This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/iur-ClcobK48I-ad86ePnRoVB-M.roa File: iur-ClcobK48I-ad86ePnRoVB-M.roa (raw, json) Hash identifier: TLa1Oh9WZOk/hrQaMmRNcbJXdLyzyM1KjtTKC8Cd2Go= Subject key identifier: 8A:EA:FE:0A:57:28:6C:AE:3C:23:E6:9D:F3:A7:8F:9D:1A:15:07:E3 Certificate issuer: /CN=cfa13166130d29d5ad8a607d81498da66026d036 Certificate serial: 019B77590743EFD9B868AE9EB4554B643BFD Authority key identifier: CF:A1:31:66:13:0D:29:D5:AD:8A:60:7D:81:49:8D:A6:60:26:D0:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6ExZhMNKdWtimB9gUmNpmAm0DY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/iur-ClcobK48I-ad86ePnRoVB-M.roa Signing time: Thu 01 Jan 2026 02:18:01 +0000 ROA not before: Thu 01 Jan 2026 02:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214151 IP address blocks: 2001:3f40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.crl rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.mft rsync://rpki.ripe.net/repository/DEFAULT/z6ExZhMNKdWtimB9gUmNpmAm0DY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:07:43:ef:d9:b8:68:ae:9e:b4:55:4b:64:3b:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfa13166130d29d5ad8a607d81498da66026d036 Validity Not Before: Jan 1 02:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8aeafe0a57286cae3c23e69df3a78f9d1a1507e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:81:57:88:77:b2:f5:f3:b3:71:de:f7:46:f4: 4b:a2:ed:e5:bd:b0:9d:7c:67:d6:0f:aa:f7:4d:41: d3:64:a4:fb:f2:75:36:36:2f:56:6a:d1:e4:3b:44: ec:c2:f4:1c:ae:e6:48:54:3d:00:d2:3f:59:8a:e3: 88:80:6f:ba:e7:2f:74:b4:5b:9a:81:d6:d2:c8:85: e7:35:34:0b:b7:3e:43:80:3e:6c:64:7b:51:1b:db: 81:a8:cf:aa:de:78:8d:9d:6c:df:da:9f:4a:08:94: bb:f3:29:9d:ea:d1:9f:7e:45:51:6f:e9:a6:12:da: d1:03:86:62:87:64:d1:38:3a:7c:7e:1d:d8:d9:7f: 39:57:da:f0:d0:7c:89:0d:5a:37:52:a6:36:18:61: 3c:66:01:87:86:39:a4:45:8f:4a:0e:7a:62:e8:fd: 50:bc:67:10:96:27:fc:93:ba:4d:42:41:55:83:53: b2:bc:5a:a0:59:12:bc:00:5d:12:3d:5f:92:09:7c: 75:a1:7f:2b:fe:c4:6f:0d:35:8b:27:32:80:3e:dc: a9:2b:9a:e3:5b:ef:04:4e:92:be:24:a1:26:a0:10: 11:2b:45:de:3a:28:2e:ef:64:b2:ed:01:d9:e1:e7: 5b:7f:05:7f:2a:e6:2e:16:53:fb:51:82:4f:20:72: 32:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:EA:FE:0A:57:28:6C:AE:3C:23:E6:9D:F3:A7:8F:9D:1A:15:07:E3 X509v3 Authority Key Identifier: keyid:CF:A1:31:66:13:0D:29:D5:AD:8A:60:7D:81:49:8D:A6:60:26:D0:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6ExZhMNKdWtimB9gUmNpmAm0DY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/iur-ClcobK48I-ad86ePnRoVB-M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3f40::/29 