This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/mIDBUlXF_QTke7hUoaDSy4ktcFE.roa File: mIDBUlXF_QTke7hUoaDSy4ktcFE.roa (raw, json) Hash identifier: RhZo5+9+zrbekJm8MFluYAB7vJN3goiKJX2kihZKBQE= Subject key identifier: 98:80:C1:52:55:C5:FD:04:E4:7B:B8:54:A1:A0:D2:CB:89:2D:70:51 Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Certificate serial: 019BE07965DA8B8A594F9640D3C49842D505 Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/mIDBUlXF_QTke7hUoaDSy4ktcFE.roa Signing time: Wed 21 Jan 2026 12:13:30 +0000 ROA not before: Wed 21 Jan 2026 12:13:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215415 IP address blocks: 2a14:c380:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 14:14:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:79:65:da:8b:8a:59:4f:96:40:d3:c4:98:42:d5:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Validity Not Before: Jan 21 12:13:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9880c15255c5fd04e47bb854a1a0d2cb892d7051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ae:71:34:9f:19:97:81:ea:05:e7:c9:e8:39: 4c:89:5c:40:d9:54:1a:b6:45:6e:b1:c8:c7:08:d5: 15:31:a4:27:49:e4:81:94:a2:bd:fb:af:9c:35:f8: a9:fc:3a:9f:3e:47:fa:7f:b8:9e:fc:45:8b:62:2f: 57:07:35:51:38:a6:97:b4:32:af:1a:36:41:9a:54: d7:30:5d:ab:bb:64:52:4c:42:79:e3:02:7e:2e:0c: 52:c5:ec:48:fd:1a:e3:07:50:f1:5d:1b:07:d7:c9: 42:ae:66:c3:52:2f:38:31:f0:a6:e5:76:74:24:19: a2:56:db:ed:23:b0:7d:8a:48:e6:0e:5b:49:65:7f: ec:e7:04:f8:2f:38:2a:f9:45:5f:09:14:3b:9f:dc: 66:c4:24:7f:c4:bc:73:ee:e7:2c:7b:51:08:a9:31: d9:ac:fc:62:c3:b0:a2:e0:eb:c4:88:fb:20:78:31: 38:65:73:84:18:23:aa:2e:ab:24:00:ec:f2:3c:3f: 76:91:8c:74:69:06:d4:79:98:4e:10:74:f4:6f:5c: 6e:44:bb:bd:a0:ff:1c:1e:78:5e:e7:a0:6c:14:de: 9c:e8:2b:f9:74:21:66:94:07:fc:f2:67:c0:e5:c3: 62:ad:6b:95:e8:95:4f:1a:70:90:d8:5b:0f:81:9b: 7a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:80:C1:52:55:C5:FD:04:E4:7B:B8:54:A1:A0:D2:CB:89:2D:70:51 X509v3 Authority Key Identifier: keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/mIDBUlXF_QTke7hUoaDSy4ktcFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c380:18::/48 Signature Algorithm: sha256WithRSAEncryption 9e:db:37:15:5a:37:42:84:50:48:c9:1d:69:25:f3:d9:c3:85: 8a:43:6e:07:1b:76:14:f5:de:13:be:f6:3f:a8:05:ae:f7:1f: 2f:3a:63:cd:10:ac:99:1a:96:7c:98:6e:c8:49:da:07:19:e4: 5d:c7:fb:2c:b6:6b:7d:88:72:35:88:d7:a7:f6:4d:7d:64:9b: d0:23:d9:b1:1a:44:95:4a:31:3e:d1:3d:9c:7a:25:1b:fc:d5: 27:fc:31:c3:6d:6c:be:2a:27:81:2c:d4:a8:3e:21:b5:68:bc: 80:50:31:0a:96:10:c3:58:23:ba:54:7d:db:8a:c7:07:52:c9: ab:ac:5b:5a:0f:93:3c:e8:4a:df:77:17:c6:27:96:28:6a:16: 8f:6d:b0:51:3e:3e:48:a6:26:f9:91:64:9c:eb:09:79:97:dd: 6b:28:f1:25:65:a8:09:e8:1d:d1:9b:bd:f8:c8:30:4a:a9:3e: 04:41:8f:a4:0b:15:5a:8a:a2:e8:6c:7e:b2:cb:73:ae:8a:5b: 5a:84:b9:85:6f:bd:76:5f:02:9c:3a:d9:60:a3:27:63:b9:22: c5:44:40:a2:88:c5:69:8e:e6:ae:be:3b:04:98:3d:62:6f:c3: 50:80:cf:b6:0e:d7:ed:07:fd:8c:0f:50:c6:93:44:e9:3b:9c: 22:64:1c:23 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZvgeWXai4pZT5ZA08SYQtUFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2 ZDI1MTIwHhcNMjYwMTIxMTIxMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODgwYzE1MjU1YzVmZDA0ZTQ3YmI4NTRhMWEwZDJjYjg5MmQ3MDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq5xNJ8Zl4HqBefJ6DlMiVxA2VQa tkVuscjHCNUVMaQnSeSBlKK9+6+cNfip/DqfPkf6f7ie/EWLYi9XBzVROKaXtDKv GjZBmlTXMF2ru2RSTEJ54wJ+LgxSxexI/RrjB1DxXRsH18lCrmbDUi84MfCm5XZ0 JBmiVtvtI7B9ikjmDltJZX/s5wT4Lzgq+UVfCRQ7n9xmxCR/xLxz7ucse1EIqTHZ rPxiw7Ci4OvEiPsgeDE4ZXOEGCOqLqskAOzyPD92kYx0aQbUeZhOEHT0b1xuRLu9 oP8cHnhe56BsFN6c6Cv5dCFmlAf88mfA5cNirWuV6JVPGnCQ2FsPgZt66wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJiAwVJVxf0E5Hu4VKGg0suJLXBRMB8GA1UdIwQY MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt NTMyMWQ2OWQ5NzlkLzEvbUlEQlVsWEZfUVRrZTdoVW9hRFN5NGt0Y0ZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhTDgAAY MA0GCSqGSIb3DQEBCwUAA4IBAQCe2zcVWjdChFBIyR1pJfPZw4WKQ24HG3YU9d4T vvY/qAWu9x8vOmPNEKyZGpZ8mG7ISdoHGeRdx/sstmt9iHI1iNen9k19ZJvQI9mx GkSVSjE+0T2ceiUb/NUn/DHDbWy+KieBLNSoPiG1aLyAUDEKlhDDWCO6VH3biscH UsmrrFtaD5M86ErfdxfGJ5YoahaPbbBRPj5Ipib5kWSc6wl5l91rKPElZagJ6B3R m734yDBKqT4EQY+kCxVaiqLobH6yy3OuiltahLmFb712XwKcOtlgoydjuSLFRECi iMVpjuauvjsEmD1ib8NQgM+2DtftB/2MD1DGk0TpO5wiZBwj -----END CERTIFICATE-----Generated at Sun Jan 25 00:15:45 2026 by rpki-client