This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/CiIrcBM9yA3ZewdtgV4N1CH8GZY.roa File: CiIrcBM9yA3ZewdtgV4N1CH8GZY.roa (raw, json) Hash identifier: /RFq6SqUsBxBmefl/oJJgPlTdelQAi+UQdtXbYFfKHs= Subject key identifier: 0A:22:2B:70:13:3D:C8:0D:D9:7B:07:6D:81:5E:0D:D4:21:FC:19:96 Certificate issuer: /CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb Certificate serial: 019B79ED60C07085E3F91DBE34C3C15AB8C6 Authority key identifier: 80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/CiIrcBM9yA3ZewdtgV4N1CH8GZY.roa Signing time: Thu 01 Jan 2026 14:19:18 +0000 ROA not before: Thu 01 Jan 2026 14:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31317 IP address blocks: 2001:67c:10b0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:60:c0:70:85:e3:f9:1d:be:34:c3:c1:5a:b8:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb Validity Not Before: Jan 1 14:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a222b70133dc80dd97b076d815e0dd421fc1996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:81:22:4b:ee:20:6d:fa:34:25:1b:5a:96:2b: e4:73:19:7b:95:00:38:0f:72:24:af:e7:a8:07:b3: 13:94:6c:94:91:c5:48:ec:7c:0b:ed:70:dc:0d:92: c3:66:15:a1:32:59:b4:52:e6:8e:b0:27:78:eb:2a: 98:f7:53:bb:fb:7c:a7:bb:c4:af:df:12:72:5a:db: fa:f6:df:05:0c:63:bc:2b:0c:3c:93:55:1d:6a:f7: 9c:19:b5:08:15:16:7f:26:d1:5e:5f:3c:2b:9d:ff: 8b:f9:6e:d5:b2:88:6e:1c:2d:82:d3:1e:f1:4c:16: 64:d9:c9:30:cc:92:17:61:92:67:7e:d4:80:88:f7: 0d:59:a7:6b:8c:9e:44:9d:3f:d0:b9:40:8b:a2:22: 5b:4e:f5:10:1c:d4:33:84:bc:be:7e:f8:95:72:02: 6f:d1:b9:2e:5a:5a:e6:03:14:93:ed:08:a0:f0:60: c7:36:f3:16:60:39:f0:33:ec:a0:5e:5e:7a:27:95: d8:4a:62:09:9d:f7:18:a3:ce:6d:f2:ca:60:b4:6f: 9d:45:1d:cf:2c:3e:fe:4b:76:f8:f1:ad:57:48:9c: 02:29:ed:08:31:94:e7:5a:2b:ee:38:4a:36:06:74: ef:57:f1:ca:60:8b:c4:7f:f7:56:22:a2:cd:4b:18: f5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:22:2B:70:13:3D:C8:0D:D9:7B:07:6D:81:5E:0D:D4:21:FC:19:96 X509v3 Authority Key Identifier: keyid:80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/CiIrcBM9yA3ZewdtgV4N1CH8GZY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:10b0::/48 Signature Algorithm: sha256WithRSAEncryption 2d:d9:2f:c2:a5:6d:2a:38:ad:4c:b2:00:9e:38:6c:9e:64:2f: 88:81:d1:b5:b6:4a:37:c7:d6:90:19:bb:2a:b1:9a:1c:cd:13: ab:35:d2:df:a4:5f:34:48:89:8c:05:0a:3e:dd:08:45:80:33: 98:0a:3e:2a:ec:b5:96:f4:74:d0:e6:a6:90:16:39:9c:21:c8: e7:15:bb:b2:56:aa:1d:07:e4:4e:f6:b0:3f:e4:b0:73:71:11: 59:10:74:c5:d2:04:ac:8b:d1:51:b9:61:51:f2:f1:13:28:3d: 53:59:48:cf:69:37:20:ca:66:a7:0e:5f:df:f0:2d:3a:0b:96: af:40:56:2d:67:10:d1:1e:4b:a7:32:01:89:fb:76:4c:58:9d: 80:6a:d1:94:e4:f7:f6:87:79:40:bf:a8:1e:77:5d:b5:c3:af: de:b1:84:92:a8:19:f7:ce:4c:e5:01:08:14:b8:6f:b7:1a:9e: 62:fe:fc:14:38:6d:63:61:e9:f7:59:c0:d8:05:b0:d0:86:d8: bd:05:1f:56:d6:00:5f:c3:bd:d3:1c:84:1b:2f:e7:3f:33:63: ed:8b:e7:ce:81:ba:fc:4b:60:c6:aa:18:30:d7:00:82:93:7e: 22:b9:f2:b7:d4:ff:42:90:d3:5f:02:5d:6c:8d:4f:03:30:43: 54:d6:97:85 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57WDAcIXj+R2+NMPBWrjGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwMzJjMDdmYWEyMmZlYjU5NjlmZjFmM2I0OTA1ZDFlYTFl NGRlZWIwHhcNMjYwMTAxMTQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTIyMmI3MDEzM2RjODBkZDk3YjA3NmQ4MTVlMGRkNDIxZmMxOTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIEiS+4gbfo0JRtalivkcxl7lQA4 D3Ikr+eoB7MTlGyUkcVI7HwL7XDcDZLDZhWhMlm0UuaOsCd46yqY91O7+3ynu8Sv 3xJyWtv69t8FDGO8Kww8k1UdavecGbUIFRZ/JtFeXzwrnf+L+W7VsohuHC2C0x7x TBZk2ckwzJIXYZJnftSAiPcNWadrjJ5EnT/QuUCLoiJbTvUQHNQzhLy+fviVcgJv 0bkuWlrmAxST7Qig8GDHNvMWYDnwM+ygXl56J5XYSmIJnfcYo85t8spgtG+dRR3P LD7+S3b48a1XSJwCKe0IMZTnWivuOEo2BnTvV/HKYIvEf/dWIqLNSxj1eQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAoiK3ATPcgN2XsHbYFeDdQh/BmWMB8GA1UdIwQY MBaAFIAywH+qIv61lp/x87SQXR6h5N7rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0RMQWY2b2lfcldXbl9IenRKQmRIcUhrM3VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hOTZhYzMtMzk5MC00NWFhLWI0OGUt ODcwY2M1ZjQzY2Q1LzEvQ2lJcmNCTTl5QTNaZXdkdGdWNE4xQ0g4R1pZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hOTZhYzMtMzk5MC00NWFhLWI0OGUtODcwY2M1ZjQzY2Q1 LzEvZ0RMQWY2b2lfcldXbl9IenRKQmRIcUhrM3VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBCw MA0GCSqGSIb3DQEBCwUAA4IBAQAt2S/CpW0qOK1MsgCeOGyeZC+IgdG1tko3x9aQ GbsqsZoczROrNdLfpF80SImMBQo+3QhFgDOYCj4q7LWW9HTQ5qaQFjmcIcjnFbuy VqodB+RO9rA/5LBzcRFZEHTF0gSsi9FRuWFR8vETKD1TWUjPaTcgymanDl/f8C06 C5avQFYtZxDRHkunMgGJ+3ZMWJ2AatGU5Pf2h3lAv6ged121w6/esYSSqBn3zkzl AQgUuG+3Gp5i/vwUOG1jYen3WcDYBbDQhti9BR9W1gBfw73THIQbL+c/M2Pti+fO gbr8S2DGqhgw1wCCk34iufK31P9CkNNfAl1sjU8DMENU1peF -----END CERTIFICATE-----Generated at Mon Feb 9 22:26:47 2026 by rpki-client