This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/IqAZ7XQz7BlbCx4e-ofeDvMJfNU.roa File: IqAZ7XQz7BlbCx4e-ofeDvMJfNU.roa (raw, json) Hash identifier: Kp2XtcxtOkZThbBMLc4hB6JTrGLoaZOP4GbgJkvTA/A= Subject key identifier: 22:A0:19:ED:74:33:EC:19:5B:0B:1E:1E:FA:87:DE:0E:F3:09:7C:D5 Certificate issuer: /CN=997c825813435fb0115438ee3f607637cebd8e8e Certificate serial: 019B7AC7D367F072BB8FE22E04DCC8C612C0 Authority key identifier: 99:7C:82:58:13:43:5F:B0:11:54:38:EE:3F:60:76:37:CE:BD:8E:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/IqAZ7XQz7BlbCx4e-ofeDvMJfNU.roa Signing time: Thu 01 Jan 2026 18:17:54 +0000 ROA not before: Thu 01 Jan 2026 18:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214895 IP address blocks: 2a0f:9640::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.crl rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d3:67:f0:72:bb:8f:e2:2e:04:dc:c8:c6:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=997c825813435fb0115438ee3f607637cebd8e8e Validity Not Before: Jan 1 18:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22a019ed7433ec195b0b1e1efa87de0ef3097cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:59:99:d4:de:31:63:8b:ad:e0:30:09:ab:08: 96:27:39:b0:32:e7:8a:52:aa:45:85:7c:76:4b:f9: 1b:52:f2:2c:ed:ba:fd:ed:5b:4b:09:12:79:6d:1d: dc:8e:a5:ab:ae:5f:13:e2:e9:1a:33:29:18:4c:94: 36:37:a4:1c:23:3c:f8:58:c7:f2:e3:eb:a9:38:bd: 29:9d:84:7b:0b:f0:07:83:bd:ea:ce:33:ac:3e:55: 3c:9f:4e:1b:0c:6d:80:4c:a5:e8:68:07:77:a2:9c: a6:a1:40:a9:a8:6b:ec:68:29:97:9a:c2:6c:ac:dc: 63:da:11:ba:92:fc:07:45:08:04:3c:51:25:fc:0b: 98:e0:31:8b:52:ee:ad:ed:cb:0b:5d:4f:2a:27:03: 89:01:1d:ae:f0:c1:1a:72:70:6f:dc:48:2f:1d:57: 4c:0d:d8:70:e1:73:b8:c3:a3:44:29:e2:af:3d:f3: 9f:1f:8b:8f:d9:72:5e:3c:2c:b4:7a:8d:54:0f:6d: 58:f6:80:0d:66:71:9e:92:c7:61:10:8e:af:58:e6: 4c:73:b4:0e:46:e6:6c:80:0f:b7:84:5c:96:17:ee: c7:e8:62:17:e7:94:8d:62:7e:41:71:52:bc:38:32: 55:fe:a2:5e:46:79:1f:69:e5:01:f0:a7:ee:82:1c: dc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A0:19:ED:74:33:EC:19:5B:0B:1E:1E:FA:87:DE:0E:F3:09:7C:D5 X509v3 Authority Key Identifier: keyid:99:7C:82:58:13:43:5F:B0:11:54:38:EE:3F:60:76:37:CE:BD:8E:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/IqAZ7XQz7BlbCx4e-ofeDvMJfNU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:9640::/29 Signature Algorithm: sha256WithRSAEncryption 31:6b:3d:7c:d9:79:cf:70:88:78:c4:61:bd:77:cd:90:94:d5: 