This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/i3vwb9cNBz-l4M_VFlQ-CYPQzjM.roa File: i3vwb9cNBz-l4M_VFlQ-CYPQzjM.roa (raw, json) Hash identifier: +q7IlhYcogk3kUlm7nEam12XQU3ZjHZr1bhI8frSyQs= Subject key identifier: 8B:7B:F0:6F:D7:0D:07:3F:A5:E0:CF:D5:16:54:3E:09:83:D0:CE:33 Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA752D75DD4A8C40F5C0FFE4A3CE52E Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/i3vwb9cNBz-l4M_VFlQ-CYPQzjM.roa Signing time: Fri 02 Jan 2026 12:20:53 +0000 ROA not before: Fri 02 Jan 2026 12:20:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204003 IP address blocks: 2a06:e881:5800::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:52:d7:5d:d4:a8:c4:0f:5c:0f:fe:4a:3c:e5:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b7bf06fd70d073fa5e0cfd516543e0983d0ce33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9d:4d:f5:c1:b6:7c:62:db:9b:ba:f4:91:7e: d5:b1:ab:8d:7e:c6:a7:da:29:6a:ce:ec:38:32:92: 39:58:9c:ab:da:f8:52:8b:b5:dc:b9:e2:46:e9:d2: 48:c9:fe:dc:cd:1f:19:b1:a0:94:0a:2e:ab:8a:02: 12:0d:95:73:d1:95:b6:fc:c8:f5:7a:6a:16:b1:32: 2e:da:fe:4f:ae:8f:7f:a7:70:4e:59:d7:dd:9b:35: 8c:38:01:83:a0:96:30:05:cd:5e:f3:3e:78:aa:d3: ba:5f:68:da:7b:dc:ab:73:7d:9a:95:69:d6:b9:c0: ca:be:83:b3:06:67:f4:df:eb:73:a5:69:ca:56:10: 70:3e:f9:e3:d9:e6:c2:17:8f:eb:95:9f:92:cf:bb: 0e:06:1d:ac:6c:a2:e7:fd:8d:74:ac:66:71:65:f1: 0d:71:c8:76:39:6d:e4:37:d8:54:99:3d:02:af:4c: 3e:2d:67:5a:8a:d9:96:47:ea:cf:19:5a:45:ae:f9: 8f:0f:0a:19:f7:84:05:1b:80:8c:ae:53:2d:25:c0: 29:8d:7b:3a:0b:0d:5b:9d:82:01:0a:79:07:9c:cb: 14:7c:33:16:83:ce:5b:42:88:0e:dd:e1:28:b5:42: ed:b8:4b:cf:b9:19:aa:78:5a:a5:4e:94:a8:35:12: be:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7B:F0:6F:D7:0D:07:3F:A5:E0:CF:D5:16:54:3E:09:83:D0:CE:33 X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/i3vwb9cNBz-l4M_VFlQ-CYPQzjM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:e881:5800::/44 Signature Algorithm: sha256WithRSAEncryption 5f:74:2c:dd:46:23:81:df:89:6f:80:d6:6c:2c:dd:f8:c8:0c: 24:53:16:f4:54:14:d9:a2:28:63:35:f7:a2:5a:a1:86:73:80: ae:5b:be:dd:74:6d:33:3f:25:b1:57:86:25:86:29:14:77:56: 37:ac:11:05:28:99:a8:5c:90:37:c7:22:64:74:97:d5:f7:3a: 63:04:f9:e3:43:fb:5d:fa:e2:c4:bb:cb:51:84:23:76:eb:a9: cd:b4:0a:ee:e0:dd:a6:ec:fa:96:55:fb:f3:d9:b6:a2:a1:56: 2b:82:8d:ad:86:68:5d:f3:52:d7:2b:f5:49:89:20:91:00:4f: d9:55:6e:7b:d6:d6:6f:45:1e:a9:b1:d3:ba:cc:49:60:00:b7: 0b:93:f0:a7:f0:05:d7:c5:11:a4:c9:b3:70:e3:41:c4:50:dd: 82:d6:bb:0e:f5:7b:90:3d:db:cf:d3:12:57:cd:63:fd:ef:5e: 92:90:53:ef:8b:7c:5d:3f:bc:ee:ef:05:06:b3:2a:6f:a2:6d: 9f:ac:93:84:7a:0b:57:83:8b:c9:ea:dd:d7:e5:37:d5:6b:a8: ee:07:3c:e0:2a:27:38:52:b0:e7:25:24:68:07:a1:e0:1f:9d: 51:71:75:19:15:c2:c5:aa:2c:33:c0:26:a8:82:64:8f:ba:e6: ab:80:bb:3c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p1LXXdSoxA9cD/5KPOUuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjdiZjA2ZmQ3MGQwNzNmYTVlMGNmZDUxNjU0M2UwOTgzZDBjZTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ1N9cG2fGLbm7r0kX7VsauNfsan 2ilqzuw4MpI5WJyr2vhSi7XcueJG6dJIyf7czR8ZsaCUCi6rigISDZVz0ZW2/Mj1 emoWsTIu2v5Pro9/p3BOWdfdmzWMOAGDoJYwBc1e8z54qtO6X2jae9yrc32alWnW ucDKvoOzBmf03+tzpWnKVhBwPvnj2ebCF4/rlZ+Sz7sOBh2sbKLn/Y10rGZxZfEN cch2OW3kN9hUmT0Cr0w+LWdaitmWR+rPGVpFrvmPDwoZ94QFG4CMrlMtJcApjXs6 Cw1bnYIBCnkHnMsUfDMWg85bQogO3eEotULtuEvPuRmqeFqlTpSoNRK+qwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIt78G/XDQc/peDP1RZUPgmD0M4zMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvaTN2d2I5Y05Cei1sNE1fVkZsUS1DWVBRempNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgbogVgA MA0GCSqGSIb3DQEBCwUAA4IBAQBfdCzdRiOB34lvgNZsLN34yAwkUxb0VBTZoihj NfeiWqGGc4CuW77ddG0zPyWxV4YlhikUd1Y3rBEFKJmoXJA3xyJkdJfV9zpjBPnj Q/td+uLEu8tRhCN266nNtAru4N2m7PqWVfvz2baioVYrgo2thmhd81LXK/VJiSCR AE/ZVW571tZvRR6psdO6zElgALcLk/Cn8AXXxRGkybNw40HEUN2C1rsO9XuQPdvP 0xJXzWP9716SkFPvi3xdP7zu7wUGsypvom2frJOEegtXg4vJ6t3X5TfVa6juBzzg Kic4UrDnJSRoB6HgH51RcXUZFcLFqiwzwCaogmSPuuargLs8 -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:34 2026 by rpki-client