This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/IlhYeqATJ7Odul3Fllm9mVMhj2c.roa File: IlhYeqATJ7Odul3Fllm9mVMhj2c.roa (raw, json) Hash identifier: TrPefM7qSsmFU0VZm4E5L9Y7O1aL1dHi4VGuwk3mAKk= Subject key identifier: 22:58:58:7A:A0:13:27:B3:9D:BA:5D:C5:96:59:BD:99:53:21:8F:67 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6CC3FBD43141D935512540D01E2A2 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/IlhYeqATJ7Odul3Fllm9mVMhj2c.roa Signing time: Fri 02 Jan 2026 12:20:19 +0000 ROA not before: Fri 02 Jan 2026 12:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53356 IP address blocks: 2a0c:9a40:808b::/48 maxlen: 48 2a0c:9a40:808c::/48 maxlen: 48 2a0c:9a40:8200::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:cc:3f:bd:43:14:1d:93:55:12:54:0d:01:e2:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2258587aa01327b39dba5dc59659bd9953218f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:42:a9:08:3b:16:cc:01:ca:23:13:18:8c:55: 60:d4:90:98:c4:42:9e:6c:97:8d:3a:bb:30:a7:59: 41:b5:2a:d6:69:d5:2e:5d:93:32:b0:c1:15:68:80: 6c:8a:b8:61:d4:48:0a:9f:48:91:e6:e5:03:a8:8e: 6a:7c:1b:b3:81:0e:54:54:74:8e:f0:52:31:e3:e5: 0b:e5:01:7e:08:cc:79:1b:fb:9f:0c:f6:a9:bb:fb: 2e:05:e9:8e:05:07:9b:22:17:25:4e:b7:10:cb:8c: e8:d5:51:92:cb:33:0a:e5:b3:46:aa:e8:34:50:67: 9d:2d:4f:c1:f5:98:ea:6d:7a:d4:ce:ea:68:e1:e5: ff:b4:19:e9:1f:da:a8:41:42:33:4e:a0:72:ff:4a: 32:b3:9f:f7:af:1d:c8:9c:0d:26:d5:a2:ed:72:9c: 18:4a:96:ba:99:3e:0b:1b:cb:a5:80:e1:63:77:41: 4b:0a:8f:df:5d:85:8b:ec:b8:cc:c3:e9:04:67:0e: ce:34:a6:f1:1a:21:3b:02:71:a3:7d:53:41:d7:3a: a7:c9:56:40:ff:0c:a7:ac:6c:5c:fd:df:5e:c2:fe: 3f:a6:05:4f:06:36:31:09:9d:4c:fc:22:4d:0a:b2: 4b:68:70:6e:4e:f7:aa:b9:a2:bb:50:b4:33:a0:cd: be:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:58:58:7A:A0:13:27:B3:9D:BA:5D:C5:96:59:BD:99:53:21:8F:67 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/IlhYeqATJ7Odul3Fllm9mVMhj2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:808b::-2a0c:9a40:808c:ffff:ffff:ffff:ffff:ffff 2a0c:9a40:8200::/47 Signature Algorithm: sha256WithRSAEncryption b1:6d:94:a2:90:e0:0b:79:c6:28:e9:80:04:5e:b5:32:47:3b: 04:c1:bf:4e:c2:39:28:74:27:77:a7:ab:63:09:8f:a4:de:5b: 06:4e:9c:a8:5f:23:a1:19:6d:38:4b:1b:ab:90:84:86:e7:fc: 3e:ee:64:43:da:59:ce:87:4d:ec:3c:72:11:e5:b6:8d:35:d6: 0c:ad:9d:55:d3:eb:82:e4:9e:be:63:ce:10:3e:24:73:c4:e0: 13:b6:c4:10:81:74:b7:31:bb:b2:75:fa:96:04:fd:1c:80:3c: 28:db:ca:c9:92:4a:82:67:76:a9:ae:bc:83:23:29:0d:b0:83: 7e:98:53:41:eb:91:10:0c:6d:7a:31:ae:00:c2:77:b8:97:7e: 92:36:8e:ce:a4:51:cc:ad:7c:cf:f6:e6:94:3b:cb:e8:ce:0f: aa:77:8b:22:95:d0:e4:58:bc:5a:e1:5b:20:b0:b4:e3:40:60: bf:4c:e4:75:9c:a8:ff:4d:f6:d4:6f:ed:5f:3e:24:ba:42:ab: f7:ca:36:3e:39:a4:5a:b3:ff:43:fe:2e:a0:0a:4b:80:ec:bb: 56:bf:5b:c6:c7:29:1d:0f:3b:63:73:3b:7a:3d:f0:71:e7:54: 81:36:a0:2b:eb:71:0a:2a:84:03:70:c2:ac:4e:ca:5c:c1:24: c2:19:93:bf -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt+psw/vUMUHZNVElQNAeKiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjU4NTg3YWEwMTMyN2IzOWRiYTVkYzU5NjU5YmQ5OTUzMjE4ZjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0KpCDsWzAHKIxMYjFVg1JCYxEKe bJeNOrswp1lBtSrWadUuXZMysMEVaIBsirhh1EgKn0iR5uUDqI5qfBuzgQ5UVHSO 8FIx4+UL5QF+CMx5G/ufDPapu/suBemOBQebIhclTrcQy4zo1VGSyzMK5bNGqug0 UGedLU/B9ZjqbXrUzupo4eX/tBnpH9qoQUIzTqBy/0oys5/3rx3InA0m1aLtcpwY Spa6mT4LG8ulgOFjd0FLCo/fXYWL7LjMw+kEZw7ONKbxGiE7AnGjfVNB1zqnyVZA /wynrGxc/d9ewv4/pgVPBjYxCZ1M/CJNCrJLaHBuTvequaK7ULQzoM2+CQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFCJYWHqgEyeznbpdxZZZvZlTIY9nMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvSWxoWWVxQVRKN09kdWwzRmxsbTltVk1oajJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdMBIDBwAqDJpA gIsDBwAqDJpAgIwDBwEqDJpAggAwDQYJKoZIhvcNAQELBQADggEBALFtlKKQ4At5 xijpgARetTJHOwTBv07COSh0J3enq2MJj6TeWwZOnKhfI6EZbThLG6uQhIbn/D7u ZEPaWc6HTew8chHlto011gytnVXT64Lknr5jzhA+JHPE4BO2xBCBdLcxu7J1+pYE /RyAPCjbysmSSoJndqmuvIMjKQ2wg36YU0HrkRAMbXoxrgDCd7iXfpI2js6kUcyt fM/25pQ7y+jOD6p3iyKV0ORYvFrhWyCwtONAYL9M5HWcqP9N9tRv7V8+JLpCq/fK Nj45pFqz/0P+LqAKS4Dsu1a/W8bHKR0PO2NzO3o98HHnVIE2oCvrcQoqhANwwqxO ylzBJMIZk78= -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:52 2026 by rpki-client