This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/4diahVLzyWADsafzMMkqiTBhFG0.roa File: 4diahVLzyWADsafzMMkqiTBhFG0.roa (raw, json) Hash identifier: riwko2/K4Xljlw5gsbraTspcz3PMLisMleLPiCJZSh0= Subject key identifier: E1:D8:9A:85:52:F3:C9:60:03:B1:A7:F3:30:C9:2A:89:30:61:14:6D Certificate issuer: /CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39 Certificate serial: 019B79ECCA70ECDD8120B7AB8A7A8D98018C Authority key identifier: 89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/4diahVLzyWADsafzMMkqiTBhFG0.roa Signing time: Thu 01 Jan 2026 14:18:40 +0000 ROA not before: Thu 01 Jan 2026 14:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207059 IP address blocks: 2a07:bf80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ca:70:ec:dd:81:20:b7:ab:8a:7a:8d:98:01:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39 Validity Not Before: Jan 1 14:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1d89a8552f3c96003b1a7f330c92a893061146d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4d:a1:fa:df:8f:2f:14:bf:e4:11:79:44:1b: cc:92:0c:af:8e:6a:53:35:04:41:8e:d1:ce:17:81: 90:90:c2:cd:b8:b2:5c:e7:81:66:00:d4:89:39:76: be:24:bf:18:2f:05:66:1b:1c:10:0e:21:68:33:80: da:76:3e:1c:3c:59:f8:ba:11:a0:ba:bf:09:d8:fb: 78:a9:21:d2:1c:45:37:68:47:af:15:c5:e7:cd:9e: 8f:50:b6:4c:db:f4:b2:39:e5:d9:52:68:c1:bd:23: 6e:20:3b:ce:33:66:c3:2e:ae:f6:ac:f0:9d:4a:eb: 03:c3:76:37:cb:e9:6d:9b:1c:4c:ad:93:89:d6:30: d2:65:a8:51:e5:ae:2d:61:30:44:59:73:ac:a2:93: 5a:dd:c5:d6:1f:63:5d:54:17:5c:53:d9:d3:b5:72: cb:c9:8a:35:8e:4c:3d:cd:79:fa:fd:8f:58:fd:8b: fa:4f:0d:60:57:95:f3:e7:ab:81:0a:63:63:82:ca: 14:e6:34:17:b1:00:ba:05:7a:73:12:cf:49:ce:13: 84:00:b5:9a:bf:82:08:bc:52:30:52:e3:60:c7:be: b5:1c:47:9d:f0:28:17:96:28:f1:29:d4:fb:0c:57: bf:4f:2b:ed:6c:d9:ec:d1:53:31:33:02:fa:a1:78: 95:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D8:9A:85:52:F3:C9:60:03:B1:A7:F3:30:C9:2A:89:30:61:14:6D X509v3 Authority Key Identifier: keyid:89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/4diahVLzyWADsafzMMkqiTBhFG0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:bf80::/32 Signature Algorithm: sha256WithRSAEncryption a6:9b:8a:69:b7:1b:ae:81:63:af:26:2f:1c:9f:05:23:39:33: 90:b4:20:ad:62:ab:0f:c2:9b:79:af:f0:48:77:a7:17:62:67: c9:12:f1:22:59:fd:0c:e5:e9:21:6d:ea:c8:4c:b4:b3:fb:fb: 70:40:f1:4b:c5:26:e5:b0:11:15:28:d5:5b:b1:23:b4:a7:2e: 0e:be:e0:b0:a8:80:8a:ec:41:bc:06:15:29:39:d2:b8:de:21: 2a:06:0c:7a:7c:f6:19:6e:98:9c:f7:93:c6:96:2b:a4:fe:9c: 1a:5d:96:36:b2:9b:18:79:00:d9:6a:9c:e3:96:a3:2d:ad:36: a7:b2:0a:bb:16:b5:05:0f:e5:90:76:64:40:a6:91:55:48:70: c0:e2:9e:46:e2:3a:5a:1f:3b:85:46:0f:c5:8b:71:68:7b:ea: 04:15:7f:1f:fc:80:50:f0:a2:69:72:3b:da:f1:01:4e:e4:88: 68:45:37:23:3a:db:6a:08:d3:ec:be:ed:74:64:49:33:47:4a: 38:3d:1d:95:19:25:71:e6:29:65:65:5a:e6:32:1c:23:a1:a2: 30:5b:4b:51:07:fa:f7:a5:c0:04:6b:46:e0:0d:40:e4:f3:ef: ec:79:e9:56:ee:14:d4:fb:92:d3:c4:1b:21:7e:1b:14:94:c1: a0:84:f4:44 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt57Mpw7N2BILerinqNmAGMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MmYzZmYzYzBhMWZmYjNhZjIwZjViOTVlOGNiNjRjODgw NDNmMzkwHhcNMjYwMTAxMTQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWQ4OWE4NTUyZjNjOTYwMDNiMWE3ZjMzMGM5MmE4OTMwNjExNDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE2h+t+PLxS/5BF5RBvMkgyvjmpT NQRBjtHOF4GQkMLNuLJc54FmANSJOXa+JL8YLwVmGxwQDiFoM4Dadj4cPFn4uhGg ur8J2Pt4qSHSHEU3aEevFcXnzZ6PULZM2/SyOeXZUmjBvSNuIDvOM2bDLq72rPCd SusDw3Y3y+ltmxxMrZOJ1jDSZahR5a4tYTBEWXOsopNa3cXWH2NdVBdcU9nTtXLL yYo1jkw9zXn6/Y9Y/Yv6Tw1gV5Xz56uBCmNjgsoU5jQXsQC6BXpzEs9JzhOEALWa v4IIvFIwUuNgx761HEed8CgXlijxKdT7DFe/TyvtbNns0VMxMwL6oXiVMwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFOHYmoVS88lgA7Gn8zDJKokwYRRtMB8GA1UdIwQY MBaAFIkvP/PAof+zryD1uV6MtkyIBD85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVM4Xzg4Q2hfN092SVBXNVhveTJUSWdFUHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81ZDJhZjctMzgyYi00ZGQ2LWE4YjQt ZjkyMWRiNzViZGY5LzEvNGRpYWhWTHp5V0FEc2Fmek1Na3FpVEJoRkcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy81ZDJhZjctMzgyYi00ZGQ2LWE4YjQtZjkyMWRiNzViZGY5 LzEvaVM4Xzg4Q2hfN092SVBXNVhveTJUSWdFUHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKge/gDAN BgkqhkiG9w0BAQsFAAOCAQEAppuKabcbroFjryYvHJ8FIzkzkLQgrWKrD8Kbea/w SHenF2JnyRLxIln9DOXpIW3qyEy0s/v7cEDxS8Um5bARFSjVW7EjtKcuDr7gsKiA iuxBvAYVKTnSuN4hKgYMenz2GW6YnPeTxpYrpP6cGl2WNrKbGHkA2Wqc45ajLa02 p7IKuxa1BQ/lkHZkQKaRVUhwwOKeRuI6Wh87hUYPxYtxaHvqBBV/H/yAUPCiaXI7 2vEBTuSIaEU3IzrbagjT7L7tdGRJM0dKOD0dlRklceYpZWVa5jIcI6GiMFtLUQf6 96XABGtG4A1A5PPv7HnpVu4U1PuS08QbIX4bFJTBoIT0RA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:42:47 2026 by rpki-client