This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/iPHX81BoXjZlxEKw4B4PvNn6-js.roa File: iPHX81BoXjZlxEKw4B4PvNn6-js.roa (raw, json) Hash identifier: y80Z/DYz83QxM9kwrzQ2EWhOfGrmN3+Dqa1FLEOSBJI= Subject key identifier: 88:F1:D7:F3:50:68:5E:36:65:C4:42:B0:E0:1E:0F:BC:D9:FA:FA:3B Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019BA3A3B9AFDDBBF4451A580471E8EA5FFA Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/iPHX81BoXjZlxEKw4B4PvNn6-js.roa Signing time: Fri 09 Jan 2026 16:42:54 +0000 ROA not before: Fri 09 Jan 2026 16:42:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211009 IP address blocks: 2a0d:b841::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:a3:b9:af:dd:bb:f4:45:1a:58:04:71:e8:ea:5f:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 9 16:42:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88f1d7f350685e3665c442b0e01e0fbcd9fafa3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1d:c0:43:e1:6c:7a:a0:ee:09:e2:44:d5:bd: 40:fa:69:ca:84:0f:9b:e3:71:5e:2a:ee:11:0f:07: e0:95:cd:93:ac:a8:8d:c1:7a:d6:57:6a:47:aa:1b: c3:94:54:0e:0f:97:be:45:ab:61:28:eb:a4:96:24: ac:9c:2a:ea:4f:9c:10:f8:3f:a1:de:ed:6e:e8:7e: 3c:a4:04:8b:c0:7b:df:eb:02:07:e1:53:40:24:a7: 37:45:a3:e9:25:46:1a:a7:e8:05:89:16:2c:11:75: aa:eb:82:00:e3:1c:00:c2:10:3f:b7:b3:05:ad:75: 42:ee:24:84:e7:71:7f:95:3d:61:88:87:35:dd:dc: c7:c4:40:90:34:df:0b:34:4b:d5:8f:c3:71:9d:aa: 78:2c:6c:23:1f:0a:b2:79:28:3c:34:6a:29:a0:79: 8b:10:be:61:1e:68:92:16:97:31:54:ea:78:fc:93: 8d:fa:06:5c:a3:8f:84:3f:16:eb:54:79:e3:84:08: 77:b1:de:e8:ce:f7:2e:a2:f6:6b:d9:bb:fe:de:b3: ba:96:b7:26:f5:b8:e5:1a:c9:6b:9d:db:51:4d:4a: f4:56:f6:bf:ac:fc:34:db:41:c0:04:70:59:ad:01: a0:3c:97:8f:c5:68:01:91:6e:8b:c6:8e:ec:11:b1: 17:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F1:D7:F3:50:68:5E:36:65:C4:42:B0:E0:1E:0F:BC:D9:FA:FA:3B X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/iPHX81BoXjZlxEKw4B4PvNn6-js.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:b841::/32 Signature Algorithm: sha256WithRSAEncryption 9a:c7:f5:aa:53:7e:1c:1f:84:44:ae:41:64:01:44:67:88:14: a5:70:1a:78:b7:8a:1c:48:5c:31:00:34:a6:f2:2f:6c:ba:77: 8e:e3:b3:10:89:5a:88:d0:fd:10:c1:d8:cc:8a:ce:6c:9f:23: a6:2e:27:86:72:90:71:f3:fd:e4:d0:96:82:ef:57:ad:14:ee: 1b:67:c9:70:cd:c9:c7:65:54:4d:e0:33:18:b0:2d:0a:70:db: ba:5f:12:99:e0:6f:84:1f:96:d4:3f:3d:e6:bb:5f:3f:00:46: 70:e1:27:cf:dd:59:67:c9:ef:6a:5a:ea:9f:47:64:4e:9b:7a: fe:37:f9:2a:96:68:22:ad:3b:77:c8:9d:9c:36:53:bb:06:f8: cc:a6:3f:72:e1:32:e2:93:36:e8:18:ff:d7:47:05:d9:c9:0a: e9:a9:ce:cd:7e:a7:d1:33:e8:13:de:36:a1:1f:2a:39:c1:4c: c0:c9:18:ec:d9:19:d2:55:1d:38:ef:e7:bc:37:b1:2d:34:35: 10:73:ad:2a:29:63:c3:61:76:91:9a:cc:08:15:c5:47:73:0d: 0a:1c:39:b4:f1:e5:3b:5d:98:59:a4:ce:ef:2f:04:a3:3d:14: 4f:cb:02:05:cd:ed:20:b2:f2:e7:30:03:96:71:19:05:18:81: 9f:d6:a4:dc -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZujo7mv3bv0RRpYBHHo6l/6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTA5MTY0MjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGYxZDdmMzUwNjg1ZTM2NjVjNDQyYjBlMDFlMGZiY2Q5ZmFmYTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx3AQ+FseqDuCeJE1b1A+mnKhA+b 43FeKu4RDwfglc2TrKiNwXrWV2pHqhvDlFQOD5e+RathKOukliSsnCrqT5wQ+D+h 3u1u6H48pASLwHvf6wIH4VNAJKc3RaPpJUYap+gFiRYsEXWq64IA4xwAwhA/t7MF rXVC7iSE53F/lT1hiIc13dzHxECQNN8LNEvVj8Nxnap4LGwjHwqyeSg8NGopoHmL EL5hHmiSFpcxVOp4/JON+gZco4+EPxbrVHnjhAh3sd7ozvcuovZr2bv+3rO6lrcm 9bjlGslrndtRTUr0Vva/rPw020HABHBZrQGgPJePxWgBkW6Lxo7sEbEXDwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFIjx1/NQaF42ZcRCsOAeD7zZ+vo7MB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvaVBIWDgxQm9YalpseEVLdzRCNFB2Tm42LWpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg24QTAN BgkqhkiG9w0BAQsFAAOCAQEAmsf1qlN+HB+ERK5BZAFEZ4gUpXAaeLeKHEhcMQA0 pvIvbLp3juOzEIlaiND9EMHYzIrObJ8jpi4nhnKQcfP95NCWgu9XrRTuG2fJcM3J x2VUTeAzGLAtCnDbul8SmeBvhB+W1D895rtfPwBGcOEnz91ZZ8nvalrqn0dkTpt6 /jf5KpZoIq07d8idnDZTuwb4zKY/cuEy4pM26Bj/10cF2ckK6anOzX6n0TPoE942 oR8qOcFMwMkY7NkZ0lUdOO/nvDexLTQ1EHOtKiljw2F2kZrMCBXFR3MNChw5tPHl O12YWaTO7y8Eoz0UT8sCBc3tILLy5zADlnEZBRiBn9ak3A== -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:53 2026 by rpki-client