This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/IQC6LuJcxVvsBm-_EZRDXpPWxCc.roa File: IQC6LuJcxVvsBm-_EZRDXpPWxCc.roa (raw, json) Hash identifier: wvfm7aMZTdRYHX9ee2IfOerZQpff8X8TbhsJrJvPsRM= Subject key identifier: 21:00:BA:2E:E2:5C:C5:5B:EC:06:6F:BF:11:94:43:5E:93:D6:C4:27 Certificate issuer: /CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7 Certificate serial: 019B791009EC0B0DEA283B6794E12C8FBFD0 Authority key identifier: 02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/IQC6LuJcxVvsBm-_EZRDXpPWxCc.roa Signing time: Thu 01 Jan 2026 10:17:32 +0000 ROA not before: Thu 01 Jan 2026 10:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214710 IP address blocks: 2001:67c:eb8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:09:ec:0b:0d:ea:28:3b:67:94:e1:2c:8f:bf:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7 Validity Not Before: Jan 1 10:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2100ba2ee25cc55bec066fbf1194435e93d6c427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4f:fa:39:86:12:7e:5e:cd:21:85:0c:d5:31: 01:99:f2:8a:1c:96:8f:f3:f9:db:9f:3b:92:ce:da: 0a:0e:4d:2e:ef:ca:9f:32:26:b6:18:3e:fb:62:92: 69:ca:18:52:6f:09:5b:88:53:08:78:65:f9:52:4e: b1:38:b2:e0:d1:99:02:42:07:5c:89:6c:e7:c9:30: 6e:cd:49:4d:c1:a4:62:7d:77:03:d2:7c:0b:4d:96: de:c2:f4:33:b7:a1:ec:74:4d:89:45:47:52:3e:f1: 22:56:67:05:08:fb:17:f6:c3:ad:22:65:7c:67:c0: 93:fc:7b:a9:0a:9f:c5:c5:7d:93:c9:45:6d:e5:03: f0:8b:d6:03:17:6d:35:da:78:e5:36:11:37:f6:d7: e3:ba:15:5f:94:57:9d:72:8b:16:58:45:1b:46:30: 92:1f:ae:ba:d9:26:d0:a2:6d:ea:45:3a:1e:bd:90: e2:b5:06:a9:68:08:dc:41:3f:6b:41:61:51:b5:5a: 49:a5:c5:fb:0f:f3:84:9f:e1:8a:6d:9b:da:91:2d: f3:15:60:39:9d:97:74:3e:06:2e:ed:1f:f4:0c:25: 45:fb:7f:9b:a2:e4:5a:86:f8:1a:d7:df:d4:92:d2: 63:d9:93:b9:3b:a6:07:22:ac:45:5c:77:19:5a:02: f4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:00:BA:2E:E2:5C:C5:5B:EC:06:6F:BF:11:94:43:5E:93:D6:C4:27 X509v3 Authority Key Identifier: keyid:02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/IQC6LuJcxVvsBm-_EZRDXpPWxCc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:eb8::/48 Signature Algorithm: sha256WithRSAEncryption 30:d6:6a:32:94:e3:13:65:fd:fb:0d:f1:4e:eb:e5:2a:0e:26: 9c:8e:de:5c:9c:77:1a:78:af:31:13:61:d4:e9:b9:90:1f:b5: a0:dc:e3:4e:c5:f4:f2:b7:30:84:82:c8:b7:a3:03:91:d7:0e: 71:be:14:e2:4c:68:3d:9f:78:6c:99:21:75:b5:09:29:7c:05: 77:79:a2:49:e0:ec:7c:de:87:0e:a4:cf:1f:6f:2d:2a:9f:f4: 33:3a:ae:04:00:24:fd:31:0a:8f:db:49:08:0f:69:8a:11:23: b8:c5:58:78:ac:b7:6d:df:95:60:95:71:86:a3:23:91:ec:93: d5:94:03:59:80:26:f7:f9:1d:fc:85:d4:d7:e6:62:76:53:4b: a3:63:b4:64:2b:b3:01:6f:79:48:79:15:38:3a:1f:14:70:a2: 44:a7:8c:87:fa:79:0a:87:05:d7:6e:48:43:d8:85:22:bb:05: 41:a7:0d:bd:4d:68:58:35:0c:39:79:bf:52:8a:ea:8d:61:58: 34:a6:84:ce:f8:5d:fe:89:c7:63:c4:f0:81:eb:ef:8d:8b:a9: 12:34:8a:c6:87:71:3f:d0:12:11:ea:7f:09:3d:fb:26:9e:14: 9c:2a:ac:8a:d8:37:79:27:73:6f:63:93:4b:1c:5b:b6:cb:1b: 7b:ee:12:a0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EAnsCw3qKDtnlOEsj7/QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyM2Y2M2ZiMmJmYzYzMWM0NGY0YmI2ZDk0YmRmMjhiM2Vj OWRmZjcwHhcNMjYwMTAxMTAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTAwYmEyZWUyNWNjNTViZWMwNjZmYmYxMTk0NDM1ZTkzZDZjNDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5U/6OYYSfl7NIYUM1TEBmfKKHJaP 8/nbnzuSztoKDk0u78qfMia2GD77YpJpyhhSbwlbiFMIeGX5Uk6xOLLg0ZkCQgdc iWznyTBuzUlNwaRifXcD0nwLTZbewvQzt6HsdE2JRUdSPvEiVmcFCPsX9sOtImV8 Z8CT/HupCp/FxX2TyUVt5QPwi9YDF2012njlNhE39tfjuhVflFedcosWWEUbRjCS H6662SbQom3qRToevZDitQapaAjcQT9rQWFRtVpJpcX7D/OEn+GKbZvakS3zFWA5 nZd0PgYu7R/0DCVF+3+bouRahvga19/UktJj2ZO5O6YHIqxFXHcZWgL0gQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCEAui7iXMVb7AZvvxGUQ16T1sQnMB8GA1UdIwQY MBaAFAI/Y/sr/GMcRPS7bZS98os+yd/3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWo5ai15djhZeHhFOUx0dGxMM3lpejdKM19jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9jZjExYjQtNzk3Yi00ODIwLWJmZWEt NTNjZDkxYjI4YzRmLzEvSVFDNkx1SmN4VnZzQm0tX0VaUkRYcFBXeENjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9jZjExYjQtNzk3Yi00ODIwLWJmZWEtNTNjZDkxYjI4YzRm LzEvQWo5ai15djhZeHhFOUx0dGxMM3lpejdKM19jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA64 MA0GCSqGSIb3DQEBCwUAA4IBAQAw1moylOMTZf37DfFO6+UqDiacjt5cnHcaeK8x E2HU6bmQH7Wg3ONOxfTytzCEgsi3owOR1w5xvhTiTGg9n3hsmSF1tQkpfAV3eaJJ 4Ox83ocOpM8fby0qn/QzOq4EACT9MQqP20kID2mKESO4xVh4rLdt35VglXGGoyOR 7JPVlANZgCb3+R38hdTX5mJ2U0ujY7RkK7MBb3lIeRU4Oh8UcKJEp4yH+nkKhwXX bkhD2IUiuwVBpw29TWhYNQw5eb9SiuqNYVg0poTO+F3+icdjxPCB6++Ni6kSNIrG h3E/0BIR6n8JPfsmnhScKqyK2Dd5J3NvY5NLHFu2yxt77hKg -----END CERTIFICATE-----Generated at Sat Jan 10 22:06:44 2026 by rpki-client