This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/ICKL-vNS4Ve2n8KrobzVtvKP7a8.roa File: ICKL-vNS4Ve2n8KrobzVtvKP7a8.roa (raw, json) Hash identifier: KJYnqYyOofOZzadxEkB/wfQ8LlG+IKUvm99MnwqJGO4= Subject key identifier: 20:22:8B:FA:F3:52:E1:57:B6:9F:C2:AB:A1:BC:D5:B6:F2:8F:ED:AF Certificate issuer: /CN=7b69efe6016f72d4592f1b0bab9186476ff3a29d Certificate serial: 019C0E4024215F1BE56A211FEC8508A46FC1 Authority key identifier: 7B:69:EF:E6:01:6F:72:D4:59:2F:1B:0B:AB:91:86:47:6F:F3:A2:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e2nv5gFvctRZLxsLq5GGR2_zop0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/ICKL-vNS4Ve2n8KrobzVtvKP7a8.roa Signing time: Fri 30 Jan 2026 09:33:30 +0000 ROA not before: Fri 30 Jan 2026 09:33:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 27523 IP address blocks: 2a0b:71c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.mft rsync://rpki.ripe.net/repository/DEFAULT/e2nv5gFvctRZLxsLq5GGR2_zop0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0e:40:24:21:5f:1b:e5:6a:21:1f:ec:85:08:a4:6f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b69efe6016f72d4592f1b0bab9186476ff3a29d Validity Not Before: Jan 30 09:33:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20228bfaf352e157b69fc2aba1bcd5b6f28fedaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:dd:28:12:0a:5f:b1:6b:9d:f1:f3:ed:43:0c: 87:6d:36:15:50:bc:82:fe:ac:bf:92:d6:b5:5f:b3: 6e:36:e1:d6:37:31:90:65:b8:f7:15:f5:c8:4a:37: 3d:05:6d:cc:3e:48:1b:d8:8c:9a:24:9a:78:df:35: 54:36:f8:30:95:64:26:28:9a:d0:f1:c0:4e:1c:12: 63:d3:78:3c:61:e8:e7:69:5b:75:a6:3d:4c:24:fa: df:34:f8:1f:23:d7:f3:7d:6b:75:a2:54:4a:29:cc: 0b:d6:7c:5a:19:08:c6:58:b4:c3:27:c2:d9:cf:3c: fe:bb:4e:c5:fc:b7:66:48:86:e8:0e:e0:65:87:2c: 51:70:d9:18:36:4b:8b:ef:e6:9a:13:c5:4c:f2:75: ed:b3:a2:b4:a2:05:60:3f:58:72:77:3e:da:5c:27: 69:a6:a7:c2:fa:d3:97:7f:02:8c:5b:19:f3:53:be: 33:fd:83:6c:08:0b:da:8a:cb:89:0a:fd:f9:b4:59: 05:cb:a8:01:7f:e4:b2:f6:37:09:8d:d7:94:1a:4e: 17:9b:db:71:33:7a:83:88:a1:48:59:91:3e:fd:1b: b5:07:a4:e6:bc:5e:80:1d:00:74:e8:4d:3c:59:a6: b7:cf:e3:c7:44:6f:14:03:77:fa:86:de:0a:f3:81: 00:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:22:8B:FA:F3:52:E1:57:B6:9F:C2:AB:A1:BC:D5:B6:F2:8F:ED:AF X509v3 Authority Key Identifier: keyid:7B:69:EF:E6:01:6F:72:D4:59:2F:1B:0B:AB:91:86:47:6F:F3:A2:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2nv5gFvctRZLxsLq5GGR2_zop0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/ICKL-vNS4Ve2n8KrobzVtvKP7a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:71c0::/29 