This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/ivPir5hTVZ6-2KvBi__rc2C4xp4.roa File: ivPir5hTVZ6-2KvBi__rc2C4xp4.roa (raw, json) Hash identifier: XwUyUM1eJM6QiCA3EZbvx9TyrTpnC6U24WwWURBAOW4= Subject key identifier: 8A:F3:E2:AF:98:53:55:9E:BE:D8:AB:C1:8B:FF:EB:73:60:B8:C6:9E Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019B797F315DFA6E66AF3D944AA09EC966F0 Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/ivPir5hTVZ6-2KvBi__rc2C4xp4.roa Signing time: Thu 01 Jan 2026 12:18:57 +0000 ROA not before: Thu 01 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51396 IP address blocks: 2a05:b0c6:a200::/39 maxlen: 39 2a05:b0c7:6000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:31:5d:fa:6e:66:af:3d:94:4a:a0:9e:c9:66:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Jan 1 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8af3e2af9853559ebed8abc18bffeb7360b8c69e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:33:2f:9f:72:3a:c3:97:68:e9:cb:3d:cd:06: 9b:33:43:e5:16:ac:6f:01:61:1f:84:6c:d9:b7:ec: ab:62:95:47:04:61:29:cb:73:a5:8e:e3:f0:8e:bf: ff:c1:4c:42:0e:ff:18:21:92:fd:71:cc:59:0b:d2: 04:b4:ca:38:b1:b0:4a:b9:1b:0a:fa:70:1d:3c:94: f7:3f:f9:f5:5a:64:f8:ae:9e:eb:bc:c9:f6:a3:f8: 7b:48:b1:f6:56:80:29:ad:6d:90:6f:29:6c:2f:42: 74:6b:4d:44:d2:1c:76:42:44:90:5f:a3:b3:30:d8: f5:77:01:50:08:f3:f1:90:4f:75:96:18:e3:44:4b: 49:f2:47:16:e9:23:72:f2:bd:0c:76:82:13:f8:75: 7d:1a:8c:12:de:ee:97:4d:f8:ba:2b:fb:08:69:74: ae:e3:c6:17:2e:5d:b2:57:97:c0:02:fd:ab:35:d9: 09:e8:de:56:fe:5b:52:10:d2:86:34:05:7d:6c:26: ab:dd:2d:62:1a:81:4c:ce:aa:92:b9:e8:38:ba:05: 0d:37:ff:d5:d1:7d:d6:4c:17:d3:e5:be:2a:06:75: 7d:49:db:91:3b:1b:3a:33:30:7e:56:64:fc:17:b5: f4:b1:d2:03:c7:2d:ab:ba:51:90:eb:9f:aa:0e:5f: 16:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F3:E2:AF:98:53:55:9E:BE:D8:AB:C1:8B:FF:EB:73:60:B8:C6:9E X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/ivPir5hTVZ6-2KvBi__rc2C4xp4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:b0c6:a200::/39 2a05:b0c7:6000::/36 Signature Algorithm: sha256WithRSAEncryption 64:7e:46:4f:5a:69:ee:46:4d:b3:1f:c8:bc:28:26:27:e5:33: 6c:53:75:e6:86:c7:ed:e6:1b:ad:24:f2:fc:74:9d:1d:73:94: 33:36:21:86:3f:2f:ac:d1:a1:a9:f4:a3:17:53:a2:da:45:ea: 97:34:26:ca:1e:93:9d:a6:90:7c:e1:d6:c6:4d:09:cf:8e:c8: e0:f6:b6:3e:b7:c5:ab:76:2d:39:0d:81:38:ee:91:fd:a0:a5: 9e:72:51:67:90:13:3e:8a:50:cb:85:fb:cc:eb:b8:ad:75:52: d6:fe:94:8d:6e:c2:d6:1e:24:1f:8b:3b:5f:cc:10:e4:8c:03: 65:c2:0f:b5:fc:93:db:e8:b8:46:0f:93:27:5e:d3:60:75:7c: bd:21:4b:d7:34:3d:c8:23:c3:36:2a:ef:b7:81:05:c4:fe:f3: c3:19:5f:6b:cc:a2:98:c9:d1:21:84:ba:8e:20:69:ff:84:8b: 5a:f5:c6:92:e2:37:bc:7f:2b:3b:f2:0a:3a:80:76:76:c5:61: 58:87:8f:54:5a:1c:fb:d9:3a:3f:66:ac:f2:57:a3:4e:42:a5: 6e:0d:6c:28:1d:78:9c:25:62:31:e7:57:d0:e7:82:27:cf:11: 0f:86:b6:ac:4e:b9:86:1c:51:93:82:bb:31:2f:86:57:e6:ee: d3:ba:f0:fd -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt5fzFd+m5mrz2USqCeyWbwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWYzZTJhZjk4NTM1NTllYmVkOGFiYzE4YmZmZWI3MzYwYjhjNjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDMvn3I6w5do6cs9zQabM0PlFqxv AWEfhGzZt+yrYpVHBGEpy3OljuPwjr//wUxCDv8YIZL9ccxZC9IEtMo4sbBKuRsK +nAdPJT3P/n1WmT4rp7rvMn2o/h7SLH2VoAprW2QbylsL0J0a01E0hx2QkSQX6Oz MNj1dwFQCPPxkE91lhjjREtJ8kcW6SNy8r0MdoIT+HV9GowS3u6XTfi6K/sIaXSu 48YXLl2yV5fAAv2rNdkJ6N5W/ltSENKGNAV9bCar3S1iGoFMzqqSueg4ugUNN//V 0X3WTBfT5b4qBnV9SduROxs6MzB+VmT8F7X0sdIDxy2rulGQ65+qDl8WmwIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFIrz4q+YU1WevtirwYv/63NguMaeMB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvaXZQaXI1aFRWWjYtMkt2QmlfX3JjMkM0eHA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYBKgWwxqID BgQqBbDHYDANBgkqhkiG9w0BAQsFAAOCAQEAZH5GT1pp7kZNsx/IvCgmJ+UzbFN1 5obH7eYbrSTy/HSdHXOUMzYhhj8vrNGhqfSjF1Oi2kXqlzQmyh6TnaaQfOHWxk0J z47I4Pa2PrfFq3YtOQ2BOO6R/aClnnJRZ5ATPopQy4X7zOu4rXVS1v6UjW7C1h4k H4s7X8wQ5IwDZcIPtfyT2+i4Rg+TJ17TYHV8vSFL1zQ9yCPDNirvt4EFxP7zwxlf a8yimMnRIYS6jiBp/4SLWvXGkuI3vH8rO/IKOoB2dsVhWIePVFoc+9k6P2as8lej TkKlbg1sKB14nCViMedX0OeCJ88RD4a2rE65hhxRk4K7MS+GV+bu07rw/Q== -----END CERTIFICATE-----Generated at Mon Jan 19 20:34:47 2026 by rpki-client