This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/i0cKAKGtKDovxWZbu34pQzXMM0k.roa File: i0cKAKGtKDovxWZbu34pQzXMM0k.roa (raw, json) Hash identifier: uMzWYjFAZHI2miyBjgf5WM8BgmGFLmT0uuEUR6+py4s= Subject key identifier: 8B:47:0A:00:A1:AD:28:3A:2F:C5:66:5B:BB:7E:29:43:35:CC:33:49 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019BACBDBD6C1EFE7986326479B17D1AAF1B Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/i0cKAKGtKDovxWZbu34pQzXMM0k.roa Signing time: Sun 11 Jan 2026 11:07:54 +0000 ROA not before: Sun 11 Jan 2026 11:07:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28753 IP address blocks: 2a04:9f40::/29 maxlen: 29 2a06:1184:101::/48 maxlen: 48 2a06:3bc0::/29 maxlen: 29 2a07:8a40::/29 maxlen: 29 2a09:7b00::/29 maxlen: 29 2a09:b700::/29 maxlen: 29 2a0a:2d06:102::/48 maxlen: 48 2a0a:2d06:103::/48 maxlen: 48 2a0a:7d00::/29 maxlen: 29 2a0c:4880::/29 maxlen: 29 2a0c:7886:99::/48 maxlen: 48 2a0c:7886:100::/48 maxlen: 48 2a0e:15c7:99::/48 maxlen: 48 2a0f:17c0::/29 maxlen: 29 2a0f:2500::/29 maxlen: 29 2a0f:a200::/29 maxlen: 29 2a0f:d200::/29 maxlen: 29 2a0f:db40::/29 maxlen: 29 2a11:8880::/29 maxlen: 29 2a12:4ac0::/29 maxlen: 29 2a12:ac43:1312::/48 maxlen: 48 2a12:ecc0:158::/48 maxlen: 48 2a12:ecc6:1312::/48 maxlen: 48 2a13:1380::/29 maxlen: 29 2a13:18c6:66::/48 maxlen: 48 2a13:18c6:88::/48 maxlen: 48 2a13:2cc0::/29 maxlen: 29 2a13:2d40::/29 maxlen: 29 2a13:2dc0::/29 maxlen: 29 2a13:2e40::/29 maxlen: 29 2a13:3040::/29 maxlen: 29 2a13:3380::/29 maxlen: 29 2a13:4900::/29 maxlen: 29 2a13:5b80::/29 maxlen: 29 2a13:7900::/29 maxlen: 29 2a13:7d80::/29 maxlen: 29 2a13:8200::/29 maxlen: 29 2a13:9480::/29 maxlen: 29 2a13:d100::/29 maxlen: 29 2a13:d700::/29 maxlen: 29 2a13:d900::/29 maxlen: 29 2a13:f900::/29 maxlen: 29 2a13:fb00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 Jan 2026 04:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ac:bd:bd:6c:1e:fe:79:86:32:64:79:b1:7d:1a:af:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 11 11:07:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b470a00a1ad283a2fc5665bbb7e294335cc3349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:65:2a:e0:e9:e6:ee:65:20:7a:f8:ef:3a:00: 4a:a0:88:de:82:0e:0b:25:6e:88:f2:a3:59:3c:cf: 1a:95:b8:72:f2:91:1c:34:10:0d:af:f0:42:02:f9: 55:26:34:61:94:c9:b3:1a:d1:0b:e4:3a:15:4f:aa: c3:dd:6a:c2:c8:1a:44:eb:b6:02:b7:89:c5:23:51: 67:35:f3:c7:40:c7:95:93:4b:4d:4a:bf:26:70:55: aa:61:de:82:ea:97:bd:56:a5:d2:dd:c9:7c:ca:4e: a7:08:9e:e7:1a:79:29:ae:61:47:7e:f7:4d:fd:a0: b2:94:ba:14:a3:e3:21:8f:ea:4e:ca:a5:2e:c2:dc: 7f:d7:c0:32:63:47:6b:d3:fe:87:8d:68:97:42:42: 39:97:5c:e8:df:22:c4:60:2f:fc:7a:fe:1d:c5:50: c0:9b:5c:14:e2:b2:42:0a:a7:64:99:9b:92:5a:f0: a7:13:26:db:30:a2:b8:e7:2f:b4:a1:6f:31:04:56: 08:23:e5:5d:66:d0:14:f2:4f:51:63:f5:10:09:49: 2c:12:bb:e7:bf:0f:fd:30:dc:fb:6c:c4:c0:c8:37: 96:ac:68:b8:2a:6b:ee:b9:b4:5b:22:00:05:cc:a7: 2c:fc:ff:f6:3d:bd:0a:95:77:44:5e:80:91:ef:78: fe:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:47:0A:00:A1:AD:28:3A:2F:C5:66:5B:BB:7E:29:43:35:CC:33:49 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/i0cKAKGtKDovxWZbu34pQzXMM0k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:9f40::/29 2a06:1184:101::/48 2a06:3bc0::/29 