This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/iflWHVHxpmDjWRQsawE9EnRAAog.roa File: iflWHVHxpmDjWRQsawE9EnRAAog.roa (raw, json) Hash identifier: Pfv9IcP/hIRl799n9aafLKMa8g4cQzw8aOtBJX7HXA0= Subject key identifier: 89:F9:56:1D:51:F1:A6:60:E3:59:14:2C:6B:01:3D:12:74:40:02:88 Certificate issuer: /CN=c53b229e73ce6bb196d65c0bef119560657a3720 Certificate serial: 019B7E37DC0444558DD9675C2CC7FBA5B6CC Authority key identifier: C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/iflWHVHxpmDjWRQsawE9EnRAAog.roa Signing time: Fri 02 Jan 2026 10:19:08 +0000 ROA not before: Fri 02 Jan 2026 10:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201545 IP address blocks: 2a05:2340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:dc:04:44:55:8d:d9:67:5c:2c:c7:fb:a5:b6:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c53b229e73ce6bb196d65c0bef119560657a3720 Validity Not Before: Jan 2 10:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89f9561d51f1a660e359142c6b013d1274400288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cb:53:b8:82:b8:f5:7a:22:fa:70:97:c4:07: 39:8e:89:d2:be:dd:5c:bc:5e:f4:6d:9d:9c:f7:45: a7:7c:25:0f:68:ee:be:f4:5e:21:ce:72:5b:1c:c5: 57:51:e5:62:ff:22:eb:26:67:94:37:95:7a:a8:d3: 0e:56:be:31:49:80:fc:35:6e:eb:51:af:88:9a:07: 47:a2:86:40:e6:6b:15:9f:32:ea:f4:29:13:b5:a3: 20:7c:aa:ca:bb:db:cb:41:32:63:d4:7e:29:8e:41: fd:be:64:05:a9:cd:90:4b:c1:7e:de:70:2a:75:93: 86:4a:bf:27:5c:3c:3f:fc:53:03:03:e7:84:7a:49: 9c:3e:66:d7:95:a8:f7:aa:af:4e:34:6b:11:e0:a0: cb:70:d4:48:98:0f:bf:69:1d:cc:ff:9a:4e:0b:d1: a8:91:8f:f3:0c:12:40:aa:66:07:1c:d5:b2:49:05: 67:58:a6:19:ed:40:13:72:c9:b6:9a:61:76:20:09: bc:e6:d3:ee:54:e2:e6:f4:04:f5:8c:47:60:39:86: 50:9c:28:aa:b2:68:6f:b5:cf:23:84:e6:ef:ad:fd: ad:fb:47:8c:35:5d:e7:b3:9c:16:da:94:9e:06:7a: 2c:a0:25:df:81:76:d2:d4:5e:90:90:7d:df:63:a4: 02:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F9:56:1D:51:F1:A6:60:E3:59:14:2C:6B:01:3D:12:74:40:02:88 X509v3 Authority Key Identifier: keyid:C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/iflWHVHxpmDjWRQsawE9EnRAAog.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:2340::/32 Signature Algorithm: sha256WithRSAEncryption a9:63:f4:38:20:35:d2:22:05:8c:8a:d3:68:24:23:29:a4:ed: f2:97:95:1e:f6:7e:bb:75:9e:70:72:13:53:de:d6:41:18:8d: 81:7c:c9:c9:9b:1f:d7:f8:f5:1e:5c:0d:d3:59:ee:8a:dd:60: 36:6a:03:ca:9c:b4:f1:a1:da:79:4c:2b:3e:fd:e1:d6:0d:ac: 83:41:b6:8f:a4:2b:f0:14:b0:f8:3e:01:03:86:ab:6d:53:5f: 69:dd:00:84:99:fb:5b:59:73:3b:27:5c:dd:fc:93:75:51:cf: 09:7f:20:ee:35:05:41:93:dd:0f:02:19:68:c8:f4:c8:0b:d2: 16:02:f7:6a:e2:d5:06:9d:1a:94:f7:ca:0c:fa:c2:21:69:36: 36:7c:09:36:ed:63:2b:03:e0:a8:9f:91:41:04:bc:04:d8:30: 98:bb:84:3b:00:7c:dd:c9:9a:80:45:9b:87:25:a7:cc:79:21: cf:04:12:bf:a8:37:61:be:f6:d9:2a:22:32:22:15:e2:84:8f: d0:ec:7e:2a:11:dd:86:27:15:d7:e3:0a:a6:65:c3:64:36:e5: 33:bb:99:bb:89:6b:8d:6f:e8:90:9a:9c:41:2d:da:0c:eb:00: ec:d5:c2:f6:6b:b2:77:07:97:2b:7b:8d:a1:c3:95:40:9a:bf: 2d:df:96:aa -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+N9wERFWN2WdcLMf7pbbMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1M2IyMjllNzNjZTZiYjE5NmQ2NWMwYmVmMTE5NTYwNjU3 YTM3MjAwHhcNMjYwMTAyMTAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWY5NTYxZDUxZjFhNjYwZTM1OTE0MmM2YjAxM2QxMjc0NDAwMjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8tTuIK49Xoi+nCXxAc5jonSvt1c vF70bZ2c90WnfCUPaO6+9F4hznJbHMVXUeVi/yLrJmeUN5V6qNMOVr4xSYD8NW7r Ua+ImgdHooZA5msVnzLq9CkTtaMgfKrKu9vLQTJj1H4pjkH9vmQFqc2QS8F+3nAq dZOGSr8nXDw//FMDA+eEekmcPmbXlaj3qq9ONGsR4KDLcNRImA+/aR3M/5pOC9Go kY/zDBJAqmYHHNWySQVnWKYZ7UATcsm2mmF2IAm85tPuVOLm9AT1jEdgOYZQnCiq smhvtc8jhObvrf2t+0eMNV3ns5wW2pSeBnosoCXfgXbS1F6QkH3fY6QCswIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFIn5Vh1R8aZg41kULGsBPRJ0QAKIMB8GA1UdIwQY MBaAFMU7Ip5zzmuxltZcC+8RlWBlejcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFRzaW5uUE9hN0dXMWx3TDd4R1ZZR1Y2TnlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lOTI2NjYtNDUyNi00N2MxLWIyYmEt NjM3MjhiMGZhMTA4LzEvaWZsV0hWSHhwbURqV1JRc2F3RTlFblJBQW9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9lOTI2NjYtNDUyNi00N2MxLWIyYmEtNjM3MjhiMGZhMTA4 LzEveFRzaW5uUE9hN0dXMWx3TDd4R1ZZR1Y2TnlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgUjQDAN BgkqhkiG9w0BAQsFAAOCAQEAqWP0OCA10iIFjIrTaCQjKaTt8peVHvZ+u3WecHIT U97WQRiNgXzJyZsf1/j1HlwN01nuit1gNmoDypy08aHaeUwrPv3h1g2sg0G2j6Qr 8BSw+D4BA4arbVNfad0AhJn7W1lzOydc3fyTdVHPCX8g7jUFQZPdDwIZaMj0yAvS FgL3auLVBp0alPfKDPrCIWk2NnwJNu1jKwPgqJ+RQQS8BNgwmLuEOwB83cmagEWb hyWnzHkhzwQSv6g3Yb722SoiMiIV4oSP0Ox+KhHdhicV1+MKpmXDZDblM7uZu4lr jW/okJqcQS3aDOsA7NXC9muydweXK3uNocOVQJq/Ld+Wqg== -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:33 2026 by rpki-client