This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/_kIyn54Kwl02SBVsVFIcVuZztFA.roa File: _kIyn54Kwl02SBVsVFIcVuZztFA.roa (raw, json) Hash identifier: 72qRo50GT69ynWH6rCDwF6eh8ixb9QAqQtQqlDICbx4= Subject key identifier: FE:42:32:9F:9E:0A:C2:5D:36:48:15:6C:54:52:1C:56:E6:73:B4:50 Certificate issuer: /CN=4ae8d08909d185af41d0a0c3be5ea28c352f0226 Certificate serial: 019B7834E292DA03824B53F5348EE993EDBC Authority key identifier: 4A:E8:D0:89:09:D1:85:AF:41:D0:A0:C3:BE:5E:A2:8C:35:2F:02:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/_kIyn54Kwl02SBVsVFIcVuZztFA.roa Signing time: Thu 01 Jan 2026 06:18:10 +0000 ROA not before: Thu 01 Jan 2026 06:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212989 IP address blocks: 2001:678:ddc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:e2:92:da:03:82:4b:53:f5:34:8e:e9:93:ed:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ae8d08909d185af41d0a0c3be5ea28c352f0226 Validity Not Before: Jan 1 06:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe42329f9e0ac25d3648156c54521c56e673b450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e9:ea:a9:26:fc:bc:1f:3c:a7:6a:d1:04:7f: 70:e4:45:40:0d:b2:5f:bd:b9:64:ee:83:6f:8d:86: 5f:78:2d:6d:c0:5f:74:bf:1d:c2:6a:00:36:fa:2e: 3f:04:af:5e:2e:6a:12:92:4a:10:f2:94:6c:85:ee: 48:22:84:92:db:e9:31:df:cd:9f:0c:64:5d:40:34: 5f:6f:7f:a5:80:02:61:43:44:de:7b:cb:48:78:85: 94:15:23:f9:cd:3a:39:23:f2:10:9a:cb:e8:34:89: 81:05:48:ff:14:cf:ec:b6:61:26:4f:6d:f6:51:b1: e2:c7:da:7f:ae:a8:73:09:35:1d:40:22:1c:ab:83: 77:79:25:c7:b3:73:d6:c6:ec:9e:d3:b5:a9:4d:86: 06:f4:08:d9:db:a3:75:f8:5d:32:c7:6e:ae:dc:25: 42:af:af:df:4b:87:ef:c5:f8:c5:59:1a:cc:e6:ce: 0c:f4:4f:4f:cf:78:ec:49:7e:56:15:5b:b7:95:fa: b7:3d:3f:44:96:9c:b6:a6:0a:be:8c:69:48:1b:88: 1f:bb:ef:e9:0f:3b:4e:5b:87:10:f9:94:d5:9f:15: ea:5e:d3:e3:1a:0f:9d:5d:e8:2f:47:7e:58:59:d3: 9d:60:70:66:1c:f6:d7:d9:b9:f4:a2:8b:52:7b:39: b4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:42:32:9F:9E:0A:C2:5D:36:48:15:6C:54:52:1C:56:E6:73:B4:50 X509v3 Authority Key Identifier: keyid:4A:E8:D0:89:09:D1:85:AF:41:D0:A0:C3:BE:5E:A2:8C:35:2F:02:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/_kIyn54Kwl02SBVsVFIcVuZztFA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:ddc::/48 Signature Algorithm: sha256WithRSAEncryption 2a:5d:ce:13:74:fa:13:7a:34:11:05:af:0d:52:89:03:71:51: c5:69:78:02:bd:11:68:f8:6d:a4:77:f4:8a:75:b0:95:b9:b8: 