This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/I1UWLzxBA4ixJ8pCHY8EE5hKG2Q.roa File: I1UWLzxBA4ixJ8pCHY8EE5hKG2Q.roa (raw, json) Hash identifier: jSsJIF66csc5xwOw6++LB9McTKZtx5CBOJccXqdpXWA= Subject key identifier: 23:55:16:2F:3C:41:03:88:B1:27:CA:42:1D:8F:04:13:98:4A:1B:64 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1A833954CACB9A2FCFBFCD3822E8C Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/I1UWLzxBA4ixJ8pCHY8EE5hKG2Q.roa Signing time: Fri 02 Jan 2026 18:21:42 +0000 ROA not before: Fri 02 Jan 2026 18:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26042 IP address blocks: 2a0f:1584:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:a8:33:95:4c:ac:b9:a2:fc:fb:fc:d3:82:2e:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2355162f3c410388b127ca421d8f0413984a1b64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fb:93:0b:54:29:9a:ef:2f:3c:f8:2c:5c:ee: 0c:6c:eb:4c:18:5b:64:23:7e:5e:68:2a:e2:3c:04: 6a:99:6c:75:c5:b2:bf:10:04:88:a6:44:d4:4d:3a: c0:21:80:57:73:d1:c2:8a:c8:aa:33:37:c5:db:90: 4e:c7:fc:f4:e2:e8:5c:b8:90:4c:85:d7:5e:1e:91: 54:a5:8c:21:d3:69:87:6f:ae:f1:49:f2:4c:d4:da: 95:5c:ce:6e:07:c9:2e:54:c5:d9:13:4b:19:05:15: d9:11:ed:cb:1c:80:60:60:44:b0:b4:a1:5f:2d:2b: cc:84:72:f6:7d:db:e3:11:0f:c6:5c:9d:02:be:2f: 77:18:e5:3f:17:b2:83:e1:03:ec:2c:6c:1c:d1:5e: 3c:f0:2a:89:42:d8:e4:0c:e7:72:aa:f8:31:3f:50: b8:98:b0:60:f7:80:ec:38:34:12:e7:be:f6:08:72: ac:b3:8f:b7:a6:51:fc:42:14:d9:e3:35:2c:cd:0b: 5f:b0:5b:a0:29:96:67:3f:fd:a1:3c:ea:a1:68:df: 17:61:4a:db:6d:85:95:89:9f:0e:2f:8d:ba:be:a3: 02:5e:0d:5c:fd:8a:bc:22:8d:d4:5a:2c:c7:cb:d3: 05:cc:f1:8c:f1:97:f0:db:f0:06:67:5c:d2:e3:3e: 5a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:55:16:2F:3C:41:03:88:B1:27:CA:42:1D:8F:04:13:98:4A:1B:64 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/I1UWLzxBA4ixJ8pCHY8EE5hKG2Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1584:1::/48 Signature Algorithm: sha256WithRSAEncryption a9:5d:b5:89:e2:ed:57:06:5d:d6:97:52:72:e8:fe:29:9d:a0: 53:64:f0:4a:cd:11:d4:5e:ce:42:80:24:27:32:f0:98:11:36: c9:e2:56:ec:5f:a6:69:46:8c:40:8d:5f:c0:d2:df:ee:3f:0b: 85:1d:14:22:b8:d5:8f:0a:89:6e:43:94:97:33:67:23:2c:dc: 02:ef:6b:fd:87:02:af:8d:df:0e:ec:63:ea:97:67:68:61:e2: d8:9e:23:a4:1e:64:e4:d8:e1:39:67:7c:b3:d9:69:10:1c:7d: 80:a7:bb:09:36:7d:9e:d7:95:7e:18:fe:00:b1:65:ee:03:26: 4d:c4:4d:df:8c:cd:15:47:c9:ea:51:55:3a:75:ec:f4:cc:96: 66:6e:4c:06:ed:df:3b:b6:40:f3:ff:ea:67:29:84:e9:60:f1: 9d:55:8e:43:d0:33:7a:f4:41:49:1d:2a:01:d1:d7:3a:52:ab: b6:ca:a6:12:27:c5:0d:50:02:b7:74:6b:1e:41:55:88:f2:af: c8:18:cd:30:c4:42:a0:07:7c:64:f2:48:65:31:54:94:7d:cb: 19:aa:a0:3d:72:ca:f7:7e:2d:5a:b6:15:0b:a0:04:71:66:ab: 3c:4e:8e:60:ef:1c:82:3a:2d:97:7e:0e:5d:e8:3e:69:c0:06: 9e:c2:71:95 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8agzlUysuaL8+/zTgi6MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzU1MTYyZjNjNDEwMzg4YjEyN2NhNDIxZDhmMDQxMzk4NGExYjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPuTC1Qpmu8vPPgsXO4MbOtMGFtk I35eaCriPARqmWx1xbK/EASIpkTUTTrAIYBXc9HCisiqMzfF25BOx/z04uhcuJBM hddeHpFUpYwh02mHb67xSfJM1NqVXM5uB8kuVMXZE0sZBRXZEe3LHIBgYESwtKFf LSvMhHL2fdvjEQ/GXJ0Cvi93GOU/F7KD4QPsLGwc0V488CqJQtjkDOdyqvgxP1C4 mLBg94DsODQS5772CHKss4+3plH8QhTZ4zUszQtfsFugKZZnP/2hPOqhaN8XYUrb bYWViZ8OL426vqMCXg1c/Yq8Io3UWizHy9MFzPGM8Zfw2/AGZ1zS4z5aTQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCNVFi88QQOIsSfKQh2PBBOYShtkMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvSTFVV0x6eEJBNGl4SjhwQ0hZOEVFNWhLRzJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg8VhAAB MA0GCSqGSIb3DQEBCwUAA4IBAQCpXbWJ4u1XBl3Wl1Jy6P4pnaBTZPBKzRHUXs5C gCQnMvCYETbJ4lbsX6ZpRoxAjV/A0t/uPwuFHRQiuNWPColuQ5SXM2cjLNwC72v9 hwKvjd8O7GPql2doYeLYniOkHmTk2OE5Z3yz2WkQHH2Ap7sJNn2e15V+GP4AsWXu AyZNxE3fjM0VR8nqUVU6dez0zJZmbkwG7d87tkDz/+pnKYTpYPGdVY5D0DN69EFJ HSoB0dc6Uqu2yqYSJ8UNUAK3dGseQVWI8q/IGM0wxEKgB3xk8khlMVSUfcsZqqA9 csr3fi1athULoARxZqs8To5g7xyCOi2Xfg5d6D5pwAaewnGV -----END CERTIFICATE-----Generated at Tue Jan 20 09:07:38 2026 by rpki-client