This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/IRmRd1Y4JopkYhaXvtdFcCh6RXg.roa File: IRmRd1Y4JopkYhaXvtdFcCh6RXg.roa (raw, json) Hash identifier: y3RTYueSvr/rBXupUy3jCI814s8gR2UAnVrdBOUjP48= Subject key identifier: 21:19:91:77:56:38:26:8A:64:62:16:97:BE:D7:45:70:28:7A:45:78 Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Certificate serial: 019B7CECF80ECD490F1B4CBE4CD1185CA436 Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/IRmRd1Y4JopkYhaXvtdFcCh6RXg.roa Signing time: Fri 02 Jan 2026 04:17:43 +0000 ROA not before: Fri 02 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8248 IP address blocks: 2001:648:2300::/47 maxlen: 47 2001:648:2302::/48 maxlen: 48 2001:648:3400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:f8:0e:cd:49:0f:1b:4c:be:4c:d1:18:5c:a4:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Validity Not Before: Jan 2 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=211991775638268a64621697bed74570287a4578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e7:4d:e1:a0:3f:bc:d9:b6:3a:53:7e:f2:3d: 02:6f:cb:c2:84:e5:10:d9:82:e8:c7:dd:ce:db:e4: ae:7b:c0:f2:1a:ae:81:37:5b:73:29:16:28:07:d6: ca:d7:b0:86:97:e6:ef:12:44:30:5e:9d:a0:88:e0: 87:f5:e0:6b:35:18:96:72:a4:82:0c:2d:a1:b3:a6: 7c:c2:4b:82:c5:b5:46:87:82:31:53:fc:18:28:3f: 7d:a1:6b:11:a2:12:ef:f4:e8:4e:66:75:d8:9e:9e: ac:ea:c2:7b:7c:1d:42:76:06:1e:dd:c3:a3:76:43: 84:c5:58:ed:95:bb:6a:1f:02:3b:48:19:e9:fc:c0: 6d:c1:b0:24:1e:73:14:b2:cf:8f:2c:3e:64:d3:e4: 2f:62:f2:49:6f:9a:b7:7e:2f:3e:35:ef:7f:01:a0: 43:f8:19:18:31:56:6f:dc:18:dc:4b:91:20:57:f8: c9:a1:e5:99:5a:50:b9:cd:f7:38:6b:11:96:d0:9c: b7:90:70:c9:59:6f:42:a2:50:54:0c:35:ce:b4:2d: cb:09:49:e0:b4:15:fd:93:19:b6:94:a5:f9:c9:e5: ae:cb:95:ab:d4:1d:e6:8e:ef:9f:08:2d:26:20:96: 80:7a:14:11:8b:99:17:2b:24:f4:0f:3e:6e:81:c3: a6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:19:91:77:56:38:26:8A:64:62:16:97:BE:D7:45:70:28:7A:45:78 X509v3 Authority Key Identifier: keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/IRmRd1Y4JopkYhaXvtdFcCh6RXg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:648:2300::-2001:648:2302:ffff:ffff:ffff:ffff:ffff 2001:648:3400::/40 Signature Algorithm: sha256WithRSAEncryption 19:d4:3b:7b:57:bf:94:4a:8a:cd:61:4d:b0:88:6a:1e:06:ef: b7:c5:7d:1a:cf:cd:ba:f9:14:69:5d:0c:b5:25:c5:cc:76:23: 31:a9:2b:4b:d3:07:fd:a5:20:84:3c:f0:46:cc:8a:a7:46:6b: 72:f2:17:90:47:71:47:95:18:da:db:f9:48:ac:7d:a4:dc:63: ba:7d:a4:52:ae:e7:d7:26:0b:fb:07:a3:d9:58:48:a3:34:cb: 5e:87:46:2f:bf:bd:25:ac:87:3a:93:2c:24:e1:23:b3:c3:fb: a5:2e:cf:31:3b:a7:b2:c4:b8:2f:7a:d8:cb:77:bc:3b:e1:12: b8:5b:b4:0a:c8:2b:7e:82:93:36:b2:20:a6:65:ba:f2:a8:a8: 78:60:20:ba:62:40:b2:d9:2e:84:d0:5c:f1:df:1d:0b:84:fd: b3:07:37:36:b9:62:0b:f1:ac:34:d1:0e:2e:f8:3a:18:4a:12: 82:3a:27:d2:c3:31:29:24:c1:72:00:f0:b6:30:b5:c0:6f:db: 3e:76:14:01:28:ac:5c:bb:91:2b:21:4e:4f:f4:c3:5a:61:93: 08:33:d8:60:d1:b0:aa:c3:a1:86:b7:bf:7b:d8:c3:74:90:90: 1c:0f:62:95:f1:49:c0:d1:8d:bc:e1:b6:d5:2c:51:ab:e0:4c: df:ac:be:0e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87PgOzUkPG0y+TNEYXKQ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1 MjlkYzMwHhcNMjYwMTAyMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTE5OTE3NzU2MzgyNjhhNjQ2MjE2OTdiZWQ3NDU3MDI4N2E0NTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtudN4aA/vNm2OlN+8j0Cb8vChOUQ 2YLox93O2+Sue8DyGq6BN1tzKRYoB9bK17CGl+bvEkQwXp2giOCH9eBrNRiWcqSC DC2hs6Z8wkuCxbVGh4IxU/wYKD99oWsRohLv9OhOZnXYnp6s6sJ7fB1CdgYe3cOj dkOExVjtlbtqHwI7SBnp/MBtwbAkHnMUss+PLD5k0+QvYvJJb5q3fi8+Ne9/AaBD +BkYMVZv3BjcS5EgV/jJoeWZWlC5zfc4axGW0Jy3kHDJWW9ColBUDDXOtC3LCUng tBX9kxm2lKX5yeWuy5Wr1B3mju+fCC0mIJaAehQRi5kXKyT0Dz5ugcOmOQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCEZkXdWOCaKZGIWl77XRXAoekV4MB8GA1UdIwQY MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut YWFhNDU1M2QyYWJkLzEvSVJtUmQxWTRKb3BrWWhhWHZ0ZEZjQ2g2UlhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbMBEDBgAgAQZI IwMHACABBkgjAgMGACABBkg0MA0GCSqGSIb3DQEBCwUAA4IBAQAZ1Dt7V7+USorN YU2wiGoeBu+3xX0az826+RRpXQy1JcXMdiMxqStL0wf9pSCEPPBGzIqnRmty8heQ R3FHlRja2/lIrH2k3GO6faRSrufXJgv7B6PZWEijNMteh0Yvv70lrIc6kywk4SOz w/ulLs8xO6eyxLgvetjLd7w74RK4W7QKyCt+gpM2siCmZbryqKh4YCC6YkCy2S6E 0Fzx3x0LhP2zBzc2uWIL8aw00Q4u+DoYShKCOifSwzEpJMFyAPC2MLXAb9s+dhQB KKxcu5ErIU5P9MNaYZMIM9hg0bCqw6GGt7972MN0kJAcD2KV8UnA0Y284bbVLFGr 4EzfrL4O -----END CERTIFICATE-----Generated at Mon Feb 2 09:38:56 2026 by rpki-client