJMhlBYFOh8M1 GurIuUABU4ZzGnszd3sRLYoijC+PrI0/71SK9Ppjkm1XpAVcopS5FyWu9qLaCPJe 5H0160lrxA7S9wOQtKOg+7cq1tg8c9UNlGliDVJnvvUnn41NFtxHPuFCALqyfMgp PDvt4M6bfpon6v7ozeFufopP4z6V1xMW0dCQAHCso2SVB8U3K6LCVSWzT1vfHUKv pgVbedcuOJd8tUzj07vIG2JPTP5ErMr3VehpHmcQr3BZNiLO -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:13 2026 by rpki-client