This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/INg4xIGRSCSOu3-OcCQpHM9H_6g.roa File: INg4xIGRSCSOu3-OcCQpHM9H_6g.roa (raw, json) Hash identifier: eyyAVDJZ4GJowJ2sqgQCguwo5z9rwMoMjyVN47CKOxU= Subject key identifier: 20:D8:38:C4:81:91:48:24:8E:BB:7F:8E:70:24:29:1C:CF:47:FF:A8 Certificate issuer: /CN=439a7f93fca808c82d26fbfe0fde1b968cf6e8d3 Certificate serial: 019B7CED1E2A8ABBDEA8A1B173CFFD7BCF0F Authority key identifier: 43:9A:7F:93:FC:A8:08:C8:2D:26:FB:FE:0F:DE:1B:96:8C:F6:E8:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/INg4xIGRSCSOu3-OcCQpHM9H_6g.roa Signing time: Fri 02 Jan 2026 04:17:53 +0000 ROA not before: Fri 02 Jan 2026 04:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198824 IP address blocks: 2001:67c:c74::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:1e:2a:8a:bb:de:a8:a1:b1:73:cf:fd:7b:cf:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439a7f93fca808c82d26fbfe0fde1b968cf6e8d3 Validity Not Before: Jan 2 04:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20d838c4819148248ebb7f8e7024291ccf47ffa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e8:47:28:78:5d:94:b2:78:d2:f8:52:e5:76: 9f:1b:65:43:f4:df:3d:5a:43:ca:1c:3f:f4:5a:38: aa:1b:b7:d4:f7:a1:09:d4:e4:c3:77:cd:e0:3c:ae: c2:b1:ca:38:71:70:65:ba:20:e4:3c:ba:63:ab:44: 18:20:81:bd:cd:1b:b3:78:ff:a0:17:b0:1b:27:2c: fe:78:c0:95:e0:9e:64:28:5d:db:fd:08:45:f3:94: 81:21:8a:d6:15:34:ba:ad:0e:a0:24:0c:f7:82:2f: 37:e3:6d:f9:16:bc:6d:21:c4:2b:29:14:eb:21:b6: e6:eb:7e:10:e4:17:c4:ea:40:de:02:0a:e2:20:f1: 6c:33:79:8a:f6:2f:03:ea:db:04:51:69:1c:34:f8: 9d:a3:96:35:71:19:a4:14:8a:e9:84:1c:46:66:c3: b9:97:69:8e:b0:a5:58:94:52:a7:c8:1a:ee:47:ae: 2c:7c:08:5a:49:7b:cb:7c:fc:a1:66:8c:8e:2b:89: 29:61:eb:62:2c:ff:3d:7a:75:19:15:ea:9d:4f:b3: 86:9c:ae:c6:c3:81:43:eb:d1:54:c9:48:a2:7e:f5: dd:af:c1:8b:5e:03:a6:b6:92:22:07:69:41:c4:b6: 85:8f:14:15:f7:f5:4b:ee:61:7d:70:a3:72:0b:ab: 97:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D8:38:C4:81:91:48:24:8E:BB:7F:8E:70:24:29:1C:CF:47:FF:A8 X509v3 Authority Key Identifier: keyid:43:9A:7F:93:FC:A8:08:C8:2D:26:FB:FE:0F:DE:1B:96:8C:F6:E8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/INg4xIGRSCSOu3-OcCQpHM9H_6g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:c74::/48 Signature Algorithm: sha256WithRSAEncryption a6:2f:48:8c:d5:94:79:64:ca:33:1e:01:b4:a1:ca:23:07:06: c1:6a:99:7d:78:09:95:de:9d:92:d0:cd:63:59:57:e2:57:db: