This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ibq3Wnxp8hPTJLumbS0ngt732bA.roa File: ibq3Wnxp8hPTJLumbS0ngt732bA.roa (raw, json) Hash identifier: vObporT1oNGV/CpYjL0jucDxVLqBKsd9J0aZg00QikY= Subject key identifier: 89:BA:B7:5A:7C:69:F2:13:D3:24:BB:A6:6D:2D:27:82:DE:F7:D9:B0 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6DF2408440D6C54D5B7413C760531 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ibq3Wnxp8hPTJLumbS0ngt732bA.roa Signing time: Fri 02 Jan 2026 12:20:23 +0000 ROA not before: Fri 02 Jan 2026 12:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201325 IP address blocks: 2a0c:9a40:82b0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:df:24:08:44:0d:6c:54:d5:b7:41:3c:76:05:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89bab75a7c69f213d324bba66d2d2782def7d9b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6f:df:7e:44:a5:68:38:a9:4a:52:5f:e6:27: 55:81:40:d5:86:1d:5b:14:19:7d:f0:6b:26:8c:cb: 3e:d3:dc:bc:8e:f5:54:f7:63:42:df:b4:e9:b3:76: d9:45:2c:e0:d3:10:cb:57:ad:19:f8:47:dd:5b:e3: 11:de:06:92:f9:bb:17:45:f9:93:98:fb:f2:ac:2b: ce:f6:5f:43:65:3d:9b:54:85:50:dd:8a:fa:52:e0: 2a:ca:e7:44:db:64:2b:ec:21:5b:a3:a6:c2:37:fe: 71:8c:52:fc:31:ee:3c:94:e2:03:85:2d:3f:76:16: 8b:c4:e5:8c:f1:d7:d6:22:78:01:f6:a3:72:11:e5: 22:6c:41:ae:7c:00:42:93:fa:d1:d8:35:32:8e:69: 29:b1:32:29:3f:a8:80:58:d7:4d:81:07:59:15:fd: e7:42:df:3a:25:13:11:cf:5d:12:54:62:05:af:47: 54:be:0f:85:6e:54:8d:5f:54:c8:89:8f:9b:9d:26: 46:0b:d6:1a:8e:73:10:21:7b:fb:ea:74:70:2e:9a: 3f:22:3a:42:0d:10:ba:94:1f:9e:b2:07:11:82:19: b5:26:49:dd:94:df:b7:6c:32:c8:6e:5f:20:03:c8: 39:fd:a3:84:ce:16:78:df:87:36:7a:9c:ea:74:57: 84:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BA:B7:5A:7C:69:F2:13:D3:24:BB:A6:6D:2D:27:82:DE:F7:D9:B0 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ibq3Wnxp8hPTJLumbS0ngt732bA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:82b0::/48 Signature Algorithm: sha256WithRSAEncryption 66:5c:c4:c1:0b:f7:a4:54:78:9a:dc:b4:ce:81:80:48:b6:7d: 61:3a:bd:cf:c0:0a:f2:20:ca:10:07:06:0b:6e:8f:8d:a6:2d: 15:cf:98:2e:2d:d3:0c:2f:30:00:87:2c:f5:ce:0f:27:41:fd: f9:41:ec:55:3f:46:40:70:b7:ac:4c:e9:7d:4d:52:a2:50:e8: cf:16:10:13:0f:c5:b9:13:1a:dc:8e:12:27:8e:64:3b:eb:f3: 96:e0:83:88:17:1c:e3:a7:31:9c:32:83:56:b5:0b:d1:10:6d: 97:42:a0:2d:1c:59:0f:55:fa:98:d5:75:ff:cf:bc:34:f9:c2: 57:bf:dc:ea:db:71:b0:04:7b:87:c9:5b:51:e7:30:5c:50:e7: 94:b4:9b:21:56:40:30:39:78:88:52:99:fe:54:58:85:96:bb: 95:93:45:f9:0f:b1:6c:8b:85:67:6b:c6:23:c9:3d:13:72:81: 2f:a3:3a:fd:66:cc:23:7e:c6:98:7c:8b:e2:fe:a7:43:f1:90: 33:86:92:9d:b6:b6:7b:64:0c:2c:02:c9:99:40:cd:16:b0:4e: 34:a9:c4:f7:64:3d:1c:86:fc:55:6b:4e:8c:58:8c:7d:d9:58: ff:ab:33:5a:e8:a2:49:0f:68:62:73:9e:0d:52:32:6c:8d:91: ea:53:a7:ee -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pt8kCEQNbFTVt0E8dgUxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWJhYjc1YTdjNjlmMjEzZDMyNGJiYTY2ZDJkMjc4MmRlZjdkOWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG/ffkSlaDipSlJf5idVgUDVhh1b FBl98GsmjMs+09y8jvVU92NC37Tps3bZRSzg0xDLV60Z+EfdW+MR3gaS+bsXRfmT mPvyrCvO9l9DZT2bVIVQ3Yr6UuAqyudE22Qr7CFbo6bCN/5xjFL8Me48lOIDhS0/ dhaLxOWM8dfWIngB9qNyEeUibEGufABCk/rR2DUyjmkpsTIpP6iAWNdNgQdZFf3n Qt86JRMRz10SVGIFr0dUvg+FblSNX1TIiY+bnSZGC9YajnMQIXv76nRwLpo/IjpC DRC6lB+esgcRghm1JkndlN+3bDLIbl8gA8g5/aOEzhZ434c2epzqdFeEwwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIm6t1p8afIT0yS7pm0tJ4Le99mwMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvaWJxM1dueHA4aFBUSkx1bWJTMG5ndDczMmJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIKw MA0GCSqGSIb3DQEBCwUAA4IBAQBmXMTBC/ekVHia3LTOgYBItn1hOr3PwAryIMoQ BwYLbo+Npi0Vz5guLdMMLzAAhyz1zg8nQf35QexVP0ZAcLesTOl9TVKiUOjPFhAT D8W5ExrcjhInjmQ76/OW4IOIFxzjpzGcMoNWtQvREG2XQqAtHFkPVfqY1XX/z7w0 +cJXv9zq23GwBHuHyVtR5zBcUOeUtJshVkAwOXiIUpn+VFiFlruVk0X5D7Fsi4Vn a8YjyT0TcoEvozr9ZswjfsaYfIvi/qdD8ZAzhpKdtrZ7ZAwsAsmZQM0WsE40qcT3 ZD0chvxVa06MWIx92Vj/qzNa6KJJD2hic54NUjJsjZHqU6fu -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:53 2026 by rpki-client