Signature Algorithm: sha256WithRSAEncryption 54:d4:a0:fe:68:84:a0:db:ed:7b:14:2d:ec:64:58:78:fe:1f: 90:bc:19:98:b4:eb:ca:de:06:ad:5d:85:e6:67:bb:c2:31:fd: e1:ff:8d:65:ab:14:58:ed:61:a6:58:43:e9:50:4e:c6:df:91: 5b:10:a5:3d:da:f7:66:e3:5d:65:ff:4f:16:93:dc:5f:3d:49: 26:51:28:ab:35:23:fd:15:51:d1:27:4c:c4:ae:01:2d:4f:61: 1c:57:8a:e4:25:c8:05:b0:c3:f8:46:a5:33:29:e5:1c:0d:7b: 2c:22:1a:90:07:f6:27:7e:20:75:c4:02:84:82:4b:25:d7:a5: 63:41:d6:76:b4:3c:a2:e8:45:62:51:87:e4:1a:ee:81:9a:14: 27:19:c1:5d:96:fe:49:39:21:66:a4:7d:da:52:41:c0:9a:02: a8:fe:ce:2d:dd:c3:60:73:c9:7f:ad:69:28:5d:67:c8:87:e5: 41:49:66:ca:c3:be:88:c5:69:2e:1f:44:d3:da:d8:5b:e0:46: c0:15:1e:3d:e6:6a:78:50:62:be:d9:16:74:23:f3:f5:c3:a1: c3:a1:0f:83:77:35:0c:87:e4:fb:6f:cb:94:76:dd:38:74:d1: 62:d3:20:9b:8d:20:83:13:bf:d5:67:cb:50:20:6f:c9:eb:d4: 0e:f9:cc:34 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3WQdD79m4aK6etFVLZDv9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYTEzMTY2MTMwZDI5ZDVhZDhhNjA3ZDgxNDk4ZGE2NjAy NmQwMzYwHhcNMjYwMTAxMDIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWVhZmUwYTU3Mjg2Y2FlM2MyM2U2OWRmM2E3OGY5ZDFhMTUwN2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYFXiHey9fOzcd73RvRLou3lvbCd fGfWD6r3TUHTZKT78nU2Ni9WatHkO0TswvQcruZIVD0A0j9ZiuOIgG+65y90tFua gdbSyIXnNTQLtz5DgD5sZHtRG9uBqM+q3niNnWzf2p9KCJS78ymd6tGffkVRb+mm EtrRA4Zih2TRODp8fh3Y2X85V9rw0HyJDVo3UqY2GGE8ZgGHhjmkRY9KDnpi6P1Q vGcQlif8k7pNQkFVg1OyvFqgWRK8AF0SPV+SCXx1oX8r/sRvDTWLJzKAPtypK5rj W+8ETpK+JKEmoBARK0XeOigu72Sy7QHZ4edbfwV/KuYuFlP7UYJPIHIyKwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFIrq/gpXKGyuPCPmnfOnj50aFQfjMB8GA1UdIwQY MBaAFM+hMWYTDSnVrYpgfYFJjaZgJtA2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejZFeFpoTU5LZFd0aW1COWdVbU5wbUFtMERZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80NmVkOGQtM2YyZi00NzNkLWJlZDUt MGM2NmJkMzQwMTlhLzEvaXVyLUNsY29iSzQ4SS1hZDg2ZVBuUm9WQi1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni80NmVkOGQtM2YyZi00NzNkLWJlZDUtMGM2NmJkMzQwMTlh LzEvejZFeFpoTU5LZFd0aW1COWdVbU5wbUFtMERZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDIAE/QDAN BgkqhkiG9w0BAQsFAAOCAQEAVNSg/miEoNvtexQt7GRYeP4fkLwZmLTryt4GrV2F 5me7wjH94f+NZasUWO1hplhD6VBOxt+RWxClPdr3ZuNdZf9PFpPcXz1JJlEoqzUj /RVR0SdMxK4BLU9hHFeK5CXIBbDD+EalMynlHA17LCIakAf2J34gdcQChIJLJdel Y0HWdrQ8ouhFYlGH5BrugZoUJxnBXZb+STkhZqR92lJBwJoCqP7OLd3DYHPJf61p KF1nyIflQUlmysO+iMVpLh9E09rYW+BGwBUePeZqeFBivtkWdCPz9cOhw6EPg3c1 DIfk+2/LlHbdOHTRYtMgm40ggxO/1WfLUCBvyevUDvnMNA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:19 2026 by rpki-client