This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/iAMQWeS9GMw3TAa5hDTAT6s825g.roa File: iAMQWeS9GMw3TAa5hDTAT6s825g.roa (raw, json) Hash identifier: 2q1sFbCAgulgub3q2AGPYNHWFrfFNMkKFSc13dmp7t4= Subject key identifier: 88:03:10:59:E4:BD:18:CC:37:4C:06:B9:84:34:C0:4F:AB:3C:DB:98 Certificate issuer: /CN=2682c816f72686ff7aede53538618cc2e8861039 Certificate serial: 019B7E376E79BA6F9A1C73AF946D7F7E7D4A Authority key identifier: 26:82:C8:16:F7:26:86:FF:7A:ED:E5:35:38:61:8C:C2:E8:86:10:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/iAMQWeS9GMw3TAa5hDTAT6s825g.roa Signing time: Fri 02 Jan 2026 10:18:40 +0000 ROA not before: Fri 02 Jan 2026 10:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42473 IP address blocks: 2001:67c:2850::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:6e:79:ba:6f:9a:1c:73:af:94:6d:7f:7e:7d:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2682c816f72686ff7aede53538618cc2e8861039 Validity Not Before: Jan 2 10:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88031059e4bd18cc374c06b98434c04fab3cdb98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:03:76:ee:53:3b:0c:65:00:58:6d:e6:be:b8: e3:98:88:83:3c:21:df:13:43:5d:72:fe:7c:cd:b8: 17:a1:63:d8:ca:29:8d:45:9e:a3:88:ac:5e:b4:27: 41:70:d1:3c:c6:e7:d8:e2:30:41:e6:f7:30:c9:a4: c0:b3:60:79:f6:07:e4:ee:89:bd:de:45:d3:72:f1: c6:7d:6c:51:ae:93:2d:cc:b8:ff:81:5f:a4:74:3d: 7a:88:ce:cd:c4:1b:1b:3f:54:2f:c8:4a:14:c8:c7: 90:f1:5b:98:1a:58:30:ae:dd:94:55:53:ea:55:43: 15:47:30:59:11:67:4a:65:51:f1:c3:be:54:8e:90: 76:da:63:7d:7b:42:f1:c9:58:e7:58:1e:17:8e:49: 6b:45:72:8b:00:c9:7d:f3:3d:00:b3:0e:9c:86:c3: ec:ab:bb:96:25:d3:c4:c0:07:43:2d:68:1c:99:f6: 00:9d:c4:1b:b4:2f:1c:0d:a9:4f:f3:5a:2c:c4:a0: 18:a4:75:aa:9c:1b:c2:5f:8c:dc:8c:0b:c8:8a:e2: af:9e:a2:9b:1c:38:26:98:f4:be:c7:4d:a1:ed:3c: 72:da:36:76:cf:75:39:66:b0:d1:33:93:8b:fb:5c: ad:2e:6e:a4:ab:be:39:6b:5f:a3:0f:bb:fa:af:f5: 91:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:03:10:59:E4:BD:18:CC:37:4C:06:B9:84:34:C0:4F:AB:3C:DB:98 X509v3 Authority Key Identifier: keyid:26:82:C8:16:F7:26:86:FF:7A:ED:E5:35:38:61:8C:C2:E8:86:10:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/iAMQWeS9GMw3TAa5hDTAT6s825g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2850::/48 Signature Algorithm: sha256WithRSAEncryption 1b:61:0a:36:64:40:dc:82:77:b9:30:86:32:a1:66:93:eb:50: 69:cb:82:69:ff:04:d9:4e:35:da:40:ff:84:e2:40:2c:d4:5a: