This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/i_CKqQDTzCYTHYBFuIiGupNbzAA.roa File: i_CKqQDTzCYTHYBFuIiGupNbzAA.roa (raw, json) Hash identifier: 03FzL9n2bbmchymDnADpesB2nqCt8Q2nLR4stWRaFl0= Subject key identifier: 8B:F0:8A:A9:00:D3:CC:26:13:1D:80:45:B8:88:86:BA:93:5B:CC:00 Certificate issuer: /CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7 Certificate serial: 019BEB41B469671DF559BDACF86C35D53B4B Authority key identifier: 55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/i_CKqQDTzCYTHYBFuIiGupNbzAA.roa Signing time: Fri 23 Jan 2026 14:28:30 +0000 ROA not before: Fri 23 Jan 2026 14:28:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34984 IP address blocks: 2a07:9180::/32 maxlen: 32 2a07:9181::/32 maxlen: 32 2a07:9182::/32 maxlen: 32 2a07:9183::/32 maxlen: 32 2a07:9184::/32 maxlen: 32 2a07:9185::/32 maxlen: 32 2a07:9186::/32 maxlen: 32 2a07:9187::/32 maxlen: 32 2a0f:a1c0::/32 maxlen: 32 2a0f:a1c1::/32 maxlen: 32 2a0f:a1c2::/32 maxlen: 32 2a0f:a1c3::/32 maxlen: 32 2a0f:a1c4::/32 maxlen: 32 2a0f:a1c5::/32 maxlen: 32 2a0f:a1c6::/32 maxlen: 32 2a0f:a1c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:eb:41:b4:69:67:1d:f5:59:bd:ac:f8:6c:35:d5:3b:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7 Validity Not Before: Jan 23 14:28:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bf08aa900d3cc26131d8045b88886ba935bcc00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:48:d6:1b:05:16:52:dc:87:32:78:d4:c6:cd: 65:15:55:a0:54:80:e9:4d:8f:d8:b0:93:67:64:40: 8e:00:7d:01:a8:e6:18:33:aa:fb:fb:d7:4f:73:62: df:7e:f5:7c:f0:f8:01:fc:6a:5f:e5:db:1a:5a:89: f0:80:a2:91:a2:d7:4d:b5:82:a8:67:e3:b4:8b:ba: 41:88:88:1e:91:96:ee:5b:e2:b0:3b:cc:a6:c8:e4: f9:2c:13:64:1d:8e:68:c3:52:ab:e3:b0:a4:78:5a: 18:b9:89:84:5a:bf:2d:70:f5:c7:b3:eb:9e:f2:ad: 3e:0c:40:d5:ea:f5:19:ea:6d:e9:37:6c:c5:7f:d9: f6:f8:9f:0f:5e:f0:9d:81:53:61:07:7b:96:0d:10: ab:bc:c4:76:2f:ed:cc:a1:2e:6e:94:f8:b3:65:ac: d0:e1:d3:3b:be:62:32:31:88:f4:df:c5:95:d9:ce: 87:3e:17:c4:43:3f:8e:9d:de:f5:2c:dc:2c:5d:bd: eb:b9:57:cd:cc:0a:9c:04:ae:da:a2:e2:da:af:31: 40:12:fe:69:0c:21:22:5b:30:d7:ee:a4:c5:dd:63: 4c:c6:aa:7c:2b:c1:7b:eb:81:f3:29:b9:ea:83:e8: 10:c9:9c:3c:21:dd:84:31:1f:c7:93:f2:25:fc:a6: b8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F0:8A:A9:00:D3:CC:26:13:1D:80:45:B8:88:86:BA:93:5B:CC:00 X509v3 Authority Key Identifier: keyid:55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/i_CKqQDTzCYTHYBFuIiGupNbzAA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:9180::/29 2a0f:a1c0::/29 Signature