This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/iXkm91squHIJPPa44-dUqHvW1Ho.roa File: iXkm91squHIJPPa44-dUqHvW1Ho.roa (raw, json) Hash identifier: SWeSoR/BNkXf6xmzuQSmnIdpG/qfZsQTBDpU3zqZuKs= Subject key identifier: 89:79:26:F7:5B:2A:B8:72:09:3C:F6:B8:E3:E7:54:A8:7B:D6:D4:7A Certificate issuer: /CN=c1eb076d16702c7dbea972e2972ef576a1f2c873 Certificate serial: 019B7D5C6144CF87EDA2DCBC8D316BA93187 Authority key identifier: C1:EB:07:6D:16:70:2C:7D:BE:A9:72:E2:97:2E:F5:76:A1:F2:C8:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/iXkm91squHIJPPa44-dUqHvW1Ho.roa Signing time: Fri 02 Jan 2026 06:19:24 +0000 ROA not before: Fri 02 Jan 2026 06:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16140 IP address blocks: 2a03:d280:1f00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:61:44:cf:87:ed:a2:dc:bc:8d:31:6b:a9:31:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1eb076d16702c7dbea972e2972ef576a1f2c873 Validity Not Before: Jan 2 06:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=897926f75b2ab872093cf6b8e3e754a87bd6d47a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:79:02:0c:56:75:89:d4:44:d8:8c:b3:64:e9: 6d:28:2f:fe:a5:92:89:f2:4a:ec:4f:25:ae:3c:20: de:b1:fd:ab:fa:3a:f1:8e:31:f3:42:de:6e:01:0a: 03:0e:77:a0:7c:e3:03:86:98:85:ed:e1:24:c2:a7: 60:8c:76:0e:08:63:83:f4:d6:9c:49:a6:41:40:66: 50:52:60:2a:76:41:6e:5e:39:31:16:a5:20:ce:e2: c5:a2:21:61:2b:da:7b:9c:cb:4d:4e:6c:24:6e:61: c0:02:11:2e:d2:d3:9b:1b:37:fa:65:6e:88:70:7b: 01:ce:4b:89:33:6a:82:76:aa:03:57:91:8d:c8:65: 60:09:aa:5a:5d:dd:0a:36:d3:12:7f:fd:25:5d:6c: 90:7a:cb:95:08:ce:f6:d2:b4:f9:35:a8:85:55:17: 47:d0:d3:6f:61:39:de:21:59:9f:35:72:05:56:34: 5e:03:1c:1a:e0:cb:cd:a7:96:90:2d:98:ad:7b:ec: 36:41:69:ee:b2:90:c7:d0:4e:8b:96:4e:e5:5d:5b: 50:ff:33:8f:29:eb:31:31:c0:d9:bb:3a:a5:87:4c: ae:36:7a:7d:83:d8:a9:8a:28:73:83:d5:96:08:43: a1:04:e7:f7:0b:00:3d:49:21:2d:6b:13:1a:ae:8e: 7c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:79:26:F7:5B:2A:B8:72:09:3C:F6:B8:E3:E7:54:A8:7B:D6:D4:7A X509v3 Authority Key Identifier: keyid:C1:EB:07:6D:16:70:2C:7D:BE:A9:72:E2:97:2E:F5:76:A1:F2:C8:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/iXkm91squHIJPPa44-dUqHvW1Ho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:d280:1f00::/40 Signature Algorithm: sha256WithRSAEncryption 09:4c:4c:8e:1a:c2:09:83:47:04:73:3c:c2:be:fb:b5:73:97: 3b:04:2b:0f:7e:65:51:30:b1:4f:b5:aa:b4:ae:51:6f:b6:35: