This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/IQbpL4Pqq93ybQGV6ANNMbZ2iIo.roa File: IQbpL4Pqq93ybQGV6ANNMbZ2iIo.roa (raw, json) Hash identifier: PGBZA27UKVJdbgN0SEeBoj7RAPgQfESC+ab1mII1zDE= Subject key identifier: 21:06:E9:2F:83:EA:AB:DD:F2:6D:01:95:E8:03:4D:31:B6:76:88:8A Certificate issuer: /CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2 Certificate serial: 019B7EA543431228E2F9B456DDFE255F5670 Authority key identifier: AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/IQbpL4Pqq93ybQGV6ANNMbZ2iIo.roa Signing time: Fri 02 Jan 2026 12:18:38 +0000 ROA not before: Fri 02 Jan 2026 12:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207278 IP address blocks: 2001:678:cd0::/48 maxlen: 49 2001:678:cd4::/48 maxlen: 49 2001:678:cd8::/48 maxlen: 49 2001:67c:15c0::/48 maxlen: 49 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.crl rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:43:43:12:28:e2:f9:b4:56:dd:fe:25:5f:56:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2 Validity Not Before: Jan 2 12:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2106e92f83eaabddf26d0195e8034d31b676888a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3b:f5:90:de:bd:e7:ae:64:36:eb:ed:8f:8d: 1a:8f:4b:f7:16:d1:af:27:1c:d0:92:60:d7:e9:36: f6:66:00:3e:43:ac:67:34:9b:32:56:be:85:08:c9: 3c:25:f4:67:8b:7a:9d:71:53:f7:03:5a:16:0a:f6: c1:70:1a:e6:58:9d:a9:b5:d6:a1:d9:40:2b:79:b5: 69:4d:c3:3b:bb:b1:3c:7b:a0:66:08:2d:50:5d:b3: e9:aa:b6:b7:58:67:2a:53:4d:b1:e4:1c:c6:79:a4: e5:e6:04:1b:05:d1:f3:c6:87:a1:9f:af:83:72:7f: a2:e5:b2:44:a0:a7:a2:16:e7:82:c7:93:62:c0:9e: 3b:8c:7f:6e:ab:7b:69:dd:f4:5b:52:65:ba:df:d2: 57:77:0d:36:c5:eb:ec:a2:ea:95:20:9b:a4:2a:ba: 88:14:fd:6b:6e:cd:39:55:20:ce:b2:af:af:60:e2: 60:29:01:61:75:a4:ea:2f:ce:d5:7e:c5:ef:68:60: d8:67:95:b4:f5:8d:17:e4:6b:59:51:21:20:d5:ef: 36:2b:71:e7:03:65:e1:ef:15:d6:f5:eb:13:85:c6: d6:2e:f4:f3:2e:a5:dc:96:ec:60:20:92:aa:d4:17: 81:d7:be:bb:65:15:9c:75:20:ef:63:50:60:5e:0d: 54:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:06:E9:2F:83:EA:AB:DD:F2:6D:01:95:E8:03:4D:31:B6:76:88:8A X509v3 Authority Key Identifier: keyid:AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/IQbpL4Pqq93ybQGV6ANNMbZ2iIo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:cd0::/48 2001:678:cd4::/48 2001:678:cd8::/48 2001:67c:15c0::/48 Signature Algorithm: sha256WithRSAEncryption a4:50:79:b6:9c:87:03:7c:08:e1:83:4c:63:95:d5:3e:a7:b5: 