This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/I8Iy4_ziF9l-jO-WdRwMy8_bW0A.roa File: I8Iy4_ziF9l-jO-WdRwMy8_bW0A.roa (raw, json) Hash identifier: mpJX+t/0+wMiXhav0ZYODkUjhmBnFQ5EDp/Bv/DB4Fc= Subject key identifier: 23:C2:32:E3:FC:E2:17:D9:7E:8C:EF:96:75:1C:0C:CB:CF:DB:5B:40 Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E38A33E3A90EBF97DD277A08DD2DA3B Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/I8Iy4_ziF9l-jO-WdRwMy8_bW0A.roa Signing time: Fri 02 Jan 2026 10:19:59 +0000 ROA not before: Fri 02 Jan 2026 10:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203396 IP address blocks: 2a04:9a00:1021::/48 maxlen: 48 2a04:9a00:1022::/48 maxlen: 48 2a04:9a06:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a3:3e:3a:90:eb:f9:7d:d2:77:a0:8d:d2:da:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23c232e3fce217d97e8cef96751c0ccbcfdb5b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b0:64:f9:36:07:e3:43:a8:43:dd:e4:4d:24: c8:2c:b6:9c:97:e7:1f:7e:70:db:5f:c9:8c:c1:73: 53:46:9c:34:42:f8:58:6a:eb:02:8f:36:e1:b6:65: d7:33:9b:d3:97:1c:3b:7b:3b:15:2a:ec:cb:03:9a: 28:d1:ce:fc:b9:db:22:f8:20:87:5b:dd:e7:5b:9d: 4c:95:46:86:b7:fc:88:0a:18:16:00:6b:50:23:32: 72:41:50:25:06:5f:e6:e3:a7:dd:69:82:be:ae:9f: 98:22:0b:b9:6c:df:4e:e5:e8:8a:85:0d:71:1e:67: 04:81:f9:66:e9:2c:55:5f:5c:ec:07:04:55:da:35: f9:fa:55:b5:c3:78:2e:18:2b:2d:c0:19:5e:eb:f0: 89:f9:36:38:67:9a:91:94:64:8b:da:01:f6:3c:fc: b9:47:7b:12:f1:52:83:8a:1a:5d:6b:fe:70:5e:4f: df:0c:86:9d:b3:07:59:20:86:60:f4:cf:6a:0e:46: 09:54:a3:c0:de:b2:a2:f1:4a:f9:46:f0:ef:dc:a5: d8:5d:b8:9d:b3:fc:ee:55:92:5a:ac:fe:9b:a6:69: 74:1f:3b:e8:df:33:6d:68:2b:59:94:6f:d8:81:21: 1c:5e:8f:bb:86:75:ef:4d:26:3d:b7:b0:37:37:02: df:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C2:32:E3:FC:E2:17:D9:7E:8C:EF:96:75:1C:0C:CB:CF:DB:5B:40 X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/I8Iy4_ziF9l-jO-WdRwMy8_bW0A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:9a00:1021::-2a04:9a00:1022:ffff:ffff:ffff:ffff:ffff 2a04:9a06:1000::/36 Signature Algorithm: sha256WithRSAEncryption 3f:21:dd:ca:46:2f:2a:e2:fb:88:f2:36:cd:0e:2d:26:4c:d4: 1a:e0:d2:a2:3a:3d:a6:e6:02:a8:2b:d3:5e:3a:25:c0:3f:60: aa:da:c5:c2:1c:f4:55:57:77:15:98:56:6f:09:b3:c9:8e:03: f0:ce:59:95:17:8d:d5:9f:09:e0:3e:81:ed:57:cf:9f:22:cd: a8:09:fb:ed:9f:73:9c:12:78:d6:68:16:aa:22:38:33:5b:7d: 92:3c:ca:ad:a7:a3:55:84:86:92:1a:a9:d5:f0:5b:4e:bc:a3: fe:71:0e:dd:c6:3c:51:97:1d:9c:37:d7:9b:37:48:0a:3d:1f: 35:d4:69:27:dc:da:55:d1:28:07:e0:45:cd:16:31:89:4c:60: b7:86:27:98:85:8c:7a:6f:46:cf:60:92:31:89:22:57:c2:7d: 8a:50:5c:5b:5b:86:0a:56:59:db:cd:1c:7c:ab:83:78:81:71: 32:1e:14:b4:37:a8:d9:ad:2f:e5:ae:23:cb:cf:8e:63:f1:66: 64:e4:06:d0:f6:ef:5f:d0:ff:c9:b9:aa:29:11:36:e1:3f:fd: b7:c6:b6:34:7a:48:fc:d5:e9:96:c4:ec:d9:d6:1c:02:f4:ff: e0:85:71:aa:c6:c1:d8:ba:82:19:4a:5b:2c:c0:84:09:6e:ed: 0d:2c:fc:7e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt+OKM+OpDr+X3Sd6CN0to7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2MyMzJlM2ZjZTIxN2Q5N2U4Y2VmOTY3NTFjMGNjYmNmZGI1YjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrBk+TYH40OoQ93kTSTILLacl+cf fnDbX8mMwXNTRpw0QvhYausCjzbhtmXXM5vTlxw7ezsVKuzLA5oo0c78udsi+CCH W93nW51MlUaGt/yIChgWAGtQIzJyQVAlBl/m46fdaYK+rp+YIgu5bN9O5eiKhQ1x HmcEgflm6SxVX1zsBwRV2jX5+lW1w3guGCstwBle6/CJ+TY4Z5qRlGSL2gH2PPy5 R3sS8VKDihpda/5wXk/fDIadswdZIIZg9M9qDkYJVKPA3rKi8Ur5RvDv3KXYXbid s/zuVZJarP6bpml0Hzvo3zNtaCtZlG/YgSEcXo+7hnXvTSY9t7A3NwLf0wIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFCPCMuP84hfZfozvlnUcDMvP21tAMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvSThJeTRfemlGOWwtak8tV2RSd015OF9iVzBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcMBIDBwAqBJoA ECEDBwAqBJoAECIDBgQqBJoGEDANBgkqhkiG9w0BAQsFAAOCAQEAPyHdykYvKuL7 iPI2zQ4tJkzUGuDSojo9puYCqCvTXjolwD9gqtrFwhz0VVd3FZhWbwmzyY4D8M5Z lReN1Z8J4D6B7VfPnyLNqAn77Z9znBJ41mgWqiI4M1t9kjzKraejVYSGkhqp1fBb Tryj/nEO3cY8UZcdnDfXmzdICj0fNdRpJ9zaVdEoB+BFzRYxiUxgt4YnmIWMem9G z2CSMYkiV8J9ilBcW1uGClZZ280cfKuDeIFxMh4UtDeo2a0v5a4jy8+OY/FmZOQG 0PbvX9D/ybmqKRE24T/9t8a2NHpI/NXplsTs2dYcAvT/4IVxqsbB2LqCGUpbLMCE CW7tDSz8fg== -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:57 2026 by rpki-client