This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/IQxZao3bmpfbee1TFHYEYkv0IVg.roa File: IQxZao3bmpfbee1TFHYEYkv0IVg.roa (raw, json) Hash identifier: BgkG7uZNhIpRh4bHkbjuQe0q3hrSmhOLafH+AIVIi34= Subject key identifier: 21:0C:59:6A:8D:DB:9A:97:DB:79:ED:53:14:76:04:62:4B:F4:21:58 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797E9F259B85E40C21AF875C6BE8CF1A Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/IQxZao3bmpfbee1TFHYEYkv0IVg.roa Signing time: Thu 01 Jan 2026 12:18:19 +0000 ROA not before: Thu 01 Jan 2026 12:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50922 IP address blocks: 2a0e:aa07:f000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:9f:25:9b:85:e4:0c:21:af:87:5c:6b:e8:cf:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=210c596a8ddb9a97db79ed53147604624bf42158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:38:3b:48:e8:51:5c:c9:2a:d8:44:04:4c:af: f0:65:83:3b:1e:19:6a:44:e9:7a:aa:ce:c5:08:26: d7:96:8d:ab:53:a8:df:fa:9a:62:c9:e2:d4:57:77: 9e:13:fa:6d:af:67:f3:fc:44:c8:73:98:66:af:f0: af:de:a8:b7:c8:4e:39:73:f9:ef:5d:f7:14:c7:fb: 02:9d:01:a8:f8:a1:50:eb:54:e9:66:8f:c1:12:c0: bf:b5:e0:95:f6:0b:f7:12:88:1a:b7:56:1a:81:8a: 0a:04:5f:41:21:d0:05:74:00:e3:19:8d:66:6d:7d: 0d:ab:14:ae:29:6b:17:5a:dd:3f:58:08:3f:14:25: cf:5c:6c:3f:60:62:e8:0d:82:8e:e3:53:8a:89:43: 3e:80:63:a9:cb:cc:7b:3f:bf:ef:4a:08:f3:3e:58: f9:ce:ad:d6:d3:31:16:60:69:6a:91:61:81:bb:c2: 5c:f2:21:a2:e1:12:a3:0f:82:65:14:1d:27:ff:9d: 89:12:bc:b7:ad:0e:f5:3e:fa:fc:05:6c:a5:3a:eb: 13:85:63:9b:63:83:a9:6d:c7:0e:47:cc:1b:ed:92: a4:db:10:c7:5b:96:f1:1e:72:e4:45:29:d2:33:fd: c2:3c:ce:7e:ef:a9:4f:ef:fc:8d:bf:83:90:a5:5d: 08:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0C:59:6A:8D:DB:9A:97:DB:79:ED:53:14:76:04:62:4B:F4:21:58 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/IQxZao3bmpfbee1TFHYEYkv0IVg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:f000::/44 Signature Algorithm: sha256WithRSAEncryption c4:ae:13:44:0a:d0:4a:21:6f:09:08:b3:92:d3:ee:bf:ff:dd: ad:8d:81:72:ad:8e:b5:0f:14:ed:3e:ff:51:31:e5:20:9f:77: c8:88:d2:f8:e0:2c:a9:97:a0:43:0e:ef:06:1b:33:07:c8:c8: 6d:a9:d2:5d:1f:50:fc:12:f6:80:47:a1:9a:de:7b:87:5d:8e: f5:e4:eb:71:23:30:80:f5:3a:6f:e6:49:db:26:3c:8a:28:1d: 4d:8c:e2:d8:c7:9a:3c:c5:3b:93:a3:86:a7:b9:ad:d4:15:54: e1:09:83:ba:21:05:23:6c:6d:6c:9b:41:9a:40:d6:57:7c:39: 30:6c:95:f1:e9:e4:f7:99:4f:e8:1d:a1:01:2f:ad:11:be:a1: f9:b1:cf:40:01:6d:5c:e8:ce:dc:1d:ba:9a:6c:b4:06:95:b4: b2:8a:9b:a3:c7:74:55:e6:3f:9e:c9:fe:23:81:e9:d0:73:e0: d6:24:bf:21:3f:07:6f:b5:22:55:15:c6:be:c4:6b:3c:50:aa: 06:41:f8:84:6e:9a:c9:77:3c:18:22:dc:8e:08:42:80:68:f1: 69:0e:5a:6a:d2:ca:dd:85:82:b1:06:5b:84:2f:a8:51:59:34: c5:2e:e5:5e:76:7e:f8:c4:cb:79:8e:3e:78:90:cb:75:48:c6: 7d:cc:60:a8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fp8lm4XkDCGvh1xr6M8aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTBjNTk2YThkZGI5YTk3ZGI3OWVkNTMxNDc2MDQ2MjRiZjQyMTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjg7SOhRXMkq2EQETK/wZYM7Hhlq ROl6qs7FCCbXlo2rU6jf+ppiyeLUV3eeE/ptr2fz/ETIc5hmr/Cv3qi3yE45c/nv XfcUx/sCnQGo+KFQ61TpZo/BEsC/teCV9gv3Eogat1YagYoKBF9BIdAFdADjGY1m bX0NqxSuKWsXWt0/WAg/FCXPXGw/YGLoDYKO41OKiUM+gGOpy8x7P7/vSgjzPlj5 zq3W0zEWYGlqkWGBu8Jc8iGi4RKjD4JlFB0n/52JEry3rQ71Pvr8BWylOusThWOb Y4OpbccOR8wb7ZKk2xDHW5bxHnLkRSnSM/3CPM5+76lP7/yNv4OQpV0ImQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCEMWWqN25qX23ntUxR2BGJL9CFYMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvSVF4WmFvM2JtcGZiZWUxVEZIWUVZa3YwSVZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB/AA MA0GCSqGSIb3DQEBCwUAA4IBAQDErhNECtBKIW8JCLOS0+6//92tjYFyrY61DxTt Pv9RMeUgn3fIiNL44Cypl6BDDu8GGzMHyMhtqdJdH1D8EvaAR6Ga3nuHXY715Otx IzCA9Tpv5knbJjyKKB1NjOLYx5o8xTuTo4anua3UFVThCYO6IQUjbG1sm0GaQNZX fDkwbJXx6eT3mU/oHaEBL60RvqH5sc9AAW1c6M7cHbqabLQGlbSyipujx3RV5j+e yf4jgenQc+DWJL8hPwdvtSJVFca+xGs8UKoGQfiEbprJdzwYItyOCEKAaPFpDlpq 0srdhYKxBluEL6hRWTTFLuVedn74xMt5jj54kMt1SMZ9zGCo -----END CERTIFICATE-----Generated at Tue Jan 6 21:32:05 2026 by rpki-client