Algorithm: sha256WithRSAEncryption 51:83:0d:e4:9f:5d:25:9c:cd:76:12:0e:ae:16:72:34:71:7a: 5c:63:6b:d3:87:3d:5c:4c:49:81:93:fc:d8:5f:c5:de:fd:8b: 1e:c6:a8:1c:2f:70:53:2f:d1:41:31:d2:ee:9f:22:db:ae:56: c2:6c:e2:e4:8f:ef:9e:72:01:b1:a3:c7:b0:60:b6:d5:22:bb: ca:b8:57:a4:70:81:1c:ca:10:35:7a:fe:d8:5e:8a:0b:ae:26: eb:7c:d3:12:1d:3c:99:e8:0d:c8:dc:4f:21:d9:55:88:45:c6: b0:01:93:3a:79:c1:db:50:c0:33:53:1c:e4:e4:5a:15:b0:69: f4:5a:4d:a7:1b:0b:72:65:13:f6:43:55:89:cc:d5:8b:95:17: 98:26:ed:96:e3:47:28:fc:29:58:3e:e9:8c:ed:f8:79:fa:dd: 6a:be:52:2b:f4:15:99:41:c2:63:70:f3:81:03:52:aa:c7:fd: 74:d1:b1:e8:ac:8d:84:7c:a5:b9:10:07:3b:ab:63:40:9e:f0: 4f:6e:e1:0a:8e:23:6d:65:49:90:77:a7:a5:08:3f:ab:e9:59: b0:fd:08:41:ed:f6:1d:23:b3:0c:56:78:85:4b:91:ce:87:81: 25:ee:14:cc:c7:c0:dc:ff:ee:29:17:5d:55:d7:68:9e:aa:c3: fb:9d:dd:d8 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZvrQbRpZx31Wb2s+Gw11TtLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NTBlMDZlZTAyYzVhMzJlNTRkYzg5ODUzYjRhYTM3OGY4 NjA0ZjcwHhcNMjYwMTIzMTQyODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmYwOGFhOTAwZDNjYzI2MTMxZDgwNDViODg4ODZiYTkzNWJjYzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0jWGwUWUtyHMnjUxs1lFVWgVIDp TY/YsJNnZECOAH0BqOYYM6r7+9dPc2LffvV88PgB/Gpf5dsaWonwgKKRotdNtYKo Z+O0i7pBiIgekZbuW+KwO8ymyOT5LBNkHY5ow1Kr47CkeFoYuYmEWr8tcPXHs+ue 8q0+DEDV6vUZ6m3pN2zFf9n2+J8PXvCdgVNhB3uWDRCrvMR2L+3MoS5ulPizZazQ 4dM7vmIyMYj038WV2c6HPhfEQz+Ond71LNwsXb3ruVfNzAqcBK7aouLarzFAEv5p DCEiWzDX7qTF3WNMxqp8K8F764HzKbnqg+gQyZw8Id2EMR/Hk/Il/Ka4gQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFIvwiqkA08wmEx2ARbiIhrqTW8wAMB8GA1UdIwQY MBaAFFVQ4G7gLFoy5U3ImFO0qjePhgT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlZEZ2J1QXNXakxsVGNpWVU3U3FONC1HQlBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kZWViNGMtOTlkNi00YTllLTgyMDAt N2NhYTk3OTI3MTQyLzEvaV9DS3FRRFR6Q1lUSFlCRnVJaUd1cE5iekFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9kZWViNGMtOTlkNi00YTllLTgyMDAtN2NhYTk3OTI3MTQy LzEvVlZEZ2J1QXNXakxsVGNpWVU3U3FONC1HQlBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKgeRgAMF AyoPocAwDQYJKoZIhvcNAQELBQADggEBAFGDDeSfXSWczXYSDq4WcjRxelxja9OH PVxMSYGT/Nhfxd79ix7GqBwvcFMv0UEx0u6fItuuVsJs4uSP755yAbGjx7BgttUi u8q4V6RwgRzKEDV6/theiguuJut80xIdPJnoDcjcTyHZVYhFxrABkzp5wdtQwDNT HOTkWhWwafRaTacbC3JlE/ZDVYnM1YuVF5gm7ZbjRyj8KVg+6Yzt+Hn63Wq+Uiv0 FZlBwmNw84EDUqrH/XTRseisjYR8pbkQBzurY0Ce8E9u4QqOI21lSZB3p6UIP6vp WbD9CEHt9h0jswxWeIVLkc6HgSXuFMzHwNz/7ikXXVXXaJ6qw/ud3dg= -----END CERTIFICATE-----Generated at Mon Jan 26 07:08:37 2026 by rpki-client