2a07:8a40::/29 2a09:7b00::/29 2a09:b700::/29 2a0a:2d06:102::/47 2a0a:7d00::/29 2a0c:4880::/29 2a0c:7886:99::/48 2a0c:7886:100::/48 2a0e:15c7:99::/48 2a0f:17c0::/29 2a0f:2500::/29 2a0f:a200::/29 2a0f:d200::/29 2a0f:db40::/29 2a11:8880::/29 2a12:4ac0::/29 2a12:ac43:1312::/48 2a12:ecc0:158::/48 2a12:ecc6:1312::/48 2a13:1380::/29 2a13:18c6:66::/48 2a13:18c6:88::/48 2a13:2cc0::/29 2a13:2d40::/29 2a13:2dc0::/29 2a13:2e40::/29 2a13:3040::/29 2a13:3380::/29 2a13:4900::/29 2a13:5b80::/29 2a13:7900::/29 2a13:7d80::/29 2a13:8200::/29 2a13:9480::/29 2a13:d100::/29 2a13:d700::/29 2a13:d900::/29 2a13:f900::/29 2a13:fb00::/29 Signature Algorithm: sha256WithRSAEncryption 2c:2f:6b:70:1e:d4:dc:6d:86:8e:23:c3:7a:61:da:eb:3e:d7: c0:f6:c6:1c:fa:5b:83:83:6e:61:d3:0f:58:65:71:7c:f4:53: 5a:dc:ea:a6:ae:44:db:09:66:35:3a:71:05:62:d8:11:f1:38: 40:19:66:c2:be:a3:b0:c1:95:ab:2b:e3:65:ed:51:bc:23:52: 10:25:ad:43:d3:9e:9c:b5:db:f1:21:bd:5b:19:93:79:3e:db: fd:50:b7:95:c0:01:f4:12:07:34:a8:c4:c7:e8:3e:f0:61:e4: ea:e8:0e:b8:d7:fe:9e:77:1e:e8:30:8a:c9:0a:45:10:65:33: 7e:c1:9d:bf:ff:53:c0:90:30:cc:ac:7b:5d:02:2f:0c:39:4f: dc:85:91:5c:8d:d4:9b:71:06:63:31:4c:1f:a8:2f:e9:09:f4: 99:08:ca:3b:1d:6f:01:21:be:b5:1d:9c:89:88:f6:5f:21:dd: 65:dc:ec:39:ca:66:15:2e:6c:fe:cb:8b:66:e7:18:fb:a8:f5: 65:3e:d1:b8:09:1a:29:55:90:6d:a9:09:2f:45:15:0e:79:2f: 01:fe:17:4d:66:92:ea:10:ac:6a:a4:7b:7a:5c:1c:9c:f2:31: 85:7e:af:84:42:2d:55:d4:02:1c:9b:82:e7:5c:9c:7b:18:f5: 76:c9:24:9b -----BEGIN CERTIFICATE----- MIIGOzCCBSOgAwIBAgISAZusvb1sHv55hjJkebF9Gq8bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTExMTEwNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjQ3MGEwMGExYWQyODNhMmZjNTY2NWJiYjdlMjk0MzM1Y2MzMzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWUq4Onm7mUgevjvOgBKoIjegg4L JW6I8qNZPM8albhy8pEcNBANr/BCAvlVJjRhlMmzGtEL5DoVT6rD3WrCyBpE67YC t4nFI1FnNfPHQMeVk0tNSr8mcFWqYd6C6pe9VqXS3cl8yk6nCJ7nGnkprmFHfvdN /aCylLoUo+Mhj+pOyqUuwtx/18AyY0dr0/6HjWiXQkI5l1zo3yLEYC/8ev4dxVDA m1wU4rJCCqdkmZuSWvCnEybbMKK45y+0oW8xBFYII+VdZtAU8k9RY/UQCUksErvn vw/9MNz7bMTAyDeWrGi4KmvuubRbIgAFzKcs/P/2Pb0KlXdEXoCR73j+JwIDAQAB o4IDRzCCA0MwHQYDVR0OBBYEFItHCgChrSg6L8VmW7t+KUM1zDNJMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvaTBjS0FLR3RLRG92eFdaYnUzNHBRelhNTTBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBWwYIKwYBBQUHAQcBAf8EggFKMIIBRjCCAUIEAgACMIIB OgMFAyoEn0ADBwAqBhGEAQEDBQMqBjvAAwUDKgeKQAMFAyoJewADBQMqCbcAAwcB KgotBgECAwUDKgp9AAMFAyoMSIADBwAqDHiGAJkDBwAqDHiGAQADBwAqDhXHAJkD BQMqDxfAAwUDKg8lAAMFAyoPogADBQMqD9IAAwUDKg/bQAMFAyoRiIADBQMqEkrA AwcAKhKsQxMSAwcAKhLswAFYAwcAKhLsxhMSAwUDKhMTgAMHACoTGMYAZgMHACoT GMYAiAMFAyoTLMADBQMqEy1AAwUDKhMtwAMFAyoTLkADBQMqEzBAAwUDKhMzgAMF AyoTSQADBQMqE1uAAwUDKhN5AAMFAyoTfYADBQMqE4IAAwUDKhOUgAMFAyoT0QAD BQMqE9cAAwUDKhPZAAMFAyoT+QADBQMqE/sAMA0GCSqGSIb3DQEBCwUAA4IBAQAs L2twHtTcbYaOI8N6YdrrPtfA9sYc+luDg25h0w9YZXF89FNa3OqmrkTbCWY1OnEF YtgR8ThAGWbCvqOwwZWrK+Nl7VG8I1IQJa1D056ctdvxIb1bGZN5Ptv9ULeVwAH0 Egc0qMTH6D7wYeTq6A641/6edx7oMIrJCkUQZTN+wZ2//1PAkDDMrHtdAi8MOU/c hZFcjdSbcQZjMUwfqC/pCfSZCMo7HW8BIb61HZyJiPZfId1l3Ow5ymYVLmz+y4tm 5xj7qPVlPtG4CRopVZBtqQkvRRUOeS8B/hdNZpLqEKxqpHt6XByc8jGFfq+EQi1V 1AIcm4LnXJx7GPV2ySSb -----END CERTIFICATE-----Generated at Wed Jan 14 13:12:33 2026 by rpki-client