This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/a476xuuymM4DWMU4CoIgLsWXR7w.roa File: a476xuuymM4DWMU4CoIgLsWXR7w.roa (raw, json) Hash identifier: b+lJy211nvU2PKiMrKNYXzy/mvhM9oQWUJhcUzYhcH0= Subject key identifier: 6B:8E:FA:C6:EB:B2:98:CE:03:58:C5:38:0A:82:20:2E:C5:97:47:BC Certificate issuer: /CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5 Certificate serial: 019B77C69D57BF9DDA8713484752720A03E8 Authority key identifier: 54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/a476xuuymM4DWMU4CoIgLsWXR7w.roa Signing time: Thu 01 Jan 2026 04:17:43 +0000 ROA not before: Thu 01 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199086 IP address blocks: 2001:678:4cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9d:57:bf:9d:da:87:13:48:47:52:72:0a:03:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5 Validity Not Before: Jan 1 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b8efac6ebb298ce0358c5380a82202ec59747bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:db:c9:da:7d:d6:7f:b1:af:e4:fe:22:3d:a4: b9:08:9b:82:19:b2:e3:7b:14:ce:32:39:ec:64:6a: 2b:36:dd:5e:f3:65:0c:26:68:b6:43:00:95:41:b9: 31:07:54:7d:f7:b4:72:f2:9f:d0:35:8e:cd:ad:76: aa:9a:2b:e1:98:d2:4e:e9:c4:57:07:26:b9:89:b2: 8a:73:bd:c4:0e:d9:bd:07:95:64:54:cb:2e:ef:c6: 94:60:79:d9:ab:29:dd:93:46:3c:70:3e:24:a9:d8: e6:91:b4:54:52:a5:8f:b6:2a:8e:27:c5:53:65:08: e9:43:90:0b:43:65:d7:6e:3f:c6:20:e1:70:30:29: 02:9e:db:8c:0f:61:03:e1:45:2e:69:5c:2c:63:4c: eb:31:2b:62:30:ab:a3:8c:c6:0d:18:8c:45:e4:40: b5:ba:03:96:06:e9:b5:66:25:51:d5:71:f7:74:03: f6:69:be:42:0a:3b:c1:53:39:f0:1f:b4:16:ad:47: 8e:11:9f:12:66:bf:4f:df:c6:8a:50:9d:b9:3b:49: 60:1a:c0:2b:a7:4b:25:29:49:6d:a0:36:55:5c:48: 9c:a7:5a:5f:74:d2:25:55:b0:ed:ee:c9:6c:d7:a2: 58:2d:a5:3c:e2:b1:da:4c:6a:ab:4e:00:7e:9d:94: 65:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:8E:FA:C6:EB:B2:98:CE:03:58:C5:38:0A:82:20:2E:C5:97:47:BC X509v3 Authority Key Identifier: keyid:54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/a476xuuymM4DWMU4CoIgLsWXR7w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:4cc::/48 Signature Algorithm: sha256WithRSAEncryption 7b:8e:7c:87:be:c8:d1:51:dc:8f:3f:d6:69:cf:22:94:15:62: 45:b1:57:ee:72:0e:2b:f6:64:7d:d5:e9:18:04:12:a8:a5:97: 41:7f:5d:ae:99:8b:4d:34:9a:73:07:be:21:e9:71:a7:3f:39: e4:8d:88:3b:bc:ec:55:00:08:ca:22:79:06:a1:7b:36:c7:3c: ab:37:14:94:21:0d:2e:0a:a7:a3:93:e3:50:9d:07:22:8d:92: 78:50:90:3f:e2:bd:2c:39:54:19:0c:0d:97:b7:81:0f:c8:1d: bd:8d:03:61:ce:3c:1b:45:5e:89:24:a0:e5:10:92:b0:b3:54: 6e:e5:70:bc:0d:49:4b:84:39:69:bb:d8:bb:52:04:02:d0:20: aa:22:d9:a7:f9:90:3f:53:cf:53:72:01:fe:2b:58:3b:dc:76: 60:b2:52:5c:d8:d0:2f:e9:7c:92:40:60:f0:60:a0:f7:41:43: 1d:b2:8a:74:bb:f4:eb:f9:48:9f:eb:7b:21:6a:81:a4:1b:3c: 1e:f3:74:8c:03:82:41:1f:cb:29:0e:0d:71:83:35:49:04:fb: 82:c8:1c:59:ab:ec:85:50:f4:86:4a:3c:1f:66:7c:41:ad:58: 95:cb:bc:11:b4:be:bd:64:55:7c:66:54:b2:6e:b8:0e:47:cc: ca:21:48:e1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3xp1Xv53ahxNIR1JyCgPoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ODVjOGVmMDM3Y2I4OTdjOGU5NGNmNjIxYzVhMzdkNjUx YzVlYTUwHhcNMjYwMTAxMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjhlZmFjNmViYjI5OGNlMDM1OGM1MzgwYTgyMjAyZWM1OTc0N2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9vJ2n3Wf7Gv5P4iPaS5CJuCGbLj exTOMjnsZGorNt1e82UMJmi2QwCVQbkxB1R997Ry8p/QNY7NrXaqmivhmNJO6cRX Bya5ibKKc73EDtm9B5VkVMsu78aUYHnZqyndk0Y8cD4kqdjmkbRUUqWPtiqOJ8VT ZQjpQ5ALQ2XXbj/GIOFwMCkCntuMD2ED4UUuaVwsY0zrMStiMKujjMYNGIxF5EC1 ugOWBum1ZiVR1XH3dAP2ab5CCjvBUznwH7QWrUeOEZ8SZr9P38aKUJ25O0lgGsAr p0slKUltoDZVXEicp1pfdNIlVbDt7sls16JYLaU84rHaTGqrTgB+nZRlyQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGuO+sbrspjOA1jFOAqCIC7Fl0e8MB8GA1UdIwQY MBaAFFSFyO8DfLiXyOlM9iHFo31lHF6lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVklYSTd3Tjh1SmZJNlV6MkljV2pmV1VjWHFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wZDY2NTUtYzBlYi00NjI2LTk2ZDUt ZTYzYzkxYWRjZTdmLzEvYTQ3Nnh1dXltTTREV01VNENvSWdMc1dYUjd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8wZDY2NTUtYzBlYi00NjI2LTk2ZDUtZTYzYzkxYWRjZTdm LzEvVklYSTd3Tjh1SmZJNlV6MkljV2pmV1VjWHFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeATM MA0GCSqGSIb3DQEBCwUAA4IBAQB7jnyHvsjRUdyPP9ZpzyKUFWJFsVfucg4r9mR9 1ekYBBKopZdBf12umYtNNJpzB74h6XGnPznkjYg7vOxVAAjKInkGoXs2xzyrNxSU IQ0uCqejk+NQnQcijZJ4UJA/4r0sOVQZDA2Xt4EPyB29jQNhzjwbRV6JJKDlEJKw s1Ru5XC8DUlLhDlpu9i7UgQC0CCqItmn+ZA/U89TcgH+K1g73HZgslJc2NAv6XyS QGDwYKD3QUMdsop0u/Tr+Uif63shaoGkGzwe83SMA4JBH8spDg1xgzVJBPuCyBxZ q+yFUPSGSjwfZnxBrViVy7wRtL69ZFV8ZlSybrgOR8zKIUjh -----END CERTIFICATE-----Generated at Thu Jan 1 09:11:15 2026 by rpki-client