This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/i15V9-c2PXcAQ6Lawcpbt-GL_iw.roa File: i15V9-c2PXcAQ6Lawcpbt-GL_iw.roa (raw, json) Hash identifier: GlpJvGhZVuGz4aIWr1fluB9fbXXAkmsasT3KRZg6g4Y= Subject key identifier: 8B:5E:55:F7:E7:36:3D:77:00:43:A2:DA:C1:CA:5B:B7:E1:8B:FE:2C Certificate issuer: /CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43 Certificate serial: 019B76EADCF47B979D30B2E1F8A3494E6641 Authority key identifier: 93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/i15V9-c2PXcAQ6Lawcpbt-GL_iw.roa Signing time: Thu 01 Jan 2026 00:17:42 +0000 ROA not before: Thu 01 Jan 2026 00:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214064 IP address blocks: 2001:67c:f30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:dc:f4:7b:97:9d:30:b2:e1:f8:a3:49:4e:66:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43 Validity Not Before: Jan 1 00:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b5e55f7e7363d770043a2dac1ca5bb7e18bfe2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ac:39:c5:d5:43:df:e9:4d:9b:62:13:76:8f: 4c:2f:9c:c2:9e:64:bc:37:82:fd:81:5e:29:42:f7: 61:24:6a:70:02:b2:06:53:bb:49:e6:a2:7b:14:42: 80:0a:45:71:a5:17:0c:d3:be:6e:dd:77:41:fa:6a: 9c:26:fd:8e:d3:e4:08:7d:bb:35:17:ea:d6:b5:a9: 7d:cc:48:9f:33:cd:7b:88:36:6f:69:0e:46:1d:9b: 7d:c1:e7:34:b6:06:7e:4c:ba:dd:11:9a:f7:dd:33: 2a:96:0a:91:52:6a:e5:6e:f7:1c:36:47:fe:4d:f4: d9:1c:80:3d:c8:62:2e:f0:ef:89:ef:3a:45:2a:6b: 42:33:c8:62:36:cd:2b:27:b7:34:c8:b8:8a:dc:0f: 3c:48:7a:74:3d:ef:cd:f5:c3:57:68:4c:f4:10:1c: d9:17:05:d5:d3:00:9b:3a:be:60:c8:4c:6b:9c:75: 4a:bf:98:10:c8:2e:28:60:9b:25:b3:b4:48:5d:a4: 75:98:d7:ff:7e:5d:ad:62:41:5e:40:e0:e6:97:0e: a2:c0:88:79:c3:95:7b:3c:48:d8:89:23:33:e0:2a: 75:2c:ca:1f:ed:36:2b:ba:3d:35:a3:5e:75:be:45: 1f:e2:e8:ba:55:43:62:17:7b:ee:db:ad:05:d2:c2: 25:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5E:55:F7:E7:36:3D:77:00:43:A2:DA:C1:CA:5B:B7:E1:8B:FE:2C X509v3 Authority Key Identifier: keyid:93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/i15V9-c2PXcAQ6Lawcpbt-GL_iw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:f30::/48 Signature Algorithm: sha256WithRSAEncryption 32:a1:fa:63:54:b3:61:db:06:47:8d:1c:2c:65:48:fb:b2:49: 16:f4:99:24:21:f1:57:d6:27:bc:96:e1:e8:37:d0:75:1e:ae: 88:36:db:20:61:54:0b:ab:f3:5e:76:f3:e5:a7:21:65:f9:1b: 40:e8:c9:d2:4a:8c:db:2a:c0:3d:c5:28:44:5f:43:12:08:72: 93:03:5d:cf:08:6e:72:b8:c9:44:98:54:b0:82:35:aa:98:ec: 4f:2c:16:03:ef:1d:9f:86:28:be:24:e3:ab:4e:ad:d8:87:66: cc:45:22:05:54:f5:2a:20:5b:49:f4:41:8f:32:6f:43:5e:bb: d2:a3:78:29:d0:5d:c1:13:23:dc:d8:78:c9:ea:2e:3d:b9:e4: 8e:14:86:79:89:32:18:01:f3:07:ac:d1:3f:55:b2:e7:27:71: 41:c0:53:96:bf:80:68:51:16:45:26:01:64:c6:75:f8:43:cb: 98:b9:f3:d3:bc:d1:43:7c:99:66:71:44:14:0f:cf:ce:97:b9: da:35:65:fe:fb:fc:24:ef:bb:bd:7f:3d:29:d6:bd:dc:56:fe: fa:3e:ea:35:dc:3c:2f:21:ef:d4:6a:6b:6c:35:58:56:22:3e: 0b:6b:9e:f1:f5:6b:04:ba:5f:bf:41:21:22:88:65:19:d4:2c: a7:a4:00:a6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt26tz0e5edMLLh+KNJTmZBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMGUwYTNiYjA4ZTRhYzY3MzYzZTMwYmE4M2IwNzE2MzJk MGFhNDMwHhcNMjYwMTAxMDAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjVlNTVmN2U3MzYzZDc3MDA0M2EyZGFjMWNhNWJiN2UxOGJmZTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qw5xdVD3+lNm2ITdo9ML5zCnmS8 N4L9gV4pQvdhJGpwArIGU7tJ5qJ7FEKACkVxpRcM075u3XdB+mqcJv2O0+QIfbs1 F+rWtal9zEifM817iDZvaQ5GHZt9wec0tgZ+TLrdEZr33TMqlgqRUmrlbvccNkf+ TfTZHIA9yGIu8O+J7zpFKmtCM8hiNs0rJ7c0yLiK3A88SHp0Pe/N9cNXaEz0EBzZ FwXV0wCbOr5gyExrnHVKv5gQyC4oYJsls7RIXaR1mNf/fl2tYkFeQODmlw6iwIh5 w5V7PEjYiSMz4Cp1LMof7TYruj01o151vkUf4ui6VUNiF3vu260F0sIleQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIteVffnNj13AEOi2sHKW7fhi/4sMB8GA1UdIwQY MBaAFJMOCjuwjkrGc2PjC6g7BxYy0KpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3c0S083Q09Tc1p6WS1NTHFEc0hGakxRcWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81OTUwYzktOTdlYy00MGRjLTliMTEt MDI5NWExYzExZmViLzEvaTE1VjktYzJQWGNBUTZMYXdjcGJ0LUdMX2l3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy81OTUwYzktOTdlYy00MGRjLTliMTEtMDI5NWExYzExZmVi LzEva3c0S083Q09Tc1p6WS1NTHFEc0hGakxRcWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA8w MA0GCSqGSIb3DQEBCwUAA4IBAQAyofpjVLNh2wZHjRwsZUj7skkW9JkkIfFX1ie8 luHoN9B1Hq6INtsgYVQLq/NedvPlpyFl+RtA6MnSSozbKsA9xShEX0MSCHKTA13P CG5yuMlEmFSwgjWqmOxPLBYD7x2fhii+JOOrTq3Yh2bMRSIFVPUqIFtJ9EGPMm9D XrvSo3gp0F3BEyPc2HjJ6i49ueSOFIZ5iTIYAfMHrNE/VbLnJ3FBwFOWv4BoURZF JgFkxnX4Q8uYufPTvNFDfJlmcUQUD8/Ol7naNWX++/wk77u9fz0p1r3cVv76Puo1 3DwvIe/UamtsNVhWIj4La57x9WsEul+/QSEiiGUZ1CynpACm -----END CERTIFICATE-----Generated at Tue Jan 27 02:19:00 2026 by rpki-client