This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/iJAh4MzVUxgXIicmX1BF9DyiVJc.roa File: iJAh4MzVUxgXIicmX1BF9DyiVJc.roa (raw, json) Hash identifier: i5znTUbRnDwQdx+fd6qQhbrZflv2THSPw2LRl2jp6kY= Subject key identifier: 88:90:21:E0:CC:D5:53:18:17:22:27:26:5F:50:45:F4:3C:A2:54:97 Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f Certificate serial: 019B7C12BA9E2D41EDB3CA34317376FAF355 Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/iJAh4MzVUxgXIicmX1BF9DyiVJc.roa Signing time: Fri 02 Jan 2026 00:19:20 +0000 ROA not before: Fri 02 Jan 2026 00:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203868 IP address blocks: 2a0a:280:b000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ba:9e:2d:41:ed:b3:ca:34:31:73:76:fa:f3:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f Validity Not Before: Jan 2 00:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=889021e0ccd55318172227265f5045f43ca25497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c7:6b:c8:4a:50:56:05:2d:3f:0c:fd:19:99: 9a:d9:fb:d4:f4:b6:b5:9d:9e:5d:1f:e9:76:de:eb: 08:75:35:02:c5:48:23:79:19:d0:96:09:77:7d:c6: 84:0c:ba:2d:ca:c8:1a:53:6b:f1:37:a6:60:9e:0e: ef:c4:b2:e2:f4:f5:02:90:db:a0:eb:b5:d8:96:e4: bb:d3:61:90:8e:7d:cb:9f:d2:dd:6c:20:34:46:42: fb:2d:20:2e:75:cb:76:47:0a:db:88:de:b0:59:b1: 6a:94:36:52:f3:19:a9:10:cb:a7:6d:98:70:6c:5a: 29:00:5e:8a:d8:c6:5f:70:01:fe:f6:3d:b6:06:e8: 4a:11:24:80:63:8a:5e:56:61:21:3e:64:3c:ee:18: ae:0d:d0:e0:a3:51:c9:cf:f2:2a:5f:a9:5d:d7:b5: d5:ba:71:10:c1:92:de:a8:10:1d:c2:0e:60:28:ef: 4f:04:54:2c:0b:00:c8:46:d4:0e:9e:30:29:4c:74: e4:fd:1d:7c:eb:7d:ba:f4:f8:c0:2c:a9:48:0c:fb: af:fb:65:21:c5:b2:05:63:55:f7:4c:7f:d5:ee:87: 4d:cd:d3:40:12:81:ac:d1:d3:36:6e:49:c1:5f:97: a5:87:8a:e6:ab:48:02:67:44:c8:49:c9:1a:c6:f1: 36:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:90:21:E0:CC:D5:53:18:17:22:27:26:5F:50:45:F4:3C:A2:54:97 X509v3 Authority Key Identifier: keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/iJAh4MzVUxgXIicmX1BF9DyiVJc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:280:b000::/36 Signature Algorithm: sha256WithRSAEncryption 50:3c:78:6f:99:9c:92:a2:8c:4c:63:d3:4e:fc:18:1e:7f:47: 3b:84:ff:ea:ac:c2:b0:50:27:63:63:5e:e0:fa:c1:aa:d6:d8: 17:0f:ff:24:a5:82:e7:b9:2c:85:d7:49:a5:ee:6e:47:b1:84: aa:9e:b3:2e:c1:ea:a8:1b:be:5f:79:f3:b6:51:72:5f:0c:b6: 04:60:df:aa:0b:3c:33:a7:94:e6:0e:83:2a:af:54:1b:f6:42: 7b:0f:f1:09:01:18:16:a9:5f:0c:3f:90:00:f9:52:ce:f1:fd: 7c:ea:b5:e3:90:2b:5f:4e:60:57:e0:60:2a:0b:1c:21:23:e2: 06:f5:77:cb:d5:68:3d:ee:9c:6e:37:84:8c:52:15:f1:77:b8: cd:13:9b:6c:b6:43:af:c3:df:ca:4c:0e:01:45:db:03:ed:19: 0a:94:82:b5:f1:14:21:aa:7d:b6:d4:b4:26:ad:f4:5a:77:d5: 33:7a:4c:9e:b7:b1:0b:31:71:8f:66:b8:9b:44:e3:f4:2c:bc: 4c:88:58:f5:eb:e7:e2:be:58:4b:85:ea:d9:29:ef:77:d0:70: f0:c4:4a:e5:7e:58:6b:60:61:bf:07:22:9c:b0:ee:6c:be:f1: 27:8c:79:8d:32:28:20:3d:6e:08:25:5e:af:64:0f:b3:13:5c: 5b:d0:6d:1f -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8ErqeLUHts8o0MXN2+vNVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiOWYyMWJhMDRlNWUzMDc3YjM5MWUzZDQ4ZmY1YjBhNTBi MzM2OWYwHhcNMjYwMTAyMDAxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODkwMjFlMGNjZDU1MzE4MTcyMjI3MjY1ZjUwNDVmNDNjYTI1NDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosdryEpQVgUtPwz9GZma2fvU9La1 nZ5dH+l23usIdTUCxUgjeRnQlgl3fcaEDLotysgaU2vxN6Zgng7vxLLi9PUCkNug 67XYluS702GQjn3Ln9LdbCA0RkL7LSAudct2RwrbiN6wWbFqlDZS8xmpEMunbZhw bFopAF6K2MZfcAH+9j22BuhKESSAY4peVmEhPmQ87hiuDdDgo1HJz/IqX6ld17XV unEQwZLeqBAdwg5gKO9PBFQsCwDIRtQOnjApTHTk/R1863269PjALKlIDPuv+2Uh xbIFY1X3TH/V7odNzdNAEoGs0dM2bknBX5elh4rmq0gCZ0TISckaxvE2wQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFIiQIeDM1VMYFyInJl9QRfQ8olSXMB8GA1UdIwQY MBaAFBufIboE5eMHezkePUj/WwpQszafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUt ZjUxYzVmYjNkZjlhLzEvaUpBaDRNelZVeGdYSWljbVgxQkY5RHlpVkpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUtZjUxYzVmYjNkZjlh LzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgoCgLAw DQYJKoZIhvcNAQELBQADggEBAFA8eG+ZnJKijExj0078GB5/RzuE/+qswrBQJ2Nj XuD6warW2BcP/ySlgue5LIXXSaXubkexhKqesy7B6qgbvl9587ZRcl8MtgRg36oL PDOnlOYOgyqvVBv2QnsP8QkBGBapXww/kAD5Us7x/XzqteOQK19OYFfgYCoLHCEj 4gb1d8vVaD3unG43hIxSFfF3uM0Tm2y2Q6/D38pMDgFF2wPtGQqUgrXxFCGqfbbU tCat9Fp31TN6TJ63sQsxcY9muJtE4/QsvEyIWPXr5+K+WEuF6tkp73fQcPDESuV+ WGtgYb8HIpyw7my+8SeMeY0yKCA9bgglXq9kD7MTXFvQbR8= -----END CERTIFICATE-----Generated at Wed Jan 21 17:35:14 2026 by rpki-client