This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Ib--kJSrnOb9uPw3IzSyZwSIino.roa File: Ib--kJSrnOb9uPw3IzSyZwSIino.roa (raw, json) Hash identifier: BTefCaYlWDLOhE1jSQWsfvDyC/eauylYoWiXfoFVoj0= Subject key identifier: 21:BF:BE:90:94:AB:9C:E6:FD:B8:FC:37:23:34:B2:67:04:88:8A:7A Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EA1CB3E52F3DFFE452F12A30F5633 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Ib--kJSrnOb9uPw3IzSyZwSIino.roa Signing time: Thu 01 Jan 2026 12:18:20 +0000 ROA not before: Thu 01 Jan 2026 12:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135671 IP address blocks: 2a0e:aa06:450::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a1:cb:3e:52:f3:df:fe:45:2f:12:a3:0f:56:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21bfbe9094ab9ce6fdb8fc372334b26704888a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b4:90:0c:5b:84:06:1a:8d:4f:6d:e8:51:5e: c0:c1:d4:87:b1:dc:e0:a0:aa:12:99:07:1e:f3:aa: 00:db:eb:ec:f6:1d:f9:70:11:c4:93:30:a7:2b:79: 96:40:8d:ea:aa:71:71:e0:51:b4:7c:84:da:df:fd: 86:e7:94:54:e5:6a:b3:07:b1:3a:14:75:5e:15:02: 78:fe:3f:8c:29:3c:6c:bf:c6:6c:4e:53:55:fc:6a: 0c:57:f4:30:78:75:d9:df:47:8c:53:50:e3:61:ba: 7d:21:24:73:71:28:ff:c8:ee:05:08:77:41:ec:79: af:26:c8:81:52:0c:a1:0e:bf:23:34:b6:1a:08:bf: b0:67:f7:f5:33:96:ff:2a:21:51:ab:6a:fc:03:fa: 89:00:4a:fd:55:e6:f9:f2:e0:db:d3:7a:0f:d6:94: 65:60:c8:06:f8:a0:78:6d:5a:f4:63:c0:a6:0e:53: e3:69:ef:ba:e9:95:31:4d:91:4e:11:4a:07:97:84: f4:9e:41:91:3d:a0:b1:31:58:9c:2d:71:7a:f3:08: 44:8c:f5:e5:14:6b:cd:18:78:b8:e6:6e:6c:48:37: 43:f1:fc:26:85:4b:9f:f6:54:be:24:5e:6f:01:73: d6:1e:c9:7d:1a:57:b4:34:74:44:22:b4:6a:f5:fc: 09:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BF:BE:90:94:AB:9C:E6:FD:B8:FC:37:23:34:B2:67:04:88:8A:7A X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Ib--kJSrnOb9uPw3IzSyZwSIino.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa06:450::/44 Signature Algorithm: sha256WithRSAEncryption 51:b7:f8:5e:38:b6:bb:ca:8e:df:e0:f6:74:5e:0d:91:6d:e1: 42:d4:86:84:7e:72:36:ec:b4:21:8a:3d:f1:49:f4:90:26:f6: 52:84:d4:a7:be:29:09:51:05:c1:4f:36:0c:4f:af:4c:08:46: 2f:46:8d:fa:df:bb:3b:46:fc:8e:7c:c3:48:1c:e5:09:51:64: 37:81:67:f1:c0:31:85:81:7c:74:2c:83:6d:93:fe:8f:c6:46: 3c:05:90:d6:e3:1d:50:8d:1d:29:f5:cb:f3:cf:24:bc:5b:e9: a9:57:cd:7c:b5:3e:59:b9:42:ba:d4:60:b4:81:ab:3c:10:27: d2:15:ed:55:7e:81:d1:98:46:9a:f8:b9:cf:e7:90:ba:3e:3a: 92:f3:6c:07:f4:37:04:e6:47:9c:04:87:33:62:fc:e7:12:bd: fa:cd:3c:5f:ab:4d:15:17:ca:d9:6c:33:49:22:ce:a9:3e:a9: 13:d6:13:18:51:3b:d6:bf:cc:a4:f0:15:98:b0:8f:8a:28:c7: 32:02:db:40:9f:02:51:6f:ae:f4:4b:a7:2f:ed:d1:d6:ae:d0: 78:14:cb:7e:24:98:24:b6:8e:02:66:fc:c2:df:5e:cd:42:83: d1:9a:6a:6c:09:85:76:9d:98:42:65:10:a5:48:d9:8e:0f:36: fd:ad:77:fb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fqHLPlLz3/5FLxKjD1YzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWJmYmU5MDk0YWI5Y2U2ZmRiOGZjMzcyMzM0YjI2NzA0ODg4YTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLSQDFuEBhqNT23oUV7AwdSHsdzg oKoSmQce86oA2+vs9h35cBHEkzCnK3mWQI3qqnFx4FG0fITa3/2G55RU5WqzB7E6 FHVeFQJ4/j+MKTxsv8ZsTlNV/GoMV/QweHXZ30eMU1DjYbp9ISRzcSj/yO4FCHdB 7HmvJsiBUgyhDr8jNLYaCL+wZ/f1M5b/KiFRq2r8A/qJAEr9Veb58uDb03oP1pRl YMgG+KB4bVr0Y8CmDlPjae+66ZUxTZFOEUoHl4T0nkGRPaCxMVicLXF68whEjPXl FGvNGHi45m5sSDdD8fwmhUuf9lS+JF5vAXPWHsl9Gle0NHREIrRq9fwJXQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCG/vpCUq5zm/bj8NyM0smcEiIp6MB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvSWItLWtKU3JuT2I5dVB3M0l6U3lad1NJaW5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qBgRQ MA0GCSqGSIb3DQEBCwUAA4IBAQBRt/heOLa7yo7f4PZ0Xg2RbeFC1IaEfnI27LQh ij3xSfSQJvZShNSnvikJUQXBTzYMT69MCEYvRo3637s7RvyOfMNIHOUJUWQ3gWfx wDGFgXx0LINtk/6PxkY8BZDW4x1QjR0p9cvzzyS8W+mpV818tT5ZuUK61GC0gas8 ECfSFe1VfoHRmEaa+LnP55C6PjqS82wH9DcE5kecBIczYvznEr36zTxfq00VF8rZ bDNJIs6pPqkT1hMYUTvWv8yk8BWYsI+KKMcyAttAnwJRb670S6cv7dHWrtB4FMt+ JJgkto4CZvzC317NQoPRmmpsCYV2nZhCZRClSNmODzb9rXf7 -----END CERTIFICATE-----Generated at Tue Jan 6 21:30:42 2026 by rpki-client