This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/isRnxr9EMcvlmS2Cy6X4IsGCGPw.roa File: isRnxr9EMcvlmS2Cy6X4IsGCGPw.roa (raw, json) Hash identifier: vSUPuOorB/vF9eG8qMMK96+Mwy5amfA/Ow/WmAHBiA8= Subject key identifier: 8A:C4:67:C6:BF:44:31:CB:E5:99:2D:82:CB:A5:F8:22:C1:82:18:FC Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82B8BE5EA142F92E8325B9B9FD5C6C Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/isRnxr9EMcvlmS2Cy6X4IsGCGPw.roa Signing time: Fri 02 Jan 2026 16:20:32 +0000 ROA not before: Fri 02 Jan 2026 16:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34692 IP address blocks: 2a0b:b86:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:b8:be:5e:a1:42:f9:2e:83:25:b9:b9:fd:5c:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ac467c6bf4431cbe5992d82cba5f822c18218fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:01:d3:b8:32:5c:2d:90:2f:94:a1:0c:e2:8f: b6:23:15:68:40:51:08:47:ea:4c:04:77:ca:9f:fd: 31:08:75:79:95:ab:7f:3f:90:0c:e9:29:43:ca:7c: e7:2b:8f:af:3f:aa:3b:e3:4f:42:53:67:6d:a7:60: c9:85:e3:b9:b7:7a:43:f3:95:04:68:36:10:d0:3f: 9f:56:72:2a:3a:7d:35:f6:e5:46:48:c2:11:0f:84: ad:db:0b:06:80:90:f3:23:ce:b8:3b:06:4e:01:6c: c8:75:84:56:f0:4d:80:ad:eb:37:f7:28:bc:e7:59: 45:36:d6:75:e6:fe:64:ed:87:07:9c:82:eb:fd:93: c4:e8:7a:9f:67:63:89:39:c3:e8:69:65:8c:82:b3: 94:a3:4a:5b:ad:fa:3b:b3:38:ee:04:46:f6:bd:1a: 1e:a4:33:c5:0c:66:1b:d7:22:38:a7:bf:99:d1:f1: 1a:b2:5b:93:fa:55:ef:37:e3:8d:98:60:fb:97:45: 7a:5c:e5:60:a5:28:58:0e:d6:bb:b7:86:7f:22:96: a0:34:f0:00:dc:ec:a7:35:4d:eb:02:cc:1a:44:6b: 95:b5:05:11:bb:79:ca:ca:92:54:f8:ce:fb:4d:d1: 9f:60:3d:5d:63:7c:a8:fe:54:3c:35:7a:7f:f5:00: 58:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C4:67:C6:BF:44:31:CB:E5:99:2D:82:CB:A5:F8:22:C1:82:18:FC X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/isRnxr9EMcvlmS2Cy6X4IsGCGPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:b86:12::/48 Signature Algorithm: sha256WithRSAEncryption cb:83:f6:f9:5e:f0:d9:6b:ea:03:5d:67:1c:f5:28:9f:d7:82: 3f:ae:36:53:78:65:a7:9a:1d:2f:b4:a9:df:b7:33:81:79:d2: 64:5f:0d:54:94:e9:d0:82:e4:f0:97:00:4e:ba:ca:c4:b2:bf: 08:7e:20:5e:45:1c:81:e2:59:e3:f3:4a:3a:f9:c0:35:eb:05: 19:c0:b5:ad:68:73:2f:78:6f:53:cf:a2:7c:ec:3e:a3:b4:d9: b1:0a:97:22:18:66:71:10:32:69:69:d5:bb:51:30:87:d4:c2: 85:62:19:49:55:e9:33:81:2b:7a:85:af:2e:28:e2:80:77:4d: e8:04:eb:73:3a:b5:32:c6:cd:6f:80:c1:81:7f:70:b2:07:fc: e7:08:32:73:b6:f4:a4:5c:6a:22:b5:1d:2c:cd:e3:ba:0e:67: 24:9b:7e:5f:6a:20:39:94:a0:25:2a:8b:e3:46:77:8b:e6:ff: d8:e5:66:e6:8b:58:6f:8f:00:a2:af:1d:8e:d9:3c:8a:5a:df: 82:2c:82:44:91:21:7f:b3:75:28:30:ee:f1:de:ba:d9:fe:2e: 55:25:f7:ec:b3:5f:c4:9b:61:4c:7f:b6:bd:a0:1c:0e:8a:c4: 57:41:f7:b7:fd:3a:da:e8:40:9f:ee:0c:03:65:6d:15:e2:53: 34:a3:eb:95 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/gri+XqFC+S6DJbm5/VxsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWM0NjdjNmJmNDQzMWNiZTU5OTJkODJjYmE1ZjgyMmMxODIxOGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gHTuDJcLZAvlKEM4o+2IxVoQFEI R+pMBHfKn/0xCHV5lat/P5AM6SlDynznK4+vP6o7409CU2dtp2DJheO5t3pD85UE aDYQ0D+fVnIqOn019uVGSMIRD4St2wsGgJDzI864OwZOAWzIdYRW8E2Ares39yi8 51lFNtZ15v5k7YcHnILr/ZPE6HqfZ2OJOcPoaWWMgrOUo0pbrfo7szjuBEb2vRoe pDPFDGYb1yI4p7+Z0fEasluT+lXvN+ONmGD7l0V6XOVgpShYDta7t4Z/IpagNPAA 3OynNU3rAswaRGuVtQURu3nKypJU+M77TdGfYD1dY3yo/lQ8NXp/9QBYYwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIrEZ8a/RDHL5Zktgsul+CLBghj8MB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvaXNSbnhyOUVNY3ZsbVMyQ3k2WDRJc0dDR1B3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsLhgAS MA0GCSqGSIb3DQEBCwUAA4IBAQDLg/b5XvDZa+oDXWcc9Sif14I/rjZTeGWnmh0v tKnftzOBedJkXw1UlOnQguTwlwBOusrEsr8IfiBeRRyB4lnj80o6+cA16wUZwLWt aHMveG9Tz6J87D6jtNmxCpciGGZxEDJpadW7UTCH1MKFYhlJVekzgSt6ha8uKOKA d03oBOtzOrUyxs1vgMGBf3CyB/znCDJztvSkXGoitR0szeO6Dmckm35faiA5lKAl KovjRneL5v/Y5Wbmi1hvjwCirx2O2TyKWt+CLIJEkSF/s3UoMO7x3rrZ/i5VJffs s1/Em2FMf7a9oBwOisRXQfe3/Tra6ECf7gwDZW0V4lM0o+uV -----END CERTIFICATE-----Generated at Tue Jan 20 15:17:51 2026 by rpki-client