This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/izi4vuZiF3Au0twbDlXgVS3Y9Q0.roa File: izi4vuZiF3Au0twbDlXgVS3Y9Q0.roa (raw, json) Hash identifier: Jk2WsoqPu90SfbYrP3wyZ4uTtoMW3tV5RpwYrz1iRsM= Subject key identifier: 8B:38:B8:BE:E6:62:17:70:2E:D2:DC:1B:0E:55:E0:55:2D:D8:F5:0D Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910AF152CAE704FA08E2A270F0980AF Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/izi4vuZiF3Au0twbDlXgVS3Y9Q0.roa Signing time: Thu 01 Jan 2026 10:18:15 +0000 ROA not before: Thu 01 Jan 2026 10:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214062 IP address blocks: 2a12:bec4:1580::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:af:15:2c:ae:70:4f:a0:8e:2a:27:0f:09:80:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b38b8bee66217702ed2dc1b0e55e0552dd8f50d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:43:b3:bc:cf:8e:a4:44:41:aa:21:cf:b3:81: 2e:62:69:c8:3d:5f:b8:3a:04:0b:ff:ac:76:a2:4b: 58:34:b0:6c:93:07:57:c0:98:d8:8a:51:f3:0b:ff: 18:6c:83:e2:9f:58:05:e8:08:7f:8a:9c:90:c3:fc: 90:fc:4c:b2:7a:80:54:ec:31:68:bf:8f:3c:e1:c1: 2c:b9:0f:05:d9:45:21:ac:1e:da:0f:50:9b:59:ee: c8:e2:da:75:0c:42:b5:a5:37:1e:ad:de:0e:a6:22: d4:20:a5:54:15:29:25:d2:50:e8:2b:82:0d:f1:e7: a9:3c:b9:61:37:07:d5:ec:04:11:ec:fc:af:44:4a: bb:80:ac:fa:1d:a5:ca:b1:6c:8d:58:58:b6:0e:14: 71:92:67:7d:15:1d:63:51:8a:fd:75:5b:d0:e3:54: 9f:75:76:11:a3:07:cc:83:01:80:a9:dc:9f:b0:ec: bf:ae:b0:87:6d:b6:1d:70:f1:ff:fd:8b:be:9b:85: 58:d5:a5:77:21:ce:00:15:44:1e:f3:75:1c:68:84: f0:c4:27:59:36:a1:78:77:79:70:4c:69:ac:66:0b: 22:c9:61:92:46:64:f1:57:73:97:67:e1:e4:3f:68: 84:d7:22:b5:45:c0:83:67:40:fa:e5:fd:cd:90:25: 33:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:38:B8:BE:E6:62:17:70:2E:D2:DC:1B:0E:55:E0:55:2D:D8:F5:0D X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/izi4vuZiF3Au0twbDlXgVS3Y9Q0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:1580::/44 Signature Algorithm: sha256WithRSAEncryption 91:97:3f:93:08:41:5d:87:3a:c6:a4:00:c0:33:f9:7f:99:5b: 73:02:36:1c:df:f6:76:53:73:06:a2:f3:9a:06:80:17:a9:5a: c2:b3:14:a3:ca:e1:2e:dc:b0:db:cc:46:84:5a:e2:a8:d5:19: f7:d4:0d:2b:80:30:88:73:b4:e0:73:8d:ce:3b:16:6c:0d:41: b1:99:0d:8d:b7:8b:ef:33:e7:91:1a:90:1d:8a:ac:f5:f2:21: be:82:a9:3e:df:0c:da:64:0d:8e:d9:f4:8c:ac:38:6d:a7:5f: cc:ee:a2:39:8c:8d:00:18:03:5e:58:50:67:2f:80:16:35:08: 31:cb:51:ac:ad:3b:0b:33:e5:b9:2a:90:57:0a:e7:38:03:ec: dd:3b:42:3a:28:33:f4:0c:21:42:de:8e:22:1e:64:a6:f9:f1: ec:8a:e0:34:72:28:94:b0:60:69:6a:67:a5:52:ee:25:39:5e: 7e:90:59:56:34:87:7e:c3:a8:dc:96:7c:b6:21:4f:04:fe:c0: 55:b1:ea:c3:60:c5:45:6b:a2:26:ca:b1:a1:03:a8:43:40:48: 62:66:87:e7:66:e3:86:e4:2d:d0:67:1a:bd:54:01:79:15:07: bd:e3:74:33:fa:61:65:e8:3c:06:e8:c9:a6:87:86:b7:2d:0a: 2b:57:13:cf -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EK8VLK5wT6COKicPCYCvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjM4YjhiZWU2NjIxNzcwMmVkMmRjMWIwZTU1ZTA1NTJkZDhmNTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkOzvM+OpERBqiHPs4EuYmnIPV+4 OgQL/6x2oktYNLBskwdXwJjYilHzC/8YbIPin1gF6Ah/ipyQw/yQ/EyyeoBU7DFo v4884cEsuQ8F2UUhrB7aD1CbWe7I4tp1DEK1pTcerd4OpiLUIKVUFSkl0lDoK4IN 8eepPLlhNwfV7AQR7PyvREq7gKz6HaXKsWyNWFi2DhRxkmd9FR1jUYr9dVvQ41Sf dXYRowfMgwGAqdyfsOy/rrCHbbYdcPH//Yu+m4VY1aV3Ic4AFUQe83UcaITwxCdZ NqF4d3lwTGmsZgsiyWGSRmTxV3OXZ+HkP2iE1yK1RcCDZ0D65f3NkCUzLwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIs4uL7mYhdwLtLcGw5V4FUt2PUNMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvaXppNHZ1WmlGM0F1MHR3YkRsWGdWUzNZOVEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+xBWA MA0GCSqGSIb3DQEBCwUAA4IBAQCRlz+TCEFdhzrGpADAM/l/mVtzAjYc3/Z2U3MG ovOaBoAXqVrCsxSjyuEu3LDbzEaEWuKo1Rn31A0rgDCIc7Tgc43OOxZsDUGxmQ2N t4vvM+eRGpAdiqz18iG+gqk+3wzaZA2O2fSMrDhtp1/M7qI5jI0AGANeWFBnL4AW NQgxy1GsrTsLM+W5KpBXCuc4A+zdO0I6KDP0DCFC3o4iHmSm+fHsiuA0ciiUsGBp amelUu4lOV5+kFlWNId+w6jclny2IU8E/sBVserDYMVFa6ImyrGhA6hDQEhiZofn ZuOG5C3QZxq9VAF5FQe943Qz+mFl6DwG6Mmmh4a3LQorVxPP -----END CERTIFICATE-----Generated at Sun Jan 18 11:26:34 2026 by rpki-client