This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/IKe3Kuub0SpVVP2Gnq1T557gDgk.roa File: IKe3Kuub0SpVVP2Gnq1T557gDgk.roa (raw, json) Hash identifier: ci82OhcD+rqbU1y8ZlxW++hpafTX5Z7/Pm7iV79c95E= Subject key identifier: 20:A7:B7:2A:EB:9B:D1:2A:55:54:FD:86:9E:AD:53:E7:9E:E0:0E:09 Certificate issuer: /CN=3ce7566bb5b19e700f48e25e07506c2f222df384 Certificate serial: 019B7C80468F0921B957553147DAECE11BBE Authority key identifier: 3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/IKe3Kuub0SpVVP2Gnq1T557gDgk.roa Signing time: Fri 02 Jan 2026 02:19:00 +0000 ROA not before: Fri 02 Jan 2026 02:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51396 IP address blocks: 2a12:2640::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 14:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:46:8f:09:21:b9:57:55:31:47:da:ec:e1:1b:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ce7566bb5b19e700f48e25e07506c2f222df384 Validity Not Before: Jan 2 02:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20a7b72aeb9bd12a5554fd869ead53e79ee00e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e9:f6:79:a2:81:03:43:63:d7:f2:d1:60:cf: 8d:3a:af:5f:d7:c0:74:3b:7c:70:4c:2f:75:fb:ba: 1f:df:84:06:11:34:74:44:b2:e3:a5:86:81:05:89: 0a:d3:10:7b:70:48:10:45:76:ed:27:9c:53:b7:0a: aa:74:eb:e2:a5:e5:7d:e9:7c:2e:8b:32:db:98:3c: d5:9c:92:52:e1:20:04:5b:27:0a:61:33:96:e6:db: 2d:db:c9:e6:10:a9:82:5e:09:d7:a1:44:81:22:19: 57:0a:9f:ff:37:d9:76:c1:d5:6d:69:c9:99:00:b0: 73:50:02:11:ab:14:e0:04:c5:e1:15:10:1b:82:f3: 3d:36:85:6b:fd:70:ff:a1:9e:5c:6b:50:c6:3f:6b: 72:d1:58:0f:c5:21:10:af:10:ac:32:8e:e6:85:6b: 17:13:e8:da:86:3e:8e:6c:de:b8:40:08:45:46:8f: fa:ff:4e:2c:5e:e6:9c:2e:be:fe:be:e9:55:a6:73: 8c:82:9c:4b:cb:ee:7c:66:9d:50:40:55:4d:df:2d: ef:96:05:f6:a0:8e:9e:2c:7a:ea:2f:bf:d2:89:93: 2a:9e:7a:12:7c:89:f1:9f:d6:16:d8:78:f5:4c:eb: 10:26:f1:87:de:98:b4:02:74:67:b1:93:a0:b0:56: 17:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A7:B7:2A:EB:9B:D1:2A:55:54:FD:86:9E:AD:53:E7:9E:E0:0E:09 X509v3 Authority Key Identifier: keyid:3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/IKe3Kuub0SpVVP2Gnq1T557gDgk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:2640::/29 Signature Algorithm: sha256WithRSAEncryption 67:52:1c:4f:ac:f6:af:46:f3:ab:2f:e4:38:e9:e2:8d:07:5e: c9:fe:ee:9a:4b:97:e3:7f:cb:37:07:3c:56:a8:ec:25:f0:e0: f5:9b:4a:6b:87:40:4e:b3:cc:53:b3:55:a2:76:8f:38:e1:9f: 1e:3a:97:b3:0d:6d:32:00:80:20:13:e4:e0:ff:ed:1d:da:86: 77:80:8f:20:17:fc:eb:4a:f7:50:a8:e5:8d:ca:cd:8e:d0:43: 30:59:8a:00:68:59:14:bc:80:d8:b5:1e:67:1e:67:bb:b1:14: 0b:8c:22:ca:51:21:22:c8:c5:f9:27:fb:38:bc:f8:5a:37:d7: 8e:67:cc:48:04:56:44:4d:cd:5f:70:34:26:c4:da:f6:98:97: 22:fd:b3:5f:30:25:15:92:7a:a3:72:77:28:e2:ca:92:b9:3d: 20:83:3d:53:7e:0b:86:e3:f7:eb:90:7c:f4:61:8a:8c:f4:7a: 14:21:d3:c0:60:c5:9d:c8:19:4c:27:ac:2d:9d:4b:34:23:b0: fd:48:b4:3d:e4:b6:de:e3:8e:c8:e1:68:06:ee:9d:0f:7f:23: 7f:59:ce:5a:87:0e:29:19:04:15:d9:fb:58:35:a1:b5:5f:c9: 2d:fb:34:37:3d:cd:ef:81:96:f7:7d:cf:77:c4:12:cc:6a:6a: 7e:ac:c2:07 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8gEaPCSG5V1UxR9rs4Ru+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZTc1NjZiYjViMTllNzAwZjQ4ZTI1ZTA3NTA2YzJmMjIy ZGYzODQwHhcNMjYwMTAyMDIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGE3YjcyYWViOWJkMTJhNTU1NGZkODY5ZWFkNTNlNzllZTAwZTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtun2eaKBA0Nj1/LRYM+NOq9f18B0 O3xwTC91+7of34QGETR0RLLjpYaBBYkK0xB7cEgQRXbtJ5xTtwqqdOvipeV96Xwu izLbmDzVnJJS4SAEWycKYTOW5tst28nmEKmCXgnXoUSBIhlXCp//N9l2wdVtacmZ ALBzUAIRqxTgBMXhFRAbgvM9NoVr/XD/oZ5ca1DGP2ty0VgPxSEQrxCsMo7mhWsX E+jahj6ObN64QAhFRo/6/04sXuacLr7+vulVpnOMgpxLy+58Zp1QQFVN3y3vlgX2 oI6eLHrqL7/SiZMqnnoSfInxn9YW2Hj1TOsQJvGH3pi0AnRnsZOgsFYXKQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFCCntyrrm9EqVVT9hp6tU+ee4A4JMB8GA1UdIwQY MBaAFDznVmu1sZ5wD0jiXgdQbC8iLfOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE9kV2E3V3hubkFQU09KZUIxQnNMeUl0ODRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84NmZmNzctOTc3Mi00YjI4LWFhMTIt ODlmZjA2Zjc5NjM1LzEvSUtlM0t1dWIwU3BWVlAyR25xMVQ1NTdnRGdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC84NmZmNzctOTc3Mi00YjI4LWFhMTItODlmZjA2Zjc5NjM1 LzEvUE9kV2E3V3hubkFQU09KZUIxQnNMeUl0ODRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhImQDAN BgkqhkiG9w0BAQsFAAOCAQEAZ1IcT6z2r0bzqy/kOOnijQdeyf7umkuX43/LNwc8 VqjsJfDg9ZtKa4dATrPMU7NVonaPOOGfHjqXsw1tMgCAIBPk4P/tHdqGd4CPIBf8 60r3UKjljcrNjtBDMFmKAGhZFLyA2LUeZx5nu7EUC4wiylEhIsjF+Sf7OLz4WjfX jmfMSARWRE3NX3A0JsTa9piXIv2zXzAlFZJ6o3J3KOLKkrk9IIM9U34LhuP365B8 9GGKjPR6FCHTwGDFncgZTCesLZ1LNCOw/Ui0PeS23uOOyOFoBu6dD38jf1nOWocO KRkEFdn7WDWhtV/JLfs0Nz3N74GW933Pd8QSzGpqfqzCBw== -----END CERTIFICATE-----Generated at Fri Jan 30 20:52:00 2026 by rpki-client