This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/CIWQ0vW0ySKN5ODmgYaklXIWZmQ.roa File: CIWQ0vW0ySKN5ODmgYaklXIWZmQ.roa (raw, json) Hash identifier: O6OxM1uFu57tDxyiXOuUNSAMZCLPhYATYCWf52i4maY= Subject key identifier: 08:85:90:D2:F5:B4:C9:22:8D:E4:E0:E6:81:86:A4:95:72:16:66:64 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B79109221EE5D6A166522CC9EC5190BA2 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/CIWQ0vW0ySKN5ODmgYaklXIWZmQ.roa Signing time: Thu 01 Jan 2026 10:18:07 +0000 ROA not before: Thu 01 Jan 2026 10:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199414 IP address blocks: 2a12:bec0:2f0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:92:21:ee:5d:6a:16:65:22:cc:9e:c5:19:0b:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=088590d2f5b4c9228de4e0e68186a49572166664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3f:e8:37:3b:b4:6b:65:c6:64:92:e5:75:33: d9:c9:57:61:39:7d:12:c9:46:63:f4:17:8f:a3:d2: ec:fa:5c:63:b6:52:6a:a4:fd:db:d4:51:7b:a6:a2: 2f:0f:5a:e3:12:aa:87:f0:1b:7d:90:8e:f0:78:61: 54:ec:e2:3c:29:2a:8f:4e:4f:33:d3:66:ff:cf:47: d6:db:23:9d:8b:b4:49:49:b3:a8:04:0f:6c:88:0c: 7c:37:12:cd:98:3b:f2:64:57:60:16:8e:45:66:d3: 32:5e:10:bc:a4:68:7a:15:4f:28:48:94:b0:4e:75: 03:c6:20:9f:29:f0:71:9b:9c:36:9b:fb:5a:8e:b2: 09:d8:a5:88:bc:e2:8e:7e:29:8e:71:72:82:14:ca: 09:01:49:5e:fc:62:c9:0d:bb:23:3c:47:89:9d:f3: 34:92:80:08:99:a2:18:5c:73:22:ea:c2:9c:58:02: 4d:bb:54:7b:c3:f2:2c:de:4e:09:84:ad:06:bf:45: 48:e3:8e:08:44:06:64:8b:0a:97:18:fa:43:f6:3e: d3:86:cb:0f:85:39:60:de:1f:8f:bd:de:61:15:cd: a6:e2:10:fc:1a:b1:d6:dd:32:4a:89:d2:65:f8:c8: 5c:0d:d4:0f:9f:47:d4:aa:33:c1:67:a2:a1:72:0c: ce:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:85:90:D2:F5:B4:C9:22:8D:E4:E0:E6:81:86:A4:95:72:16:66:64 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/CIWQ0vW0ySKN5ODmgYaklXIWZmQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:2f0::/44 Signature Algorithm: sha256WithRSAEncryption 91:54:fb:bd:2e:7b:fa:b2:40:c6:bb:9e:2a:f1:09:23:91:81: 81:b8:84:39:b3:4a:6d:67:3e:b3:c6:37:5c:c5:e9:89:21:2b: 7a:0a:56:97:74:2d:f1:d1:6e:b0:97:04:79:b8:0f:8a:01:3c: 5e:b2:61:1d:c0:c4:3f:1a:1d:0d:07:c9:af:21:f6:92:0a:24: b5:4f:fb:68:49:88:74:ab:6f:a5:68:cd:58:be:9e:8c:7f:05: a0:f6:f8:25:d2:78:e8:33:9e:58:bc:3d:06:92:03:d2:08:65: 00:20:2d:df:9a:3a:dc:81:bc:46:03:05:73:1c:5b:d0:a7:48: 07:fd:07:20:c1:55:95:83:03:2b:d9:d9:9e:a0:bc:40:1f:e8: e2:68:d3:41:0f:af:e1:46:63:c4:be:51:1a:77:a0:a2:f3:f9: 85:83:78:d1:9d:44:ac:df:91:8c:a6:6b:1a:64:16:f0:05:f8: 14:9a:d3:5d:2e:c2:4a:a4:dc:1d:25:74:3e:5b:e7:02:f8:dd: cd:41:58:f0:8b:3c:0c:11:08:fa:25:a1:b2:d7:22:a6:9c:43: 4b:e6:4e:01:8a:3f:bd:44:6f:61:2b:75:fc:a6:33:6f:2b:69: 6a:3b:f8:ed:a0:cc:3d:f8:d0:de:6d:c8:fb:31:24:41:58:e9: 29:54:08:d2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EJIh7l1qFmUizJ7FGQuiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODg1OTBkMmY1YjRjOTIyOGRlNGUwZTY4MTg2YTQ5NTcyMTY2NjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyj/oNzu0a2XGZJLldTPZyVdhOX0S yUZj9BePo9Ls+lxjtlJqpP3b1FF7pqIvD1rjEqqH8Bt9kI7weGFU7OI8KSqPTk8z 02b/z0fW2yOdi7RJSbOoBA9siAx8NxLNmDvyZFdgFo5FZtMyXhC8pGh6FU8oSJSw TnUDxiCfKfBxm5w2m/tajrIJ2KWIvOKOfimOcXKCFMoJAUle/GLJDbsjPEeJnfM0 koAImaIYXHMi6sKcWAJNu1R7w/Is3k4JhK0Gv0VI444IRAZkiwqXGPpD9j7ThssP hTlg3h+Pvd5hFc2m4hD8GrHW3TJKidJl+MhcDdQPn0fUqjPBZ6KhcgzOPwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAiFkNL1tMkijeTg5oGGpJVyFmZkMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvQ0lXUTB2VzB5U0tONU9EbWdZYWtsWElXWm1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wALw MA0GCSqGSIb3DQEBCwUAA4IBAQCRVPu9Lnv6skDGu54q8QkjkYGBuIQ5s0ptZz6z xjdcxemJISt6ClaXdC3x0W6wlwR5uA+KATxesmEdwMQ/Gh0NB8mvIfaSCiS1T/to SYh0q2+laM1Yvp6MfwWg9vgl0njoM55YvD0GkgPSCGUAIC3fmjrcgbxGAwVzHFvQ p0gH/QcgwVWVgwMr2dmeoLxAH+jiaNNBD6/hRmPEvlEad6Ci8/mFg3jRnUSs35GM pmsaZBbwBfgUmtNdLsJKpNwdJXQ+W+cC+N3NQVjwizwMEQj6JaGy1yKmnENL5k4B ij+9RG9hK3X8pjNvK2lqO/jtoMw9+NDebcj7MSRBWOkpVAjS -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:05 2026 by rpki-client