This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/IgZj-XNh3QdhlXKNNdT8B9gxjtQ.roa File: IgZj-XNh3QdhlXKNNdT8B9gxjtQ.roa (raw, json) Hash identifier: trthb+ZZVfcUoRGw0t6Hr4SEj5P8fuD7sBQcz4xh7rk= Subject key identifier: 22:06:63:F9:73:61:DD:07:61:95:72:8D:35:D4:FC:07:D8:31:8E:D4 Certificate issuer: /CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe Certificate serial: 019B7B35B33588029B44DA40A1AB0CECE8EC Authority key identifier: 3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/IgZj-XNh3QdhlXKNNdT8B9gxjtQ.roa Signing time: Thu 01 Jan 2026 20:17:55 +0000 ROA not before: Thu 01 Jan 2026 20:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200373 IP address blocks: 2a07:db80::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:b3:35:88:02:9b:44:da:40:a1:ab:0c:ec:e8:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe Validity Not Before: Jan 1 20:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=220663f97361dd076195728d35d4fc07d8318ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ee:96:76:cf:3d:b6:df:ca:4f:9b:5c:6e:82: 3a:a9:a3:54:7a:6b:9a:44:8f:20:83:98:f0:0a:4b: 6c:e8:da:b5:7b:2a:49:63:fe:06:4f:a4:19:92:f3: b1:65:a4:45:2e:7a:a2:cd:2c:7c:c7:64:99:a8:3f: 95:24:45:c7:f1:49:0d:bf:f7:c5:f1:f9:0c:1b:7b: 5e:b2:48:e7:f4:1d:b3:8b:e3:ed:6f:1b:ce:43:3c: 0d:8d:42:18:3d:7e:a9:e1:ae:05:45:e9:4b:a3:ae: 3c:da:4a:ce:ff:10:c6:cb:41:69:48:e8:e4:b2:1f: 63:42:e8:48:1c:c9:ab:41:62:e4:5e:5d:63:a4:11: c8:25:64:f1:03:57:ba:6a:19:f4:15:a1:fa:87:b9: 1f:c7:04:11:d8:1c:f2:c5:dc:1d:98:f4:26:c1:1e: 3d:84:98:31:79:9f:19:cf:44:30:40:fa:c1:fa:61: e0:49:db:5a:3c:a0:e0:dd:3a:c6:02:b5:7b:0a:22: 35:76:e3:76:f1:7c:7a:2f:fa:36:b5:88:f6:35:84: 97:83:29:39:5e:d8:b5:ba:58:7e:28:79:59:9a:45: e9:40:81:d6:14:e4:09:17:95:6f:4f:d3:61:2f:50: c2:e6:01:70:50:2a:4e:0a:8d:05:97:59:64:b0:31: 95:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:06:63:F9:73:61:DD:07:61:95:72:8D:35:D4:FC:07:D8:31:8E:D4 X509v3 Authority Key Identifier: keyid:3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/IgZj-XNh3QdhlXKNNdT8B9gxjtQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:db80::/29 Signature Algorithm: sha256WithRSAEncryption 18:58:13:c8:65:91:75:35:70:80:26:76:ae:30:1c:30:6b:60: fc:18:b1:8a:44:66:a8:9e:14:9d:36:dd:cc:29:19:11:a7:c6: 6e:b7:ba:e1:fe:cd:59:0b:e5:5d:6f:0c:84:93:b3:2e:19:d1: db:2d:68:6e:a2:20:4e:38:86:94:62:2e:1f:5d:ef:47:bb:d3: 55:ea:c3:e9:c9:4e:ba:6f:a9:2b:00:be:49:0a:d8:60:dc:44: 86:25:a4:bd:fc:a5:14:2f:48:fa:cd:88:08:90:76:f0:e6:4b: 58:b7:d0:9e:c5:61:00:3b:87:eb:4b:e8:59:4a:06:1a:2d:d9: 67:34:4f:38:9d:1b:8a:5e:9d:4a:d3:54:cc:be:cd:db:b9:cd: bd:c5:dd:ac:c8:74:82:cc:04:32:ce:7f:15:a7:2c:e4:20:6e: 51:13:df:79:a1:48:40:f1:eb:72:ff:96:07:47:45:47:85:75: b1:6e:2c:33:a9:db:6a:bd:06:90:c2:63:4b:29:11:f2:af:fd: 16:a7:e6:2d:20:c4:7e:47:4e:5b:dd:17:a8:ec:92:0a:76:07: da:21:1f:71:c5:d8:44:f6:f3:c9:b2:fb:79:9c:5f:e3:f4:ff: 2e:d6:18:aa:2e:eb:99:d7:bf:ab:a6:59:c2:32:62:c8:d7:ed: 44:ca:dd:6e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7NbM1iAKbRNpAoasM7OjsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjhkNmYxM2UzNTlkZDBiYjQ1MzRhMjQ2NTU5NzRjNTdk MmIwZmUwHhcNMjYwMTAxMjAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjA2NjNmOTczNjFkZDA3NjE5NTcyOGQzNWQ0ZmMwN2Q4MzE4ZWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3u6Wds89tt/KT5tcboI6qaNUemua RI8gg5jwCkts6Nq1eypJY/4GT6QZkvOxZaRFLnqizSx8x2SZqD+VJEXH8UkNv/fF 8fkMG3teskjn9B2zi+PtbxvOQzwNjUIYPX6p4a4FRelLo6482krO/xDGy0FpSOjk sh9jQuhIHMmrQWLkXl1jpBHIJWTxA1e6ahn0FaH6h7kfxwQR2BzyxdwdmPQmwR49 hJgxeZ8Zz0QwQPrB+mHgSdtaPKDg3TrGArV7CiI1duN28Xx6L/o2tYj2NYSXgyk5 Xti1ulh+KHlZmkXpQIHWFOQJF5VvT9NhL1DC5gFwUCpOCo0Fl1lksDGVLQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFCIGY/lzYd0HYZVyjTXU/AfYMY7UMB8GA1UdIwQY MBaAFD4o1vE+NZ3Qu0U0okZVl0xX0rD+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlqVzhUNDFuZEM3UlRTaVJsV1hURmZTc1A0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82NDUwMzgtMjU1Yi00NGRmLWFlOGEt NTQ4ODE2OTExOWU4LzEvSWdaai1YTmgzUWRobFhLTk5kVDhCOWd4anRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy82NDUwMzgtMjU1Yi00NGRmLWFlOGEtNTQ4ODE2OTExOWU4 LzEvUGlqVzhUNDFuZEM3UlRTaVJsV1hURmZTc1A0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgfbgDAN BgkqhkiG9w0BAQsFAAOCAQEAGFgTyGWRdTVwgCZ2rjAcMGtg/BixikRmqJ4UnTbd zCkZEafGbre64f7NWQvlXW8MhJOzLhnR2y1obqIgTjiGlGIuH13vR7vTVerD6clO um+pKwC+SQrYYNxEhiWkvfylFC9I+s2ICJB28OZLWLfQnsVhADuH60voWUoGGi3Z ZzRPOJ0bil6dStNUzL7N27nNvcXdrMh0gswEMs5/Facs5CBuURPfeaFIQPHrcv+W B0dFR4V1sW4sM6nbar0GkMJjSykR8q/9FqfmLSDEfkdOW90XqOySCnYH2iEfccXY RPbzybL7eZxf4/T/LtYYqi7rmde/q6ZZwjJiyNftRMrdbg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:32 2026 by rpki-client