This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/Ri4Y_iu8PISs6vsNBzbwCdOr3-s.roa File: Ri4Y_iu8PISs6vsNBzbwCdOr3-s.roa (raw, json) Hash identifier: 0J0gMYHWM02/yJR/SUWZtkK9fwND2HKIpHaXNLv/HHg= Subject key identifier: 46:2E:18:FE:2B:BC:3C:84:AC:EA:FB:0D:07:36:F0:09:D3:AB:DF:EB Certificate issuer: /CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1 Certificate serial: 019B7C7F32CA7553FA5DDFCA6284EF9535BB Authority key identifier: 94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/Ri4Y_iu8PISs6vsNBzbwCdOr3-s.roa Signing time: Fri 02 Jan 2026 02:17:49 +0000 ROA not before: Fri 02 Jan 2026 02:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212977 IP address blocks: 2001:67c:1298::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:32:ca:75:53:fa:5d:df:ca:62:84:ef:95:35:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1 Validity Not Before: Jan 2 02:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=462e18fe2bbc3c84aceafb0d0736f009d3abdfeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7e:b5:cf:d6:05:dc:61:86:41:d1:8b:04:4a: c0:28:d8:5d:0e:94:ab:a5:0e:49:36:6b:b3:8f:7e: 76:bb:8d:01:3f:e2:d1:6a:43:d1:74:99:7d:72:5e: 76:60:f0:77:26:53:93:a5:69:35:83:57:ea:1f:d8: 74:6e:b0:44:ea:9d:09:f7:8f:8a:9d:ff:28:df:88: 4e:5c:32:b0:55:a6:25:f2:98:1e:c1:57:ae:db:00: 32:14:fd:47:65:8d:ad:03:fb:73:22:88:b2:b9:ad: 86:74:c7:1b:f5:f9:0c:6f:8b:86:d6:28:32:d4:be: ae:6e:ae:ba:b6:5f:15:26:9f:18:9c:15:84:d7:00: 2b:69:ed:91:ce:2f:58:f1:6e:4d:d1:bd:3d:34:27: 0f:e0:a8:b8:13:55:de:ff:5c:6e:6c:d6:83:bf:53: 64:49:3f:30:92:2f:b8:8d:64:84:c0:a2:e5:1b:aa: 8f:7b:09:c7:3f:e5:80:ff:82:4b:a9:6d:88:71:9e: ad:95:88:11:5a:20:b9:ce:1f:5b:d3:4c:41:1d:d7: 0a:25:3c:1a:52:6c:40:53:85:0e:76:03:d7:ef:12: e4:f0:71:21:6e:ca:b9:90:af:8a:c9:ae:3d:57:ca: e5:50:e6:f7:84:bb:49:40:b9:b1:3f:41:11:82:86: 6c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2E:18:FE:2B:BC:3C:84:AC:EA:FB:0D:07:36:F0:09:D3:AB:DF:EB X509v3 Authority Key Identifier: keyid:94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/Ri4Y_iu8PISs6vsNBzbwCdOr3-s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1298::/48 Signature Algorithm: sha256WithRSAEncryption 7a:9a:b0:20:fb:30:31:67:f8:e8:c7:a2:81:7e:77:31:d1:3f: 2d:bd:33:83:50:cb:d7:57:65:5a:f1:d5:4a:22:7f:cf:e4:5c: ea:5c:5c:d7:90:fd:b1:46:3c:03:e7:c6:1d:17:dd:74:4d:21: b8:f8:d6:a9:f5:25:b7:5e:5a:8e:f9:04:e9:df:20:a8:d2:b7: e6:d5:7a:35:c9:57:14:15:ca:5f:01:ed:d6:45:4b:52:71:c5: 16:e2:0f:c2:aa:72:82:ac:60:28:6d:14:2d:76:b3:e0:d5:83: af:23:e7:c6:d7:40:ac:1b:fa:d3:97:71:75:df:8a:6f:c2:f5: cb:70:7d:19:13:59:5c:8a:3d:ea:b5:cd:1a:72:a4:19:65:ff: 0a:20:2b:76:7a:61:57:3e:7c:10:c9:fc:71:c8:90:44:39:f7: 2b:0f:b4:02:a5:60:49:7f:1b:0c:c7:4f:31:97:67:ad:25:3a: 8a:4c:d6:5c:9b:3f:14:5d:dd:99:a5:b7:d4:45:4d:d7:96:e2: 3a:aa:22:bc:3d:e0:95:c9:c4:9c:5d:ac:85:ef:7b:da:f9:8b: f8:d3:a1:1f:cd:e9:72:da:32:b9:4f:f2:e1:7a:10:b5:d2:40: a2:72:04:81:58:05:9e:59:cb:07:73:f9:9c:a2:67:fe:a0:26: 43:7d:7d:b6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8fzLKdVP6Xd/KYoTvlTW7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ODk0OGYwZGQ1ZTJmYjBhOTAyYjk3OWNhOWM1YzFhNDRm OThmYTEwHhcNMjYwMTAyMDIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjJlMThmZTJiYmMzYzg0YWNlYWZiMGQwNzM2ZjAwOWQzYWJkZmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy361z9YF3GGGQdGLBErAKNhdDpSr pQ5JNmuzj352u40BP+LRakPRdJl9cl52YPB3JlOTpWk1g1fqH9h0brBE6p0J94+K nf8o34hOXDKwVaYl8pgewVeu2wAyFP1HZY2tA/tzIoiyua2GdMcb9fkMb4uG1igy 1L6ubq66tl8VJp8YnBWE1wArae2Rzi9Y8W5N0b09NCcP4Ki4E1Xe/1xubNaDv1Nk ST8wki+4jWSEwKLlG6qPewnHP+WA/4JLqW2IcZ6tlYgRWiC5zh9b00xBHdcKJTwa UmxAU4UOdgPX7xLk8HEhbsq5kK+Kya49V8rlUOb3hLtJQLmxP0ERgoZsawIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEYuGP4rvDyErOr7DQc28AnTq9/rMB8GA1UdIwQY MBaAFJSJSPDdXi+wqQK5ecqcXBpE+Y+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbElsSThOMWVMN0NwQXJsNXlweGNHa1Q1ajZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hYmI4ODUtYTc5NC00YmQ1LTg2MWUt ODk2MWM3YTNiYmFiLzEvUmk0WV9pdThQSVNzNnZzTkJ6YndDZE9yMy1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9hYmI4ODUtYTc5NC00YmQ1LTg2MWUtODk2MWM3YTNiYmFi LzEvbElsSThOMWVMN0NwQXJsNXlweGNHa1Q1ajZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBKY MA0GCSqGSIb3DQEBCwUAA4IBAQB6mrAg+zAxZ/jox6KBfncx0T8tvTODUMvXV2Va 8dVKIn/P5FzqXFzXkP2xRjwD58YdF910TSG4+Nap9SW3XlqO+QTp3yCo0rfm1Xo1 yVcUFcpfAe3WRUtSccUW4g/CqnKCrGAobRQtdrPg1YOvI+fG10CsG/rTl3F134pv wvXLcH0ZE1lcij3qtc0acqQZZf8KICt2emFXPnwQyfxxyJBEOfcrD7QCpWBJfxsM x08xl2etJTqKTNZcmz8UXd2ZpbfURU3XluI6qiK8PeCVycScXayF73va+Yv406Ef zely2jK5T/LhehC10kCicgSBWAWeWcsHc/mcomf+oCZDfX22 -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:29 2026 by rpki-client