This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/i4rVjyQNP_ullIv0s6Uu2V59czo.roa File: i4rVjyQNP_ullIv0s6Uu2V59czo.roa (raw, json) Hash identifier: tdB0eFFw6wiuWtvH1xG7ZzW5u79ja5arcuEL3uHw7rE= Subject key identifier: 8B:8A:D5:8F:24:0D:3F:FB:A5:94:8B:F4:B3:A5:2E:D9:5E:7D:73:3A Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910BF217A5E76B89951C5389DDEEE78 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/i4rVjyQNP_ullIv0s6Uu2V59czo.roa Signing time: Thu 01 Jan 2026 10:18:19 +0000 ROA not before: Thu 01 Jan 2026 10:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215652 IP address blocks: 2a12:bec0:660::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:bf:21:7a:5e:76:b8:99:51:c5:38:9d:de:ee:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b8ad58f240d3ffba5948bf4b3a52ed95e7d733a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:83:3e:d9:cb:e6:54:1b:ef:6f:64:b4:9c:a6: 65:d0:42:3e:bf:46:ef:e9:d7:6a:a1:c9:19:ef:02: 8c:15:7d:68:92:36:e5:22:76:74:b0:82:6a:52:74: 84:46:91:7b:3b:ed:fa:62:02:68:af:6e:65:50:5b: 3f:47:f8:b0:98:48:bd:96:ab:ca:fa:47:24:19:c0: ae:2b:31:83:e1:f1:ce:bd:75:7a:f2:0d:88:63:c9: 09:97:90:96:2f:d1:27:1c:b2:ca:1f:08:ee:6a:0e: 91:6f:12:19:90:9b:b6:b0:fa:63:67:11:c2:24:62: d1:66:89:75:4c:15:f9:b8:e5:d5:37:4a:fa:1f:3d: 8c:88:03:b2:4c:08:a9:1d:fb:33:ac:1e:06:ab:2c: 95:c9:c5:87:71:e7:bd:a5:af:24:11:45:7e:54:6f: 42:14:7d:05:15:6d:da:bb:fe:c0:a7:ab:9e:39:f6: ce:e9:a4:93:99:66:08:ad:50:b3:30:aa:3f:c3:44: 8f:ab:99:fe:d8:ac:33:b5:0a:6a:a2:ad:98:b8:08: 36:26:25:e3:dd:c0:b9:1b:05:b4:c5:b4:fd:d9:c9: 30:3a:63:3f:c5:73:d5:88:72:f6:bd:8f:4d:0c:d1: 96:a7:71:f9:1e:21:dd:71:9d:b2:71:7f:d5:68:75: 74:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8A:D5:8F:24:0D:3F:FB:A5:94:8B:F4:B3:A5:2E:D9:5E:7D:73:3A X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/i4rVjyQNP_ullIv0s6Uu2V59czo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:660::/44 Signature Algorithm: sha256WithRSAEncryption 17:15:c4:81:f5:23:5d:f8:37:d0:df:da:0f:5d:56:06:96:85: 01:ae:d8:a4:be:3d:62:8c:50:5f:71:e8:d5:a8:de:31:23:b5: 57:9d:c6:86:c0:b2:a9:ae:16:b3:dc:87:ee:3e:6b:30:36:23: e8:cc:8d:78:a8:0a:92:35:da:e3:16:5f:91:c2:49:c4:00:ad: 96:06:24:0a:fe:2e:29:30:67:87:85:b3:c4:57:53:07:aa:e1: e9:88:1f:40:60:26:98:0d:85:f3:e4:07:21:e5:b9:7f:c2:3b: f8:d2:de:ef:4e:3f:65:d0:93:d1:2d:23:fc:1a:f0:20:a0:07: 8a:4a:56:9a:88:c0:78:05:0a:b9:55:a5:ab:e6:b2:e2:dd:0c: 66:88:09:07:a9:d5:a9:0b:81:91:a6:52:1f:8e:ec:f4:08:52: b7:c1:05:5f:27:e1:e6:40:2a:72:26:93:a9:41:2a:91:ad:37: 97:81:1d:8b:16:3f:ac:76:82:f9:81:58:3e:23:5f:46:fa:ca: ad:ce:58:67:ec:f9:98:62:f7:27:f6:8d:9d:72:ea:e7:60:12: 98:7f:8c:eb:ba:22:ea:b7:f3:a2:d8:16:ad:7c:cf:b3:69:51: ad:ba:74:d2:6d:22:99:77:db:19:03:a7:55:bc:3b:24:3a:45: 60:18:75:d9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EL8hel52uJlRxTid3u54MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjhhZDU4ZjI0MGQzZmZiYTU5NDhiZjRiM2E1MmVkOTVlN2Q3MzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4M+2cvmVBvvb2S0nKZl0EI+v0bv 6ddqockZ7wKMFX1okjblInZ0sIJqUnSERpF7O+36YgJor25lUFs/R/iwmEi9lqvK +kckGcCuKzGD4fHOvXV68g2IY8kJl5CWL9EnHLLKHwjuag6RbxIZkJu2sPpjZxHC JGLRZol1TBX5uOXVN0r6Hz2MiAOyTAipHfszrB4GqyyVycWHcee9pa8kEUV+VG9C FH0FFW3au/7Ap6ueOfbO6aSTmWYIrVCzMKo/w0SPq5n+2KwztQpqoq2YuAg2JiXj 3cC5GwW0xbT92ckwOmM/xXPViHL2vY9NDNGWp3H5HiHdcZ2ycX/VaHV0gwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIuK1Y8kDT/7pZSL9LOlLtlefXM6MB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvaTRyVmp5UU5QX3VsbEl2MHM2VXUyVjU5Y3pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAZg MA0GCSqGSIb3DQEBCwUAA4IBAQAXFcSB9SNd+DfQ39oPXVYGloUBrtikvj1ijFBf cejVqN4xI7VXncaGwLKprhaz3IfuPmswNiPozI14qAqSNdrjFl+RwknEAK2WBiQK /i4pMGeHhbPEV1MHquHpiB9AYCaYDYXz5Ach5bl/wjv40t7vTj9l0JPRLSP8GvAg oAeKSlaaiMB4BQq5VaWr5rLi3QxmiAkHqdWpC4GRplIfjuz0CFK3wQVfJ+HmQCpy JpOpQSqRrTeXgR2LFj+sdoL5gVg+I19G+sqtzlhn7PmYYvcn9o2dcurnYBKYf4zr uiLqt/Oi2BatfM+zaVGtunTSbSKZd9sZA6dVvDskOkVgGHXZ -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:00 2026 by rpki-client