This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/IQVeBT9K0YNFY4Ka5sf1aBJpr-A.roa File: IQVeBT9K0YNFY4Ka5sf1aBJpr-A.roa (raw, json) Hash identifier: 9Ggm4hjT3iI5+rIEGghJJv6NR/jwkhK0QjRLFWx7uvA= Subject key identifier: 21:05:5E:05:3F:4A:D1:83:45:63:82:9A:E6:C7:F5:68:12:69:AF:E0 Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019B78A377B1F9557D16E8D7925A0176608D Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/IQVeBT9K0YNFY4Ka5sf1aBJpr-A.roa Signing time: Thu 01 Jan 2026 08:18:57 +0000 ROA not before: Thu 01 Jan 2026 08:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62588 IP address blocks: 2a03:f87:aabb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:77:b1:f9:55:7d:16:e8:d7:92:5a:01:76:60:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Jan 1 08:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21055e053f4ad1834563829ae6c7f5681269afe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3c:9d:8d:af:42:a4:a2:e0:17:1c:3a:62:15: 9c:1a:03:15:d0:bc:7d:08:3b:db:33:e3:f4:f3:d5: c7:35:8b:7d:b9:9d:2c:e1:9f:3e:27:b2:ea:5c:95: 7b:bc:a3:d3:65:4d:00:d0:d3:1f:91:7c:52:72:ea: 75:84:04:0e:cd:eb:4d:39:1f:32:a5:81:bb:1e:0c: 03:23:c7:bc:43:5e:1d:55:ff:b3:f8:41:1b:87:f9: b5:64:0c:86:d2:5a:38:0d:85:d2:66:e2:80:f4:ef: 14:51:e8:02:8d:32:8c:8e:8b:29:73:69:e6:a2:dc: 5e:94:87:6e:9e:de:61:38:72:bf:09:28:c8:c2:4e: a5:0e:f2:cd:f8:26:ba:d9:ae:73:74:97:7f:2e:38: 39:24:56:17:fc:55:68:c9:cd:3d:48:69:fe:32:6e: 29:ca:a5:bc:6f:a3:f0:34:17:af:43:e1:0d:c5:1f: 9a:ee:bf:55:d6:fd:43:08:72:67:a5:81:1d:66:45: b3:e3:6f:34:75:68:50:ba:15:fe:a8:9a:06:d8:2f: 2d:3b:6e:7c:ea:5f:bf:a5:de:0d:10:71:74:48:1b: 42:9c:08:43:b0:61:16:d9:57:23:d8:eb:f6:22:bd: c6:8b:59:10:f6:d8:9d:12:7c:5a:35:e2:19:5d:dc: df:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:05:5E:05:3F:4A:D1:83:45:63:82:9A:E6:C7:F5:68:12:69:AF:E0 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/IQVeBT9K0YNFY4Ka5sf1aBJpr-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:f87:aabb::/48 Signature Algorithm: sha256WithRSAEncryption 73:d5:81:6f:1d:cd:e4:40:1c:10:69:fc:0f:5b:3b:ce:a3:65: d4:41:54:93:45:b4:9d:09:90:db:c3:e6:34:7f:0b:77:e1:31: 10:4e:23:94:f7:35:64:7b:41:a1:29:d5:96:c6:eb:d1:9e:74: 28:80:04:01:5c:9d:87:c0:3d:b7:d1:81:83:50:9f:d7:c0:a3: 11:07:17:7a:79:95:0a:96:3b:79:f6:77:71:44:f5:3a:25:61: 8d:bc:97:37:8d:a4:07:dd:22:a6:93:b4:3e:bc:27:f7:c1:1d: ee:97:a7:a6:e7:28:31:42:52:e1:84:44:82:d8:93:4a:40:df: 59:cb:32:79:e1:ad:09:0f:9a:5f:95:37:ed:f0:1e:98:d6:7e: b8:64:bd:21:5e:b9:1e:ec:8e:19:5f:dc:6e:4e:37:d5:08:97: 9f:3d:c9:32:c5:c9:35:d6:c9:e6:69:d2:70:3d:09:34:5f:d0: 59:f7:1a:35:5a:ba:f0:f9:0c:94:65:11:70:a4:98:ba:48:b4: e0:94:24:0b:0e:c7:c3:53:f2:0a:2c:11:1b:71:ac:dc:77:a1: 58:c9:a0:62:7c:6f:58:26:e0:e0:28:18:76:d2:1c:18:4f:18: 22:99:36:22:91:94:4d:b4:fb:9c:5d:dd:aa:b2:e9:05:f4:c8: 6a:60:2f:ac -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4o3ex+VV9FujXkloBdmCNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwMTAxMDgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTA1NWUwNTNmNGFkMTgzNDU2MzgyOWFlNmM3ZjU2ODEyNjlhZmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDydja9CpKLgFxw6YhWcGgMV0Lx9 CDvbM+P089XHNYt9uZ0s4Z8+J7LqXJV7vKPTZU0A0NMfkXxScup1hAQOzetNOR8y pYG7HgwDI8e8Q14dVf+z+EEbh/m1ZAyG0lo4DYXSZuKA9O8UUegCjTKMjospc2nm otxelIdunt5hOHK/CSjIwk6lDvLN+Ca62a5zdJd/Ljg5JFYX/FVoyc09SGn+Mm4p yqW8b6PwNBevQ+ENxR+a7r9V1v1DCHJnpYEdZkWz4280dWhQuhX+qJoG2C8tO258 6l+/pd4NEHF0SBtCnAhDsGEW2Vcj2Ov2Ir3Gi1kQ9tidEnxaNeIZXdzfrwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCEFXgU/StGDRWOCmubH9WgSaa/gMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvSVFWZUJUOUswWU5GWTRLYTVzZjFhQkpwci1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgMPh6q7 MA0GCSqGSIb3DQEBCwUAA4IBAQBz1YFvHc3kQBwQafwPWzvOo2XUQVSTRbSdCZDb w+Y0fwt34TEQTiOU9zVke0GhKdWWxuvRnnQogAQBXJ2HwD230YGDUJ/XwKMRBxd6 eZUKljt59ndxRPU6JWGNvJc3jaQH3SKmk7Q+vCf3wR3ul6em5ygxQlLhhESC2JNK QN9ZyzJ54a0JD5pflTft8B6Y1n64ZL0hXrke7I4ZX9xuTjfVCJefPckyxck11snm adJwPQk0X9BZ9xo1Wrrw+QyUZRFwpJi6SLTglCQLDsfDU/IKLBEbcazcd6FYyaBi fG9YJuDgKBh20hwYTxgimTYikZRNtPucXd2qsukF9MhqYC+s -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:45 2026 by rpki-client