This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/iKkbPcQ4WIJAurPfzrtorCYjeJc.roa File: iKkbPcQ4WIJAurPfzrtorCYjeJc.roa (raw, json) Hash identifier: t+1uw36Adk7Pip1XNPSev194m4wMZgCV8f3gz9/3gjg= Subject key identifier: 88:A9:1B:3D:C4:38:58:82:40:BA:B3:DF:CE:BB:68:AC:26:23:78:97 Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b Certificate serial: 019B7CEE540E06B723D399B266EC7FFCD5C4 Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/iKkbPcQ4WIJAurPfzrtorCYjeJc.roa Signing time: Fri 02 Jan 2026 04:19:12 +0000 ROA not before: Fri 02 Jan 2026 04:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202505 IP address blocks: 2a0f:6580:107::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:54:0e:06:b7:23:d3:99:b2:66:ec:7f:fc:d5:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b Validity Not Before: Jan 2 04:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88a91b3dc438588240bab3dfcebb68ac26237897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:69:91:68:bd:8d:65:dd:08:93:60:81:68:5a: 83:ed:33:1d:c8:e0:df:6d:47:a8:30:b6:99:10:52: 50:d4:c8:30:19:62:e0:9d:e1:47:1a:19:2f:83:6b: 69:d2:0a:29:1f:86:ac:0d:98:dd:c8:72:98:fa:ee: 25:c0:31:fc:2a:5f:08:f5:d0:f6:ed:02:83:6f:15: 4d:24:65:03:14:e0:82:2b:58:99:97:71:12:3a:ce: 6e:e1:bb:8e:77:3f:c2:ea:f2:32:53:a1:ce:bd:89: aa:b8:7b:a4:6a:de:42:f5:6d:0a:19:9a:40:ba:ec: 37:08:21:17:ab:97:b6:7c:c5:db:64:28:f7:04:7f: 5c:ed:ff:ca:98:e5:b6:03:38:c7:43:13:f1:c2:3c: 6b:e2:5f:e0:0c:b5:20:a5:1c:25:08:a9:3e:f9:f9: 5b:34:12:6f:bd:93:10:8b:f6:0e:fc:22:47:7b:95: b8:30:da:dc:35:3d:c7:86:ce:a3:36:c4:28:bc:e4: 83:76:d2:2d:ee:95:b8:f6:25:c6:f5:4c:d0:74:3f: f2:1a:93:4a:6a:51:3b:4f:2a:bc:57:23:d0:14:ad: 7b:60:86:d4:ea:40:75:88:6e:03:5a:a8:8d:e6:97: 1b:88:4e:46:2a:73:16:06:10:86:96:58:50:d6:73: 04:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A9:1B:3D:C4:38:58:82:40:BA:B3:DF:CE:BB:68:AC:26:23:78:97 X509v3 Authority Key Identifier: keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/iKkbPcQ4WIJAurPfzrtorCYjeJc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6580:107::/48 Signature Algorithm: sha256WithRSAEncryption 3c:07:3c:08:14:92:c6:6b:da:c2:e7:68:af:d2:94:b3:99:a5: b7:0b:56:e4:80:cb:57:87:f7:ce:cd:fa:98:c0:fa:f3:d9:db: a3:b4:eb:09:2c:5a:28:9a:c2:fe:78:e5:96:c1:33:7e:0f:60: 52:f2:4f:13:7c:b4:52:bd:c4:7d:de:ce:b7:0f:f1:b2:01:e8: d4:0b:34:59:d7:2b:d6:bb:7e:53:66:9a:4b:74:b8:2a:0b:68: 6a:0a:a1:c2:f3:c0:1f:a2:67:df:f5:2f:20:d4:c2:5a:f2:6f: 6b:e0:7f:8f:3b:92:1f:6a:56:34:c9:a7:fd:8f:bc:3f:0e:ca: 0a:d4:19:c4:c9:bf:31:2d:87:27:2d:21:23:1a:82:71:10:17: c4:84:8e:eb:61:5c:1f:5a:15:cc:53:49:bb:dd:c5:6f:46:ec: 8d:02:5e:dd:93:2f:6d:b0:18:30:25:eb:de:2b:1f:d7:f7:10: 81:b2:c7:48:55:1d:e1:a0:75:17:1a:54:92:3b:95:fa:db:11: b9:ed:0a:db:f6:20:e9:96:cb:f5:71:e9:7e:6d:9b:db:37:a0: 9e:44:d6:71:32:e8:93:b0:81:1b:a8:ee:f3:e4:7f:6a:36:25: 18:b1:a4:03:95:97:e3:85:83:79:b7:2d:5f:5d:88:71:12:23: a6:ca:43:ff -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87lQOBrcj05myZux//NXEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1 N2E0OGIwHhcNMjYwMTAyMDQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGE5MWIzZGM0Mzg1ODgyNDBiYWIzZGZjZWJiNjhhYzI2MjM3ODk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2mRaL2NZd0Ik2CBaFqD7TMdyODf bUeoMLaZEFJQ1MgwGWLgneFHGhkvg2tp0gopH4asDZjdyHKY+u4lwDH8Kl8I9dD2 7QKDbxVNJGUDFOCCK1iZl3ESOs5u4buOdz/C6vIyU6HOvYmquHukat5C9W0KGZpA uuw3CCEXq5e2fMXbZCj3BH9c7f/KmOW2AzjHQxPxwjxr4l/gDLUgpRwlCKk++flb NBJvvZMQi/YO/CJHe5W4MNrcNT3Hhs6jNsQovOSDdtIt7pW49iXG9UzQdD/yGpNK alE7Tyq8VyPQFK17YIbU6kB1iG4DWqiN5pcbiE5GKnMWBhCGllhQ1nMEAwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIipGz3EOFiCQLqz3867aKwmI3iXMB8GA1UdIwQY MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt YjIwZTI4ZjUxODhmLzEvaUtrYlBjUTRXSUpBdXJQZnpydG9yQ1lqZUpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9lgAEH MA0GCSqGSIb3DQEBCwUAA4IBAQA8BzwIFJLGa9rC52iv0pSzmaW3C1bkgMtXh/fO zfqYwPrz2dujtOsJLFoomsL+eOWWwTN+D2BS8k8TfLRSvcR93s63D/GyAejUCzRZ 1yvWu35TZppLdLgqC2hqCqHC88Afomff9S8g1MJa8m9r4H+PO5IfalY0yaf9j7w/ DsoK1BnEyb8xLYcnLSEjGoJxEBfEhI7rYVwfWhXMU0m73cVvRuyNAl7dky9tsBgw JeveKx/X9xCBssdIVR3hoHUXGlSSO5X62xG57Qrb9iDplsv1cel+bZvbN6CeRNZx MuiTsIEbqO7z5H9qNiUYsaQDlZfjhYN5ty1fXYhxEiOmykP/ -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:08 2026 by rpki-client