This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/j7EcdTVdpUhojTeG57M6lKnsMnE.roa File: j7EcdTVdpUhojTeG57M6lKnsMnE.roa (raw, json) Hash identifier: Fq6R274Vo4z+UeWj5Q+OONHLBGJAcI1+7ZlArfIpltI= Subject key identifier: 8F:B1:1C:75:35:5D:A5:48:68:8D:37:86:E7:B3:3A:94:A9:EC:32:71 Certificate issuer: /CN=398847f70a35e710844e9bb8a262beddb40b7cc9 Certificate serial: 019B78A2586B07A6C336DB636A4A8199BEC0 Authority key identifier: 39:88:47:F7:0A:35:E7:10:84:4E:9B:B8:A2:62:BE:DD:B4:0B:7C:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/j7EcdTVdpUhojTeG57M6lKnsMnE.roa Signing time: Thu 01 Jan 2026 08:17:43 +0000 ROA not before: Thu 01 Jan 2026 08:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214450 IP address blocks: 2001:678:658::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:58:6b:07:a6:c3:36:db:63:6a:4a:81:99:be:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=398847f70a35e710844e9bb8a262beddb40b7cc9 Validity Not Before: Jan 1 08:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fb11c75355da548688d3786e7b33a94a9ec3271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e3:47:d7:60:fa:8a:4c:9f:a2:54:d5:4a:e2: 50:79:2d:50:35:16:d6:83:5b:f2:23:e7:2b:9c:f2: 68:97:31:e3:0c:34:06:9e:fe:97:a5:2d:7f:12:56: c8:6a:17:8e:a4:60:89:59:d0:82:b3:27:e2:ff:c9: 4b:d9:2c:f8:7a:0d:91:83:c9:fc:ab:f3:20:42:de: c3:1c:a4:9c:94:7c:48:b6:c2:35:9e:df:f9:56:31: c2:d5:68:e8:3a:07:66:5a:76:63:77:88:8e:b2:94: 91:21:97:57:fd:88:db:86:e9:94:c6:92:e1:98:b9: 9c:1c:88:3e:95:52:fa:10:79:13:89:ec:b3:e1:20: dc:a9:49:f4:3b:11:d4:45:07:50:b7:d6:4b:5f:4a: dd:6a:a3:df:bb:08:53:20:37:ea:30:dc:9c:a5:96: b3:ae:5c:48:13:21:5c:73:12:39:73:c9:74:ba:e4: 63:0e:ec:67:95:bd:1f:ab:09:50:2c:57:c0:62:49: 16:4d:4a:af:6d:c2:1b:7b:bf:88:f5:bc:4e:b8:96: bc:d1:61:7d:7b:ea:de:00:d8:00:7a:62:7f:c3:27: 59:69:93:81:4b:69:38:14:ff:87:36:85:07:ca:26: 3d:56:c4:a6:21:b3:86:ea:e4:97:be:40:a0:95:75: 4d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B1:1C:75:35:5D:A5:48:68:8D:37:86:E7:B3:3A:94:A9:EC:32:71 X509v3 Authority Key Identifier: keyid:39:88:47:F7:0A:35:E7:10:84:4E:9B:B8:A2:62:BE:DD:B4:0B:7C:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/j7EcdTVdpUhojTeG57M6lKnsMnE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:658::/48 Signature Algorithm: sha256WithRSAEncryption 90:5b:e6:20:d2:fb:6a:3c:f0:3a:80:9b:78:02:67:a3:81:9b: a6:b7:51:ce:b6:96:21:db:5e:eb:c4:c2:b3:32:1f:14:c6:dc: 