This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/iwD6fP31_W6vGOoxTT3gqLJk_fA.roa File: iwD6fP31_W6vGOoxTT3gqLJk_fA.roa (raw, json) Hash identifier: Ome1S1/zjD0FqoPD1PIvZmNPsQ9h6oMkpIMHg8bHlAs= Subject key identifier: 8B:00:FA:7C:FD:F5:FD:6E:AF:18:EA:31:4D:3D:E0:A8:B2:64:FD:F0 Certificate issuer: /CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7 Certificate serial: 019B7CED88844B84A48AD74A93EA064BE227 Authority key identifier: 40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/iwD6fP31_W6vGOoxTT3gqLJk_fA.roa Signing time: Fri 02 Jan 2026 04:18:20 +0000 ROA not before: Fri 02 Jan 2026 04:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212794 IP address blocks: 2a10:afc0:e010::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 07:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:88:84:4b:84:a4:8a:d7:4a:93:ea:06:4b:e2:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7 Validity Not Before: Jan 2 04:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b00fa7cfdf5fd6eaf18ea314d3de0a8b264fdf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e9:53:44:17:e0:50:6b:a6:de:7a:69:8b:a5: 74:87:de:68:ef:f6:0e:4d:5c:f9:31:4b:f2:3e:c1: e2:74:37:9c:fc:29:d5:2e:c8:d3:66:cd:df:62:97: 61:6e:79:45:d5:67:6c:81:34:80:b6:55:26:63:7b: e0:c1:86:dc:81:01:62:47:73:2e:c9:ac:32:3d:b7: 2b:31:bb:ce:ea:c2:ff:ca:43:38:9c:93:48:7f:a0: a5:c4:4c:b0:13:c9:53:27:06:30:3c:c3:5a:0a:08: 21:cc:5d:3b:a4:3d:78:80:28:d3:e6:be:7e:0e:e8: e7:b3:99:16:69:45:71:79:a2:63:09:0c:c7:37:2a: b5:d5:51:28:f5:6c:83:2b:3b:8e:a6:b1:6e:d6:58: eb:86:63:94:58:a0:36:b9:00:4a:5b:60:f0:04:37: d9:09:4f:88:ea:0d:b1:cb:13:20:4b:2a:fe:9a:c4: fd:43:23:24:02:01:bb:d5:81:a5:62:dc:7e:9a:b4: 39:ae:13:17:12:4f:e2:28:ac:01:fb:40:e5:b0:5b: 52:17:35:8d:a6:bd:a7:6d:c6:e0:3b:25:99:20:e6: 94:38:de:25:54:02:9f:dd:fb:3c:52:9d:c6:9c:cf: ca:86:ff:c0:08:e9:f2:b6:82:10:f2:2f:03:4c:ed: d7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:00:FA:7C:FD:F5:FD:6E:AF:18:EA:31:4D:3D:E0:A8:B2:64:FD:F0 X509v3 Authority Key Identifier: keyid:40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/iwD6fP31_W6vGOoxTT3gqLJk_fA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:afc0:e010::/44 Signature Algorithm: sha256WithRSAEncryption 79:b2:68:88:70:ba:f5:40:19:d9:41:3d:ba:a5:31:35:86:0c: 99:76:41:65:16:99:03:c3:7e:66:87:6b:01:3e:74:4b:13:21: 7b:f1:14:3e:56:ee:1c:29:5c:18:f5:9a:80:c0:98:66:a9:a9: 36:0e:a2:cc:8a:63:c5:9f:6c:77:0a:a6:30:ea:0b:46:38:54: 26:9d:1d:e0:8e:8e:9f:aa:42:cd:03:e7:48:90:d2:b6:ca:81: 35:55:5d:7e:6c:5e:7e:9f:94:93:9f:5d:b8:7a:41:d1:b8:80: 7e:99:50:90:1e:87:c3:06:15:ed:67:7c:14:93:75:62:6a:fb: 1d:08:f9:34:e2:52:a1:b3:21:f4:05:c9:6d:ee:64:e3:10:30: d0:9d:81:d7:c4:66:cc:50:ec:34:d8:7a:25:4e:53:6d:64:0f: e4:44:d7:be:d8:5d:95:f8:ec:f3:42:9a:74:db:a3:95:90:51: 1a:a2:02:5f:9c:f7:26:2f:18:e1:64:59:63:12:1a:d5:fe:5f: 55:23:79:00:b4:20:c2:c1:b5:5f:0e:42:76:af:1b:92:84:0e: 6f:ae:2a:a7:12:fc:16:17:c4:33:c0:77:8f:33:e7:03:75:15: d5:8b:3c:1c:1c:e6:60:9b:5c:41:84:b6:2c:7b:89:ae:ca:ae: 56:46:f9:8c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87YiES4SkitdKk+oGS+InMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwY2Q1YTUwMzhkNWUxMmZlMWM5ZDlmNWM4NjY0MDc0YzNk ZDBhYzcwHhcNMjYwMTAyMDQxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjAwZmE3Y2ZkZjVmZDZlYWYxOGVhMzE0ZDNkZTBhOGIyNjRmZGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwulTRBfgUGum3nppi6V0h95o7/YO TVz5MUvyPsHidDec/CnVLsjTZs3fYpdhbnlF1WdsgTSAtlUmY3vgwYbcgQFiR3Mu yawyPbcrMbvO6sL/ykM4nJNIf6ClxEywE8lTJwYwPMNaCgghzF07pD14gCjT5r5+ Dujns5kWaUVxeaJjCQzHNyq11VEo9WyDKzuOprFu1ljrhmOUWKA2uQBKW2DwBDfZ CU+I6g2xyxMgSyr+msT9QyMkAgG71YGlYtx+mrQ5rhMXEk/iKKwB+0DlsFtSFzWN pr2nbcbgOyWZIOaUON4lVAKf3fs8Up3GnM/Khv/ACOnytoIQ8i8DTO3X/QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIsA+nz99f1urxjqMU094KiyZP3wMB8GA1UdIwQY MBaAFEDNWlA41eEv4cnZ9chmQHTD3QrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU0xYVVEalY0U19oeWRuMXlHWkFkTVBkQ3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9jZWMxMTktNGM5OS00MTU4LTk5ZjEt NjU5YzY3MTkxMWYxLzEvaXdENmZQMzFfVzZ2R09veFRUM2dxTEprX2ZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9jZWMxMTktNGM5OS00MTU4LTk5ZjEtNjU5YzY3MTkxMWYx LzEvUU0xYVVEalY0U19oeWRuMXlHWkFkTVBkQ3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhCvwOAQ MA0GCSqGSIb3DQEBCwUAA4IBAQB5smiIcLr1QBnZQT26pTE1hgyZdkFlFpkDw35m h2sBPnRLEyF78RQ+Vu4cKVwY9ZqAwJhmqak2DqLMimPFn2x3CqYw6gtGOFQmnR3g jo6fqkLNA+dIkNK2yoE1VV1+bF5+n5STn124ekHRuIB+mVCQHofDBhXtZ3wUk3Vi avsdCPk04lKhsyH0Bclt7mTjEDDQnYHXxGbMUOw02HolTlNtZA/kRNe+2F2V+Ozz Qpp026OVkFEaogJfnPcmLxjhZFljEhrV/l9VI3kAtCDCwbVfDkJ2rxuShA5vriqn EvwWF8QzwHePM+cDdRXVizwcHOZgm1xBhLYse4muyq5WRvmM -----END CERTIFICATE-----Generated at Fri Jan 9 17:49:32 2026 by rpki-client