This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/18A7L44_0ILwZodGFUSDQ2eubuc.roa File: 18A7L44_0ILwZodGFUSDQ2eubuc.roa (raw, json) Hash identifier: TWAVfWQBRDutGoFMNTBpWa6veuSEAlw+UuaoPc+ikg4= Subject key identifier: D7:C0:3B:2F:8E:3F:D0:82:F0:66:87:46:15:44:83:43:67:AE:6E:E7 Certificate issuer: /CN=b58522dac6bcde8c481333599132a16200e6a5be Certificate serial: 019B7CECCED3B6BE2EB6CF53F5BC6026FBB8 Authority key identifier: B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/18A7L44_0ILwZodGFUSDQ2eubuc.roa Signing time: Fri 02 Jan 2026 04:17:32 +0000 ROA not before: Fri 02 Jan 2026 04:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199678 IP address blocks: 2001:67c:12d4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:ce:d3:b6:be:2e:b6:cf:53:f5:bc:60:26:fb:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b58522dac6bcde8c481333599132a16200e6a5be Validity Not Before: Jan 2 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7c03b2f8e3fd082f06687461544834367ae6ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ed:54:75:a0:e3:f1:38:80:d3:9b:73:73:6f: bf:d7:70:25:bf:01:60:e1:79:ca:7c:fb:5c:d7:59: dd:1c:04:a9:d7:93:a0:9a:4b:ce:3b:91:7f:50:85: a6:75:6e:e0:79:11:10:dd:58:03:b4:70:f7:2a:0e: c2:cc:ef:93:69:4c:c4:7b:52:08:29:48:de:77:f4: 47:3d:08:b3:79:0d:57:41:60:c4:7b:f5:0a:ce:14: b3:e1:a3:61:7e:9a:62:fc:37:c2:2f:e2:d1:b7:e9: 8c:09:77:28:3a:2c:1e:9a:61:2c:35:f2:9a:93:1b: 69:4d:46:08:5e:a0:71:7d:e4:e2:6f:6e:68:fd:44: 8b:9c:72:b5:15:a0:eb:3f:cb:29:b5:7f:45:65:ed: 9f:d9:0c:48:15:8f:ed:6e:cb:ad:33:8c:84:86:76: 57:48:7c:60:e1:8b:00:f6:6d:ea:b6:5b:e1:6d:94: 39:c2:5f:16:af:26:76:3b:2b:43:a9:46:e9:fa:f1: f2:ee:4c:6a:04:4e:eb:68:a1:6f:3c:ab:c8:0b:1c: bd:5f:91:c1:60:e1:e1:2b:77:ab:ba:b7:aa:dc:32: a6:35:74:55:61:1c:75:81:32:da:f6:29:6e:88:7e: da:5f:00:f9:7c:04:0b:6e:4f:b1:74:16:fd:df:87: 7b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C0:3B:2F:8E:3F:D0:82:F0:66:87:46:15:44:83:43:67:AE:6E:E7 X509v3 Authority Key Identifier: keyid:B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/18A7L44_0ILwZodGFUSDQ2eubuc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:12d4::/48 Signature Algorithm: sha256WithRSAEncryption b3:96:45:8d:85:81:3e:b2:f9:cf:a1:9a:c2:08:73:45:dc:ed: fd:40:9f:ed:fa:38:86:14:48:f2:9a:75:4e:69:46:7f:8e:ef: c7:37:89:2b:f9:0d:5b:f7:ff:77:a6:a8:0f:1a:7b:26:6c:a1: 39:be:23:7f:5d:99:35:9e:2a:44:ba:d0:97:d6:e4:25:2b:9e: 35:d8:b1:0a:f4:b8:35:fe:b5:c6:b8:06:3c:58:50:0b:78:1a: 7d:a5:a7:15:c9:4f:f6:c9:f5:82:2b:92:64:9c:d6:a3:87:e9: 0c:ac:19:4c:e3:40:b2:37:d0:19:67:2f:de:14:49:e7:b5:9b: 45:29:2b:c2:62:96:99:18:08:61:7e:90:d2:fa:d2:df:d9:99: 4d:c9:08:4d:18:c5:28:18:33:ca:65:0d:18:fe:93:91:7c:79: 99:a3:70:61:8e:77:2e:6e:91:58:d6:65:62:e1:a5:b5:c2:69: 47:12:c7:e7:a6:a3:64:b1:48:0d:27:09:c8:89:a2:db:9a:eb: 12:5e:e3:38:6c:d7:d6:11:bc:7a:01:f5:62:bd:b8:a5:04:5c: 7f:73:ce:b7:81:db:b3:a7:3d:d4:9f:f2:5e:04:55:5d:a9:1f: bc:78:a7:8e:96:02:32:dd:82:74:9b:06:42:a0:8f:d4:4c:e3: ee:90:76:23 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87M7Ttr4uts9T9bxgJvu4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ODUyMmRhYzZiY2RlOGM0ODEzMzM1OTkxMzJhMTYyMDBl NmE1YmUwHhcNMjYwMTAyMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2MwM2IyZjhlM2ZkMDgyZjA2Njg3NDYxNTQ0ODM0MzY3YWU2ZWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiu1UdaDj8TiA05tzc2+/13AlvwFg 4XnKfPtc11ndHASp15OgmkvOO5F/UIWmdW7geREQ3VgDtHD3Kg7CzO+TaUzEe1II KUjed/RHPQizeQ1XQWDEe/UKzhSz4aNhfppi/DfCL+LRt+mMCXcoOiwemmEsNfKa kxtpTUYIXqBxfeTib25o/USLnHK1FaDrP8sptX9FZe2f2QxIFY/tbsutM4yEhnZX SHxg4YsA9m3qtlvhbZQ5wl8WryZ2OytDqUbp+vHy7kxqBE7raKFvPKvICxy9X5HB YOHhK3erureq3DKmNXRVYRx1gTLa9iluiH7aXwD5fAQLbk+xdBb934d70QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNfAOy+OP9CC8GaHRhVEg0Nnrm7nMB8GA1UdIwQY MBaAFLWFItrGvN6MSBMzWZEyoWIA5qW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFlVaTJzYTgzb3hJRXpOWmtUS2hZZ0RtcGI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84YjVkMmEtNGJjNC00MDZmLTk3ZDUt YmEzOTQ3YzliMjJiLzEvMThBN0w0NF8wSUx3Wm9kR0ZVU0RRMmV1YnVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC84YjVkMmEtNGJjNC00MDZmLTk3ZDUtYmEzOTQ3YzliMjJi LzEvdFlVaTJzYTgzb3hJRXpOWmtUS2hZZ0RtcGI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBLU MA0GCSqGSIb3DQEBCwUAA4IBAQCzlkWNhYE+svnPoZrCCHNF3O39QJ/t+jiGFEjy mnVOaUZ/ju/HN4kr+Q1b9/93pqgPGnsmbKE5viN/XZk1nipEutCX1uQlK5412LEK 9Lg1/rXGuAY8WFALeBp9pacVyU/2yfWCK5JknNajh+kMrBlM40CyN9AZZy/eFEnn tZtFKSvCYpaZGAhhfpDS+tLf2ZlNyQhNGMUoGDPKZQ0Y/pORfHmZo3BhjncubpFY 1mVi4aW1wmlHEsfnpqNksUgNJwnIiaLbmusSXuM4bNfWEbx6AfVivbilBFx/c863 gduzpz3Un/JeBFVdqR+8eKeOlgIy3YJ0mwZCoI/UTOPukHYj -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:24 2026 by rpki-client