This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/IDdWjfqKDEDoT5owNDTMrvBAidI.roa File: IDdWjfqKDEDoT5owNDTMrvBAidI.roa (raw, json) Hash identifier: Cun9jfihjGmUz4jQNcB3IyvoxQWP4/ccqsrygK3OW84= Subject key identifier: 20:37:56:8D:FA:8A:0C:40:E8:4F:9A:30:34:34:CC:AE:F0:40:89:D2 Certificate issuer: /CN=93efa2bf90a23728852727f126ede65286c3ca67 Certificate serial: 019B79103380CE35490507B5E46DBCDBE371 Authority key identifier: 93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/IDdWjfqKDEDoT5owNDTMrvBAidI.roa Signing time: Thu 01 Jan 2026 10:17:43 +0000 ROA not before: Thu 01 Jan 2026 10:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211061 IP address blocks: 2a11:2801:4824::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:33:80:ce:35:49:05:07:b5:e4:6d:bc:db:e3:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93efa2bf90a23728852727f126ede65286c3ca67 Validity Not Before: Jan 1 10:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2037568dfa8a0c40e84f9a303434ccaef04089d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ca:43:2c:33:76:db:1b:fe:8c:1a:a4:15:01: 9b:31:ec:50:b4:b4:bd:69:e4:16:4c:bc:84:0c:16: 4d:61:9b:1c:db:b7:2c:fa:7e:05:ff:eb:4a:f2:6a: b7:1a:b5:5c:98:8b:c7:38:6b:08:ac:6a:7c:c0:83: c6:87:79:20:3b:fa:b3:e0:d4:a8:fb:68:97:d2:fd: 8d:9b:be:2f:37:cc:fe:48:1b:39:c1:f6:44:8b:a7: 15:1e:6c:b5:84:20:20:c6:3a:dd:f3:46:32:2c:87: 00:d6:18:7e:24:13:25:c0:57:60:8d:a5:b7:7f:c5: 46:61:ec:4b:bb:7c:ec:4f:93:f6:fa:a6:91:16:60: 79:8b:65:ad:75:1c:00:89:4a:e5:6f:2d:da:96:c9: 0a:62:a9:4a:3e:a6:6b:86:39:38:83:ea:58:c8:11: 6a:48:39:81:82:45:ed:97:3f:45:42:d4:25:11:35: 3c:a6:53:94:db:21:2f:32:2c:f5:85:bb:a1:d2:f7: bf:39:ed:63:2a:34:e0:88:c6:ae:1d:e2:5a:df:23: 57:e4:0c:9e:d1:32:9e:58:a6:61:ca:47:2a:13:dd: 92:84:fd:16:ed:05:2c:96:85:c5:c8:92:85:40:bb: db:a5:48:d7:ab:c6:ed:ac:a5:b1:5f:ab:41:15:16: 08:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:37:56:8D:FA:8A:0C:40:E8:4F:9A:30:34:34:CC:AE:F0:40:89:D2 X509v3 Authority Key Identifier: keyid:93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/IDdWjfqKDEDoT5owNDTMrvBAidI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:2801:4824::/48 Signature Algorithm: sha256WithRSAEncryption 57:9d:d1:3a:b9:bc:14:45:8e:cf:ed:ea:2e:e9:48:45:57:6f: 1d:31:de:33:42:b8:81:cd:31:a3:9b:40:12:fb:36:3e:20:18: 15:db:4a:3d:85:f0:0a:bc:c9:a5:b0:32:85:42:3b:6f:5e:92: 1b:8d:1a:9e:a3:d4:e1:f8:61:df:08:f0:71:64:d5:7d:4a:c8: bb:cd:2b:a1:f1:6d:ea:32:8b:9d:58:eb:51:a9:ab:81:7e:42: 5a:ec:ef:6f:0b:03:2e:bf:ba:3d:85:9e:0b:49:3d:70:ad:ca: c3:d4:f4:97:25:7c:54:0f:2d:50:c7:3b:de:d3:c5:cc:9d:52: 6c:22:e4:83:28:5e:fc:c2:08:18:f4:87:11:76:ed:2e:4f:50: fb:2f:16:72:c3:a5:3a:8b:3c:f1:ee:f5:72:10:71:0a:a6:0e: 31:d9:4b:42:33:a0:87:32:a2:34:ab:63:cd:4f:9f:3a:88:42: d9:02:1c:71:a7:79:0f:4d:11:04:50:a6:ab:66:bf:75:fe:4a: b0:42:3a:28:8e:96:51:da:6a:08:7b:d6:e7:3f:55:d5:c1:84: 64:22:4a:a2:8f:3e:31:11:ee:65:e5:f2:20:1d:e9:a7:f6:96: 0b:64:2c:38:35:69:8e:89:70:34:01:7d:d4:86:7e:47:46:4f: 93:b1:e9:3e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EDOAzjVJBQe15G282+NxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZWZhMmJmOTBhMjM3Mjg4NTI3MjdmMTI2ZWRlNjUyODZj M2NhNjcwHhcNMjYwMTAxMTAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDM3NTY4ZGZhOGEwYzQwZTg0ZjlhMzAzNDM0Y2NhZWYwNDA4OWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApspDLDN22xv+jBqkFQGbMexQtLS9 aeQWTLyEDBZNYZsc27cs+n4F/+tK8mq3GrVcmIvHOGsIrGp8wIPGh3kgO/qz4NSo +2iX0v2Nm74vN8z+SBs5wfZEi6cVHmy1hCAgxjrd80YyLIcA1hh+JBMlwFdgjaW3 f8VGYexLu3zsT5P2+qaRFmB5i2WtdRwAiUrlby3alskKYqlKPqZrhjk4g+pYyBFq SDmBgkXtlz9FQtQlETU8plOU2yEvMiz1hbuh0ve/Oe1jKjTgiMauHeJa3yNX5Aye 0TKeWKZhykcqE92ShP0W7QUsloXFyJKFQLvbpUjXq8btrKWxX6tBFRYImwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCA3Vo36igxA6E+aMDQ0zK7wQInSMB8GA1UdIwQY MBaAFJPvor+QojcohScn8Sbt5lKGw8pnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay0taXY1Q2lOeWlGSnlmeEp1M21Vb2JEeW1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hOTJlYjItYjJiYS00ZWZkLWJkMDkt NmFiYjFjY2I2MTUzLzEvSURkV2pmcUtERURvVDVvd05EVE1ydkJBaWRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9hOTJlYjItYjJiYS00ZWZkLWJkMDktNmFiYjFjY2I2MTUz LzEvay0taXY1Q2lOeWlGSnlmeEp1M21Vb2JEeW1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhEoAUgk MA0GCSqGSIb3DQEBCwUAA4IBAQBXndE6ubwURY7P7eou6UhFV28dMd4zQriBzTGj m0AS+zY+IBgV20o9hfAKvMmlsDKFQjtvXpIbjRqeo9Th+GHfCPBxZNV9Ssi7zSuh 8W3qMoudWOtRqauBfkJa7O9vCwMuv7o9hZ4LST1wrcrD1PSXJXxUDy1Qxzve08XM nVJsIuSDKF78wggY9IcRdu0uT1D7LxZyw6U6izzx7vVyEHEKpg4x2UtCM6CHMqI0 q2PNT586iELZAhxxp3kPTREEUKarZr91/kqwQjoojpZR2moIe9bnP1XVwYRkIkqi jz4xEe5l5fIgHemn9pYLZCw4NWmOiXA0AX3Uhn5HRk+Tsek+ -----END CERTIFICATE-----Generated at Sun Jan 18 12:07:58 2026 by rpki-client