This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/iQPX0ayEGzxk6a9oqqUew1HkYlI.roa File: iQPX0ayEGzxk6a9oqqUew1HkYlI.roa (raw, json) Hash identifier: w9hIv7rUMK4mch1qlrYdJn+0PwXGsWqZECABhq8al9E= Subject key identifier: 89:03:D7:D1:AC:84:1B:3C:64:E9:AF:68:AA:A5:1E:C3:51:E4:62:52 Certificate issuer: /CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e Certificate serial: 019B7EA7232985680BFCF4ECB35BC93A5067 Authority key identifier: DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/iQPX0ayEGzxk6a9oqqUew1HkYlI.roa Signing time: Fri 02 Jan 2026 12:20:41 +0000 ROA not before: Fri 02 Jan 2026 12:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15576 IP address blocks: 193.43.183.0/24 maxlen: 24 2001:67c:66c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:23:29:85:68:0b:fc:f4:ec:b3:5b:c9:3a:50:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e Validity Not Before: Jan 2 12:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8903d7d1ac841b3c64e9af68aaa51ec351e46252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:37:2a:99:fc:1b:8f:9e:56:12:62:fe:1a:60: cf:fa:d9:b0:c4:67:02:8f:28:43:45:90:04:6d:6b: f6:f7:70:4c:77:ea:cd:d4:3a:42:ad:d2:3c:de:e4: c3:d9:9b:15:cc:fe:4f:e1:2d:24:6a:f5:14:12:cf: b3:52:56:8a:c7:e2:6e:3d:59:93:80:d2:79:f5:9b: 64:96:fc:0d:6c:8c:3c:12:f1:9d:cb:e5:5c:1a:6d: 40:77:75:fb:6b:88:32:21:da:7f:be:e4:2a:5d:32: 34:01:11:c6:ad:71:a8:52:2a:59:a6:ab:5e:70:01: 8f:36:15:8d:57:7e:f2:b5:54:34:ac:69:3a:7d:80: 8c:1e:44:33:1b:be:84:92:a6:bb:04:6c:92:f8:3c: 80:64:65:7b:89:74:b9:eb:71:61:49:65:43:6c:ef: 5c:9b:c9:f3:92:4a:8d:03:8b:0e:d5:92:f7:ff:71: 43:9c:f0:ef:0b:0b:19:69:47:81:6a:2c:69:22:99: fb:54:4d:ac:9a:0f:24:df:21:f6:ea:4c:5e:74:93: 9b:00:c4:1d:55:51:68:b5:80:d4:25:95:a7:8b:90: 11:bf:df:66:3c:1f:5c:53:17:fa:33:d3:31:c9:16: 75:c9:7e:3d:02:61:2c:10:bc:b3:c5:8e:54:a8:03: 11:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:03:D7:D1:AC:84:1B:3C:64:E9:AF:68:AA:A5:1E:C3:51:E4:62:52 X509v3 Authority Key Identifier: keyid:DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/iQPX0ayEGzxk6a9oqqUew1HkYlI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.43.183.0/24 IPv6: 2001:67c:66c::/48 Signature Algorithm: sha256WithRSAEncryption 68:66:ed:e2:01:65:f7:6a:15:df:e5:17:09:64:4d:d2:b7:2d: b8:83:51:7f:af:40:1f:0d:30:3b:1c:56:eb:e8:1f:91:b5:e8: b4:df:55:f7:48:bd:1a:66:2e:17:68:06:26:f9:03:24:04:3c: e5:9a:4c:b5:93:1b:3a:d6:ee:5d:79:20:ca:06:c9:99:71:05: a1:d7:83:14:43:51:1d:db:9c:cf:0a:05:35:94:22:29:57:8c: 55:ee:e5:c6:c6:09:47:a4:d6:fe:0c:7f:71:05:b4:32:20:56: 7f:45:c8:a4:04:2d:8e:53:42:ce:d2:02:02:a4:51:0c:07:5a: 2b:97:9c:0e:21:9d:80:9a:96:f9:f2:80:47:fb:13:3d:85:c1: d5:9e:5c:fe:3c:44:5d:52:99:59:2d:c7:27:ec:af:1a:cd:c8: 30:6e:44:c9:e7:df:7e:2d:50:d0:50:88:c0:a1:e2:04:ff:aa: 5b:72:a1:76:7f:df:92:76:91:fc:e5:57:f3:39:54:4b:15:91: 8c:61:45:31:02:58:1c:f8:3e:19:d3:3e:aa:71:fb:82:7f:18: 96:b8:23:a9:f2:40:a3:27:2f:43:ab:f6:28:df:6f:64:0a:6b: 7a:87:ef:5d:23:1e:f3:50:1f:c9:27:10:8c:57:16:bf:ab:88: 71:dc:78:85 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+pyMphWgL/PTss1vJOlBnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYzJmZjZhNDYxMDUwZDQ4ZjNmZGIwYjUxMzg3MTU0YjVk NmNkMGUwHhcNMjYwMTAyMTIyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTAzZDdkMWFjODQxYjNjNjRlOWFmNjhhYWE1MWVjMzUxZTQ2MjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDcqmfwbj55WEmL+GmDP+tmwxGcC jyhDRZAEbWv293BMd+rN1DpCrdI83uTD2ZsVzP5P4S0kavUUEs+zUlaKx+JuPVmT gNJ59ZtklvwNbIw8EvGdy+VcGm1Ad3X7a4gyIdp/vuQqXTI0ARHGrXGoUipZpqte cAGPNhWNV37ytVQ0rGk6fYCMHkQzG76Ekqa7BGyS+DyAZGV7iXS563FhSWVDbO9c m8nzkkqNA4sO1ZL3/3FDnPDvCwsZaUeBaixpIpn7VE2smg8k3yH26kxedJObAMQd VVFotYDUJZWni5ARv99mPB9cUxf6M9MxyRZ1yX49AmEsELyzxY5UqAMR0wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFIkD19GshBs8ZOmvaKqlHsNR5GJSMB8GA1UdIwQY MBaAFNvC/2pGEFDUjz/bC1E4cVS11s0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjhMX2FrWVFVTlNQUDlzTFVUaHhWTFhXelE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84MzRmOWQtNTViNy00NTViLTk2YmIt OWNjY2I3ZWYzYjViLzEvaVFQWDBheUVHenhrNmE5b3FxVWV3MUhrWWxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi84MzRmOWQtNTViNy00NTViLTk2YmItOWNjY2I3ZWYzYjVi LzEvMjhMX2FrWVFVTlNQUDlzTFVUaHhWTFhXelE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwSu3MA8E AgACMAkDBwAgAQZ8BmwwDQYJKoZIhvcNAQELBQADggEBAGhm7eIBZfdqFd/lFwlk TdK3LbiDUX+vQB8NMDscVuvoH5G16LTfVfdIvRpmLhdoBib5AyQEPOWaTLWTGzrW 7l15IMoGyZlxBaHXgxRDUR3bnM8KBTWUIilXjFXu5cbGCUek1v4Mf3EFtDIgVn9F yKQELY5TQs7SAgKkUQwHWiuXnA4hnYCalvnygEf7Ez2FwdWeXP48RF1SmVktxyfs rxrNyDBuRMnn334tUNBQiMCh4gT/qltyoXZ/35J2kfzlV/M5VEsVkYxhRTECWBz4 PhnTPqpx+4J/GJa4I6nyQKMnL0Or9ijfb2QKa3qH710jHvNQH8knEIxXFr+riHHc eIU= -----END CERTIFICATE-----Generated at Mon Jan 26 19:19:23 2026 by rpki-client