This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/iLg25mvcmTCHH_OGEh2P98itdpY.roa File: iLg25mvcmTCHH_OGEh2P98itdpY.roa (raw, json) Hash identifier: wugv3jB//b2uxYYJseGcTrUZ2QkeB7l7mdgdccrFlEw= Subject key identifier: 88:B8:36:E6:6B:DC:99:30:87:1F:F3:86:12:1D:8F:F7:C8:AD:76:96 Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Certificate serial: 019B7F82CB1519C9FAD4C7DF9F70A5C9C198 Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/iLg25mvcmTCHH_OGEh2P98itdpY.roa Signing time: Fri 02 Jan 2026 16:20:36 +0000 ROA not before: Fri 02 Jan 2026 16:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 327790 IP address blocks: 2a0f:d300::/48 maxlen: 48 2a0f:d301::/48 maxlen: 48 2a0f:d302::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:cb:15:19:c9:fa:d4:c7:df:9f:70:a5:c9:c1:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Validity Not Before: Jan 2 16:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88b836e66bdc9930871ff386121d8ff7c8ad7696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d7:d0:29:db:b3:58:7b:53:95:b6:d4:e7:b9: a9:31:6d:b6:e1:94:14:94:1a:1b:d0:55:33:41:9e: 37:b5:aa:52:2d:41:ba:02:0e:1e:72:71:c3:9d:a1: c8:ba:76:84:7b:db:0b:cc:70:ab:0b:53:42:9b:0d: 0c:7b:b9:f2:03:37:b1:75:f3:70:42:c0:25:75:bb: 18:eb:22:71:0c:da:66:45:36:8b:23:9b:84:fb:8b: bf:4b:72:57:32:cd:43:02:24:20:e5:b4:e7:5a:17: 57:ec:d8:94:73:19:0d:74:33:c0:28:14:e6:4e:f2: a5:ff:e2:3a:9d:c2:5b:50:a0:cb:b3:c5:41:e6:49: 51:20:90:a7:77:68:a0:eb:bf:03:0f:ba:b3:fc:1b: 31:cf:89:25:82:fb:27:3c:45:07:39:c5:65:af:6c: 28:c0:01:3b:25:2a:8f:48:83:6f:1e:93:83:7f:8e: 69:64:45:93:1c:fa:c2:0f:43:9d:23:0d:26:e8:64: 18:e8:cd:14:78:b0:fd:0a:f1:c9:b5:02:25:de:0c: 98:72:94:97:b3:d8:a3:e9:01:e6:c3:52:c6:d0:7f: a5:64:4c:6d:a6:a7:86:f3:6f:c7:1b:4f:44:39:a3: 08:06:23:ad:a0:2f:c0:dc:7a:98:34:db:e9:d5:cf: 73:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B8:36:E6:6B:DC:99:30:87:1F:F3:86:12:1D:8F:F7:C8:AD:76:96 X509v3 Authority Key Identifier: keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/iLg25mvcmTCHH_OGEh2P98itdpY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:d300::/48 2a0f:d301::/48 2a0f:d302::/48 Signature Algorithm: sha256WithRSAEncryption 32:f0:7a:d4:08:b8:06:f9:f4:d3:d6:f0:c7:14:aa:db:09:9f: 1c:9c:6f:63:57:44:e2:4d:99:53:7d:55:f2:b6:94:26:0b:9e: ac:37:28:56:b9:f4:d0:07:fa:71:a9:26:c1:f4:82:0d:bd:83: d9:ba:05:d4:b8:c9:a4:03:f3:7f:60:17:a9:78:65:d4:be:e4: 9c:41:75:a5:cc:1e:9d:68:73:d2:c2:39:a4:71:2b:27:ce:92: b0:f7:b5:3d:2d:3d:50:47:ae:a3:2a:63:f1:5b:53:5e:64:52: de:3e:fa:a4:7e:88:f3:f1:74:4e:b5:f5:1a:a9:af:d1:20:a9: 70:36:9c:36:aa:ab:64:80:72:d0:13:49:f7:71:92:7e:26:c6: 17:12:85:b8:66:79:22:04:f2:c4:e2:76:af:e6:04:dc:1f:9f: 61:5f:50:1d:da:07:be:7e:6c:3a:7e:e1:cb:46:70:e9:2b:30: d1:e1:b4:09:ab:a2:28:4e:b3:3f:ef:f6:45:99:10:02:3b:0d: 56:7d:ff:bc:1b:5e:f9:ad:cc:8f:b9:1c:c4:5c:94:66:b9:da: f6:10:69:8b:16:fe:7f:83:ff:34:74:23:c7:05:24:49:d0:19: 62:c5:5f:39:e5:89:51:07:fb:aa:28:83:13:2c:1d:ca:be:5e: 49:a5:9b:fd -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/gssVGcn61Mffn3ClycGYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OWY1Y2E4YzMzZjEzNGMzYzE1N2Q0OGI5YzJhZTRlOTFi NjMwYmYwHhcNMjYwMTAyMTYyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGI4MzZlNjZiZGM5OTMwODcxZmYzODYxMjFkOGZmN2M4YWQ3Njk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9fQKduzWHtTlbbU57mpMW224ZQU lBob0FUzQZ43tapSLUG6Ag4ecnHDnaHIunaEe9sLzHCrC1NCmw0Me7nyAzexdfNw QsAldbsY6yJxDNpmRTaLI5uE+4u/S3JXMs1DAiQg5bTnWhdX7NiUcxkNdDPAKBTm TvKl/+I6ncJbUKDLs8VB5klRIJCnd2ig678DD7qz/Bsxz4klgvsnPEUHOcVlr2wo wAE7JSqPSINvHpODf45pZEWTHPrCD0OdIw0m6GQY6M0UeLD9CvHJtQIl3gyYcpSX s9ij6QHmw1LG0H+lZExtpqeG82/HG09EOaMIBiOtoC/A3HqYNNvp1c9zsQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIi4NuZr3Jkwhx/zhhIdj/fIrXaWMB8GA1UdIwQY MBaAFJefXKjDPxNMPBV9SLnCrk6RtjC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgt MTQ3MGFjMzY0ZGQyLzEvaUxnMjVtdmNtVENISF9PR0VoMlA5OGl0ZHBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgtMTQ3MGFjMzY0ZGQy LzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKg/TAAAA AwcAKg/TAQAAAwcAKg/TAgAAMA0GCSqGSIb3DQEBCwUAA4IBAQAy8HrUCLgG+fTT 1vDHFKrbCZ8cnG9jV0TiTZlTfVXytpQmC56sNyhWufTQB/pxqSbB9IINvYPZugXU uMmkA/N/YBepeGXUvuScQXWlzB6daHPSwjmkcSsnzpKw97U9LT1QR66jKmPxW1Ne ZFLePvqkfojz8XROtfUaqa/RIKlwNpw2qqtkgHLQE0n3cZJ+JsYXEoW4ZnkiBPLE 4nav5gTcH59hX1Ad2ge+fmw6fuHLRnDpKzDR4bQJq6IoTrM/7/ZFmRACOw1Wff+8 G175rcyPuRzEXJRmudr2EGmLFv5/g/80dCPHBSRJ0BlixV855YlRB/uqKIMTLB3K vl5JpZv9 -----END CERTIFICATE-----Generated at Sun Jan 25 10:29:59 2026 by rpki-client