Signature Algorithm: sha256WithRSAEncryption 45:16:ed:2d:bb:8a:86:e0:41:a3:28:5c:68:db:17:08:55:81: fb:24:5b:1c:ba:55:22:c8:55:c5:2d:27:1c:d4:54:36:db:99: c4:dd:06:69:ed:14:77:93:7b:b6:78:30:a1:42:08:93:5e:c0: df:49:08:70:28:0f:80:60:51:e0:c5:26:bd:02:bf:3b:8f:f4: 40:6f:c3:06:64:db:8c:1d:4d:fb:4b:5b:78:d7:97:cd:d8:37: 88:f8:cc:a9:8c:1f:db:8a:60:10:f6:42:7e:4e:74:c3:a5:70: 84:79:d0:26:d4:ef:0e:8e:69:f6:60:93:1d:5c:ff:d0:98:e5: bc:e9:40:b8:9e:96:93:f3:e3:8f:ca:7c:6d:88:f6:dd:d1:0f: 0a:71:9e:84:6c:4d:c9:3c:64:91:43:f8:70:39:b8:af:48:30: c2:db:44:f5:ec:4b:c5:46:d5:bb:f4:81:57:49:16:37:19:9d: 1b:ef:87:13:d9:8d:a9:bc:4d:bf:4c:ec:09:5c:d8:45:2d:5d: f9:86:0d:01:47:a3:1e:c4:47:72:fe:44:32:36:a9:4a:66:67: 91:1c:32:e0:42:56:d5:fd:20:55:06:54:0d:e7:00:1f:f9:0f: 5c:51:bf:f3:f4:d7:74:5a:02:31:d6:47:f8:eb:16:f1:b7:73: 01:29:3c:ef -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZwOQCQhXxvlaiEf7IUIpG/BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNjllZmU2MDE2ZjcyZDQ1OTJmMWIwYmFiOTE4NjQ3NmZm M2EyOWQwHhcNMjYwMTMwMDkzMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDIyOGJmYWYzNTJlMTU3YjY5ZmMyYWJhMWJjZDViNmYyOGZlZGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN0oEgpfsWud8fPtQwyHbTYVULyC /qy/kta1X7NuNuHWNzGQZbj3FfXISjc9BW3MPkgb2IyaJJp43zVUNvgwlWQmKJrQ 8cBOHBJj03g8YejnaVt1pj1MJPrfNPgfI9fzfWt1olRKKcwL1nxaGQjGWLTDJ8LZ zzz+u07F/LdmSIboDuBlhyxRcNkYNkuL7+aaE8VM8nXts6K0ogVgP1hydz7aXCdp pqfC+tOXfwKMWxnzU74z/YNsCAvaisuJCv35tFkFy6gBf+Sy9jcJjdeUGk4Xm9tx M3qDiKFIWZE+/Ru1B6TmvF6AHQB06E08Waa3z+PHRG8UA3f6ht4K84EA3wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFCAii/rzUuFXtp/Cq6G81bbyj+2vMB8GA1UdIwQY MBaAFHtp7+YBb3LUWS8bC6uRhkdv86KdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTJudjVnRnZjdFJaTHhzTHE1R0dSMl96b3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9mZjM0YmItMTBmOS00NTkzLTljYWYt MWQ4YjlhMWFhNGFkLzEvSUNLTC12TlM0VmUybjhLcm9ielZ0dktQN2E4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9mZjM0YmItMTBmOS00NTkzLTljYWYtMWQ4YjlhMWFhNGFk LzEvZTJudjVnRnZjdFJaTHhzTHE1R0dSMl96b3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgtxwDAN BgkqhkiG9w0BAQsFAAOCAQEARRbtLbuKhuBBoyhcaNsXCFWB+yRbHLpVIshVxS0n HNRUNtuZxN0Gae0Ud5N7tngwoUIIk17A30kIcCgPgGBR4MUmvQK/O4/0QG/DBmTb jB1N+0tbeNeXzdg3iPjMqYwf24pgEPZCfk50w6VwhHnQJtTvDo5p9mCTHVz/0Jjl vOlAuJ6Wk/Pjj8p8bYj23dEPCnGehGxNyTxkkUP4cDm4r0gwwttE9exLxUbVu/SB V0kWNxmdG++HE9mNqbxNv0zsCVzYRS1d+YYNAUejHsRHcv5EMjapSmZnkRwy4EJW 1f0gVQZUDecAH/kPXFG/8/TXdFoCMdZH+OsW8bdzASk87w== -----END CERTIFICATE-----Generated at Mon Feb 9 20:45:39 2026 by rpki-client