This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/IaTEN--kH_dSjdBIROHuInlx4Bo.roa File: IaTEN--kH_dSjdBIROHuInlx4Bo.roa (raw, json) Hash identifier: 1cZyyxSAepD+Jwtzrqs3fnWlZAbA1eBf9v0eNvZYto0= Subject key identifier: 21:A4:C4:37:EF:A4:1F:F7:52:8D:D0:48:44:E1:EE:22:79:71:E0:1A Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C8038A64DB643AC9F62F8FF995D6D4B Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/IaTEN--kH_dSjdBIROHuInlx4Bo.roa Signing time: Fri 02 Jan 2026 02:18:56 +0000 ROA not before: Fri 02 Jan 2026 02:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401776 IP address blocks: 2a0f:7802:e200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:38:a6:4d:b6:43:ac:9f:62:f8:ff:99:5d:6d:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21a4c437efa41ff7528dd04844e1ee227971e01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:49:1d:0b:42:6a:53:52:16:91:75:ac:a6:25: 8b:6f:45:fb:09:31:3c:7b:80:95:fe:73:7e:16:1c: 76:72:57:1a:f1:76:a5:fa:4c:26:37:87:2f:24:17: 80:09:dc:8a:eb:bb:02:11:4f:ab:f8:09:ff:af:92: f9:81:99:5b:ad:87:a4:66:89:aa:0a:49:da:15:c7: 40:90:49:43:5d:7e:09:4f:9b:3b:62:63:3c:ba:18: b3:72:cb:04:0c:2c:a5:31:dd:3f:ac:7d:67:14:a5: 7d:3a:6f:3a:9b:62:9e:24:bf:3b:2d:ef:b0:77:31: ea:e1:7c:7a:ad:e3:be:5a:ce:01:0c:e9:9c:67:50: c0:ac:08:14:29:b9:93:75:26:71:04:b6:42:bf:bf: d8:55:0a:85:b4:2d:a2:3f:51:a3:2b:11:cc:d5:27: d5:1c:d6:06:60:af:77:76:13:8b:cc:c0:21:41:79: 27:3b:95:f1:e1:b3:5a:de:44:f2:b8:1d:80:ad:62: 12:6f:15:2d:5b:99:a5:99:30:87:79:fb:99:94:cf: 09:29:2e:65:bf:de:15:c0:dd:4d:9f:ad:1f:52:34: d7:b8:5c:09:d1:52:6f:e4:2a:20:c9:46:2a:06:aa: bb:47:a5:fd:52:35:a4:78:a3:b8:af:09:a8:42:21: 08:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A4:C4:37:EF:A4:1F:F7:52:8D:D0:48:44:E1:EE:22:79:71:E0:1A X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/IaTEN--kH_dSjdBIROHuInlx4Bo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7802:e200::/40 Signature Algorithm: sha256WithRSAEncryption 2d:b9:db:20:0b:c5:7c:3a:dc:4c:fd:cc:5e:28:18:14:84:c3: 4c:54:3a:83:f0:62:b7:04:3f:8c:67:c9:5a:ed:91:d7:c1:7b: 7e:75:f3:b0:1e:30:f8:53:7a:0e:78:28:a6:ba:e1:ce:6c:d4: 61:20:6c:c2:74:2c:e9:ed:5d:81:aa:e3:63:3d:b7:c4:56:be: 34:8d:9d:d4:49:de:f3:4d:d4:fe:76:fb:6f:1f:e3:ce:c6:b8: f6:38:54:5e:57:19:6c:62:2c:bd:59:95:cc:ee:11:17:a4:11: c4:ca:72:65:11:21:31:ec:74:56:09:12:6b:06:f9:35:3c:0e: ad:aa:6b:f4:40:93:9a:b1:dd:75:1d:a1:ae:0a:82:d7:23:96: c4:57:e3:51:a2:28:bd:ea:a4:a8:ad:2c:e0:e5:36:b0:8d:35: fb:57:e9:88:9f:64:ab:22:ee:ce:94:de:be:6a:60:17:93:20: e4:9d:7f:1d:bd:32:c0:fd:a8:ca:c8:46:41:21:fc:e4:f4:22: e8:57:15:cf:f4:07:da:ae:9a:15:0e:03:42:c2:06:e7:44:16: f7:c7:d8:85:62:e7:3a:7f:e9:4b:cd:a2:24:58:1c:a3:ba:f8: 5a:a0:0f:5f:fb:cc:5b:87:b9:ac:87:e6:22:af:d7:20:18:91: cd:8c:75:5d -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8gDimTbZDrJ9i+P+ZXW1LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWE0YzQzN2VmYTQxZmY3NTI4ZGQwNDg0NGUxZWUyMjc5NzFlMDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUkdC0JqU1IWkXWspiWLb0X7CTE8 e4CV/nN+Fhx2clca8Xal+kwmN4cvJBeACdyK67sCEU+r+An/r5L5gZlbrYekZomq CknaFcdAkElDXX4JT5s7YmM8uhizcssEDCylMd0/rH1nFKV9Om86m2KeJL87Le+w dzHq4Xx6reO+Ws4BDOmcZ1DArAgUKbmTdSZxBLZCv7/YVQqFtC2iP1GjKxHM1SfV HNYGYK93dhOLzMAhQXknO5Xx4bNa3kTyuB2ArWISbxUtW5mlmTCHefuZlM8JKS5l v94VwN1Nn60fUjTXuFwJ0VJv5CogyUYqBqq7R6X9UjWkeKO4rwmoQiEIvQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFCGkxDfvpB/3Uo3QSETh7iJ5ceAaMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvSWFURU4tLWtIX2RTamRCSVJPSHVJbmx4NEJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg94AuIw DQYJKoZIhvcNAQELBQADggEBAC252yALxXw63Ez9zF4oGBSEw0xUOoPwYrcEP4xn yVrtkdfBe35187AeMPhTeg54KKa64c5s1GEgbMJ0LOntXYGq42M9t8RWvjSNndRJ 3vNN1P52+28f487GuPY4VF5XGWxiLL1ZlczuERekEcTKcmURITHsdFYJEmsG+TU8 Dq2qa/RAk5qx3XUdoa4KgtcjlsRX41GiKL3qpKitLODlNrCNNftX6YifZKsi7s6U 3r5qYBeTIOSdfx29MsD9qMrIRkEh/OT0IuhXFc/0B9qumhUOA0LCBudEFvfH2IVi 5zp/6UvNoiRYHKO6+FqgD1/7zFuHuayH5iKv1yAYkc2MdV0= -----END CERTIFICATE-----Generated at Tue Jan 20 22:19:35 2026 by rpki-client