5e:47:9c:88:fc:e9:5b:a7:51:e2:ee:ee:e8:7f:0c:8b:4d:ca: 7d:55:56:26:a2:92:38:2e:a8:0e:d8:b8:90:09:0a:82:a4:7d: 6e:21:f3:79:18:70:40:e0:45:7b:08:9b:ff:a9:2a:70:66:ad: c1:fd:ad:f3:80:a9:d7:0b:53:98:5d:8d:4b:ea:3e:c1:77:8a: 13:3b:e5:9b:c9:6a:fb:1d:4d:e8:36:09:c7:e2:ef:a5:bf:43: 21:52:b7:8d:3e:94:d6:44:37:92:49:a1:68:9f:d6:eb:e1:ab: c6:eb:9a:cb:9c:ab:dc:ee:25:12:f0:31:08:67:bf:1f:95:6d: bd:ba:20:cf:0b:cf:2c:a7:8f:b0:d4:da:ba:16:fb:75:a4:bd: 31:e5:fe:5a:fd:23:05:12:39:27:96:4c:da:94:41:fa:c7:eb: 86:59:0d:ac:7a:f8:20:6b:1d:16:0b:bd:4d:92:50:74:41:fa: e8:f4:b7:0d:5f:0f:1d:15:ae:1c:ad:e4:1b:8a:e2:32:85:23: 99:30:58:af:d3:0a:40:d8:1f:c3:bf:0d:da:2a:9b:e4:a0:bc: d1:bd:a9:94 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4NOKS2gOCS1P1NI7pk+28MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZThkMDg5MDlkMTg1YWY0MWQwYTBjM2JlNWVhMjhjMzUy ZjAyMjYwHhcNMjYwMTAxMDYxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTQyMzI5ZjllMGFjMjVkMzY0ODE1NmM1NDUyMWM1NmU2NzNiNDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+nqqSb8vB88p2rRBH9w5EVADbJf vblk7oNvjYZfeC1twF90vx3CagA2+i4/BK9eLmoSkkoQ8pRshe5IIoSS2+kx382f DGRdQDRfb3+lgAJhQ0Tee8tIeIWUFSP5zTo5I/IQmsvoNImBBUj/FM/stmEmT232 UbHix9p/rqhzCTUdQCIcq4N3eSXHs3PWxuye07WpTYYG9AjZ26N1+F0yx26u3CVC r6/fS4fvxfjFWRrM5s4M9E9Pz3jsSX5WFVu3lfq3PT9Elpy2pgq+jGlIG4gfu+/p DztOW4cQ+ZTVnxXqXtPjGg+dXegvR35YWdOdYHBmHPbX2bn0ootSezm0zwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFP5CMp+eCsJdNkgVbFRSHFbmc7RQMB8GA1UdIwQY MBaAFEro0IkJ0YWvQdCgw75eoow1LwImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3VqUWlRblJoYTlCMEtERHZsNmlqRFV2QWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80MTQ0NmItZTQ5YS00YWU3LTgxZTUt OTQyNTg1NmVjNTQyLzEvX2tJeW41NEt3bDAyU0JWc1ZGSWNWdVp6dEZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS80MTQ0NmItZTQ5YS00YWU3LTgxZTUtOTQyNTg1NmVjNTQy LzEvU3VqUWlRblJoYTlCMEtERHZsNmlqRFV2QWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA3c MA0GCSqGSIb3DQEBCwUAA4IBAQAqXc4TdPoTejQRBa8NUokDcVHFaXgCvRFo+G2k d/SKdbCVubheR5yI/Olbp1Hi7u7ofwyLTcp9VVYmopI4LqgO2LiQCQqCpH1uIfN5 GHBA4EV7CJv/qSpwZq3B/a3zgKnXC1OYXY1L6j7Bd4oTO+WbyWr7HU3oNgnH4u+l v0MhUreNPpTWRDeSSaFon9br4avG65rLnKvc7iUS8DEIZ78flW29uiDPC88sp4+w 1Nq6Fvt1pL0x5f5a/SMFEjknlkzalEH6x+uGWQ2sevggax0WC71NklB0Qfro9LcN Xw8dFa4creQbiuIyhSOZMFiv0wpA2B/Dvw3aKpvkoLzRvamU -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:30 2026 by rpki-client