This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/kFp7wvP0ODCJK7vo0Vmb1UsfAnI.roa File: kFp7wvP0ODCJK7vo0Vmb1UsfAnI.roa (raw, json) Hash identifier: r4fhrXelWzWE5kdbDKL+JQJ2IM+WiqgDjI7e9dKaNQg= Subject key identifier: 90:5A:7B:C2:F3:F4:38:30:89:2B:BB:E8:D1:59:9B:D5:4B:1F:02:72 Certificate issuer: /CN=8a28ff310da7df8309cfab4dcf9a235842b60872 Certificate serial: 019B7F14742A1C948EF8771621F189ED6849 Authority key identifier: 8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/kFp7wvP0ODCJK7vo0Vmb1UsfAnI.roa Signing time: Fri 02 Jan 2026 14:20:05 +0000 ROA not before: Fri 02 Jan 2026 14:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213367 IP address blocks: 2a06:b700:1003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:74:2a:1c:94:8e:f8:77:16:21:f1:89:ed:68:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a28ff310da7df8309cfab4dcf9a235842b60872 Validity Not Before: Jan 2 14:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=905a7bc2f3f43830892bbbe8d1599bd54b1f0272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:20:88:49:4d:a4:b2:07:91:95:46:c2:cc:a0: cb:1f:36:00:56:8b:7c:6d:3f:b6:1e:c2:08:61:42: 12:14:58:85:35:cc:3d:d9:9d:bb:08:ae:df:b3:01: b2:43:27:6c:6f:58:bc:4a:95:a3:5d:f5:31:6f:f3: 60:33:20:5a:94:7b:01:62:71:47:65:51:f3:f3:4f: 8b:35:3b:e7:23:35:02:86:94:aa:e1:68:1b:0a:ad: 71:eb:7a:86:61:a2:30:67:d7:5b:de:da:d7:c0:46: b0:44:78:d9:b5:dd:3c:85:b2:f5:07:80:29:fe:83: be:f2:73:65:8a:83:78:96:91:e0:13:46:80:6a:08: b4:78:f9:95:c1:95:e9:ce:1c:b6:eb:4f:b6:f5:86: f6:8a:a7:06:ba:da:4d:05:70:36:c8:e0:34:36:21: 73:79:4e:16:ff:91:ef:d3:48:a2:c1:73:6d:e1:fd: 8e:7e:7a:4b:6c:3d:21:8f:6f:b8:c2:43:2b:0b:28: dd:45:fd:2b:7b:b2:89:af:f4:1c:90:8a:d2:50:b1: a3:6e:13:7e:04:0a:26:cc:3c:b8:23:71:b9:9a:a7: 6a:f0:6b:08:5f:29:51:16:ea:f9:c6:1a:2e:d7:23: 58:d7:84:6b:23:60:19:da:aa:ae:47:10:e9:87:1b: 37:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5A:7B:C2:F3:F4:38:30:89:2B:BB:E8:D1:59:9B:D5:4B:1F:02:72 X509v3 Authority Key Identifier: keyid:8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/kFp7wvP0ODCJK7vo0Vmb1UsfAnI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:b700:1003::/48 Signature Algorithm: sha256WithRSAEncryption 18:7f:06:9d:43:b9:6f:15:69:40:c1:b5:9e:76:3e:f0:48:00: 1e:47:0f:af:48:49:a0:de:c9:73:a7:a3:dd:21:99:78:33:10: 77:6a:09:20:ee:fc:c3:ba:67:f3:eb:15:99:8c:d6:73:8a:10: f4:0e:4b:68:6f:4e:b5:70:ca:2d:49:34:b2:37:62:35:db:a0: 44:0c:aa:b0:af:a4:a2:ab:9c:83:3d:a3:63:f0:d3:1f:66:ac: f5:c4:7b:a4:6d:b2:a1:08:3c:30:5b:19:72:13:94:1b:41:c2: 9e:a0:aa:27:05:20:be:61:fd:fe:15:2b:1e:37:e6:85:33:ad: d9:01:10:14:1a:19:29:0c:fa:8c:42:93:26:14:f4:f1:5b:22: 24:c5:99:5d:f1:ec:85:09:f1:c8:93:9e:4d:39:87:b5:bc:b0: 7c:90:f8:02:00:a3:18:b8:58:37:b7:3a:bd:72:2f:10:cc:c2: 3e:bf:e4:b8:9e:73:d5:56:9d:e4:06:df:f7:f5:38:e6:2e:26: f2:6d:64:81:0a:55:db:27:97:c7:8d:d2:c5:c6:a9:01:0c:f3: a4:bb:43:69:85:70:43:9d:2f:c8:e6:f7:22:25:4d:10:3e:90: b7:40:87:a1:6e:32:a7:62:9f:03:08:ed:b8:a0:08:d1:6c:91: 8f:b0:20:18 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FHQqHJSO+HcWIfGJ7WhJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMjhmZjMxMGRhN2RmODMwOWNmYWI0ZGNmOWEyMzU4NDJi NjA4NzIwHhcNMjYwMTAyMTQyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDVhN2JjMmYzZjQzODMwODkyYmJiZThkMTU5OWJkNTRiMWYwMjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCCISU2ksgeRlUbCzKDLHzYAVot8 bT+2HsIIYUISFFiFNcw92Z27CK7fswGyQydsb1i8SpWjXfUxb/NgMyBalHsBYnFH ZVHz80+LNTvnIzUChpSq4WgbCq1x63qGYaIwZ9db3trXwEawRHjZtd08hbL1B4Ap /oO+8nNlioN4lpHgE0aAagi0ePmVwZXpzhy260+29Yb2iqcGutpNBXA2yOA0NiFz eU4W/5Hv00iiwXNt4f2OfnpLbD0hj2+4wkMrCyjdRf0re7KJr/QckIrSULGjbhN+ BAomzDy4I3G5mqdq8GsIXylRFur5xhou1yNY14RrI2AZ2qquRxDphxs39wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJBae8Lz9DgwiSu76NFZm9VLHwJyMB8GA1UdIwQY MBaAFIoo/zENp9+DCc+rTc+aI1hCtghyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWlqX01RMm4zNE1KejZ0Tno1b2pXRUsyQ0hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hNWQyODYtODY3MC00N2U0LTk3YjQt MjRjZjhhNjFkN2U4LzEva0ZwN3d2UDBPRENKSzd2bzBWbWIxVXNmQW5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9hNWQyODYtODY3MC00N2U0LTk3YjQtMjRjZjhhNjFkN2U4 LzEvaWlqX01RMm4zNE1KejZ0Tno1b2pXRUsyQ0hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKga3ABAD MA0GCSqGSIb3DQEBCwUAA4IBAQAYfwadQ7lvFWlAwbWedj7wSAAeRw+vSEmg3slz p6PdIZl4MxB3agkg7vzDumfz6xWZjNZzihD0Dktob061cMotSTSyN2I126BEDKqw r6Siq5yDPaNj8NMfZqz1xHukbbKhCDwwWxlyE5QbQcKeoKonBSC+Yf3+FSseN+aF M63ZARAUGhkpDPqMQpMmFPTxWyIkxZld8eyFCfHIk55NOYe1vLB8kPgCAKMYuFg3 tzq9ci8QzMI+v+S4nnPVVp3kBt/39TjmLibybWSBClXbJ5fHjdLFxqkBDPOku0Np hXBDnS/I5vciJU0QPpC3QIehbjKnYp8DCO24oAjRbJGPsCAY -----END CERTIFICATE-----Generated at Mon Feb 2 05:27:08 2026 by rpki-client