This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/imYPU-rTgiLBfbGJuTyuhX4TUZQ.roa File: imYPU-rTgiLBfbGJuTyuhX4TUZQ.roa (raw, json) Hash identifier: 6orNc0rnhJILmpahuHtYwHjk8ytv9c4LqO9tdEs0kIU= Subject key identifier: 8A:66:0F:53:EA:D3:82:22:C1:7D:B1:89:B9:3C:AE:85:7E:13:51:94 Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E38A1BD75F94A0CBBB5F70BEDBB94F9 Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/imYPU-rTgiLBfbGJuTyuhX4TUZQ.roa Signing time: Fri 02 Jan 2026 10:19:59 +0000 ROA not before: Fri 02 Jan 2026 10:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197016 IP address blocks: 2a07:3501:1070::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a1:bd:75:f9:4a:0c:bb:b5:f7:0b:ed:bb:94:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a660f53ead38222c17db189b93cae857e135194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:54:6c:e8:33:06:eb:ff:be:c4:6f:2e:16:8a: 69:24:60:05:84:a9:09:77:07:29:4d:3d:91:a7:d3: 2e:79:f1:f7:7a:27:66:d2:c7:0e:11:fb:83:15:e4: 85:3b:fb:3f:a7:33:30:8f:46:d3:5c:37:83:2d:e8: 3b:1d:17:c8:eb:65:a7:e4:1b:91:08:35:75:77:b7: 48:bf:41:9f:c3:8b:dd:90:93:b6:58:e3:28:2b:f3: a0:8b:49:2e:23:0c:c8:be:50:f5:cf:89:69:98:a1: 4b:42:c2:45:ac:b0:0e:31:98:35:e1:39:96:3d:84: f9:5e:f9:d2:8e:ef:fd:86:cc:0d:20:8e:bc:8f:51: 70:57:64:eb:b4:91:2a:a3:23:6f:4e:13:da:e6:41: 7c:7e:05:7a:bf:aa:ff:e2:4f:19:ef:98:2b:90:28: de:0f:eb:8c:b3:44:24:a4:9b:35:98:87:08:ee:f5: 17:61:7c:78:a2:10:1c:6b:56:9c:40:13:a0:a1:41: 0f:c7:88:15:ab:d2:33:fa:57:5f:c3:90:1e:e3:90: 87:2e:d8:70:0e:a8:76:03:95:24:9c:fb:79:5e:a3: 61:32:58:85:bc:2d:25:3f:0b:b4:97:d4:07:1d:ab: 66:27:d9:24:0b:8a:6b:f6:76:ea:cf:81:48:0d:0a: f0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:66:0F:53:EA:D3:82:22:C1:7D:B1:89:B9:3C:AE:85:7E:13:51:94 X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/imYPU-rTgiLBfbGJuTyuhX4TUZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:3501:1070::/46 Signature Algorithm: sha256WithRSAEncryption 69:95:4a:7e:48:d2:16:52:0c:c3:f8:95:af:9f:d3:4c:86:5c: 27:31:93:13:3e:b8:bf:73:64:dc:d8:3d:41:9f:a8:00:80:9a: eb:ab:a3:dd:b4:c0:c6:09:65:f4:0e:2a:d5:33:a0:67:13:db: c7:70:96:5f:f5:f5:16:cd:d6:bc:d3:68:1e:92:46:ad:d7:a7: 29:ac:6a:e3:47:81:16:82:b4:43:42:f6:9e:4a:38:02:41:b2: 35:8d:21:06:36:2d:b6:65:5c:3b:17:59:c9:4e:ba:e6:63:c6: b8:47:bf:24:4f:f6:0c:9d:99:1d:75:bd:b9:1c:8e:1e:99:8a: e4:74:e8:8c:34:74:c2:14:13:2d:c4:2d:7d:11:83:9d:7d:61: 49:a1:f8:72:9b:78:81:7d:24:98:b9:55:23:62:1e:1a:05:b2: e6:37:ee:a3:2c:1c:57:47:a4:7a:c8:6f:65:fd:2f:62:aa:f5: 98:f3:11:22:bd:b2:70:5e:c2:44:ff:f2:ff:b7:5a:81:74:dd: 0a:5b:86:ff:8e:99:cf:8c:ca:80:e5:96:76:78:60:43:2d:92: 11:65:00:39:e0:c6:42:f5:d8:b9:a2:bb:b3:e4:13:16:1f:2f: e0:b0:5b:1f:d3:d2:f4:07:e6:07:8e:8d:87:d4:ba:4a:9a:2e: ce:85:c0:8c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OKG9dflKDLu19wvtu5T5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTY2MGY1M2VhZDM4MjIyYzE3ZGIxODliOTNjYWU4NTdlMTM1MTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFRs6DMG6/++xG8uFoppJGAFhKkJ dwcpTT2Rp9MuefH3eidm0scOEfuDFeSFO/s/pzMwj0bTXDeDLeg7HRfI62Wn5BuR CDV1d7dIv0Gfw4vdkJO2WOMoK/Ogi0kuIwzIvlD1z4lpmKFLQsJFrLAOMZg14TmW PYT5XvnSju/9hswNII68j1FwV2TrtJEqoyNvThPa5kF8fgV6v6r/4k8Z75grkCje D+uMs0QkpJs1mIcI7vUXYXx4ohAca1acQBOgoUEPx4gVq9Iz+ldfw5Ae45CHLthw Dqh2A5UknPt5XqNhMliFvC0lPwu0l9QHHatmJ9kkC4pr9nbqz4FIDQrwMwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIpmD1Pq04IiwX2xibk8roV+E1GUMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvaW1ZUFUtclRnaUxCZmJHSnVUeXVoWDRUVVpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKgc1ARBw MA0GCSqGSIb3DQEBCwUAA4IBAQBplUp+SNIWUgzD+JWvn9NMhlwnMZMTPri/c2Tc 2D1Bn6gAgJrrq6PdtMDGCWX0DirVM6BnE9vHcJZf9fUWzda802gekkat16cprGrj R4EWgrRDQvaeSjgCQbI1jSEGNi22ZVw7F1nJTrrmY8a4R78kT/YMnZkddb25HI4e mYrkdOiMNHTCFBMtxC19EYOdfWFJofhym3iBfSSYuVUjYh4aBbLmN+6jLBxXR6R6 yG9l/S9iqvWY8xEivbJwXsJE//L/t1qBdN0KW4b/jpnPjMqA5ZZ2eGBDLZIRZQA5 4MZC9di5oruz5BMWHy/gsFsf09L0B+YHjo2H1LpKmi7OhcCM -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:59 2026 by rpki-client