This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/ism2bNCba5CRcXgOISoZjzrR_jk.roa File: ism2bNCba5CRcXgOISoZjzrR_jk.roa (raw, json) Hash identifier: dVX1PspVHvMWPysATRUgDChbCgGx47lGOpGb8yF+l7A= Subject key identifier: 8A:C9:B6:6C:D0:9B:6B:90:91:71:78:0E:21:2A:19:8F:3A:D1:FE:39 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 019B76EB869810F4D9A825D58310668ED26B Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/ism2bNCba5CRcXgOISoZjzrR_jk.roa Signing time: Thu 01 Jan 2026 00:18:25 +0000 ROA not before: Thu 01 Jan 2026 00:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55720 IP address blocks: 2a11:840:26::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:86:98:10:f4:d9:a8:25:d5:83:10:66:8e:d2:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Jan 1 00:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ac9b66cd09b6b909171780e212a198f3ad1fe39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:98:c0:e7:d3:65:be:55:7e:6e:e8:34:8e:2d: 4d:75:87:35:68:23:37:80:9f:d7:14:bb:40:aa:11: ba:47:87:f5:7b:e8:dc:91:3a:dd:54:80:fe:03:1f: b3:4a:4a:4a:4a:d0:02:be:d6:12:89:0e:44:95:9a: 9d:a0:d8:08:3c:8f:15:5a:49:23:c9:6e:2b:28:9c: 2a:ca:5c:a8:55:20:b9:fa:1b:5e:bf:28:61:83:da: 39:b3:10:6f:8f:55:21:96:cd:e5:fe:47:c0:ab:ec: 7b:03:52:ec:3d:5a:2b:c1:77:25:8b:b0:2a:7f:52: fe:63:5a:de:7f:97:c2:6f:48:e2:37:bd:f5:55:bb: 7a:99:7b:87:a7:7c:71:f9:86:f9:43:a3:2b:61:e9: 8b:da:37:b2:21:32:7d:55:a2:4c:9f:b0:42:90:5c: 57:54:5d:e2:24:51:42:db:4b:aa:c3:45:27:fc:55: 04:52:3f:16:79:0a:c2:ad:46:f6:27:c3:8b:3f:82: 99:9c:8e:d6:1a:74:91:1f:4a:78:58:23:e4:93:78: 82:db:80:52:a4:84:e8:f2:ac:e5:d3:46:5a:e7:07: 2c:33:e9:3f:c5:49:8b:99:7b:32:93:58:c4:e8:1a: c1:fb:46:1b:5d:35:db:4e:8a:af:56:fa:f9:99:e5: 52:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C9:B6:6C:D0:9B:6B:90:91:71:78:0E:21:2A:19:8F:3A:D1:FE:39 X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/ism2bNCba5CRcXgOISoZjzrR_jk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:840:26::/48 Signature Algorithm: sha256WithRSAEncryption 2b:1f:5d:9b:5d:74:ce:6d:d5:dd:9d:2f:82:cb:ff:d4:94:28: e2:d7:03:32:b0:6d:f7:b1:db:de:cc:d7:ff:76:b0:db:44:92: 12:7d:a6:aa:91:01:0b:46:69:94:49:a8:a6:a8:42:dc:0d:46: 3a:b1:fe:3f:63:fa:fd:6c:c6:59:b6:2d:7b:df:bf:7c:5a:da: fe:9e:90:39:a1:7c:e2:77:22:1b:bc:bd:d3:a3:ae:dc:bd:8a: 81:97:17:d0:31:58:84:ff:c3:d7:d4:5e:d2:5e:a3:3c:87:e3: 75:8d:b1:d5:93:a4:0c:51:ee:ec:e7:5f:d9:ea:3e:5a:a9:85: 91:5f:ee:2e:87:48:b7:80:46:fa:7a:2c:96:0a:af:7a:72:07: 64:46:fa:ee:a6:2d:88:4f:ea:88:20:9d:9d:09:e1:ab:0f:b2: dc:10:9a:1f:9d:8c:93:fe:00:b4:8f:43:34:c8:78:cf:66:b7: 2b:a7:9a:df:90:92:ec:ca:72:79:4d:cd:e3:f4:c7:1b:ea:14: 32:c9:59:e1:ab:1a:88:f2:06:e8:f4:d0:a3:3e:c7:32:c6:d4: 78:f3:f5:ca:b6:22:44:94:1c:6e:90:bb:0a:00:40:e3:e0:63: bc:00:1d:01:3b:7c:7c:7f:fe:7e:7c:1e:66:50:86:96:f8:b4: 6d:ef:79:1a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt264aYEPTZqCXVgxBmjtJrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjYwMTAxMDAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWM5YjY2Y2QwOWI2YjkwOTE3MTc4MGUyMTJhMTk4ZjNhZDFmZTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZjA59NlvlV+bug0ji1NdYc1aCM3 gJ/XFLtAqhG6R4f1e+jckTrdVID+Ax+zSkpKStACvtYSiQ5ElZqdoNgIPI8VWkkj yW4rKJwqylyoVSC5+htevyhhg9o5sxBvj1Uhls3l/kfAq+x7A1LsPVorwXcli7Aq f1L+Y1ref5fCb0jiN731Vbt6mXuHp3xx+Yb5Q6MrYemL2jeyITJ9VaJMn7BCkFxX VF3iJFFC20uqw0Un/FUEUj8WeQrCrUb2J8OLP4KZnI7WGnSRH0p4WCPkk3iC24BS pITo8qzl00Za5wcsM+k/xUmLmXsyk1jE6BrB+0YbXTXbToqvVvr5meVSbwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIrJtmzQm2uQkXF4DiEqGY860f45MB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvaXNtMmJOQ2JhNUNSY1hnT0lTb1pqenJSX2prLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhEIQAAm MA0GCSqGSIb3DQEBCwUAA4IBAQArH12bXXTObdXdnS+Cy//UlCji1wMysG33sdve zNf/drDbRJISfaaqkQELRmmUSaimqELcDUY6sf4/Y/r9bMZZti173798Wtr+npA5 oXzidyIbvL3To67cvYqBlxfQMViE/8PX1F7SXqM8h+N1jbHVk6QMUe7s51/Z6j5a qYWRX+4uh0i3gEb6eiyWCq96cgdkRvrupi2IT+qIIJ2dCeGrD7LcEJofnYyT/gC0 j0M0yHjPZrcrp5rfkJLsynJ5Tc3j9Mcb6hQyyVnhqxqI8gbo9NCjPscyxtR48/XK tiJElBxukLsKAEDj4GO8AB0BO3x8f/5+fB5mUIaW+LRt73ka -----END CERTIFICATE-----Generated at Sun Jan 18 04:08:45 2026 by rpki-client