This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/iiNRP5UtNE9PRzv6f6Zk7F_WagA.roa File: iiNRP5UtNE9PRzv6f6Zk7F_WagA.roa (raw, json) Hash identifier: BxwlJ6L7JiirPlQT5hR2YOM60CkwhHbmXiQ9C6w1opo= Subject key identifier: 8A:23:51:3F:95:2D:34:4F:4F:47:3B:FA:7F:A6:64:EC:5F:D6:6A:00 Certificate issuer: /CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82 Certificate serial: 019B7A5AC98DA3853641BC34C5D9D0E2A08C Authority key identifier: 6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/iiNRP5UtNE9PRzv6f6Zk7F_WagA.roa Signing time: Thu 01 Jan 2026 16:18:48 +0000 ROA not before: Thu 01 Jan 2026 16:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212354 IP address blocks: 2001:67c:b48::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c9:8d:a3:85:36:41:bc:34:c5:d9:d0:e2:a0:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82 Validity Not Before: Jan 1 16:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a23513f952d344f4f473bfa7fa664ec5fd66a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0e:2b:6a:d1:f1:cf:fa:58:b3:40:26:60:28: 91:ef:46:b3:1a:34:51:86:a7:b7:1f:67:fb:38:f8: 42:9c:74:aa:c7:fe:04:cb:41:c8:a7:00:e2:71:6c: 65:d8:5a:1b:d1:50:32:d7:04:2e:5d:8d:6e:3f:74: b4:91:b4:f4:0a:24:6b:4f:67:76:ba:7b:b6:ae:52: d9:a3:ef:77:e9:bf:a3:f9:c2:e6:fa:3c:59:ec:87: d6:b6:38:19:24:9e:e9:ae:f1:00:6d:2e:ca:79:1c: 58:45:14:b9:84:eb:ec:a0:4a:35:8f:25:1a:15:bf: 4a:80:eb:a4:e4:e8:01:01:a6:00:18:36:d4:56:cd: f3:f6:74:87:04:77:92:62:25:eb:9b:6a:6b:1f:c9: ad:c1:d8:f2:65:db:6c:a0:fd:c8:bc:6f:8c:dd:86: cb:a3:c0:e5:65:24:f0:f6:ad:df:55:67:f8:8d:a2: d7:61:2d:30:b0:aa:29:9c:9a:73:79:7a:fa:3e:2f: 3e:a7:0c:6a:f3:fb:93:e5:73:89:07:bd:ab:35:1c: 9c:5b:ab:e7:6c:bc:42:82:67:a4:9a:5f:5a:f8:1f: 98:9e:51:98:7e:1e:bc:e7:0f:97:35:0a:87:3e:a4: 42:45:94:a9:05:1c:bc:d8:96:aa:91:33:a4:61:41: a0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:23:51:3F:95:2D:34:4F:4F:47:3B:FA:7F:A6:64:EC:5F:D6:6A:00 X509v3 Authority Key Identifier: keyid:6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/iiNRP5UtNE9PRzv6f6Zk7F_WagA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:b48::/48 Signature Algorithm: sha256WithRSAEncryption 94:0a:81:9f:29:ba:4f:33:15:f0:72:c0:46:13:9b:e6:4d:88: f2:75:53:61:e6:a1:61:f7:a8:f9:dd:4f:20:02:95:95:0b:81: c4:f4:eb:51:39:8a:cc:90:15:b1:9f:6b:33:a6:6f:16:93:44: 48:e5:05:b6:88:ae:83:2e:2f:72:51:5c:6d:d4:63:90:ca:90: d3:7e:bf:e5:55:4d:38:ba:46:91:2b:c8:1d:f1:3f:70:7f:ec: 29:61:f1:68:1c:33:4f:1f:01:18:64:a4:eb:ce:ad:10:c1:d4: bc:36:03:14:99:48:70:44:b0:a9:3d:d6:33:a9:c3:7a:ef:7d: 0f:db:cf:78:2d:61:76:9a:e4:90:d9:76:92:3b:00:b1:e6:1b: 83:d9:30:e0:2b:c2:7f:0f:7d:b9:f3:c3:23:82:47:66:5f:da: 35:53:1c:77:29:ad:5c:66:5d:c3:c6:6a:98:f4:b3:64:3f:ee: fb:db:5e:d6:4d:58:ed:ea:c9:e6:d1:07:8a:1b:31:9b:b5:d3: b9:ca:15:5d:c2:5f:79:03:1e:84:84:07:3f:2f:55:14:bc:20: 7a:40:33:90:e9:3a:c6:b7:f4:42:ac:62:dd:bd:47:8b:96:42: 38:85:69:1e:b5:64:7b:3b:d1:c6:6c:fd:f4:6d:17:e8:36:bc: e7:51:6e:a9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6WsmNo4U2Qbw0xdnQ4qCMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNTZkZWY4NDU4ZmQ4ZWIyZWQ3NTRhYzJlOTBkMzUwNWEz MmFhODIwHhcNMjYwMTAxMTYxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTIzNTEzZjk1MmQzNDRmNGY0NzNiZmE3ZmE2NjRlYzVmZDY2YTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw4ratHxz/pYs0AmYCiR70azGjRR hqe3H2f7OPhCnHSqx/4Ey0HIpwDicWxl2Fob0VAy1wQuXY1uP3S0kbT0CiRrT2d2 unu2rlLZo+936b+j+cLm+jxZ7IfWtjgZJJ7prvEAbS7KeRxYRRS5hOvsoEo1jyUa Fb9KgOuk5OgBAaYAGDbUVs3z9nSHBHeSYiXrm2prH8mtwdjyZdtsoP3IvG+M3YbL o8DlZSTw9q3fVWf4jaLXYS0wsKopnJpzeXr6Pi8+pwxq8/uT5XOJB72rNRycW6vn bLxCgmekml9a+B+YnlGYfh685w+XNQqHPqRCRZSpBRy82JaqkTOkYUGgyQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIojUT+VLTRPT0c7+n+mZOxf1moAMB8GA1UdIwQY MBaAFG1W3vhFj9jrLtdUrC6Q01BaMqqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlZiZS1FV1AyT3N1MTFTc0xwRFRVRm95cW9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8zNmU3OWMtODQ3Mi00NjdiLTljMTQt ODI4MWY3N2ViZDIyLzEvaWlOUlA1VXRORTlQUnp2NmY2Wms3Rl9XYWdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8zNmU3OWMtODQ3Mi00NjdiLTljMTQtODI4MWY3N2ViZDIy LzEvYlZiZS1FV1AyT3N1MTFTc0xwRFRVRm95cW9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAtI MA0GCSqGSIb3DQEBCwUAA4IBAQCUCoGfKbpPMxXwcsBGE5vmTYjydVNh5qFh96j5 3U8gApWVC4HE9OtROYrMkBWxn2szpm8Wk0RI5QW2iK6DLi9yUVxt1GOQypDTfr/l VU04ukaRK8gd8T9wf+wpYfFoHDNPHwEYZKTrzq0QwdS8NgMUmUhwRLCpPdYzqcN6 730P2894LWF2muSQ2XaSOwCx5huD2TDgK8J/D32588MjgkdmX9o1Uxx3Ka1cZl3D xmqY9LNkP+77217WTVjt6snm0QeKGzGbtdO5yhVdwl95Ax6EhAc/L1UUvCB6QDOQ 6TrGt/RCrGLdvUeLlkI4hWketWR7O9HGbP30bRfoNrznUW6p -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:26 2026 by rpki-client