This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/iBoAHfS4BZvaUqr3t62slrnAKc4.roa File: iBoAHfS4BZvaUqr3t62slrnAKc4.roa (raw, json) Hash identifier: j3qBODNziooOMWyPw2hbhVtBrkM/eb4LDIHDcyPEIv8= Subject key identifier: 88:1A:00:1D:F4:B8:05:9B:DA:52:AA:F7:B7:AD:AC:96:B9:C0:29:CE Certificate issuer: /CN=c024bdbded6e5d2fe0fb526500b3ff87665b600e Certificate serial: 019B79ECDDEDB4996A72CF0D0233656AAC4E Authority key identifier: C0:24:BD:BD:ED:6E:5D:2F:E0:FB:52:65:00:B3:FF:87:66:5B:60:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/iBoAHfS4BZvaUqr3t62slrnAKc4.roa Signing time: Thu 01 Jan 2026 14:18:44 +0000 ROA not before: Thu 01 Jan 2026 14:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208818 IP address blocks: 2001:67c:277c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:dd:ed:b4:99:6a:72:cf:0d:02:33:65:6a:ac:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c024bdbded6e5d2fe0fb526500b3ff87665b600e Validity Not Before: Jan 1 14:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=881a001df4b8059bda52aaf7b7adac96b9c029ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f9:4a:74:19:9b:03:15:50:9e:0d:b3:a5:a5: 5e:be:d1:a0:b4:17:37:06:04:c3:55:be:01:81:3f: 7c:53:ec:09:26:1e:e8:93:cc:f1:a5:38:ce:08:a7: eb:8b:ab:a9:18:72:32:6a:5d:83:e7:2d:06:2e:34: bd:46:0b:07:62:44:71:44:49:5d:21:a6:0b:54:6e: 20:b9:bc:fb:84:05:b3:26:dc:b6:ba:4c:6b:dc:2a: b7:c1:2b:3f:dc:39:e2:a9:87:f2:58:d6:f5:6f:22: 57:c9:4c:04:dd:95:64:69:e1:93:27:96:bc:69:65: 29:8b:e7:91:70:8d:05:29:12:a3:1d:78:21:7a:bf: a4:4e:3b:4c:a3:c6:55:12:6e:a5:20:8f:fc:be:0e: 97:21:01:06:26:b8:fd:1d:68:56:14:08:24:9d:41: 1e:26:35:3f:7b:07:82:33:74:a5:5d:54:ca:df:f6: de:b2:a8:07:66:0b:a4:29:67:58:f7:a3:07:8e:c2: 4a:b7:fa:49:b8:02:db:eb:82:a2:8f:fd:77:cd:f0: 11:30:a9:53:2f:d7:9a:75:02:2d:52:a0:e4:cc:2e: 40:15:02:b3:1a:31:60:8a:e4:8d:bf:d3:af:f4:52: da:cc:49:8e:f3:54:04:9d:ee:18:f9:b3:53:a4:d9: ba:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1A:00:1D:F4:B8:05:9B:DA:52:AA:F7:B7:AD:AC:96:B9:C0:29:CE X509v3 Authority Key Identifier: keyid:C0:24:BD:BD:ED:6E:5D:2F:E0:FB:52:65:00:B3:FF:87:66:5B:60:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/iBoAHfS4BZvaUqr3t62slrnAKc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:277c::/48 Signature Algorithm: sha256WithRSAEncryption a1:ad:08:2a:d1:bf:ef:2a:16:58:e7:0f:8a:cf:df:3c:cd:dc: 50:d3:ec:b1:1d:31:5c:01:d0:b2:58:22:0c:7f:bc:3e:de:41: