This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/innX9lb4iY5daVK2E2rA2nfoxjs.roa File: innX9lb4iY5daVK2E2rA2nfoxjs.roa (raw, json) Hash identifier: HcyqxmgsaaWQIr5ImGNgVzRafVcN2hAGewJVT1pkPO4= Subject key identifier: 8A:79:D7:F6:56:F8:89:8E:5D:69:52:B6:13:6A:C0:DA:77:E8:C6:3B Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C801768D9B932B43B1D7EEA65A7B628 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/innX9lb4iY5daVK2E2rA2nfoxjs.roa Signing time: Fri 02 Jan 2026 02:18:47 +0000 ROA not before: Fri 02 Jan 2026 02:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2a0f:7803:f98f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:17:68:d9:b9:32:b4:3b:1d:7e:ea:65:a7:b6:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a79d7f656f8898e5d6952b6136ac0da77e8c63b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c8:22:71:a2:a9:7a:bb:d0:5f:88:80:2d:64: a4:39:aa:a9:17:f2:53:4b:4b:27:5a:2e:24:38:b7: 1c:58:fa:3a:60:36:3c:2c:8c:f6:00:ee:cd:0d:80: 1d:ac:36:e6:60:a2:2d:bf:e7:14:01:f9:0b:a1:4b: 24:38:54:f8:21:1f:70:54:89:30:0b:6c:0a:2e:c5: da:98:30:12:77:18:07:04:29:de:22:97:18:2a:c5: 68:4e:d4:ff:f6:e8:42:da:37:f0:d2:88:ef:c9:4f: 90:59:86:58:a9:90:40:c3:d2:5a:cc:2d:91:77:74: 75:6f:be:10:cd:db:4e:f9:91:1e:26:f8:8a:2f:2b: 41:3a:4b:08:14:c6:88:35:af:2f:3d:37:6c:1f:01: 32:10:c2:b6:15:c8:9c:99:5f:4d:a5:61:4d:1b:b6: 68:d7:d3:a5:ee:a5:6a:77:7b:27:fd:43:2c:a0:ab: 64:65:72:ba:e2:91:9d:e1:0d:59:54:51:e2:11:7e: 92:08:dc:14:31:68:97:0b:00:be:1a:69:a9:87:e4: 14:c8:4b:79:24:b1:85:28:b2:ac:39:d4:cd:17:58: ea:57:0d:aa:8b:51:82:27:c0:ba:7f:9d:46:f1:01: f5:0f:8c:58:93:d2:bf:ac:e3:37:f5:2e:91:f9:b5: 88:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:79:D7:F6:56:F8:89:8E:5D:69:52:B6:13:6A:C0:DA:77:E8:C6:3B X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/innX9lb4iY5daVK2E2rA2nfoxjs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:f98f::/48 Signature Algorithm: sha256WithRSAEncryption 5c:ad:42:f5:f8:8b:48:c7:90:a4:e7:7f:c4:96:be:de:80:59: 1d:73:89:b3:38:ac:e1:21:3b:75:4f:43:ca:75:f6:e9:47:d1: 96:53:69:f3:07:66:9d:95:90:68:74:b9:ad:52:e5:ce:7a:cc: 0d:84:1b:a8:0e:75:f0:10:7b:9b:de:27:1a:d5:2f:e7:7c:e5: 7a:f3:75:73:53:14:2b:39:73:f8:63:85:bf:4f:f6:cd:ea:e5: 9f:cc:44:2b:84:7a:56:07:7c:4d:b0:10:19:9a:b2:58:3a:94: 23:a7:b3:cc:93:93:97:48:c2:3b:57:28:59:6b:15:e9:f0:65: a0:d3:28:81:3b:08:3d:22:ce:70:20:80:a8:0e:6b:5e:ba:f4: a5:b8:ed:cd:60:e6:71:6c:3a:45:55:9a:de:bb:99:8a:37:75: b0:4d:48:67:54:5a:97:38:4b:3a:6c:66:87:0e:9b:39:3d:0c: 20:d6:94:89:cc:b9:5c:1d:41:4c:4b:67:99:82:d1:02:32:19: af:96:0e:78:47:a5:75:69:4b:15:50:87:f2:22:40:9d:43:fa: dd:b1:b7:f4:98:45:bc:dd:73:fd:10:4b:91:6c:78:c9:d1:3e: 26:9c:68:b1:b9:d6:58:89:94:91:de:37:2a:f4:06:96:2c:bf: 52:92:08:73 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gBdo2bkytDsdfuplp7YoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTc5ZDdmNjU2Zjg4OThlNWQ2OTUyYjYxMzZhYzBkYTc3ZThjNjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMgicaKpervQX4iALWSkOaqpF/JT S0snWi4kOLccWPo6YDY8LIz2AO7NDYAdrDbmYKItv+cUAfkLoUskOFT4IR9wVIkw C2wKLsXamDASdxgHBCneIpcYKsVoTtT/9uhC2jfw0ojvyU+QWYZYqZBAw9JazC2R d3R1b74QzdtO+ZEeJviKLytBOksIFMaINa8vPTdsHwEyEMK2FcicmV9NpWFNG7Zo 19Ol7qVqd3sn/UMsoKtkZXK64pGd4Q1ZVFHiEX6SCNwUMWiXCwC+Gmmph+QUyEt5 JLGFKLKsOdTNF1jqVw2qi1GCJ8C6f51G8QH1D4xYk9K/rOM39S6R+bWIewIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIp51/ZW+ImOXWlSthNqwNp36MY7MB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvaW5uWDlsYjRpWTVkYVZLMkUyckEybmZveGpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg94A/mP MA0GCSqGSIb3DQEBCwUAA4IBAQBcrUL1+ItIx5Ck53/Elr7egFkdc4mzOKzhITt1 T0PKdfbpR9GWU2nzB2adlZBodLmtUuXOeswNhBuoDnXwEHub3ica1S/nfOV683Vz UxQrOXP4Y4W/T/bN6uWfzEQrhHpWB3xNsBAZmrJYOpQjp7PMk5OXSMI7VyhZaxXp 8GWg0yiBOwg9Is5wIICoDmteuvSluO3NYOZxbDpFVZreu5mKN3WwTUhnVFqXOEs6 bGaHDps5PQwg1pSJzLlcHUFMS2eZgtECMhmvlg54R6V1aUsVUIfyIkCdQ/rdsbf0 mEW83XP9EEuRbHjJ0T4mnGixudZYiZSR3jcq9AaWLL9Skghz -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:35 2026 by rpki-client