70:cc:e4:0b:d9:23:12:e2:0f:7e:73:ef:e4:06:8e:29:22:ae: 5e:04:fb:c5:4c:c2:e8:fe:d2:97:b6:31:d2:7a:7c:6e:0d:89: 89:8b:09:06:05:8c:2d:7b:85:7b:95:4e:21:ef:a2:e8:92:47: 55:2f:88:2c:f5:3d:ff:1e:c2:37:cf:d9:8c:97:c0:0d:71:8b: e2:d4:12:24:ba:1e:74:af:62:3f:1f:8e:d0:02:cd:ce:5b:7f: af:b1:77:3f:e0:1c:17:4c:4a:6b:80:ff:15:95:88:bb:84:58: 46:7e:6e:09:83:81:f4:f1:b2:d0:94:83:34:d0:51:94:04:d3: ee:9b:a6:73:c5:75:1a:62:9c:ba:56:a9:3b:6a:56:61:e5:cf: c2:c3:32:6e:6a:dd:d1:d2:27:46:55:85:c6:53:a0:41:9a:f8: 98:1d:ee:54:6b:05:ae:45:f0:82:aa:29:9b:1d:63:50:9a:49: 3e:ca:07:e9:d9:9b:86:4a:af:95:7b:f3:d4:d8:f9:18:24:31: ac:98:47:5f:39:c9:5a:3b:40:09:46:8f:f5:76:17:93:f9:b9: b0:4a:cf:33:11:94:7a:e4:67:05:90:90:a4:71:9d:64:38:e1: dd:6e:64:ca -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt+pUNDEiji+bRW3f4lX1ZwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOWI5ZDZlNmFjMjgyZThjMTAwMDBjYzNkYmM0YWRmM2Zl MDFmZTIwHhcNMjYwMTAyMTIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTA2ZTkyZjgzZWFhYmRkZjI2ZDAxOTVlODAzNGQzMWI2NzY4ODhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTv1kN69565kNuvtj40aj0v3FtGv JxzQkmDX6Tb2ZgA+Q6xnNJsyVr6FCMk8JfRni3qdcVP3A1oWCvbBcBrmWJ2ptdah 2UArebVpTcM7u7E8e6BmCC1QXbPpqra3WGcqU02x5BzGeaTl5gQbBdHzxoehn6+D cn+i5bJEoKeiFueCx5NiwJ47jH9uq3tp3fRbUmW639JXdw02xevsouqVIJukKrqI FP1rbs05VSDOsq+vYOJgKQFhdaTqL87VfsXvaGDYZ5W09Y0X5GtZUSEg1e82K3Hn A2Xh7xXW9esThcbWLvTzLqXcluxgIJKq1BeB1767ZRWcdSDvY1BgXg1U+QIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFCEG6S+D6qvd8m0BlegDTTG2doiKMB8GA1UdIwQY MBaAFKubnW5qwoLowQAAzD28St8/4B/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTV1ZGJtckNndWpCQUFETVBieEszel9nSC1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS84N2Y0OTEtOTVjOS00ZjQxLWI0OGUt MWNlYzFhMGVlOThiLzEvSVFicEw0UHFxOTN5YlFHVjZBTk5NYloyaUlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS84N2Y0OTEtOTVjOS00ZjQxLWI0OGUtMWNlYzFhMGVlOThi LzEvcTV1ZGJtckNndWpCQUFETVBieEszel9nSC1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAIAEGeAzQ AwcAIAEGeAzUAwcAIAEGeAzYAwcAIAEGfBXAMA0GCSqGSIb3DQEBCwUAA4IBAQCk UHm2nIcDfAjhg0xjldU+p7VwzOQL2SMS4g9+c+/kBo4pIq5eBPvFTMLo/tKXtjHS enxuDYmJiwkGBYwte4V7lU4h76LokkdVL4gs9T3/HsI3z9mMl8ANcYvi1BIkuh50 r2I/H47QAs3OW3+vsXc/4BwXTEprgP8VlYi7hFhGfm4Jg4H08bLQlIM00FGUBNPu m6ZzxXUaYpy6Vqk7alZh5c/CwzJuat3R0idGVYXGU6BBmviYHe5UawWuRfCCqimb HWNQmkk+ygfp2ZuGSq+Ve/PU2PkYJDGsmEdfOclaO0AJRo/1dheT+bmwSs8zEZR6 5GcFkJCkcZ1kOOHdbmTK -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:43 2026 by rpki-client