b2:68:c2:65:77:ed:b0:5b:11:50:da:57:33:b3:90:97:15:fa: a9:09:82:4b:3b:e8:dc:56:40:9c:36:ca:f5:2c:b6:a9:a2:14: d6:74:fa:b7:e3:e7:3f:11:67:47:43:6d:2e:b3:f2:c9:08:57: 9a:e7:68:32:ee:fe:73:67:8b:68:cc:00:42:2f:d3:6e:af:8d: 24:96:1f:4b:b9:30:09:55:f1:0e:71:93:db:e7:66:fa:4d:50: 41:44:59:60:32:73:21:b6:9a:8e:e3:b1:22:77:f7:45:b9:1b: a1:c7:fd:dd:b7:b2:d2:fe:51:da:26:60:d1:37:dc:f5:70:96: f3:c5:25:b7:6d:55:4c:b1:77:9b:e2:47:56:82:71:ed:21:45: cb:5b:f3:96:16:b7:bf:dc:9a:d1:f3:5f:29:e2:a1:5c:2f:f0: d0:b0:83:f1:de:61:44:6b:23:29:dc:f0:2f:b7:98:db:6a:fd: af:21:3f:28:c2:e1:34:05:3b:90:de:2d:12:4c:95:55:35:98: a6:8a:6c:a8:ec:14:2a:9a:6c:61:2b:d7:73:14:82:10:89:e5: ea:bd:e0:b8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87R4qirveqKGxc8/9e88PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOWE3ZjkzZmNhODA4YzgyZDI2ZmJmZTBmZGUxYjk2OGNm NmU4ZDMwHhcNMjYwMTAyMDQxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGQ4MzhjNDgxOTE0ODI0OGViYjdmOGU3MDI0MjkxY2NmNDdmZmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ehHKHhdlLJ40vhS5XafG2VD9N89 WkPKHD/0WjiqG7fU96EJ1OTDd83gPK7Csco4cXBluiDkPLpjq0QYIIG9zRuzeP+g F7AbJyz+eMCV4J5kKF3b/QhF85SBIYrWFTS6rQ6gJAz3gi834235FrxtIcQrKRTr Ibbm634Q5BfE6kDeAgriIPFsM3mK9i8D6tsEUWkcNPido5Y1cRmkFIrphBxGZsO5 l2mOsKVYlFKnyBruR64sfAhaSXvLfPyhZoyOK4kpYetiLP89enUZFeqdT7OGnK7G w4FD69FUyUiifvXdr8GLXgOmtpIiB2lBxLaFjxQV9/VL7mF9cKNyC6uXIQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCDYOMSBkUgkjrt/jnAkKRzPR/+oMB8GA1UdIwQY MBaAFEOaf5P8qAjILSb7/g/eG5aM9ujTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTVwX2tfeW9DTWd0SnZ2LUQ5NGJsb3oyNk5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy84ZjlmMzItYzFkNS00ZmE2LWIwMTMt OTI5N2I4NTVmYTcyLzEvSU5nNHhJR1JTQ1NPdTMtT2NDUXBITTlIXzZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy84ZjlmMzItYzFkNS00ZmE2LWIwMTMtOTI5N2I4NTVmYTcy LzEvUTVwX2tfeW9DTWd0SnZ2LUQ5NGJsb3oyNk5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAx0 MA0GCSqGSIb3DQEBCwUAA4IBAQCmL0iM1ZR5ZMozHgG0ocojBwbBapl9eAmV3p2S 0M1jWVfiV9uyaMJld+2wWxFQ2lczs5CXFfqpCYJLO+jcVkCcNsr1LLapohTWdPq3 4+c/EWdHQ20us/LJCFea52gy7v5zZ4tozABCL9Nur40klh9LuTAJVfEOcZPb52b6 TVBBRFlgMnMhtpqO47Eid/dFuRuhx/3dt7LS/lHaJmDRN9z1cJbzxSW3bVVMsXeb 4kdWgnHtIUXLW/OWFre/3JrR818p4qFcL/DQsIPx3mFEayMp3PAvt5jbav2vIT8o wuE0BTuQ3i0STJVVNZimimyo7BQqmmxhK9dzFIIQieXqveC4 -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:39 2026 by rpki-client