af:23:20:af:bb:04:9f:54:fa:b7:9f:10:f9:f3:21:79:e2:b9: da:f1:cc:77:e3:6e:1d:f1:32:42:40:c2:8f:17:63:55:3c:5b: 85:c8:5e:3c:8e:4d:fe:4a:27:15:48:1e:9c:be:ed:e7:e6:25: 45:f0:be:54:d7:dd:45:77:68:ad:fd:e9:59:58:7d:99:96:e9: ed:87:e0:90:3e:2f:fc:21:1f:e7:48:5d:b5:3a:76:b1:04:02: 95:3d:7b:4d:d5:b9:9b:0e:9f:7f:25:8a:4c:4d:65:b2:90:79: b4:f5:ab:55:e7:c0:22:96:98:5d:12:23:53:01:f7:0a:56:4a: 9e:41:9b:de:30:08:95:59:9f:57:b9:dd:42:22:45:ca:b9:dd: 9d:b1:a4:41:2f:9c:43:f0:aa:c9:e6:a5:33:cc:13:f5:7f:b0: c3:5f:fc:13:25:27:7c:2d:00:49:38:56:3d:4c:01:4f:73:bc: d6:f3:fb:23:7e:64:c1:8e:52:25:b4:78:48:6a:ee:92:2f:da: e1:20:c5:10:e9:1a:fd:ae:f1:4d:f3:da:df:e7:cd:67:d2:0a: cc:4a:4b:ea -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+N255um+aHHOvlG1/fn1KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2ODJjODE2ZjcyNjg2ZmY3YWVkZTUzNTM4NjE4Y2MyZTg4 NjEwMzkwHhcNMjYwMTAyMTAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODAzMTA1OWU0YmQxOGNjMzc0YzA2Yjk4NDM0YzA0ZmFiM2NkYjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwN27lM7DGUAWG3mvrjjmIiDPCHf E0Ndcv58zbgXoWPYyimNRZ6jiKxetCdBcNE8xufY4jBB5vcwyaTAs2B59gfk7om9 3kXTcvHGfWxRrpMtzLj/gV+kdD16iM7NxBsbP1QvyEoUyMeQ8VuYGlgwrt2UVVPq VUMVRzBZEWdKZVHxw75UjpB22mN9e0LxyVjnWB4XjklrRXKLAMl98z0Asw6chsPs q7uWJdPEwAdDLWgcmfYAncQbtC8cDalP81osxKAYpHWqnBvCX4zcjAvIiuKvnqKb HDgmmPS+x02h7Txy2jZ2z3U5ZrDRM5OL+1ytLm6kq745a1+jD7v6r/WRyQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIgDEFnkvRjMN0wGuYQ0wE+rPNuYMB8GA1UdIwQY MBaAFCaCyBb3Job/eu3lNThhjMLohhA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm9MSUZ2Y21odjk2N2VVMU9HR013dWlHRURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hMDAwOTAtNjY2My00NmExLWE1ZmIt NjYxZThmZTNjMWU5LzEvaUFNUVdlUzlHTXczVEFhNWhEVEFUNnM4MjVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9hMDAwOTAtNjY2My00NmExLWE1ZmItNjYxZThmZTNjMWU5 LzEvSm9MSUZ2Y21odjk2N2VVMU9HR013dWlHRURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfChQ MA0GCSqGSIb3DQEBCwUAA4IBAQAbYQo2ZEDcgne5MIYyoWaT61Bpy4Jp/wTZTjXa QP+E4kAs1FqvIyCvuwSfVPq3nxD58yF54rna8cx3424d8TJCQMKPF2NVPFuFyF48 jk3+SicVSB6cvu3n5iVF8L5U191Fd2it/elZWH2Zlunth+CQPi/8IR/nSF21Onax BAKVPXtN1bmbDp9/JYpMTWWykHm09atV58AilphdEiNTAfcKVkqeQZveMAiVWZ9X ud1CIkXKud2dsaRBL5xD8KrJ5qUzzBP1f7DDX/wTJSd8LQBJOFY9TAFPc7zW8/sj fmTBjlIltHhIau6SL9rhIMUQ6Rr9rvFN89rf581n0grMSkvq -----END CERTIFICATE-----Generated at Mon Jan 26 13:44:24 2026 by rpki-client