This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/iq2sIW_7r1s1fdqTw7uNQndwmDA.roa File: iq2sIW_7r1s1fdqTw7uNQndwmDA.roa (raw, json) Hash identifier: /lnS57mtw7Zyuat4LO8cFH49gKzXZcuOrFwsUylOBQw= Subject key identifier: 8A:AD:AC:21:6F:FB:AF:5B:35:7D:DA:93:C3:BB:8D:42:77:70:98:30 Certificate issuer: /CN=eaf9788c995130d70eac46c06b226672d25d4185 Certificate serial: 019B7B35CFDB5CB880D13DA924553EBD4DBB Authority key identifier: EA:F9:78:8C:99:51:30:D7:0E:AC:46:C0:6B:22:66:72:D2:5D:41:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6vl4jJlRMNcOrEbAayJmctJdQYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/iq2sIW_7r1s1fdqTw7uNQndwmDA.roa Signing time: Thu 01 Jan 2026 20:18:02 +0000 ROA not before: Thu 01 Jan 2026 20:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28753 IP address blocks: 2a01:9260::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.crl rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.mft rsync://rpki.ripe.net/repository/DEFAULT/6vl4jJlRMNcOrEbAayJmctJdQYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 11:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:cf:db:5c:b8:80:d1:3d:a9:24:55:3e:bd:4d:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf9788c995130d70eac46c06b226672d25d4185 Validity Not Before: Jan 1 20:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8aadac216ffbaf5b357dda93c3bb8d4277709830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:09:53:7f:cc:a9:71:04:f7:bf:01:b8:78:61: 91:ce:d1:52:66:4a:95:fa:ff:a2:97:06:87:bb:2e: 58:9f:48:ec:bd:aa:2d:51:0b:27:19:e5:04:90:09: b0:13:05:7b:fc:fa:4f:6e:00:ec:03:7b:9e:40:18: 82:3e:04:b3:18:24:d2:93:1b:eb:25:b4:e3:5c:8a: e1:b9:b5:06:77:12:52:15:c5:ad:0d:5b:ad:c4:8a: 68:a1:d9:f5:0a:74:ae:1b:25:d2:12:30:2d:1f:bb: 3b:2b:5e:7d:23:63:85:0b:c2:ec:ce:82:28:84:12: 06:d5:60:4c:8b:86:a8:35:9b:e2:a4:37:44:50:39: 21:26:a3:7d:56:0d:86:a5:5b:c2:cb:7f:22:de:6b: a5:8e:64:b2:e0:5e:3a:da:4d:fd:b4:d2:86:2d:cc: 75:90:9b:73:61:1f:d5:dc:03:c7:b8:76:1f:0b:00: b9:15:2c:ee:2a:bf:4f:5e:db:46:26:ab:d8:b8:c8: 54:0a:c6:98:5a:45:83:5c:a4:b0:d6:00:11:14:81: 3d:c9:89:56:c5:1c:c5:36:17:06:e7:04:00:2d:7c: 8a:b2:50:76:3f:b7:fa:a3:21:e9:29:5c:7e:3b:80: 8c:54:f5:8c:43:34:55:18:ac:19:44:f1:07:75:19: 91:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AD:AC:21:6F:FB:AF:5B:35:7D:DA:93:C3:BB:8D:42:77:70:98:30 X509v3 Authority Key Identifier: keyid:EA:F9:78:8C:99:51:30:D7:0E:AC:46:C0:6B:22:66:72:D2:5D:41:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vl4jJlRMNcOrEbAayJmctJdQYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/iq2sIW_7r1s1fdqTw7uNQndwmDA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:9260::/32 