This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iGNMsFzI0iKSN4_FIIAiVurLE5s.roa File: iGNMsFzI0iKSN4_FIIAiVurLE5s.roa (raw, json) Hash identifier: dac5I+DCIWwzUzw12d3jB9i7hkMvfD0GR+SSn5AcJx4= Subject key identifier: 88:63:4C:B0:5C:C8:D2:22:92:37:8F:C5:20:80:22:56:EA:CB:13:9B Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019BC8957F9D162A273807B21251C1DFC860 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iGNMsFzI0iKSN4_FIIAiVurLE5s.roa Signing time: Fri 16 Jan 2026 20:53:19 +0000 ROA not before: Fri 16 Jan 2026 20:53:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33042 IP address blocks: 2a0e:c784::/32 maxlen: 32 2a0f:df44::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c8:95:7f:9d:16:2a:27:38:07:b2:12:51:c1:df:c8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 16 20:53:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88634cb05cc8d22292378fc520802256eacb139b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:78:da:91:6b:83:26:fe:0e:80:86:32:97:0b: 59:68:33:b5:9a:9e:67:08:6b:3c:14:ce:87:20:45: ca:e1:45:f6:82:78:ff:07:b5:75:a6:e8:71:ad:6f: 78:bb:bb:f5:45:4b:12:b3:12:4a:6d:62:19:3f:9f: c1:f3:a8:ef:bc:75:f0:76:e4:c4:2f:5d:9f:e0:ed: 1c:81:7a:90:b8:df:94:b1:64:8a:d9:f8:ab:69:6b: 67:08:f7:99:91:b2:a4:c0:ec:dd:20:e2:7d:2c:0f: e6:d4:ec:6b:a8:f8:5b:23:d2:26:61:44:d8:9e:ed: e0:de:1b:f2:79:af:da:a3:2d:57:b4:ca:5f:b6:5e: 1b:9b:47:b3:6d:94:1e:4a:cf:d5:a3:70:f8:84:27: e2:76:b6:ba:06:12:6d:e2:1f:e1:1d:23:ca:3f:3c: c0:3e:3c:dc:27:ba:46:97:69:a1:75:af:29:dd:37: 13:54:38:74:a4:23:26:86:c1:18:17:f1:2a:5e:d6: a2:55:21:8e:f7:91:9c:85:5e:38:cc:7d:1e:d0:74: 2d:6b:88:45:2f:1a:7c:71:e5:d8:a2:13:e3:38:23: b7:39:d9:0c:b9:c3:cf:b3:bc:d2:00:a0:e3:ab:6a: ee:c2:79:cd:1e:e1:41:20:c9:35:73:6d:a3:b6:7e: 9e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:63:4C:B0:5C:C8:D2:22:92:37:8F:C5:20:80:22:56:EA:CB:13:9B X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iGNMsFzI0iKSN4_FIIAiVurLE5s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:c784::/32 2a0f:df44::/32 Signature Algorithm: sha256WithRSAEncryption c9:cf:07:8c:5d:73:c6:15:18:f9:ca:c4:70:4f:29:9f:42:be: 7c:02:d8:9e:0d:cc:ba:28:5d:64:ad:2d:c4:f6:51:b0:76:c3: 32:ec:7a:de:63:e7:69:74:a3:1c:54:fa:93:b4:07:35:d8:6c: 4b:9f:4f:77:ec:93:be:f8:dc:40:bd:a4:40:cf:55:8b:6f:ba: c7:35:2d:2b:71:80:1a:a5:60:13:10:8e:43:fd:b0:13:a2:ba: bb:66:8f:04:7d:32:66:ba:65:f3:d9:b7:05:b8:93:9b:30:53: ac:99:4f:98:b1:f6:7a:e4:f2:af:75:30:28:18:c2:1d:c1:83: 5b:3b:33:f1:15:63:39:73:57:44:74:49:08:31:e1:96:b3:be: f6:8e:27:f7:ab:bd:ec:fd:61:7f:a8:24:d1:72:e1:09:de:08: a1:85:b5:68:ea:9f:a5:46:a3:f7:51:af:36:8d:22:b3:c8:f3: 53:9a:89:4b:c7:c4:ce:44:4f:e5:6f:46:9b:60:22:59:75:b0: ac:83:ff:17:a1:2a:d9:06:3f:72:63:30:57:c6:32:87:ce:3c: fa:80:ec:2f:5b:de:65:80:4f:77:6e:5b:63:fb:75:ee:c1:1e: cf:83:8e:c8:26:5d:86:49:c0:b5:9f:e9:ed:20:86:f5:9e:54: b2:aa:9c:c5 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZvIlX+dFionOAeyElHB38hgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTE2MjA1MzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODYzNGNiMDVjYzhkMjIyOTIzNzhmYzUyMDgwMjI1NmVhY2IxMzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3jakWuDJv4OgIYylwtZaDO1mp5n CGs8FM6HIEXK4UX2gnj/B7V1puhxrW94u7v1RUsSsxJKbWIZP5/B86jvvHXwduTE L12f4O0cgXqQuN+UsWSK2firaWtnCPeZkbKkwOzdIOJ9LA/m1OxrqPhbI9ImYUTY nu3g3hvyea/aoy1XtMpftl4bm0ezbZQeSs/Vo3D4hCfidra6BhJt4h/hHSPKPzzA PjzcJ7pGl2mhda8p3TcTVDh0pCMmhsEYF/EqXtaiVSGO95GchV44zH0e0HQta4hF Lxp8ceXYohPjOCO3OdkMucPPs7zSAKDjq2ruwnnNHuFBIMk1c22jtn6emwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFIhjTLBcyNIikjePxSCAIlbqyxObMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvaUdOTXNGekkwaUtTTjRfRklJQWlWdXJMRTVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKg7HhAMF ACoP30QwDQYJKoZIhvcNAQELBQADggEBAMnPB4xdc8YVGPnKxHBPKZ9CvnwC2J4N zLooXWStLcT2UbB2wzLset5j52l0oxxU+pO0BzXYbEufT3fsk7743EC9pEDPVYtv usc1LStxgBqlYBMQjkP9sBOiurtmjwR9Mma6ZfPZtwW4k5swU6yZT5ix9nrk8q91 MCgYwh3Bg1s7M/EVYzlzV0R0SQgx4ZazvvaOJ/ervez9YX+oJNFy4QneCKGFtWjq n6VGo/dRrzaNIrPI81OaiUvHxM5ET+VvRptgIll1sKyD/xehKtkGP3JjMFfGMofO PPqA7C9b3mWAT3duW2P7de7BHs+DjsgmXYZJwLWf6e0ghvWeVLKqnMU= -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:16 2026 by rpki-client