This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/mIALTb0nP-W4DHalz9f0vMXreFM.roa File: mIALTb0nP-W4DHalz9f0vMXreFM.roa (raw, json) Hash identifier: y/fKSFBQAAvAEA+mAfiRtjlXbFvNf5pW5COl5Um7O+w= Subject key identifier: 98:80:0B:4D:BD:27:3F:E5:B8:0C:76:A5:CF:D7:F4:BC:C5:EB:78:53 Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c Certificate serial: 019C3534B62CB7534E1317E8E965CF974849 Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/mIALTb0nP-W4DHalz9f0vMXreFM.roa Signing time: Fri 06 Feb 2026 23:06:12 +0000 ROA not before: Fri 06 Feb 2026 23:06:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215110 IP address blocks: 2a10:fa82:7000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Feb 2026 07:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:35:34:b6:2c:b7:53:4e:13:17:e8:e9:65:cf:97:48:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c Validity Not Before: Feb 6 23:06:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98800b4dbd273fe5b80c76a5cfd7f4bcc5eb7853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7e:5d:31:24:39:e1:ce:3c:88:82:f2:1d:a1: 57:da:85:c6:fa:13:8f:be:6b:69:46:e0:e9:e7:4e: 50:ad:0e:7c:71:7e:fa:bb:c3:5a:9b:71:ac:cd:30: b5:b1:e2:25:aa:40:e2:3a:24:74:1a:98:87:90:59: e1:d2:ae:ec:70:8a:8a:f4:7c:ac:39:d2:80:18:12: 3d:1a:ff:f3:78:c7:5a:e8:03:0d:26:db:52:0a:8d: d0:4b:39:2f:0f:41:b9:3c:7f:36:23:25:f3:59:c5: 82:da:1c:f1:3e:84:aa:3a:e0:f4:c9:bd:70:7f:70: 1a:e7:52:98:31:0a:43:40:25:61:ab:f1:75:a9:4e: 74:80:50:6a:ef:81:73:58:b0:9f:da:5d:bc:d4:b6: e8:00:fd:2a:e7:ef:af:4a:18:f9:47:7e:49:5b:62: c0:08:f0:b5:f6:ce:11:50:64:3f:42:4b:65:9e:93: d7:03:7a:7a:15:1f:31:55:ea:4c:3b:d0:e4:11:c1: d1:52:1b:e8:e5:17:4e:98:25:81:02:15:d6:a7:fa: 58:a2:a8:c4:37:c5:de:c4:57:74:19:9d:fe:e1:84: fb:14:3e:56:bc:7d:c0:2b:92:a3:b4:2e:31:1f:d7: a2:5a:59:a8:2e:18:0b:de:aa:39:28:86:c4:9c:c4: 18:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:80:0B:4D:BD:27:3F:E5:B8:0C:76:A5:CF:D7:F4:BC:C5:EB:78:53 X509v3 Authority Key Identifier: keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/mIALTb0nP-W4DHalz9f0vMXreFM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:fa82:7000::/36 Signature Algorithm: sha256WithRSAEncryption 06:6e:ba:27:44:06:ef:18:ee:52:53:9d:5b:25:be:bd:84:fa: 4a:b2:67:ce:26:46:ee:78:96:b0:b3:d7:a7:ed:9f:80:11:c0: 9d:f9:b3:05:21:eb:d4:08:0d:0b:4e:e5:ad:5e:f6:57:e9:8b: 73:ef:ce:52:23:bf:73:e0:34:8c:b0:11:6a:81:d1:71:e3:29: 67:79:db:a8:c0:ae:9d:ba:c9:04:b5:b4:fa:c3:4a:02:cd:07: 67:c3:97:68:87:8d:dc:1e:7a:69:57:2d:d9:ae:d7:f0:35:40: 0d:aa:8c:6f:fe:d4:94:cc:59:90:71:5f:21:f8:f4:a0:19:dd: d6:a7:d6:3d:80:13:6c:ef:c4:b1:bf:be:fc:26:b7:8d:2d:a9: b7:c0:8e:98:75:85:7d:7d:cd:98:e0:91:06:37:bb:78:0f:7b: dd:d1:3a:0c:b2:08:b3:f3:b8:bf:d7:65:ef:8d:89:30:16:2d: 3d:50:a3:c4:51:e3:79:f5:a5:b5:26:21:e4:2b:28:98:1b:12: 80:97:1a:bb:79:43:bb:f1:c8:9f:47:72:a0:f0:20:df:44:f1: d9:48:dd:56:61:8d:c5:4d:41:c7:fc:6a:5d:83:d6:60:3a:33: 9f:c3:3f:e6:2f:76:8d:e6:82:4c:de:5f:5a:0e:40:b0:1b:e9: 5a:cf:19:cc -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZw1NLYst1NOExfo6WXPl0hJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NTliMGJhODQwN2JlMTFjZmM5MTFiZDMxZWQxNDBjZDFj NjA0NmMwHhcNMjYwMjA2MjMwNjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODgwMGI0ZGJkMjczZmU1YjgwYzc2YTVjZmQ3ZjRiY2M1ZWI3ODUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy35dMSQ54c48iILyHaFX2oXG+hOP vmtpRuDp505QrQ58cX76u8Nam3GszTC1seIlqkDiOiR0GpiHkFnh0q7scIqK9Hys OdKAGBI9Gv/zeMda6AMNJttSCo3QSzkvD0G5PH82IyXzWcWC2hzxPoSqOuD0yb1w f3Aa51KYMQpDQCVhq/F1qU50gFBq74FzWLCf2l281LboAP0q5++vShj5R35JW2LA CPC19s4RUGQ/QktlnpPXA3p6FR8xVepMO9DkEcHRUhvo5RdOmCWBAhXWp/pYoqjE N8XexFd0GZ3+4YT7FD5WvH3AK5KjtC4xH9eiWlmoLhgL3qo5KIbEnMQYKQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFJiAC029Jz/luAx2pc/X9LzF63hTMB8GA1UdIwQY MBaAFFZZsLqEB74Rz8kRvTHtFAzRxgRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEt MjM5NGM2NjAwMDIyLzEvbUlBTFRiMG5QLVc0REhhbHo5ZjB2TVhyZUZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEtMjM5NGM2NjAwMDIy LzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKhD6gnAw DQYJKoZIhvcNAQELBQADggEBAAZuuidEBu8Y7lJTnVslvr2E+kqyZ84mRu54lrCz 16ftn4ARwJ35swUh69QIDQtO5a1e9lfpi3PvzlIjv3PgNIywEWqB0XHjKWd526jA rp26yQS1tPrDSgLNB2fDl2iHjdweemlXLdmu1/A1QA2qjG/+1JTMWZBxXyH49KAZ 3dan1j2AE2zvxLG/vvwmt40tqbfAjph1hX19zZjgkQY3u3gPe93ROgyyCLPzuL/X Ze+NiTAWLT1Qo8RR43n1pbUmIeQrKJgbEoCXGrt5Q7vxyJ9HcqDwIN9E8dlI3VZh jcVNQcf8al2D1mA6M5/DP+Yvdo3mgkzeX1oOQLAb6VrPGcw= -----END CERTIFICATE-----Generated at Sun Feb 8 15:27:31 2026 by rpki-client