e2:44:72:54:14:45:6a:f5:59:7f:20:f3:e6:be:fc:88:e0:a1: 4f:96:0f:ec:fe:e9:33:77:9d:65:d9:ae:32:eb:08:7f:d4:f6: 2d:5d:ba:1d:87:f0:ac:4c:a4:ff:88:80:f3:d1:21:8f:1e:de: 75:08:b7:25:2d:6b:de:2d:90:0a:23:40:6c:2e:06:21:3c:36: f6:30:04:44:cd:36:a2:00:dc:b7:83:b5:93:63:7f:45:b0:c1: 40:0d:94:27:10:4a:c3:84:56:09:42:b8:1e:8b:61:c2:18:2d: 83:c6:59:9c:4b:8e:fb:47:29:0f:34:eb:2f:90:72:80:b1:15: f1:f0:25:bf:7b:92:7c:fb:79:51:b6:65:a5:f8:8c:db:4a:f0: f3:0e:14:b3:bf:c4:be:48:6f:d8:58:3c:ce:a1:73:ff:45:5e: 5b:b9:dc:68:d8:79:53:f4:81:cc:d0:fc:47:d2:81:a7:21:41: e9:06:c6:d0:29:cb:cd:c8:95:2f:c2:6c:95:d3:36:94:f3:8b: 21:5f:8f:af:7a:ba:25:ef:f1:6f:88:21:64:b6:92:76:b1:83: b4:99:69:07 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57N3ttJlqcs8NAjNlaqxOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMjRiZGJkZWQ2ZTVkMmZlMGZiNTI2NTAwYjNmZjg3NjY1 YjYwMGUwHhcNMjYwMTAxMTQxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODFhMDAxZGY0YjgwNTliZGE1MmFhZjdiN2FkYWM5NmI5YzAyOWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlflKdBmbAxVQng2zpaVevtGgtBc3 BgTDVb4BgT98U+wJJh7ok8zxpTjOCKfri6upGHIyal2D5y0GLjS9RgsHYkRxREld IaYLVG4gubz7hAWzJty2ukxr3Cq3wSs/3DniqYfyWNb1byJXyUwE3ZVkaeGTJ5a8 aWUpi+eRcI0FKRKjHXgher+kTjtMo8ZVEm6lII/8vg6XIQEGJrj9HWhWFAgknUEe JjU/eweCM3SlXVTK3/besqgHZgukKWdY96MHjsJKt/pJuALb64Kij/13zfARMKlT L9eadQItUqDkzC5AFQKzGjFgiuSNv9Ov9FLazEmO81QEne4Y+bNTpNm6lQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIgaAB30uAWb2lKq97etrJa5wCnOMB8GA1UdIwQY MBaAFMAkvb3tbl0v4PtSZQCz/4dmW2AOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0NTOXZlMXVYU19nLTFKbEFMUF9oMlpiWUE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9jYzhmZmUtMzZiNC00YzgwLWE5MDct YWVhYTlkZjAxYTlkLzEvaUJvQUhmUzRCWnZhVXFyM3Q2MnNscm5BS2M0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9jYzhmZmUtMzZiNC00YzgwLWE5MDctYWVhYTlkZjAxYTlk LzEvd0NTOXZlMXVYU19nLTFKbEFMUF9oMlpiWUE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCd8 MA0GCSqGSIb3DQEBCwUAA4IBAQChrQgq0b/vKhZY5w+Kz988zdxQ0+yxHTFcAdCy WCIMf7w+3kHiRHJUFEVq9Vl/IPPmvvyI4KFPlg/s/ukzd51l2a4y6wh/1PYtXbod h/CsTKT/iIDz0SGPHt51CLclLWveLZAKI0BsLgYhPDb2MAREzTaiANy3g7WTY39F sMFADZQnEErDhFYJQrgei2HCGC2DxlmcS477RykPNOsvkHKAsRXx8CW/e5J8+3lR tmWl+IzbSvDzDhSzv8S+SG/YWDzOoXP/RV5budxo2HlT9IHM0PxH0oGnIUHpBsbQ KcvNyJUvwmyV0zaU84shX4+verol7/FviCFktpJ2sYO0mWkH -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:51 2026 by rpki-client