32:d8:8b:7c:b9:65:ff:75:71:6e:22:fe:4d:11:2e:22:b7:88: de:57:ab:fb:67:cb:f6:42:c7:80:59:ac:00:eb:a7:5e:10:e4: 5f:6a:0a:46:44:d2:74:19:09:1c:6b:e6:76:51:fe:a9:e4:fb: 6f:30:31:f4:33:e8:36:5d:78:e9:e6:37:3a:c6:1e:72:e2:44: c7:20:b0:6a:44:9b:64:e4:a9:13:ad:bc:a7:5b:1c:6b:89:de: 44:02:d1:02:fc:68:43:81:09:73:14:97:59:28:15:24:c9:f8: d9:5e:33:87:56:e1:8f:46:35:47:89:3b:45:d2:7f:ca:5e:1d: 61:0e:5f:e1:b0:79:f6:0d:b9:af:e5:43:77:a3:39:a0:28:65: 6a:9b:29:da:16:57:0c:db:d1:d5:37:b9:01:cc:10:ae:c4:22: f1:82:76:94:90:ab:ec:dd:2c:0f:da:31:34:49:63:08:15:43: c4:5e:66:00:05:6d:09:4b:d4:82:99:ee:2c:48:5a:87:4d:79: 5d:aa:16:39:c9:a1:9d:c8:8c:d9:5f:c7:49:21:b5:4a:bf:b1: 81:a3:71:84:eb:11:51:70:b7:b2:dc:fc:54:cd:9e:0a:68:a8: 2c:14:b8:61 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6x9Nn8HK7j+IuBNzIxhLAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5N2M4MjU4MTM0MzVmYjAxMTU0MzhlZTNmNjA3NjM3Y2Vi ZDhlOGUwHhcNMjYwMTAxMTgxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmEwMTllZDc0MzNlYzE5NWIwYjFlMWVmYTg3ZGUwZWYzMDk3Y2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVmZ1N4xY4ut4DAJqwiWJzmwMueK UqpFhXx2S/kbUvIs7br97VtLCRJ5bR3cjqWrrl8T4ukaMykYTJQ2N6QcIzz4WMfy 4+upOL0pnYR7C/AHg73qzjOsPlU8n04bDG2ATKXoaAd3opymoUCpqGvsaCmXmsJs rNxj2hG6kvwHRQgEPFEl/AuY4DGLUu6t7csLXU8qJwOJAR2u8MEacnBv3EgvHVdM Ddhw4XO4w6NEKeKvPfOfH4uP2XJePCy0eo1UD21Y9oANZnGeksdhEI6vWOZMc7QO RuZsgA+3hFyWF+7H6GIX55SNYn5BcVK8ODJV/qJeRnkfaeUB8KfughzcwQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFCKgGe10M+wZWwseHvqH3g7zCXzVMB8GA1UdIwQY MBaAFJl8glgTQ1+wEVQ47j9gdjfOvY6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVh5Q1dCTkRYN0FSVkRqdVAyQjJOODY5am80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8yZjU1MDItMDA3YS00NjgzLTk4NzIt MjhmNzFhYmJhMDNhLzEvSXFBWjdYUXo3QmxiQ3g0ZS1vZmVEdk1KZk5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8yZjU1MDItMDA3YS00NjgzLTk4NzItMjhmNzFhYmJhMDNh LzEvbVh5Q1dCTkRYN0FSVkRqdVAyQjJOODY5am80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg+WQDAN BgkqhkiG9w0BAQsFAAOCAQEAMWs9fNl5z3CIeMRhvXfNkJTVMtiLfLll/3VxbiL+ TREuIreI3ler+2fL9kLHgFmsAOunXhDkX2oKRkTSdBkJHGvmdlH+qeT7bzAx9DPo Nl146eY3OsYecuJExyCwakSbZOSpE628p1sca4neRALRAvxoQ4EJcxSXWSgVJMn4 2V4zh1bhj0Y1R4k7RdJ/yl4dYQ5f4bB59g25r+VDd6M5oChlapsp2hZXDNvR1Te5 AcwQrsQi8YJ2lJCr7N0sD9oxNEljCBVDxF5mAAVtCUvUgpnuLEhah015XaoWOcmh nciM2V/HSSG1Sr+xgaNxhOsRUXC3stz8VM2eCmioLBS4YQ== -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:35 2026 by rpki-client