This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/BIol1pz64JNuSZqOYYIJTPdboZ8.roa File: BIol1pz64JNuSZqOYYIJTPdboZ8.roa (raw, json) Hash identifier: vI/awSqDC9NYaoe05qr/4lKLWQF/v8Nf8QGdmY2/4NA= Subject key identifier: 04:8A:25:D6:9C:FA:E0:93:6E:49:9A:8E:61:82:09:4C:F7:5B:A1:9F Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 019B8B4955143BD27E9D8822C13E2FF51B5C Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/BIol1pz64JNuSZqOYYIJTPdboZ8.roa Signing time: Sun 04 Jan 2026 23:13:17 +0000 ROA not before: Sun 04 Jan 2026 23:13:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14315 IP address blocks: 2a0c:9f00:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8b:49:55:14:3b:d2:7e:9d:88:22:c1:3e:2f:f5:1b:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Jan 4 23:13:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=048a25d69cfae0936e499a8e6182094cf75ba19f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3c:2b:ce:ef:1b:2f:b1:17:38:47:77:31:58: 33:ad:f9:68:99:c8:93:09:c6:b4:64:f3:79:16:33: 0f:1c:aa:24:3c:c4:04:94:3c:71:0d:1e:a1:d6:29: 43:56:f1:2d:d6:83:e9:d2:34:e6:dc:95:d6:81:d7: 5e:cd:34:b8:6e:29:cb:fd:6e:bf:42:2c:c6:e3:a7: eb:11:ff:78:16:d5:05:1d:18:31:d1:51:a0:23:73: a1:d2:b6:32:ac:e8:4a:8d:bc:40:fd:2f:2e:c6:e9: 3b:f6:8e:29:45:ba:98:0a:05:7a:37:9b:dd:00:44: 11:e1:ed:7e:25:0d:79:33:3a:b1:d7:6c:5e:e2:1e: 63:e9:cf:41:1d:8e:d8:95:9b:fd:0e:c4:09:ee:c3: 66:5e:85:62:a3:8c:2b:45:e5:61:d0:80:77:e5:aa: 9e:96:1f:6e:fe:43:d4:7f:38:d8:95:85:96:b8:41: e9:71:30:d6:36:e1:d9:6a:e5:80:e2:2b:b6:ef:70: c0:bb:96:6e:a8:f5:04:98:41:96:c0:89:89:62:0a: 72:a7:e5:cd:51:a3:fa:f8:75:42:67:b8:c8:67:36: 76:6f:61:e7:05:6b:28:72:51:54:f1:72:17:04:ec: 59:ae:42:61:3f:df:86:f1:cf:86:99:d0:48:60:20: ab:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8A:25:D6:9C:FA:E0:93:6E:49:9A:8E:61:82:09:4C:F7:5B:A1:9F X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/BIol1pz64JNuSZqOYYIJTPdboZ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9f00:a000::/48 Signature Algorithm: sha256WithRSAEncryption 13:b5:62:09:97:07:dd:33:58:1a:d6:e0:d4:d7:72:88:8c:84: ac:36:f2:0d:6c:8f:eb:ca:d8:5f:06:54:27:c7:58:cc:6c:fb: 60:64:a5:68:84:60:7a:8c:ec:28:59:f1:83:fb:e9:22:53:7f: 3c:28:10:09:a5:5c:f6:31:39:7d:55:99:df:44:dc:f2:5f:71: 9d:18:53:0f:06:97:16:be:35:40:be:56:a9:82:3c:46:a3:69: e3:91:b5:45:d1:47:46:8c:02:5b:07:6a:7a:f6:bf:ef:b2:27: 1f:2e:12:72:0d:d4:87:cc:51:57:e9:c4:53:d0:72:e6:59:b0: 07:9a:bf:8b:3b:42:35:9d:50:e4:fe:87:1f:5f:92:ab:76:7c: 33:d0:55:e6:3e:06:e8:09:30:4a:29:7d:04:2e:4a:00:4b:7c: 72:0e:0f:e9:1e:42:d7:fa:6f:ec:2b:68:02:4f:2a:92:63:05: 1a:b8:4f:14:9b:0f:68:ad:75:d3:1a:5f:7a:7a:59:44:ef:78: a8:22:f8:b1:df:e2:95:43:11:07:39:7c:90:ac:d5:fe:37:b6: 90:93:47:6f:79:27:5f:56:e1:e2:4b:8a:50:18:46:68:ac:c3: ce:0e:3b:f5:68:5a:6a:f4:55:8a:bb:7d:c2:04:2d:67:8c:64: 95:5b:ea:7b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZuLSVUUO9J+nYgiwT4v9RtcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjYwMTA0MjMxMzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDhhMjVkNjljZmFlMDkzNmU0OTlhOGU2MTgyMDk0Y2Y3NWJhMTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Twrzu8bL7EXOEd3MVgzrflomciT Cca0ZPN5FjMPHKokPMQElDxxDR6h1ilDVvEt1oPp0jTm3JXWgddezTS4binL/W6/ QizG46frEf94FtUFHRgx0VGgI3Oh0rYyrOhKjbxA/S8uxuk79o4pRbqYCgV6N5vd AEQR4e1+JQ15Mzqx12xe4h5j6c9BHY7YlZv9DsQJ7sNmXoVio4wrReVh0IB35aqe lh9u/kPUfzjYlYWWuEHpcTDWNuHZauWA4iu273DAu5ZuqPUEmEGWwImJYgpyp+XN UaP6+HVCZ7jIZzZ2b2HnBWsoclFU8XIXBOxZrkJhP9+G8c+GmdBIYCCrOQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFASKJdac+uCTbkmajmGCCUz3W6GfMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvQklvbDFwejY0Sk51U1pxT1lZSUpUUGRib1o4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyfAKAA MA0GCSqGSIb3DQEBCwUAA4IBAQATtWIJlwfdM1ga1uDU13KIjISsNvINbI/rythf BlQnx1jMbPtgZKVohGB6jOwoWfGD++kiU388KBAJpVz2MTl9VZnfRNzyX3GdGFMP BpcWvjVAvlapgjxGo2njkbVF0UdGjAJbB2p69r/vsicfLhJyDdSHzFFX6cRT0HLm WbAHmr+LO0I1nVDk/ocfX5Krdnwz0FXmPgboCTBKKX0ELkoAS3xyDg/pHkLX+m/s K2gCTyqSYwUauE8Umw9orXXTGl96ellE73ioIvix3+KVQxEHOXyQrNX+N7aQk0dv eSdfVuHiS4pQGEZorMPODjv1aFpq9FWKu33CBC1njGSVW+p7 -----END CERTIFICATE-----Generated at Wed Jan 21 13:24:52 2026 by rpki-client