e5:28:46:16:96:e9:21:4a:1c:19:f6:b2:c5:84:50:ea:3e:10: dc:e8:d3:8f:5e:1b:06:b5:e6:a7:0c:e8:1a:92:35:4c:7b:1e: 2a:8d:49:d5:5d:9d:f5:84:ca:74:52:76:d3:e7:8e:89:a6:d9: 40:16:dd:48:46:11:2d:6a:39:c6:42:e7:1c:f5:14:55:fd:ae: 22:83:99:79:d4:22:b6:94:73:fe:55:40:d0:a4:a2:e2:fe:36: 2a:b5:8d:a1:cb:5d:f0:a7:d8:81:c2:53:7b:54:f5:ad:fc:a6: ba:61:c7:48:e5:96:00:15:00:73:ac:9c:f3:82:ba:f1:2d:93: 03:b8:1e:ad:55:f0:8f:9f:58:e3:dd:0e:71:bc:7a:4a:cc:2a: 15:05:80:fd:a2:07:1b:bf:fb:d0:e4:05:f1:e4:a2:24:e3:10: cf:06:c7:87:c4:d9:2a:c6:7e:62:26:62:1a:91:46:90:bf:57: d5:d6:68:35:db:24:04:f8:2a:ef:d1:ae:e4:b5:11:e7:45:c1: f5:1f:07:26:eb:21:fd:36:5b:2a:17:fd:ea:35:18:ee:5d:fe: aa:92:6b:22 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9XGFEz4ftoty8jTFrqTGHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZWIwNzZkMTY3MDJjN2RiZWE5NzJlMjk3MmVmNTc2YTFm MmM4NzMwHhcNMjYwMTAyMDYxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTc5MjZmNzViMmFiODcyMDkzY2Y2YjhlM2U3NTRhODdiZDZkNDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnkCDFZ1idRE2IyzZOltKC/+pZKJ 8krsTyWuPCDesf2r+jrxjjHzQt5uAQoDDnegfOMDhpiF7eEkwqdgjHYOCGOD9Nac SaZBQGZQUmAqdkFuXjkxFqUgzuLFoiFhK9p7nMtNTmwkbmHAAhEu0tObGzf6ZW6I cHsBzkuJM2qCdqoDV5GNyGVgCapaXd0KNtMSf/0lXWyQesuVCM720rT5NaiFVRdH 0NNvYTneIVmfNXIFVjReAxwa4MvNp5aQLZite+w2QWnuspDH0E6Llk7lXVtQ/zOP KesxMcDZuzqlh0yuNnp9g9ipiihzg9WWCEOhBOf3CwA9SSEtaxMaro58BQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFIl5JvdbKrhyCTz2uOPnVKh71tR6MB8GA1UdIwQY MBaAFMHrB20WcCx9vqly4pcu9Xah8shzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2VzSGJSWndMSDItcVhMaWx5NzFkcUh5eUhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9hNDNjNmUtMzQ5Yy00OTE0LThkYTMt NmMzMmE2YWIxZWYyLzEvaVhrbTkxc3F1SElKUFBhNDQtZFVxSHZXMUhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9hNDNjNmUtMzQ5Yy00OTE0LThkYTMtNmMzMmE2YWIxZWYy LzEvd2VzSGJSWndMSDItcVhMaWx5NzFkcUh5eUhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgPSgB8w DQYJKoZIhvcNAQELBQADggEBAAlMTI4awgmDRwRzPMK++7VzlzsEKw9+ZVEwsU+1 qrSuUW+2NeUoRhaW6SFKHBn2ssWEUOo+ENzo049eGwa15qcM6BqSNUx7HiqNSdVd nfWEynRSdtPnjomm2UAW3UhGES1qOcZC5xz1FFX9riKDmXnUIraUc/5VQNCkouL+ Niq1jaHLXfCn2IHCU3tU9a38prphx0jllgAVAHOsnPOCuvEtkwO4Hq1V8I+fWOPd DnG8ekrMKhUFgP2iBxu/+9DkBfHkoiTjEM8Gx4fE2SrGfmImYhqRRpC/V9XWaDXb JAT4Ku/RruS1EedFwfUfBybrIf02WyoX/eo1GO5d/qqSayI= -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:13 2026 by rpki-client