This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/irISjxv6hlEOs-X4Vplb5dPSU00.roa File: irISjxv6hlEOs-X4Vplb5dPSU00.roa (raw, json) Hash identifier: K/EihhYKr9R9rdpNfRGGLbcShi2prhZgj9Ka7TW/Gvs= Subject key identifier: 8A:B2:12:8F:1B:FA:86:51:0E:B3:E5:F8:56:99:5B:E5:D3:D2:53:4D Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f Certificate serial: 019B7EA718294567B1E0852B60B480927667 Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/irISjxv6hlEOs-X4Vplb5dPSU00.roa Signing time: Fri 02 Jan 2026 12:20:38 +0000 ROA not before: Fri 02 Jan 2026 12:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205214 IP address blocks: 2a0d:2146:8480::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:18:29:45:67:b1:e0:85:2b:60:b4:80:92:76:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f Validity Not Before: Jan 2 12:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ab2128f1bfa86510eb3e5f856995be5d3d2534d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ac:55:d1:95:12:2d:7b:6a:12:3b:34:53:27: db:0b:e5:a8:e6:ea:2d:e8:4a:15:da:84:70:cf:bb: c1:84:d3:47:c9:6c:8b:7d:e0:e4:dd:e7:e5:d5:d3: 93:f1:bb:b4:9a:54:c7:ff:1c:ea:ed:b9:7b:52:76: 0b:aa:ab:17:1d:6c:26:a9:74:f8:59:f2:80:ae:cd: ce:70:f8:b9:76:2d:c3:76:33:30:b0:0d:44:28:48: f5:89:6a:6d:22:91:8d:20:e5:89:3b:71:f0:74:1d: 5f:59:7b:96:d8:d1:28:c9:b3:04:9a:92:b5:b6:30: 1b:29:03:c7:42:d7:6d:1d:aa:4f:e5:53:17:b9:19: 2d:8f:9f:89:30:bb:32:93:e8:75:2f:17:ae:c3:0c: 20:83:bc:35:0d:98:f2:b8:58:8f:97:b1:53:88:51: 8e:1f:af:47:35:83:45:63:73:c6:5c:ac:09:9d:cf: 21:9d:6d:cd:f5:de:c1:ec:ea:03:b6:38:1d:0c:76: 36:ff:fe:6a:5f:c8:8d:b7:19:bb:a7:b2:da:c3:3e: 22:5f:ee:b5:76:e0:f4:a5:f3:6d:bf:7c:7e:98:9e: 82:3e:d7:33:ce:e0:ef:45:6f:4b:83:7d:63:95:cf: cb:5d:20:6d:64:ab:a6:3e:79:dc:4d:d8:da:c5:be: 25:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B2:12:8F:1B:FA:86:51:0E:B3:E5:F8:56:99:5B:E5:D3:D2:53:4D X509v3 Authority Key Identifier: keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/irISjxv6hlEOs-X4Vplb5dPSU00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:2146:8480::/44 Signature Algorithm: sha256WithRSAEncryption af:63:ee:07:89:95:ab:99:15:81:54:01:2d:96:8e:13:73:df: 27:f2:a4:b4:1b:d7:b5:b6:d9:f8:cc:90:77:7e:c4:68:f0:c0: 99:e5:89:fc:1c:c3:14:c7:e7:86:3c:88:bf:8c:79:1f:6f:2d: 70:c8:0c:46:f8:e8:de:6c:2f:48:5c:78:e8:1b:38:03:37:f1: 34:d5:0e:6f:d1:d7:5e:05:ad:5a:05:cf:51:ad:8e:9a:e3:d6: 58:c2:3a:6d:9d:83:23:70:95:6a:5b:a9:76:32:f1:b9:33:25: b0:5c:c8:cd:f4:43:67:91:51:d3:30:01:6f:b1:b6:a2:58:db: 97:48:7a:8c:8b:bf:21:1b:5a:29:ae:86:74:df:7a:ca:1f:82: 37:aa:e8:a0:1d:12:c9:66:82:92:a3:63:59:82:8e:e3:10:ab: fc:10:5f:8a:5c:c4:e2:87:43:0c:29:ed:4d:c8:76:19:11:ed: 9c:1e:e0:d0:cc:14:83:bb:20:a4:b3:8e:ab:8e:2d:73:14:54: 23:28:6b:ae:bf:0c:36:eb:dd:88:04:ed:c9:6f:e7:39:81:d8: 78:12:8c:1f:88:fa:92:34:2d:61:84:da:57:fe:eb:ca:9b:4d: 43:83:8f:de:34:6c:10:a8:76:e8:d1:52:78:ac:6b:a5:08:86: f3:63:ea:d5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pxgpRWex4IUrYLSAknZnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm YzAyNWYwHhcNMjYwMTAyMTIyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWIyMTI4ZjFiZmE4NjUxMGViM2U1Zjg1Njk5NWJlNWQzZDI1MzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6xV0ZUSLXtqEjs0UyfbC+Wo5uot 6EoV2oRwz7vBhNNHyWyLfeDk3efl1dOT8bu0mlTH/xzq7bl7UnYLqqsXHWwmqXT4 WfKArs3OcPi5di3DdjMwsA1EKEj1iWptIpGNIOWJO3HwdB1fWXuW2NEoybMEmpK1 tjAbKQPHQtdtHapP5VMXuRktj5+JMLsyk+h1Lxeuwwwgg7w1DZjyuFiPl7FTiFGO H69HNYNFY3PGXKwJnc8hnW3N9d7B7OoDtjgdDHY2//5qX8iNtxm7p7Lawz4iX+61 duD0pfNtv3x+mJ6CPtczzuDvRW9Lg31jlc/LXSBtZKumPnncTdjaxb4lGQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIqyEo8b+oZRDrPl+FaZW+XT0lNNMB8GA1UdIwQY MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt NzBlODk4YmIzOGRkLzEvaXJJU2p4djZobEVPcy1YNFZwbGI1ZFBTVTAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg0hRoSA MA0GCSqGSIb3DQEBCwUAA4IBAQCvY+4HiZWrmRWBVAEtlo4Tc98n8qS0G9e1ttn4 zJB3fsRo8MCZ5Yn8HMMUx+eGPIi/jHkfby1wyAxG+OjebC9IXHjoGzgDN/E01Q5v 0ddeBa1aBc9RrY6a49ZYwjptnYMjcJVqW6l2MvG5MyWwXMjN9ENnkVHTMAFvsbai WNuXSHqMi78hG1oproZ033rKH4I3quigHRLJZoKSo2NZgo7jEKv8EF+KXMTih0MM Ke1NyHYZEe2cHuDQzBSDuyCks46rji1zFFQjKGuuvww2692IBO3Jb+c5gdh4Eowf iPqSNC1hhNpX/uvKm01Dg4/eNGwQqHbo0VJ4rGulCIbzY+rV -----END CERTIFICATE-----Generated at Wed Jan 21 12:18:01 2026 by rpki-client