This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/99lIgCZ8a0ei-5wRBXuee2SsGpY.roa File: 99lIgCZ8a0ei-5wRBXuee2SsGpY.roa (raw, json) Hash identifier: 1ppSKjyGESECn+t5RQboX3iN+5A+rZBrqwtQSTJrj4A= Subject key identifier: F7:D9:48:80:26:7C:6B:47:A2:FB:9C:11:05:7B:9E:7B:64:AC:1A:96 Certificate issuer: /CN=4691bfd3cfec5a1108f1c86854764e2b903d7888 Certificate serial: 019B7BA35356B6D132CCCB77A04A7D7E437C Authority key identifier: 46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/99lIgCZ8a0ei-5wRBXuee2SsGpY.roa Signing time: Thu 01 Jan 2026 22:17:39 +0000 ROA not before: Thu 01 Jan 2026 22:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205597 IP address blocks: 2001:678:ad0::/48 maxlen: 48 2001:678:ad4::/48 maxlen: 48 2001:67c:2d00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:53:56:b6:d1:32:cc:cb:77:a0:4a:7d:7e:43:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4691bfd3cfec5a1108f1c86854764e2b903d7888 Validity Not Before: Jan 1 22:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7d94880267c6b47a2fb9c11057b9e7b64ac1a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:10:22:33:cc:ea:29:ec:39:db:96:19:c6:5c: e4:fd:8d:b6:ac:6a:f4:f5:ec:e3:26:68:11:fe:39: 3d:90:c8:eb:c7:af:93:8b:b4:03:44:0e:c0:fe:10: 3d:e1:1d:c5:e7:d0:92:b1:67:eb:91:37:71:f1:f3: db:f8:6c:77:fc:9f:d5:63:81:3f:0b:fe:7d:62:64: e3:04:36:09:88:f3:af:d1:0e:e4:b5:95:bb:0b:15: 7e:66:2e:77:62:f8:2f:11:30:4a:24:21:6d:a8:90: 1d:48:cf:5f:af:ae:4e:9e:1a:33:33:eb:0a:8d:ed: 1d:e0:ed:43:24:14:57:62:e9:48:38:82:d4:7a:39: fc:5f:49:3d:9a:89:14:7f:44:29:3b:8d:38:b9:9d: 57:e5:0a:14:1e:6c:06:01:ff:5c:2b:d5:ba:1b:a4: e2:63:82:ea:8f:06:f7:2a:e8:56:19:63:7f:84:9b: 5d:fc:fb:29:e7:71:fd:44:3c:e8:1a:30:45:f3:c7: 7e:2d:56:1b:b1:90:92:2e:bf:24:03:38:79:26:06: 12:81:d4:d6:47:61:6c:87:9c:b6:61:fd:2b:39:58: 80:98:ec:d4:a8:f1:ad:7f:a8:5d:b8:8d:c8:38:26: 43:47:4a:6d:2c:04:d3:74:0f:bf:c4:2e:b9:4d:6c: cb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D9:48:80:26:7C:6B:47:A2:FB:9C:11:05:7B:9E:7B:64:AC:1A:96 X509v3 Authority Key Identifier: keyid:46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/99lIgCZ8a0ei-5wRBXuee2SsGpY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:ad0::/48 2001:678:ad4::/48 2001:67c:2d00::/48 Signature Algorithm: sha256WithRSAEncryption 1e:97:0c:6a:91:52:fe:b3:10:61:93:8a:e1:b9:9c:52:0a:74: be:c8:68:ab:68:8c:92:b4:04:ed:d6:a9:73:bc:58:c9:9c:bd: 