This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/i3fwIWYHmrbZ4Q0LfBJoI0pL4eM.roa File: i3fwIWYHmrbZ4Q0LfBJoI0pL4eM.roa (raw, json) Hash identifier: lzJAIL587sZVQf8sujo44Gz8CEXrbl2KlNzyp7ldRQ4= Subject key identifier: 8B:77:F0:21:66:07:9A:B6:D9:E1:0D:0B:7C:12:68:23:4A:4B:E1:E3 Certificate issuer: /CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1 Certificate serial: 019B7C7FD3AB1E373F3FF006C1121697F243 Authority key identifier: 4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/i3fwIWYHmrbZ4Q0LfBJoI0pL4eM.roa Signing time: Fri 02 Jan 2026 02:18:30 +0000 ROA not before: Fri 02 Jan 2026 02:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2116 IP address blocks: 2001:67c:b74::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:d3:ab:1e:37:3f:3f:f0:06:c1:12:16:97:f2:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1 Validity Not Before: Jan 2 02:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b77f02166079ab6d9e10d0b7c1268234a4be1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:18:30:af:09:4e:e0:e4:f2:0b:19:bd:b8:99: d8:93:b3:fb:9c:60:13:0b:ce:d7:d8:75:f1:bf:69: a6:b5:f5:d5:57:59:92:25:4d:8c:46:2e:51:da:40: 51:33:ee:21:4f:98:a5:69:44:f6:ec:d9:c5:d3:b0: 70:a6:bd:ef:13:76:7b:2b:97:01:75:0e:38:2e:cd: 3b:ec:ac:6d:20:53:35:ed:e7:91:bc:a6:e9:7e:8b: 99:bb:86:89:10:87:1d:e5:3d:9a:7a:5e:28:19:dc: bc:6c:16:b0:e6:69:2d:81:a9:9c:13:1c:4d:b6:ee: 39:5b:4e:1c:4b:57:c4:28:c9:c1:89:9c:22:b2:9b: 0d:20:ed:e0:d4:29:e2:66:21:64:38:55:ff:7f:dd: 34:28:61:bd:1d:34:24:08:09:af:f5:e3:74:49:12: 74:48:0a:7d:66:e7:5e:32:9a:56:31:91:cc:92:c4: eb:f1:e4:47:0c:89:4a:18:3e:a2:8d:da:e1:71:8d: 51:bf:2e:68:f3:d7:b8:dd:3f:62:41:3f:e1:6d:b6: 04:f2:d1:7f:54:c1:f5:70:6d:94:bd:4f:3d:a2:53: 6f:ca:57:2f:ad:97:92:94:0c:69:3d:d3:33:69:32: 56:d4:31:74:bb:2b:39:d5:60:98:5f:b9:e6:8b:00: 35:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:77:F0:21:66:07:9A:B6:D9:E1:0D:0B:7C:12:68:23:4A:4B:E1:E3 X509v3 Authority Key Identifier: keyid:4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/i3fwIWYHmrbZ4Q0LfBJoI0pL4eM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:b74::/48 Signature Algorithm: sha256WithRSAEncryption 16:9c:da:94:2f:21:83:09:b3:fc:09:68:67:18:24:31:3c:c1: 1b:21:28:1d:c6:e4:6f:7e:a2:4d:a2:85:cc:08:58:d7:b6:cc: 8d:ea:45:47:88:47:82:aa:c6:c2:af:58:56:fa:0f:3c:69:46: 53:4f:da:ab:09:dc:3c:8f:13:32:66:38:cf:a0:de:f7:b3:8d: 1e:93:d1:e8:00:ae:e8:8f:60:41:7a:6a:58:b8:37:c8:5c:1f: 12:49:84:11:70:a3:80:bc:33:73:5d:a9:be:24:e3:94:22:99: 41:6e:b9:f8:bc:d2:99:63:83:31:f0:c4:89:3c:98:6c:28:49: 21:60:f7:67:ec:32:1f:61:26:54:eb:4e:c9:5e:8e:9c:6e:ca: 54:02:ea:ce:1a:d2:95:c7:b9:0a:a5:1f:8b:fe:b7:2f:20:96: 8b:1f:76:ec:1b:43:2d:da:09:9b:fb:82:d1:26:79:3e:34:fe: ce:8d:6e:a7:59:d3:d9:3c:c0:ae:2a:fe:6a:cd:ae:c6:bb:6a: c9:c2:4f:49:55:a3:d4:93:35:3f:17:2e:f2:fe:23:5f:5b:c9: 08:18:e6:40:63:42:7f:fb:c3:ac:2d:97:94:14:bd:20:cc:fa: 0b:ce:aa:30:fe:58:20:a7:3c:f1:4b:0f:9b:17:bd:05:d4:13: 6d:e5:9a:12 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8f9OrHjc/P/AGwRIWl/JDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMjRjMzA4YjAyNDFjM2JjYzE0Y2Y2Nzc3NTkxZDI3MjM3 ZmZhZjEwHhcNMjYwMTAyMDIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Yjc3ZjAyMTY2MDc5YWI2ZDllMTBkMGI3YzEyNjgyMzRhNGJlMWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshgwrwlO4OTyCxm9uJnYk7P7nGAT C87X2HXxv2mmtfXVV1mSJU2MRi5R2kBRM+4hT5ilaUT27NnF07Bwpr3vE3Z7K5cB dQ44Ls077KxtIFM17eeRvKbpfouZu4aJEIcd5T2ael4oGdy8bBaw5mktgamcExxN tu45W04cS1fEKMnBiZwispsNIO3g1CniZiFkOFX/f900KGG9HTQkCAmv9eN0SRJ0 SAp9ZudeMppWMZHMksTr8eRHDIlKGD6ijdrhcY1Rvy5o89e43T9iQT/hbbYE8tF/ VMH1cG2UvU89olNvylcvrZeSlAxpPdMzaTJW1DF0uys51WCYX7nmiwA1BwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIt38CFmB5q22eENC3wSaCNKS+HjMB8GA1UdIwQY MBaAFEwkwwiwJBw7zBTPZ3dZHScjf/rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVENURENMQWtIRHZNRk05bmQxa2RKeU5fLXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85MmQ3MTktMGJjMi00YTFlLThiOTQt NjYxYmIwZTllNmVjLzEvaTNmd0lXWUhtcmJaNFEwTGZCSm9JMHBMNGVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85MmQ3MTktMGJjMi00YTFlLThiOTQtNjYxYmIwZTllNmVj LzEvVENURENMQWtIRHZNRk05bmQxa2RKeU5fLXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAt0 MA0GCSqGSIb3DQEBCwUAA4IBAQAWnNqULyGDCbP8CWhnGCQxPMEbISgdxuRvfqJN ooXMCFjXtsyN6kVHiEeCqsbCr1hW+g88aUZTT9qrCdw8jxMyZjjPoN73s40ek9Ho AK7oj2BBempYuDfIXB8SSYQRcKOAvDNzXam+JOOUIplBbrn4vNKZY4Mx8MSJPJhs KEkhYPdn7DIfYSZU607JXo6cbspUAurOGtKVx7kKpR+L/rcvIJaLH3bsG0Mt2gmb +4LRJnk+NP7OjW6nWdPZPMCuKv5qza7Gu2rJwk9JVaPUkzU/Fy7y/iNfW8kIGOZA Y0J/+8OsLZeUFL0gzPoLzqow/lggpzzxSw+bF70F1BNt5ZoS -----END CERTIFICATE-----Generated at Mon Jan 26 16:56:08 2026 by rpki-client