Signature Algorithm: sha256WithRSAEncryption 7e:04:59:67:3c:1b:cd:31:f0:48:49:7e:db:c0:bf:13:f6:6b: 81:4b:a1:dc:14:85:ab:7f:4e:da:50:35:49:00:d8:8b:2f:ab: f2:f8:aa:2f:dc:35:a0:8d:74:b9:70:86:e4:da:b6:14:10:ad: 06:0b:99:2f:b8:38:fc:1a:85:22:8c:08:10:d1:13:4a:2c:ab: b0:cd:43:37:97:b3:3f:79:4f:5c:69:7c:f2:47:7e:b6:32:3f: 3d:b4:34:80:15:b6:8b:80:43:59:e9:9d:cc:19:e7:be:36:5e: d1:fc:cb:47:79:46:b2:9f:eb:bf:66:55:ea:d6:78:95:3c:54: c3:73:80:a8:e9:64:d7:9c:55:50:d0:4a:31:94:38:6f:fb:dd: ba:29:a6:6b:7f:fe:3d:98:19:33:e0:d0:18:26:e1:ed:67:30: 82:b7:40:61:b5:8b:2e:37:a8:86:4c:c6:89:8f:5d:54:33:0d: 46:ca:82:5f:dc:4a:b7:03:3b:aa:08:e1:18:bd:c5:c4:4d:e2: df:ae:c2:6e:c5:08:4e:7c:30:c9:1f:c3:8c:31:d9:59:d2:90: 90:cb:08:89:64:ff:66:62:4e:09:45:ca:4e:6e:70:54:01:11: d4:71:9c:06:10:66:7d:40:32:f3:87:df:35:42:6c:65:1c:2b: b5:6e:d0:e4 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7Nc/bXLiA0T2pJFU+vU27MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhZjk3ODhjOTk1MTMwZDcwZWFjNDZjMDZiMjI2NjcyZDI1 ZDQxODUwHhcNMjYwMTAxMjAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWFkYWMyMTZmZmJhZjViMzU3ZGRhOTNjM2JiOGQ0Mjc3NzA5ODMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwglTf8ypcQT3vwG4eGGRztFSZkqV +v+ilwaHuy5Yn0jsvaotUQsnGeUEkAmwEwV7/PpPbgDsA3ueQBiCPgSzGCTSkxvr JbTjXIrhubUGdxJSFcWtDVutxIpoodn1CnSuGyXSEjAtH7s7K159I2OFC8LszoIo hBIG1WBMi4aoNZvipDdEUDkhJqN9Vg2GpVvCy38i3muljmSy4F462k39tNKGLcx1 kJtzYR/V3APHuHYfCwC5FSzuKr9PXttGJqvYuMhUCsaYWkWDXKSw1gARFIE9yYlW xRzFNhcG5wQALXyKslB2P7f6oyHpKVx+O4CMVPWMQzRVGKwZRPEHdRmRzwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFIqtrCFv+69bNX3ak8O7jUJ3cJgwMB8GA1UdIwQY MBaAFOr5eIyZUTDXDqxGwGsiZnLSXUGFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnZsNGpKbFJNTmNPckViQWF5Sm1jdEpkUVlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81NTk2YjAtYThhNy00NWIwLWIyNDUt MGZlN2EwZWU2YmQzLzEvaXEyc0lXXzdyMXMxZmRxVHc3dU5RbmR3bURBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy81NTk2YjAtYThhNy00NWIwLWIyNDUtMGZlN2EwZWU2YmQz LzEvNnZsNGpKbFJNTmNPckViQWF5Sm1jdEpkUVlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgGSYDAN BgkqhkiG9w0BAQsFAAOCAQEAfgRZZzwbzTHwSEl+28C/E/ZrgUuh3BSFq39O2lA1 SQDYiy+r8viqL9w1oI10uXCG5Nq2FBCtBguZL7g4/BqFIowIENETSiyrsM1DN5ez P3lPXGl88kd+tjI/PbQ0gBW2i4BDWemdzBnnvjZe0fzLR3lGsp/rv2ZV6tZ4lTxU w3OAqOlk15xVUNBKMZQ4b/vduimma3/+PZgZM+DQGCbh7WcwgrdAYbWLLjeohkzG iY9dVDMNRsqCX9xKtwM7qgjhGL3FxE3i367CbsUITnwwyR/DjDHZWdKQkMsIiWT/ ZmJOCUXKTm5wVAER1HGcBhBmfUAy84ffNUJsZRwrtW7Q5A== -----END CERTIFICATE-----Generated at Wed Jan 7 17:18:54 2026 by rpki-client