This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/NDuQ_OtavgDxJgqTGMxRkvnClUg.roa File: NDuQ_OtavgDxJgqTGMxRkvnClUg.roa (raw, json) Hash identifier: RwHWV50blJ9xPPPNp0Q0TSF1YnwX98auqS4GRNgN9sc= Subject key identifier: 34:3B:90:FC:EB:5A:BE:00:F1:26:0A:93:18:CC:51:92:F9:C2:95:48 Certificate issuer: /CN=26427a260d6d96cc1115ccce8a914affb0e1d16b Certificate serial: 019B7DCA0FAFAC4284E53C10ACD1FE4E508A Authority key identifier: 26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/NDuQ_OtavgDxJgqTGMxRkvnClUg.roa Signing time: Fri 02 Jan 2026 08:19:12 +0000 ROA not before: Fri 02 Jan 2026 08:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214134 IP address blocks: 2001:67c:f2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:0f:af:ac:42:84:e5:3c:10:ac:d1:fe:4e:50:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26427a260d6d96cc1115ccce8a914affb0e1d16b Validity Not Before: Jan 2 08:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=343b90fceb5abe00f1260a9318cc5192f9c29548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c5:91:7a:25:db:c6:66:fa:ef:2d:8c:a6:f1: df:c8:5c:e1:0c:b7:2c:b5:77:a0:4d:f6:80:b8:37: 68:fc:a6:17:b5:9a:fa:e3:32:40:bd:57:5d:2c:d9: fa:3c:d1:6b:8b:88:b0:f1:90:48:ce:9c:8d:b4:d5: d2:a2:49:3e:4b:59:61:5c:5b:a5:74:4b:e1:a3:8d: 20:1d:97:2b:07:0b:7c:44:e2:88:09:8a:4e:b4:aa: 55:91:1e:49:69:a2:da:8b:0f:6e:77:b4:ae:f6:aa: f1:ae:48:d6:cc:86:f7:2c:05:e8:33:c7:6b:ae:f0: 2c:ef:e4:d6:05:d0:40:e9:51:f3:fd:23:dc:e3:16: db:70:7e:5e:50:94:38:af:dd:b2:a7:72:39:46:3d: 97:9a:b1:98:ac:9f:bf:64:b6:d2:ff:d7:ee:5c:c2: ff:ba:5f:89:1a:05:6d:c2:25:04:3f:58:1d:60:1c: ff:3b:cd:bf:0d:60:8c:ce:0f:e3:e5:f8:c2:9f:e0: 38:72:da:f7:c7:b2:62:ad:0e:56:5a:3b:c0:7e:e4: db:24:3a:15:fd:02:cf:e5:d5:fe:8c:ef:35:ee:68: e9:17:41:4d:fa:24:5c:5b:77:52:4e:24:f4:63:ee: 84:e1:13:cf:7f:29:5d:e0:eb:29:a8:9d:fc:e0:20: 8b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3B:90:FC:EB:5A:BE:00:F1:26:0A:93:18:CC:51:92:F9:C2:95:48 X509v3 Authority Key Identifier: keyid:26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/NDuQ_OtavgDxJgqTGMxRkvnClUg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:f2c::/48 Signature Algorithm: sha256WithRSAEncryption 4f:e6:2c:5a:3c:19:47:81:1a:0c:1f:b0:1b:fa:97:f2:09:64: 11:e6:4d:f5:a5:48:78:f1:ce:f5:96:2c:40:ed:4e:90:d9:a8: c7:51:24:3e:88:39:fd:81:df:fa:07:6d:33:4a:96:e2:8b:fe: 1e:7e:b7:31:7f:27:15:60:44:8e:09:f2:09:2a:e4:5d:75:39: 07:21:2b:66:d6:6b:57:21:82:ba:1e:00:79:c3:24:63:c4:d0: 22:77:65:4c:b9:b8:91:9b:f9:77:2b:ba:19:83:71:66:16:88: 3f:4c:51:8d:84:18:a1:20:9b:89:0a:04:4e:c9:bf:11:23:67: 3d:4a:2e:9a:3e:b2:fe:e5:45:60:ce:ca:6e:83:a3:fb:19:7b: f5:6a:97:f8:5c:38:4d:05:b3:f5:5d:74:db:aa:bc:bc:ae:e4: 38:f3:9e:85:ce:42:c2:50:4f:24:37:20:2f:b9:4c:b2:04:ff: 3b:98:da:65:e1:d0:26:3b:96:98:c6:02:11:3e:b2:60:6e:94: f9:6b:18:d3:6f:2d:18:81:e3:f7:c3:3f:c2:13:33:69:4e:8f: e8:24:62:ee:40:b3:a4:61:59:e1:4d:ad:98:3f:e4:68:49:18: 03:10:78:70:5d:80:f5:df:77:f7:a7:4e:44:e4:f8:9c:c5:60: fa:a8:b6:32 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9yg+vrEKE5TwQrNH+TlCKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NDI3YTI2MGQ2ZDk2Y2MxMTE1Y2NjZThhOTE0YWZmYjBl MWQxNmIwHhcNMjYwMTAyMDgxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDNiOTBmY2ViNWFiZTAwZjEyNjBhOTMxOGNjNTE5MmY5YzI5NTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsWReiXbxmb67y2MpvHfyFzhDLcs tXegTfaAuDdo/KYXtZr64zJAvVddLNn6PNFri4iw8ZBIzpyNtNXSokk+S1lhXFul dEvho40gHZcrBwt8ROKICYpOtKpVkR5JaaLaiw9ud7Su9qrxrkjWzIb3LAXoM8dr rvAs7+TWBdBA6VHz/SPc4xbbcH5eUJQ4r92yp3I5Rj2XmrGYrJ+/ZLbS/9fuXML/ ul+JGgVtwiUEP1gdYBz/O82/DWCMzg/j5fjCn+A4ctr3x7JirQ5WWjvAfuTbJDoV /QLP5dX+jO817mjpF0FN+iRcW3dSTiT0Y+6E4RPPfyld4OspqJ384CCLuwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDQ7kPzrWr4A8SYKkxjMUZL5wpVIMB8GA1UdIwQY MBaAFCZCeiYNbZbMERXMzoqRSv+w4dFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mM2ZkZjAtYTFhNS00NWExLTgyNTIt ODUyOGU1NTMyYzBlLzEvTkR1UV9PdGF2Z0R4SmdxVEdNeFJrdm5DbFVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9mM2ZkZjAtYTFhNS00NWExLTgyNTItODUyOGU1NTMyYzBl LzEvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA8s MA0GCSqGSIb3DQEBCwUAA4IBAQBP5ixaPBlHgRoMH7Ab+pfyCWQR5k31pUh48c71 lixA7U6Q2ajHUSQ+iDn9gd/6B20zSpbii/4efrcxfycVYESOCfIJKuRddTkHIStm 1mtXIYK6HgB5wyRjxNAid2VMubiRm/l3K7oZg3FmFog/TFGNhBihIJuJCgROyb8R I2c9Si6aPrL+5UVgzspug6P7GXv1apf4XDhNBbP1XXTbqry8ruQ4856FzkLCUE8k NyAvuUyyBP87mNpl4dAmO5aYxgIRPrJgbpT5axjTby0YgeP3wz/CEzNpTo/oJGLu QLOkYVnhTa2YP+RoSRgDEHhwXYD133f3p05E5PicxWD6qLYy -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:27 2026 by rpki-client