This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/iEbK2UIcSgblBPFEqOrlOQefJIM.roa File: iEbK2UIcSgblBPFEqOrlOQefJIM.roa (raw, json) Hash identifier: vnaXCkdmexBSxEoO84GDkmVJcEZxlob0ZmZd5HSj0RU= Subject key identifier: 88:46:CA:D9:42:1C:4A:06:E5:04:F1:44:A8:EA:E5:39:07:9F:24:83 Certificate issuer: /CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5 Certificate serial: 019B77594EDC706B2ED8EF61C4CC785D0F33 Authority key identifier: CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/iEbK2UIcSgblBPFEqOrlOQefJIM.roa Signing time: Thu 01 Jan 2026 02:18:20 +0000 ROA not before: Thu 01 Jan 2026 02:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41954 IP address blocks: 2001:67c:25a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:4e:dc:70:6b:2e:d8:ef:61:c4:cc:78:5d:0f:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5 Validity Not Before: Jan 1 02:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8846cad9421c4a06e504f144a8eae539079f2483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a8:a5:46:37:51:83:67:f7:de:37:e6:10:30: 52:29:70:89:2c:09:80:a9:09:1f:70:6c:fd:04:09: b8:60:4b:97:d5:fd:5c:8c:6c:b0:8a:10:d0:1c:b8: 9f:72:3a:f3:c9:e4:65:2d:d3:83:c8:32:11:52:f1: da:3f:19:21:33:89:fa:f4:b0:e0:a0:a7:c7:33:f0: 46:30:63:0a:71:f7:4f:ac:a9:8e:b9:84:73:52:6b: c4:cd:54:33:f4:e9:42:17:1e:2e:dc:40:9d:49:d5: 27:31:15:7f:75:ac:fe:03:fd:6c:bc:dc:a3:b1:97: 7d:5c:57:97:f7:dc:98:8d:71:62:ae:6d:8d:0b:1a: f8:0f:75:72:d2:4f:8f:1f:f5:db:8b:ca:a8:66:bb: a5:60:dd:b2:12:1b:ce:93:2c:d4:ab:f7:9f:25:13: ec:8d:16:cf:58:53:c7:07:c3:d9:48:f3:df:e8:d4: 16:54:77:eb:23:6b:1d:46:f4:34:ae:dd:02:42:ab: 90:84:92:1c:b1:29:b7:29:f8:8b:de:76:2c:f3:56: 1c:98:f1:23:03:df:f1:af:85:83:5a:63:80:9c:91: 2f:36:8c:bc:bf:b8:5e:a9:5d:26:23:5e:27:9f:5e: 56:7d:e7:90:86:66:20:fc:1c:2d:af:37:61:58:1f: c9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:46:CA:D9:42:1C:4A:06:E5:04:F1:44:A8:EA:E5:39:07:9F:24:83 X509v3 Authority Key Identifier: keyid:CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/iEbK2UIcSgblBPFEqOrlOQefJIM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:25a0::/48 Signature Algorithm: sha256WithRSAEncryption 1a:f6:cf:87:d7:68:20:1b:1a:a7:02:6e:17:37:12:c5:32:5d: 11:b7:75:90:69:d3:74:c2:94:d3:e6:96:b1:a8:43:8d:be:3f: 99:b8:b8:70:a3:92:af:5f:15:1b:ac:4e:20:ef:cf:c8:54:45: 26:cf:69:18:15:b8:af:64:2f:36:3c:b9:2f:2d:48:02:fd:92: 31:dd:fc:17:e5:b9:6b:af:3c:b3:da:84:6d:55:c1:2f:bd:66: 43:86:28:82:67:55:d5:e8:6a:81:ad:07:a6:c1:1f:3d:58:0a: 8c:b1:0c:88:58:a2:65:f9:36:c6:a6:90:5f:e7:94:70:90:76: 01:fd:20:57:17:e5:9a:e1:83:da:a3:8a:44:58:8d:b2:11:73: 88:d0:c4:cb:23:c0:9a:9f:8c:78:ef:b2:38:14:df:19:93:bb: 57:e3:d7:4e:3a:d4:1c:fa:bc:08:ce:71:b5:9b:ef:12:ef:f3: c0:45:c3:fa:4e:e2:5b:4d:47:3a:b9:12:03:30:46:f6:c9:ae: df:cf:69:ed:e8:c9:97:71:51:28:bb:4a:02:3b:36:a0:d0:94: 25:15:52:ac:c0:3d:6b:7e:60:2c:58:35:dd:e4:b0:70:cc:24: 06:c1:49:13:82:4e:f7:41:69:7f:09:88:69:65:e6:19:7a:4b: df:7e:77:e2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WU7ccGsu2O9hxMx4XQ8zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNGQ4YzQxZTEyMmM4ODFkOTM2ZDkxZDViMDJkYmQ4NmEy ZTcwYTUwHhcNMjYwMTAxMDIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODQ2Y2FkOTQyMWM0YTA2ZTUwNGYxNDRhOGVhZTUzOTA3OWYyNDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqilRjdRg2f33jfmEDBSKXCJLAmA qQkfcGz9BAm4YEuX1f1cjGywihDQHLifcjrzyeRlLdODyDIRUvHaPxkhM4n69LDg oKfHM/BGMGMKcfdPrKmOuYRzUmvEzVQz9OlCFx4u3ECdSdUnMRV/daz+A/1svNyj sZd9XFeX99yYjXFirm2NCxr4D3Vy0k+PH/Xbi8qoZrulYN2yEhvOkyzUq/efJRPs jRbPWFPHB8PZSPPf6NQWVHfrI2sdRvQ0rt0CQquQhJIcsSm3KfiL3nYs81YcmPEj A9/xr4WDWmOAnJEvNoy8v7heqV0mI14nn15WfeeQhmYg/BwtrzdhWB/JywIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIhGytlCHEoG5QTxRKjq5TkHnySDMB8GA1UdIwQY MBaAFMtNjEHhIsiB2TbZHVsC29hqLnClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTAyTVFlRWl5SUhaTnRrZFd3TGIyR291Y0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hOTEzMWMtODJkMi00MWI3LTllMjAt MTM2OTYxOTdkM2I2LzEvaUViSzJVSWNTZ2JsQlBGRXFPcmxPUWVmSklNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hOTEzMWMtODJkMi00MWI3LTllMjAtMTM2OTYxOTdkM2I2 LzEveTAyTVFlRWl5SUhaTnRrZFd3TGIyR291Y0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCWg MA0GCSqGSIb3DQEBCwUAA4IBAQAa9s+H12ggGxqnAm4XNxLFMl0Rt3WQadN0wpTT 5paxqEONvj+ZuLhwo5KvXxUbrE4g78/IVEUmz2kYFbivZC82PLkvLUgC/ZIx3fwX 5blrrzyz2oRtVcEvvWZDhiiCZ1XV6GqBrQemwR89WAqMsQyIWKJl+TbGppBf55Rw kHYB/SBXF+Wa4YPao4pEWI2yEXOI0MTLI8Can4x477I4FN8Zk7tX49dOOtQc+rwI znG1m+8S7/PARcP6TuJbTUc6uRIDMEb2ya7fz2nt6MmXcVEou0oCOzag0JQlFVKs wD1rfmAsWDXd5LBwzCQGwUkTgk73QWl/CYhpZeYZekvffnfi -----END CERTIFICATE-----Generated at Mon Jan 26 17:24:31 2026 by rpki-client