This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/iE4tixFkIv715P0eu_u_NTAl-3Y.roa File: iE4tixFkIv715P0eu_u_NTAl-3Y.roa (raw, json) Hash identifier: Gx1VZSMYs2Q3kePgX9qqrIQ53QvjdUEH9UBfLG26ebg= Subject key identifier: 88:4E:2D:8B:11:64:22:FE:F5:E4:FD:1E:BB:FB:BF:35:30:25:FB:76 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C802F81FBF88A24A14743C3A6022459 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/iE4tixFkIv715P0eu_u_NTAl-3Y.roa Signing time: Fri 02 Jan 2026 02:18:54 +0000 ROA not before: Fri 02 Jan 2026 02:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214717 IP address blocks: 2a0f:7803:fa80::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:2f:81:fb:f8:8a:24:a1:47:43:c3:a6:02:24:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=884e2d8b116422fef5e4fd1ebbfbbf353025fb76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:40:d7:22:8a:33:32:47:aa:84:13:b2:04:d3: 27:13:b4:84:ad:3c:c8:98:f8:54:e5:c3:26:85:51: 0c:d0:ed:6f:a9:5f:0c:05:6a:49:d2:55:bd:26:5b: 72:0d:6f:ef:b6:72:89:d3:33:e5:0a:df:16:10:62: 85:6c:72:1b:1f:e4:80:6a:7a:6d:3c:c3:71:20:f5: cc:1c:5a:50:b9:1a:08:65:27:b2:35:93:d4:31:c3: 6c:b5:4d:03:db:ba:04:94:64:58:92:02:66:d5:99: 5f:3e:13:60:7a:30:91:12:c4:c5:fb:f8:56:0c:00: a2:30:7c:30:3d:cf:54:d1:ec:85:2b:3b:15:6b:5b: 6e:b9:29:b3:9d:72:e6:f7:78:91:31:14:41:41:fe: 69:15:59:ef:97:57:e9:03:a5:51:19:08:5a:5f:18: ae:d8:8f:b4:6c:55:f5:45:ed:54:73:b4:8c:e1:d9: c6:5c:8b:40:ff:84:26:c2:a1:b1:31:26:53:a6:03: 94:b2:55:34:31:c6:7f:30:52:e0:12:59:dc:ff:40: 25:09:1d:7f:d1:d6:16:51:6a:03:77:24:4b:f3:a7: e8:7d:d8:1e:4e:a7:4d:db:cf:6b:c6:0b:cc:93:55: 9f:0c:7e:38:7c:10:eb:fa:17:0b:88:f9:0f:fa:23: d4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:4E:2D:8B:11:64:22:FE:F5:E4:FD:1E:BB:FB:BF:35:30:25:FB:76 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/iE4tixFkIv715P0eu_u_NTAl-3Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:fa80::/44 Signature Algorithm: sha256WithRSAEncryption 62:bf:a0:1a:7e:23:4e:6b:c7:01:e9:63:31:09:0d:78:33:fd: 7b:77:7c:c6:4c:c9:21:50:b5:c2:d4:ce:20:28:e8:66:88:29: 72:30:2c:7b:18:ff:75:32:19:c5:3a:cf:af:bc:f0:60:6f:72: 0d:53:ac:fb:1c:a8:d9:9d:c5:e3:98:6c:ef:76:2b:2e:7d:6d: 93:ac:9d:54:f5:12:8a:6b:f8:80:9c:7e:1c:e0:52:76:98:af: 1c:8c:89:9f:2d:89:b2:41:b3:84:2a:c0:49:9b:96:b2:0c:60: de:68:5b:c8:39:83:c4:a1:9e:d5:62:04:15:aa:ad:a2:b4:81: 59:db:d0:0f:dd:cb:fa:3d:86:47:97:6d:1d:49:5b:39:73:bd: 13:9c:0c:b3:20:02:0d:67:84:d1:a1:27:21:40:7d:ea:e7:ba: f1:e6:bb:dd:2b:46:ab:ea:f5:02:25:ce:29:58:c7:ad:1c:56: 70:96:d1:fd:25:d4:5c:8d:53:a2:24:82:ea:f8:46:66:bb:d4: 81:08:19:56:c5:47:8f:d1:fe:a7:ed:e4:dd:b5:dc:2e:c0:71: cf:88:48:d3:35:ad:a0:4e:57:e0:b1:4b:bb:e4:19:cd:e3:e5: 38:f8:7f:f0:d5:06:39:8f:0a:84:c0:fb:6c:fe:15:7e:8b:68: 06:ce:ed:46 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gC+B+/iKJKFHQ8OmAiRZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODRlMmQ4YjExNjQyMmZlZjVlNGZkMWViYmZiYmYzNTMwMjVmYjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0DXIoozMkeqhBOyBNMnE7SErTzI mPhU5cMmhVEM0O1vqV8MBWpJ0lW9JltyDW/vtnKJ0zPlCt8WEGKFbHIbH+SAanpt PMNxIPXMHFpQuRoIZSeyNZPUMcNstU0D27oElGRYkgJm1ZlfPhNgejCREsTF+/hW DACiMHwwPc9U0eyFKzsVa1tuuSmznXLm93iRMRRBQf5pFVnvl1fpA6VRGQhaXxiu 2I+0bFX1Re1Uc7SM4dnGXItA/4QmwqGxMSZTpgOUslU0McZ/MFLgElnc/0AlCR1/ 0dYWUWoDdyRL86fofdgeTqdN289rxgvMk1WfDH44fBDr+hcLiPkP+iPUwwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIhOLYsRZCL+9eT9Hrv7vzUwJft2MB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvaUU0dGl4RmtJdjcxNVAwZXVfdV9OVEFsLTNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A/qA MA0GCSqGSIb3DQEBCwUAA4IBAQBiv6AafiNOa8cB6WMxCQ14M/17d3zGTMkhULXC 1M4gKOhmiClyMCx7GP91MhnFOs+vvPBgb3INU6z7HKjZncXjmGzvdisufW2TrJ1U 9RKKa/iAnH4c4FJ2mK8cjImfLYmyQbOEKsBJm5ayDGDeaFvIOYPEoZ7VYgQVqq2i tIFZ29AP3cv6PYZHl20dSVs5c70TnAyzIAINZ4TRoSchQH3q57rx5rvdK0ar6vUC Jc4pWMetHFZwltH9JdRcjVOiJILq+EZmu9SBCBlWxUeP0f6n7eTdtdwuwHHPiEjT Na2gTlfgsUu75BnN4+U4+H/w1QY5jwqEwPts/hV+i2gGzu1G -----END CERTIFICATE-----Generated at Wed Jan 21 16:58:23 2026 by rpki-client