This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/iDAdYckwJ-cMfTZQzbOAuVNBPQE.roa File: iDAdYckwJ-cMfTZQzbOAuVNBPQE.roa (raw, json) Hash identifier: 1/067i3fw6b+0AnVm88M01ZfwqO6rPWe5th/RiPzphI= Subject key identifier: 88:30:1D:61:C9:30:27:E7:0C:7D:36:50:CD:B3:80:B9:53:41:3D:01 Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13EAE18A1DE8D423155816E5DB6314 Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/iDAdYckwJ-cMfTZQzbOAuVNBPQE.roa Signing time: Fri 02 Jan 2026 14:19:30 +0000 ROA not before: Fri 02 Jan 2026 14:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41682 IP address blocks: 2a02:2698:8000::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:ea:e1:8a:1d:e8:d4:23:15:58:16:e5:db:63:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88301d61c93027e70c7d3650cdb380b953413d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9e:e9:ad:3e:b1:b1:15:5e:b2:ec:e2:da:0c: ed:e5:2e:90:45:b8:79:28:b6:92:5c:14:84:b2:c2: 72:32:1a:99:55:a2:17:a0:66:7b:d3:ee:38:31:e4: 4f:c2:1a:b2:78:d2:ac:3a:a7:a6:67:d2:99:de:2b: 73:d5:47:80:31:86:81:c9:1a:10:3a:97:7c:31:d6: d3:7d:ef:e4:37:2d:8b:07:61:0e:58:2e:50:ce:1f: a1:21:c4:e6:86:8e:e6:47:d1:de:62:07:05:db:c0: 47:08:45:a1:c7:8f:58:93:8f:9a:e6:42:ff:2a:f8: ad:d1:eb:8e:db:85:3f:07:09:c7:dc:68:d2:e9:b3: 86:2b:08:79:0f:9d:c3:31:f0:17:72:40:9c:21:e0: 5a:74:b4:3d:eb:2d:3e:d1:8a:9f:57:6d:81:bf:32: 07:e3:3e:85:d2:ea:d9:61:f8:eb:17:f0:58:6d:7f: b8:1d:81:4c:b4:42:92:61:c3:c8:1c:7b:49:e1:14: 0b:df:b9:9a:c1:60:67:68:de:f0:94:a4:7a:5a:3e: be:11:4d:3c:f0:29:da:c5:33:d3:b2:41:38:8b:00: 98:94:c1:03:1d:b0:38:95:cd:68:be:1d:66:8c:5e: 60:41:07:6a:24:62:87:1f:1b:15:28:c5:8d:63:b7: 9f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:30:1D:61:C9:30:27:E7:0C:7D:36:50:CD:B3:80:B9:53:41:3D:01 X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/iDAdYckwJ-cMfTZQzbOAuVNBPQE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2698:8000::/38 Signature Algorithm: sha256WithRSAEncryption 5f:c7:27:01:8d:cf:7b:ac:8e:3f:ec:db:4d:93:f8:83:2b:3f: ba:cc:99:47:97:86:0b:a7:eb:1b:2c:03:84:1b:23:64:c1:43: f0:ed:af:3f:18:08:bd:09:fd:c4:51:0d:ac:82:59:ae:41:12: 57:74:55:d8:0b:c4:60:08:77:e8:5f:f0:95:5b:68:8c:d3:da: 7c:c4:45:2e:18:c0:23:19:53:46:12:c6:8e:5a:9c:7c:61:b8: db:18:4a:d7:d8:37:57:70:a4:9f:a6:5a:49:57:28:6d:85:28: bf:2d:d7:23:c6:50:4d:44:c9:a7:dd:f9:a7:d6:fc:1e:05:88: ba:ef:35:c3:20:fb:8c:5c:1c:93:c4:7d:ff:32:58:ad:3b:a4: 41:a5:8b:13:cb:e9:ea:d3:21:ed:94:13:ae:23:05:59:c1:2d: a0:14:6a:75:95:a2:81:ef:95:bd:53:a3:e0:45:d5:f0:bb:a2: 84:84:77:38:29:61:1c:d9:ce:9c:3a:17:0a:0e:ae:ee:00:ff: 39:7e:f4:f5:1a:c7:4c:97:4b:ee:28:58:8e:e5:34:6c:06:e7: e4:07:db:ba:84:d9:7e:4d:98:8d:9f:8d:d9:e5:35:6e:69:84: 2e:64:48:b2:41:fd:bc:0d:b2:60:c6:9d:ab:22:f5:18:6d:f6: 67:59:b3:ba -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/E+rhih3o1CMVWBbl22MUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODMwMWQ2MWM5MzAyN2U3MGM3ZDM2NTBjZGIzODBiOTUzNDEzZDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp7prT6xsRVesuzi2gzt5S6QRbh5 KLaSXBSEssJyMhqZVaIXoGZ70+44MeRPwhqyeNKsOqemZ9KZ3itz1UeAMYaByRoQ Opd8MdbTfe/kNy2LB2EOWC5Qzh+hIcTmho7mR9HeYgcF28BHCEWhx49Yk4+a5kL/ Kvit0euO24U/BwnH3GjS6bOGKwh5D53DMfAXckCcIeBadLQ96y0+0YqfV22BvzIH 4z6F0urZYfjrF/BYbX+4HYFMtEKSYcPIHHtJ4RQL37mawWBnaN7wlKR6Wj6+EU08 8CnaxTPTskE4iwCYlMEDHbA4lc1ovh1mjF5gQQdqJGKHHxsVKMWNY7efuQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFIgwHWHJMCfnDH02UM2zgLlTQT0BMB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvaURBZFlja3dKLWNNZlRaUXpiT0F1Vk5CUFFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKgImmIAw DQYJKoZIhvcNAQELBQADggEBAF/HJwGNz3usjj/s202T+IMrP7rMmUeXhgun6xss A4QbI2TBQ/Dtrz8YCL0J/cRRDayCWa5BEld0VdgLxGAId+hf8JVbaIzT2nzERS4Y wCMZU0YSxo5anHxhuNsYStfYN1dwpJ+mWklXKG2FKL8t1yPGUE1Eyafd+afW/B4F iLrvNcMg+4xcHJPEff8yWK07pEGlixPL6erTIe2UE64jBVnBLaAUanWVooHvlb1T o+BF1fC7ooSEdzgpYRzZzpw6FwoOru4A/zl+9PUax0yXS+4oWI7lNGwG5+QH27qE 2X5NmI2fjdnlNW5phC5kSLJB/bwNsmDGnasi9Rht9mdZs7o= -----END CERTIFICATE-----Generated at Thu Feb 5 06:00:16 2026 by rpki-client