This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/I2kHiqxmSF3p6V9W7eV_eTfDN3k.roa File: I2kHiqxmSF3p6V9W7eV_eTfDN3k.roa (raw, json) Hash identifier: fCpVVld0L94vFLqVKGMCfHN/hOXwKxcQlDEoGOWDUFo= Subject key identifier: 23:69:07:8A:AC:66:48:5D:E9:E9:5F:56:ED:E5:7F:79:37:C3:37:79 Certificate issuer: /CN=ca886d5587ec85f71242cd57ced409544528168d Certificate serial: 019B7E37D30554188DC5F001424C34F54253 Authority key identifier: CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/I2kHiqxmSF3p6V9W7eV_eTfDN3k.roa Signing time: Fri 02 Jan 2026 10:19:06 +0000 ROA not before: Fri 02 Jan 2026 10:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206858 IP address blocks: 2001:678:d88::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:d3:05:54:18:8d:c5:f0:01:42:4c:34:f5:42:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca886d5587ec85f71242cd57ced409544528168d Validity Not Before: Jan 2 10:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2369078aac66485de9e95f56ede57f7937c33779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ac:fc:ac:0a:ab:96:70:e0:29:43:05:b0:f9: 38:7a:15:80:e7:2d:0f:69:96:eb:23:19:61:aa:26: af:ed:1b:d1:cc:9a:f4:63:34:87:db:92:cf:47:86: fe:a9:42:9b:fc:1b:57:17:e9:e8:b5:24:de:cc:99: b6:3d:4b:76:b0:5c:17:08:35:8e:ef:2e:0f:a7:10: b8:f1:d5:5a:29:3e:a6:29:10:0d:ac:fa:ec:c8:d0: 90:d8:44:c9:c8:67:31:29:f4:f7:47:d1:2b:d0:7e: 89:10:26:14:84:13:73:0b:8b:2c:c5:67:69:d0:af: 7a:5f:d6:d4:12:ca:76:1e:f8:d0:bb:17:48:75:7f: 16:3c:60:f4:dc:98:2f:75:d9:41:ee:9a:a0:7b:b8: 97:6d:67:66:cb:91:1b:38:64:0a:fc:3c:12:53:c8: 08:41:de:10:b8:a6:bc:84:5a:54:86:72:3b:fd:3f: 85:a2:49:ad:9d:84:fd:80:a3:29:c5:c5:56:7c:84: 71:4e:6c:73:fe:f1:56:21:f4:09:0f:5c:e4:02:cd: 04:02:fd:02:94:8c:3b:d6:35:a8:62:ed:2c:0a:84: 59:7d:2f:44:85:c4:0f:25:0b:ae:b2:4b:7e:22:8d: 75:94:00:59:cb:31:5c:89:16:02:09:ca:48:5d:86: 64:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:69:07:8A:AC:66:48:5D:E9:E9:5F:56:ED:E5:7F:79:37:C3:37:79 X509v3 Authority Key Identifier: keyid:CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/I2kHiqxmSF3p6V9W7eV_eTfDN3k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:d88::/48 Signature Algorithm: sha256WithRSAEncryption 2b:10:4d:90:74:68:d5:25:76:a8:9c:17:45:c2:de:84:c0:fa: bd:9a:4f:37:83:d7:88:13:1b:2c:f8:be:4d:84:95:a7:57:8b: 07:9a:dd:f0:05:d4:92:36:c3:37:28:5b:24:ac:3c:3a:db:88: aa:18:95:d5:f6:16:03:ef:d6:eb:fc:50:63:ba:b5:a0:8d:9f: 14:09:0e:fc:01:4e:75:a2:2e:c4:60:42:d6:c1:8e:15:96:95: f1:24:93:c7:a3:49:34:09:9d:c3:38:8a:92:ed:35:13:85:84: fb:f6:79:8b:80:5a:0c:05:29:15:8c:ca:0f:56:f6:f6:65:19: c9:f2:45:79:50:7f:d4:ca:04:4e:e0:bf:68:98:d5:0e:3e:a7: fd:8c:12:aa:6f:c8:d2:75:5b:d2:ae:26:a1:67:61:f9:07:6d: 70:20:e7:ad:8a:81:1f:17:f4:3d:ce:37:dd:e6:d8:b7:f2:07: 00:17:19:d0:a1:bd:dc:f0:fe:e5:7e:fd:87:59:91:e0:07:80: e4:b5:d9:0d:67:d4:6a:d4:92:18:4d:0e:22:b1:70:e2:ff:a2: fd:d7:a8:01:b4:dc:ce:5f:56:20:c9:14:ab:2a:76:91:55:0f: cb:25:5f:7d:f6:99:df:bc:5c:0b:55:e7:61:6b:e9:f2:bd:0d: 2a:cd:35:16 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+N9MFVBiNxfABQkw09UJTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhODg2ZDU1ODdlYzg1ZjcxMjQyY2Q1N2NlZDQwOTU0NDUy ODE2OGQwHhcNMjYwMTAyMTAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzY5MDc4YWFjNjY0ODVkZTllOTVmNTZlZGU1N2Y3OTM3YzMzNzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaz8rAqrlnDgKUMFsPk4ehWA5y0P aZbrIxlhqiav7RvRzJr0YzSH25LPR4b+qUKb/BtXF+notSTezJm2PUt2sFwXCDWO 7y4PpxC48dVaKT6mKRANrPrsyNCQ2ETJyGcxKfT3R9Er0H6JECYUhBNzC4ssxWdp 0K96X9bUEsp2HvjQuxdIdX8WPGD03JgvddlB7pqge7iXbWdmy5EbOGQK/DwSU8gI Qd4QuKa8hFpUhnI7/T+FokmtnYT9gKMpxcVWfIRxTmxz/vFWIfQJD1zkAs0EAv0C lIw71jWoYu0sCoRZfS9EhcQPJQuuskt+Io11lABZyzFciRYCCcpIXYZkewIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCNpB4qsZkhd6elfVu3lf3k3wzd5MB8GA1UdIwQY MBaAFMqIbVWH7IX3EkLNV87UCVRFKBaNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW9odFZZZnNoZmNTUXMxWHp0UUpWRVVvRm8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mZTgyZDEtMTU3NS00N2MxLTlmMjIt YzdlMjUyMGM0Y2VhLzEvSTJrSGlxeG1TRjNwNlY5VzdlVl9lVGZETjNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9mZTgyZDEtMTU3NS00N2MxLTlmMjItYzdlMjUyMGM0Y2Vh LzEveW9odFZZZnNoZmNTUXMxWHp0UUpWRVVvRm8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA2I MA0GCSqGSIb3DQEBCwUAA4IBAQArEE2QdGjVJXaonBdFwt6EwPq9mk83g9eIExss +L5NhJWnV4sHmt3wBdSSNsM3KFskrDw624iqGJXV9hYD79br/FBjurWgjZ8UCQ78 AU51oi7EYELWwY4VlpXxJJPHo0k0CZ3DOIqS7TUThYT79nmLgFoMBSkVjMoPVvb2 ZRnJ8kV5UH/UygRO4L9omNUOPqf9jBKqb8jSdVvSriahZ2H5B21wIOetioEfF/Q9 zjfd5ti38gcAFxnQob3c8P7lfv2HWZHgB4DktdkNZ9Rq1JIYTQ4isXDi/6L916gB tNzOX1YgyRSrKnaRVQ/LJV999pnfvFwLVedha+nyvQ0qzTUW -----END CERTIFICATE-----Generated at Wed Jan 21 06:59:04 2026 by rpki-client