28:b0:1b:c0:d9:78:fb:58:2c:7f:f9:ef:53:b3:c7:e3:27:53: 47:87:ca:da:68:b9:14:34:b7:50:8a:02:11:94:50:12:da:da: 6c:68:11:c3:32:52:fb:ba:f5:98:ec:f7:57:57:37:64:38:20: 7a:82:9a:28:95:b3:ad:55:ea:1b:52:3f:a4:d1:b1:9b:82:be: 57:92:15:76:3f:53:99:35:ee:fa:4a:e2:81:8e:74:f9:52:9d: 38:14:f5:3f:07:6c:2b:93:05:02:47:ed:a7:d9:a3:f6:ae:72: 35:68:4a:77:5a:f9:81:ce:2e:fd:1e:d2:ac:8e:80:b6:89:3b: 02:50:a4:24:a1:c1:a9:e7:02:5b:ab:92:37:86:05:a0:b4:6a: af:6b:d6:b0:14:b1:3b:59:09:c3:dd:eb:d8:ce:2f:8a:0f:dd: 1c:d3:1e:cd:6d:8e:64:bd:aa:11:06:28:17:6c:06:6e:cd:a3: ff:bb:8d:15:03:73:3a:e7:e6:c4:80:49:b0:6b:66:8c:bd:d6: d9:38:08:ca:7c:64:32:36:91:c7:e0:33:7e:60:23:a2:05:06: cb:0d:84:f7 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7o1NWttEyzMt3oEp9fkN8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OTFiZmQzY2ZlYzVhMTEwOGYxYzg2ODU0NzY0ZTJiOTAz ZDc4ODgwHhcNMjYwMTAxMjIxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2Q5NDg4MDI2N2M2YjQ3YTJmYjljMTEwNTdiOWU3YjY0YWMxYTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhAiM8zqKew525YZxlzk/Y22rGr0 9ezjJmgR/jk9kMjrx6+Ti7QDRA7A/hA94R3F59CSsWfrkTdx8fPb+Gx3/J/VY4E/ C/59YmTjBDYJiPOv0Q7ktZW7CxV+Zi53YvgvETBKJCFtqJAdSM9fr65OnhozM+sK je0d4O1DJBRXYulIOILUejn8X0k9mokUf0QpO404uZ1X5QoUHmwGAf9cK9W6G6Ti Y4Lqjwb3KuhWGWN/hJtd/Psp53H9RDzoGjBF88d+LVYbsZCSLr8kAzh5JgYSgdTW R2Fsh5y2Yf0rOViAmOzUqPGtf6hduI3IOCZDR0ptLATTdA+/xC65TWzLvQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPfZSIAmfGtHovucEQV7nntkrBqWMB8GA1UdIwQY MBaAFEaRv9PP7FoRCPHIaFR2TiuQPXiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnBHXzA4X3NXaEVJOGNob1ZIWk9LNUE5ZUlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81ZWE1ZjAtMDJkNy00YjBmLWIwYjIt MWI4NjE3N2FmMGRkLzEvOTlsSWdDWjhhMGVpLTV3UkJYdWVlMlNzR3BZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy81ZWE1ZjAtMDJkNy00YjBmLWIwYjItMWI4NjE3N2FmMGRk LzEvUnBHXzA4X3NXaEVJOGNob1ZIWk9LNUE5ZUlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAIAEGeArQ AwcAIAEGeArUAwcAIAEGfC0AMA0GCSqGSIb3DQEBCwUAA4IBAQAelwxqkVL+sxBh k4rhuZxSCnS+yGiraIyStATt1qlzvFjJnL0osBvA2Xj7WCx/+e9Ts8fjJ1NHh8ra aLkUNLdQigIRlFAS2tpsaBHDMlL7uvWY7PdXVzdkOCB6gpoolbOtVeobUj+k0bGb gr5XkhV2P1OZNe76SuKBjnT5Up04FPU/B2wrkwUCR+2n2aP2rnI1aEp3WvmBzi79 HtKsjoC2iTsCUKQkocGp5wJbq5I3hgWgtGqva9awFLE7WQnD3evYzi+KD90c0x7N bY5kvaoRBigXbAZuzaP/u40VA3M65+bEgEmwa2aMvdbZOAjKfGQyNpHH4DN+YCOi BQbLDYT3 -----END CERTIFICATE-----Generated at Wed Jan 21 03:38:37 2026 by rpki-client