This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/IUI0XObzqlXmJSe9907ojhvvGKY.roa File: IUI0XObzqlXmJSe9907ojhvvGKY.roa (raw, json) Hash identifier: lh17xK7xmqGsZK8e6QUcQhpWBvUMvRGKUOxPhaUyu88= Subject key identifier: 21:42:34:5C:E6:F3:AA:55:E6:25:27:BD:F7:4E:E8:8E:1B:EF:18:A6 Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303 Certificate serial: 019B7BA541AA5609ECAD643E390A07E910B6 Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/IUI0XObzqlXmJSe9907ojhvvGKY.roa Signing time: Thu 01 Jan 2026 22:19:46 +0000 ROA not before: Thu 01 Jan 2026 22:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49433 IP address blocks: 2a00:15c8:1000:3000::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:41:aa:56:09:ec:ad:64:3e:39:0a:07:e9:10:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303 Validity Not Before: Jan 1 22:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2142345ce6f3aa55e62527bdf74ee88e1bef18a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:88:1c:6d:e1:d1:30:0a:6d:1c:1e:05:25:2f: a7:f6:13:43:06:e1:24:8e:c1:51:94:dc:32:b9:a2: d9:82:de:96:e9:c2:b3:bc:85:4a:e8:85:a1:a5:df: a7:cc:cd:30:a3:02:7c:a6:7c:13:84:ab:18:6f:e9: 2f:d9:e6:1e:2a:9e:95:a0:5a:c3:f0:c2:dc:3c:04: 52:18:8c:c8:f6:ba:eb:f4:19:be:0d:29:57:7a:56: 6b:43:e2:5f:eb:8f:f3:2d:71:2e:74:af:11:e0:8f: 35:f7:fc:75:ae:cf:62:91:51:c2:02:83:bc:92:db: 0b:bc:24:46:25:85:27:1e:b0:30:0b:44:e9:eb:05: 4a:0f:72:83:e8:34:ef:75:0f:76:75:86:07:0b:ea: ec:6c:a9:6e:ea:94:c0:d4:11:90:57:87:c9:f8:51: 3a:d7:cc:a7:55:b3:04:54:0d:f1:52:d3:3f:64:82: 6f:07:33:23:47:68:86:6e:d9:b0:9d:09:17:3e:fe: b4:2c:88:09:ab:67:f0:1a:a8:a0:6b:19:f7:ed:ca: bd:bd:cf:05:3f:61:10:59:f0:02:61:3c:7c:05:d0: 60:a9:c5:f7:68:ac:91:d4:0c:59:dd:14:3a:78:ed: 68:4e:aa:a7:52:92:f3:f1:f7:f5:ef:b0:c6:b0:06: c1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:42:34:5C:E6:F3:AA:55:E6:25:27:BD:F7:4E:E8:8E:1B:EF:18:A6 X509v3 Authority Key Identifier: keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/IUI0XObzqlXmJSe9907ojhvvGKY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:15c8:1000:3000::/64 Signature Algorithm: sha256WithRSAEncryption 7b:8f:d9:fa:28:b8:b5:82:68:51:25:8c:c7:23:8e:9b:0c:ba: 8a:62:08:6a:94:02:be:a2:5a:5d:88:e8:8e:28:37:55:b5:2a: 72:8e:cf:19:7e:aa:96:b5:b9:00:09:21:1c:ed:04:d4:4a:ec: c6:50:f4:3c:2c:c2:10:4b:70:69:86:a2:62:fb:eb:7f:8f:d2: 9e:36:81:6a:03:bf:df:72:d5:b9:46:4c:3d:ea:eb:88:90:30: 70:12:4e:3b:7f:14:52:65:8c:d7:14:96:4b:02:e7:fe:ac:48: 1a:5a:d7:8a:ae:71:46:5c:31:d1:6d:96:e5:a9:f4:47:3b:7d: 18:86:08:f3:f7:7d:59:80:d5:bf:64:79:c4:bc:72:e5:be:51: 88:70:b8:57:23:85:d1:8f:20:ab:89:41:04:45:87:62:5a:94: 1a:68:0e:fa:2e:40:ef:d3:21:c1:ce:9b:62:af:dd:84:f6:a8: 8f:69:dc:e5:34:dc:0c:03:42:9c:74:f3:1f:5e:19:3d:af:60: 58:a1:ff:38:f2:e4:e4:d9:1c:74:85:83:f4:90:8c:48:12:d2: 82:75:a9:11:3e:d1:4e:ff:57:e2:cd:67:8b:cd:e2:c3:52:0c: 8c:e3:14:c7:fb:3e:ed:c1:10:f5:7a:6e:76:44:87:7f:5a:31: 0d:cb:c3:74 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt7pUGqVgnsrWQ+OQoH6RC2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxY2NhOWYxNWUxOTIxOTUzYTYyOGM4YWQyYWM0YmU5Nzdi NmMzMDMwHhcNMjYwMTAxMjIxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTQyMzQ1Y2U2ZjNhYTU1ZTYyNTI3YmRmNzRlZTg4ZTFiZWYxOGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IgcbeHRMAptHB4FJS+n9hNDBuEk jsFRlNwyuaLZgt6W6cKzvIVK6IWhpd+nzM0wowJ8pnwThKsYb+kv2eYeKp6VoFrD 8MLcPARSGIzI9rrr9Bm+DSlXelZrQ+Jf64/zLXEudK8R4I819/x1rs9ikVHCAoO8 ktsLvCRGJYUnHrAwC0Tp6wVKD3KD6DTvdQ92dYYHC+rsbKlu6pTA1BGQV4fJ+FE6 18ynVbMEVA3xUtM/ZIJvBzMjR2iGbtmwnQkXPv60LIgJq2fwGqigaxn37cq9vc8F P2EQWfACYTx8BdBgqcX3aKyR1AxZ3RQ6eO1oTqqnUpLz8ff177DGsAbB6wIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFCFCNFzm86pV5iUnvfdO6I4b7ximMB8GA1UdIwQY MBaAFIHMqfFeGSGVOmKMitKsS+l3tsMDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUt MjIwNmNjMmU2OTFjLzEvSVVJMFhPYnpxbFhtSlNlOTkwN29qaHZ2R0tZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUtMjIwNmNjMmU2OTFj LzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAKgAVyBAA MAAwDQYJKoZIhvcNAQELBQADggEBAHuP2foouLWCaFEljMcjjpsMuopiCGqUAr6i Wl2I6I4oN1W1KnKOzxl+qpa1uQAJIRztBNRK7MZQ9DwswhBLcGmGomL763+P0p42 gWoDv99y1blGTD3q64iQMHASTjt/FFJljNcUlksC5/6sSBpa14qucUZcMdFtluWp 9Ec7fRiGCPP3fVmA1b9kecS8cuW+UYhwuFcjhdGPIKuJQQRFh2JalBpoDvouQO/T IcHOm2Kv3YT2qI9p3OU03AwDQpx08x9eGT2vYFih/zjy5OTZHHSFg/SQjEgS0oJ1 qRE+0U7/V+LNZ4vN4sNSDIzjFMf7Pu3BEPV6bnZEh39aMQ3Lw3Q= -----END CERTIFICATE-----Generated at Mon Jan 26 05:48:54 2026 by rpki-client