This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/iOFBBEucpLe9YmdNyAo6szbNfu8.roa File: iOFBBEucpLe9YmdNyAo6szbNfu8.roa (raw, json) Hash identifier: GDyyJB6XxA+2hW5dQo4bOWL/P6vz2lzwT7Z9ivIB5e8= Subject key identifier: 88:E1:41:04:4B:9C:A4:B7:BD:62:67:4D:C8:0A:3A:B3:36:CD:7E:EF Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019B7E38B60154BDF44C9B896C639AAADDBD Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/iOFBBEucpLe9YmdNyAo6szbNfu8.roa Signing time: Fri 02 Jan 2026 10:20:04 +0000 ROA not before: Fri 02 Jan 2026 10:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201386 IP address blocks: 2a13:a5c7:1300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b6:01:54:bd:f4:4c:9b:89:6c:63:9a:aa:dd:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 2 10:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88e141044b9ca4b7bd62674dc80a3ab336cd7eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2c:e6:94:dc:a1:a7:69:4c:ff:e8:cd:bb:94: 75:f9:ec:3c:17:5b:05:7c:0c:a5:d3:9b:52:3d:e3: 18:63:e0:5e:4a:e6:95:db:84:20:f5:6d:f5:d6:82: 2a:d2:c9:5c:b8:24:53:ef:33:b9:e5:7c:60:b5:65: e5:f4:4d:38:a3:63:29:ee:4b:62:e1:16:1b:86:55: f1:3b:62:f7:8b:ac:34:b2:99:5c:c0:e2:e5:c7:ec: 71:17:91:68:8c:fd:92:fa:4c:65:3b:89:fb:c2:bf: 5f:94:1a:8b:78:30:50:f4:17:58:44:56:08:43:38: 18:a5:f8:89:ad:d0:fc:35:39:d2:aa:4b:e1:73:64: 17:cf:c0:ce:21:e6:b4:fe:42:c8:12:5b:68:a4:64: 33:d3:5b:2a:18:24:d4:60:7d:bb:ed:37:29:6f:cc: ff:11:d3:fc:f0:61:53:fa:64:2b:40:c7:fd:ea:bf: 20:1f:f7:d8:c2:2c:03:fe:0e:c7:c0:7c:e2:d5:27: 89:77:ac:31:09:38:42:b0:30:0c:38:f5:88:34:a0: 87:ef:69:d9:ef:0a:0f:72:fc:cf:be:9b:64:7d:2d: 8a:fa:87:68:91:79:57:c4:7a:bf:43:06:3d:62:47: 6c:ef:ac:76:9c:01:a6:ff:02:06:8c:23:8d:90:93: cb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E1:41:04:4B:9C:A4:B7:BD:62:67:4D:C8:0A:3A:B3:36:CD:7E:EF X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/iOFBBEucpLe9YmdNyAo6szbNfu8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a5c7:1300::/40 Signature Algorithm: sha256WithRSAEncryption 9a:ee:27:de:c5:b8:f5:38:03:88:ca:4b:85:9f:f4:4e:76:51: eb:e2:f0:ae:4b:3e:a7:38:91:b5:7f:e5:79:6f:2a:ec:9f:74: 07:01:4c:a1:47:2a:f6:04:19:25:a3:0d:90:dd:38:e4:98:5b: 7e:d8:f5:c0:f9:d6:d0:af:38:31:3c:02:f9:34:c8:8d:5c:de: 63:9f:6a:75:fb:cd:4b:06:10:86:0d:a5:c4:4c:71:d8:4e:f6: 22:87:98:a4:93:3f:09:d9:80:89:42:0f:7c:01:72:18:19:ea: 4f:67:8d:d7:6a:e8:93:c5:ef:2d:a2:69:dd:73:e6:10:d3:1e: eb:f5:51:89:72:64:ba:21:79:ce:32:00:17:0b:2c:24:69:63: e0:01:fe:63:a9:bf:42:6d:4a:bf:3e:b0:98:98:72:68:2a:a3: 10:bb:55:bc:25:f9:d2:f8:15:d0:fd:c5:c9:0f:82:6d:57:40: fe:38:46:c3:0e:ba:d7:5c:1d:6c:9a:f3:22:94:8f:4d:a5:2b: 86:c2:11:f5:aa:ec:11:b8:20:c7:b2:b0:9c:52:5a:a7:b4:7c: 5b:c5:9f:bc:56:5a:4a:bb:a7:07:b7:55:11:69:ef:32:17:93: ed:b5:e2:68:7e:ab:d0:4e:0f:8d:6a:7a:ab:f9:7c:d9:e2:ba: 73:c7:d4:12 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OLYBVL30TJuJbGOaqt29MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTAyMTAyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGUxNDEwNDRiOWNhNGI3YmQ2MjY3NGRjODBhM2FiMzM2Y2Q3ZWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCzmlNyhp2lM/+jNu5R1+ew8F1sF fAyl05tSPeMYY+BeSuaV24Qg9W311oIq0slcuCRT7zO55XxgtWXl9E04o2Mp7kti 4RYbhlXxO2L3i6w0splcwOLlx+xxF5FojP2S+kxlO4n7wr9flBqLeDBQ9BdYRFYI QzgYpfiJrdD8NTnSqkvhc2QXz8DOIea0/kLIEltopGQz01sqGCTUYH277Tcpb8z/ EdP88GFT+mQrQMf96r8gH/fYwiwD/g7HwHzi1SeJd6wxCThCsDAMOPWINKCH72nZ 7woPcvzPvptkfS2K+odokXlXxHq/QwY9Ykds76x2nAGm/wIGjCONkJPLJQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFIjhQQRLnKS3vWJnTcgKOrM2zX7vMB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvaU9GQkJFdWNwTGU5WW1kTnlBbzZzemJOZnU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhOlxxMw DQYJKoZIhvcNAQELBQADggEBAJruJ97FuPU4A4jKS4Wf9E52Uevi8K5LPqc4kbV/ 5XlvKuyfdAcBTKFHKvYEGSWjDZDdOOSYW37Y9cD51tCvODE8Avk0yI1c3mOfanX7 zUsGEIYNpcRMcdhO9iKHmKSTPwnZgIlCD3wBchgZ6k9njddq6JPF7y2iad1z5hDT Huv1UYlyZLohec4yABcLLCRpY+AB/mOpv0JtSr8+sJiYcmgqoxC7Vbwl+dL4FdD9 xckPgm1XQP44RsMOutdcHWya8yKUj02lK4bCEfWq7BG4IMeysJxSWqe0fFvFn7xW Wkq7pwe3VRFp7zIXk+214mh+q9BOD41qeqv5fNniunPH1BI= -----END CERTIFICATE-----Generated at Mon Jan 5 03:49:55 2026 by rpki-client