This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/iaDbFzCGuAlwzl6bRW55-YwI7tA.roa File: iaDbFzCGuAlwzl6bRW55-YwI7tA.roa (raw, json) Hash identifier: 6F9zTT+j/4thBUAM1E97eqvGP/DYTAVmPQOGCVMj6V0= Subject key identifier: 89:A0:DB:17:30:86:B8:09:70:CE:5E:9B:45:6E:79:F9:8C:08:EE:D0 Certificate issuer: /CN=98c9c3189bec1379311bd1353fa9749a68dd992d Certificate serial: 019B78A35CFFF93AD1D5505E51D250363433 Authority key identifier: 98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/iaDbFzCGuAlwzl6bRW55-YwI7tA.roa Signing time: Thu 01 Jan 2026 08:18:50 +0000 ROA not before: Thu 01 Jan 2026 08:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214011 IP address blocks: 2a0f:2880:500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5c:ff:f9:3a:d1:d5:50:5e:51:d2:50:36:34:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98c9c3189bec1379311bd1353fa9749a68dd992d Validity Not Before: Jan 1 08:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89a0db173086b80970ce5e9b456e79f98c08eed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f0:e3:9e:d4:ff:0a:69:00:de:f2:8a:19:cb: 63:7a:e3:36:91:33:7d:bd:4e:87:8c:46:d5:fc:00: 26:44:73:83:da:01:13:d3:a8:1c:e6:85:54:0f:24: 7e:7a:41:cb:b5:ef:b0:ac:3e:f8:2c:6d:b0:cc:7f: 98:bc:0d:6b:b6:68:15:ba:00:60:40:19:db:20:00: 49:70:40:c9:09:79:b3:62:f1:a8:92:f4:18:bd:b6: d9:de:47:a0:03:0c:89:da:80:78:e8:05:a7:4e:31: 70:dc:6d:b4:5c:1d:80:d0:fc:66:89:53:2d:70:0e: 76:fb:8f:a6:77:3f:81:31:a7:0d:da:67:5f:6c:b7: 71:9a:85:0d:19:d1:75:d1:e2:72:b7:29:83:e7:98: 58:b1:56:b5:79:d0:6d:80:2c:be:97:7e:3b:6b:a2: 54:df:58:42:07:73:9a:79:94:a0:dd:7b:fb:43:40: 23:2a:f3:f7:ba:50:09:cd:be:28:9d:76:e2:36:7f: 95:aa:60:ff:b0:7c:54:0d:7d:2e:bf:fc:7a:d5:3b: fd:8f:c6:04:ad:dc:d8:88:9e:22:a0:5b:b8:87:39: 17:54:08:a8:d8:83:9b:dd:9f:29:9f:40:6a:69:e9: 60:a3:ad:32:19:dc:24:98:34:f1:4f:6f:d3:80:f8: c5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A0:DB:17:30:86:B8:09:70:CE:5E:9B:45:6E:79:F9:8C:08:EE:D0 X509v3 Authority Key Identifier: keyid:98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/iaDbFzCGuAlwzl6bRW55-YwI7tA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:2880:500::/40 Signature Algorithm: sha256WithRSAEncryption 8b:12:60:3d:78:2d:13:86:96:d4:53:5c:28:d4:67:50:81:ca: e7:88:82:2a:e6:0d:13:ed:09:1a:8e:e4:51:4e:67:1a:3c:da: 2d:04:c9:31:50:68:4f:e5:b9:95:5f:3e:4f:be:66:6f:e3:1a: b2:4b:9f:12:77:5d:a7:31:8f:d7:24:6d:47:aa:03:3a:be:0b: 16:4f:b6:aa:94:bb:b6:5c:0b:cf:7a:92:41:3e:76:43:25:22: 3a:38:c1:12:14:54:60:cc:a6:c0:f5:f5:7a:a8:fb:a7:ee:7e: 5f:31:b7:cf:60:50:e0:70:1c:ba:cb:f2:69:d9:de:e5:e4:80: 52:29:7a:75:ea:7d:69:35:9b:0c:61:18:7e:ca:b8:fb:d0:bf: 45:0d:06:ce:f1:98:51:71:2d:01:08:0b:38:ec:da:58:36:66: d9:8e:14:d8:fa:44:40:65:e6:f2:3a:f4:98:f1:95:48:ce:37: 91:ec:ab:6a:b3:29:2a:81:34:b1:73:60:ce:ed:27:86:43:c5: 2b:c6:0a:15:07:10:7b:f1:e7:53:c4:5d:67:8a:57:a9:a6:8a: 4e:c9:33:8d:68:ca:24:16:40:90:7a:a8:b9:3a:d3:f3:3d:0b: 8b:87:8f:93:76:64:0a:97:9b:c8:59:33:4e:77:6f:91:fb:b9: 27:a4:0b:7c -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt4o1z/+TrR1VBeUdJQNjQzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4YzljMzE4OWJlYzEzNzkzMTFiZDEzNTNmYTk3NDlhNjhk ZDk5MmQwHhcNMjYwMTAxMDgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWEwZGIxNzMwODZiODA5NzBjZTVlOWI0NTZlNzlmOThjMDhlZWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PDjntT/CmkA3vKKGctjeuM2kTN9 vU6HjEbV/AAmRHOD2gET06gc5oVUDyR+ekHLte+wrD74LG2wzH+YvA1rtmgVugBg QBnbIABJcEDJCXmzYvGokvQYvbbZ3kegAwyJ2oB46AWnTjFw3G20XB2A0PxmiVMt cA52+4+mdz+BMacN2mdfbLdxmoUNGdF10eJytymD55hYsVa1edBtgCy+l347a6JU 31hCB3OaeZSg3Xv7Q0AjKvP3ulAJzb4onXbiNn+VqmD/sHxUDX0uv/x61Tv9j8YE rdzYiJ4ioFu4hzkXVAio2IOb3Z8pn0Bqaelgo60yGdwkmDTxT2/TgPjF8wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFImg2xcwhrgJcM5em0VuefmMCO7QMB8GA1UdIwQY MBaAFJjJwxib7BN5MRvRNT+pdJpo3ZktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU1uREdKdnNFM2t4RzlFMVA2bDBtbWpkbVMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83MDEzOWQtMWU3NS00MGI1LTkxNmEt OWM4MTZhNDA0OTBlLzEvaWFEYkZ6Q0d1QWx3emw2YlJXNTUtWXdJN3RBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83MDEzOWQtMWU3NS00MGI1LTkxNmEtOWM4MTZhNDA0OTBl LzEvbU1uREdKdnNFM2t4RzlFMVA2bDBtbWpkbVMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg8ogAUw DQYJKoZIhvcNAQELBQADggEBAIsSYD14LROGltRTXCjUZ1CByueIgirmDRPtCRqO 5FFOZxo82i0EyTFQaE/luZVfPk++Zm/jGrJLnxJ3Xacxj9ckbUeqAzq+CxZPtqqU u7ZcC896kkE+dkMlIjo4wRIUVGDMpsD19Xqo+6fufl8xt89gUOBwHLrL8mnZ3uXk gFIpenXqfWk1mwxhGH7KuPvQv0UNBs7xmFFxLQEICzjs2lg2ZtmOFNj6REBl5vI6 9JjxlUjON5Hsq2qzKSqBNLFzYM7tJ4ZDxSvGChUHEHvx51PEXWeKV6mmik7JM41o yiQWQJB6qLk60/M9C4uHj5N2ZAqXm8hZM053b5H7uSekC3w= -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:43 2026 by rpki-client