2c:cc:9b:f6:a0:51:e5:46:60:72:8d:7c:1a:e6:e5:a3:ea:81: e8:21:20:3d:b1:23:a3:29:9f:59:7c:f4:c9:e6:90:e1:3a:d9: a7:01:28:a5:1c:ad:eb:7d:10:4d:40:c5:bb:72:37:cb:1f:ec: 34:57:a4:3c:70:04:2a:5e:89:3c:07:d8:57:c0:bd:fe:aa:21: 29:43:4d:5c:e5:e1:72:87:2a:24:b3:3e:dd:c4:bb:51:18:87: 48:eb:ca:c3:a4:47:61:b7:73:40:28:50:16:f6:67:0d:2c:76: 96:55:5b:f5:9b:a7:09:a8:c1:3b:7f:03:94:a8:88:8d:20:7a: 13:fd:88:71:f8:bb:62:04:f7:84:68:6e:1b:03:49:9d:d6:84: 1f:a5:ab:05:91:97:fe:40:1d:ec:e4:b7:a0:b3:4d:25:f8:af: 4f:fe:f1:37:e5:94:2e:42:71:0e:eb:6d:6e:0c:40:07:ae:72: 7a:07:60:6a:fe:35:03:d3:8e:f2:a5:11:1e:a2:2f:27:93:77: 86:b3:73:08:ce:a6:10:2d:41:79:66:19:59:79:59:be:d8:c9: 72:17:1a:84 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4olhrB6bDNttjakqBmb7AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ODg0N2Y3MGEzNWU3MTA4NDRlOWJiOGEyNjJiZWRkYjQw YjdjYzkwHhcNMjYwMTAxMDgxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmIxMWM3NTM1NWRhNTQ4Njg4ZDM3ODZlN2IzM2E5NGE5ZWMzMjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuNH12D6ikyfolTVSuJQeS1QNRbW g1vyI+crnPJolzHjDDQGnv6XpS1/ElbIaheOpGCJWdCCsyfi/8lL2Sz4eg2Rg8n8 q/MgQt7DHKSclHxItsI1nt/5VjHC1WjoOgdmWnZjd4iOspSRIZdX/YjbhumUxpLh mLmcHIg+lVL6EHkTieyz4SDcqUn0OxHURQdQt9ZLX0rdaqPfuwhTIDfqMNycpZaz rlxIEyFccxI5c8l0uuRjDuxnlb0fqwlQLFfAYkkWTUqvbcIbe7+I9bxOuJa80WF9 e+reANgAemJ/wydZaZOBS2k4FP+HNoUHyiY9VsSmIbOG6uSXvkCglXVNkwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFI+xHHU1XaVIaI03huezOpSp7DJxMB8GA1UdIwQY MBaAFDmIR/cKNecQhE6buKJivt20C3zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1loSDl3bzE1eENFVHB1NG9tSy0zYlFMZk1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9mYzc2NTctMDYzZS00YWY3LTg5ZTYt ZjlmZWEzNGI2YjAxLzEvajdFY2RUVmRwVWhvalRlRzU3TTZsS25zTW5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9mYzc2NTctMDYzZS00YWY3LTg5ZTYtZjlmZWEzNGI2YjAx LzEvT1loSDl3bzE1eENFVHB1NG9tSy0zYlFMZk1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAZY MA0GCSqGSIb3DQEBCwUAA4IBAQCQW+Yg0vtqPPA6gJt4AmejgZumt1HOtpYh217r xMKzMh8UxtwszJv2oFHlRmByjXwa5uWj6oHoISA9sSOjKZ9ZfPTJ5pDhOtmnASil HK3rfRBNQMW7cjfLH+w0V6Q8cAQqXok8B9hXwL3+qiEpQ01c5eFyhyoksz7dxLtR GIdI68rDpEdht3NAKFAW9mcNLHaWVVv1m6cJqME7fwOUqIiNIHoT/Yhx+LtiBPeE aG4bA0md1oQfpasFkZf+QB3s5Legs00l+K9P/vE35ZQuQnEO621uDEAHrnJ6B2Bq /jUD047ypREeoi8nk3eGs3MIzqYQLUF5ZhlZeVm+2MlyFxqE -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:57 2026 by rpki-client