This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/IjAXDkOBvVQgicdqQcDdqjKbExY.roa File: IjAXDkOBvVQgicdqQcDdqjKbExY.roa (raw, json) Hash identifier: EdNiMAroL0c8PixsrsHLCM0XvpttsPiOW4jvWzfo+lQ= Subject key identifier: 22:30:17:0E:43:81:BD:54:20:89:C7:6A:41:C0:DD:AA:32:9B:13:16 Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 019B7AC942B2C207270361BB00216FF7C042 Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/IjAXDkOBvVQgicdqQcDdqjKbExY.roa Signing time: Thu 01 Jan 2026 18:19:28 +0000 ROA not before: Thu 01 Jan 2026 18:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215544 IP address blocks: 2a04:5b81:2140::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:42:b2:c2:07:27:03:61:bb:00:21:6f:f7:c0:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Jan 1 18:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2230170e4381bd542089c76a41c0ddaa329b1316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e6:38:0f:65:37:ff:19:40:1b:fe:ee:f9:f2: 50:b5:8e:88:74:78:4d:56:9d:fd:30:11:50:24:da: 39:eb:30:0a:85:28:2c:80:20:a9:f7:dc:43:af:08: 6d:6f:51:b4:8d:15:20:2e:ad:1f:d1:3f:46:b6:4e: 94:f8:84:eb:17:0a:bb:9f:87:c3:4f:10:31:ba:a8: cf:a6:5a:76:4c:ed:fb:15:88:ff:ed:bd:bb:44:b8: 38:5e:3c:8d:b2:f4:ec:7c:69:9b:8f:d6:db:87:17: c2:8c:7b:9b:2d:ac:93:4b:89:5c:20:e6:79:80:78: a8:5e:e0:90:75:49:76:04:81:3d:5c:75:67:dd:46: 54:28:3a:28:eb:53:93:e8:d2:19:30:d1:06:84:0e: e2:c2:dd:1f:d6:3a:88:3e:ea:1b:85:a1:11:cb:8b: c2:fe:6f:1f:7e:51:5f:02:ee:94:fd:eb:f3:e9:45: f0:cb:93:e8:64:a9:f5:f6:ae:3b:27:93:38:6e:6d: 95:fb:52:25:c3:a5:e7:af:7b:e0:c4:c1:94:1a:03: 5d:84:22:32:1d:c4:14:bb:0c:64:25:5b:47:79:96: 69:fb:49:51:65:cb:e8:5a:64:93:97:fb:ed:d0:e8: fc:78:26:59:d3:da:3d:d3:e6:22:04:e8:c4:53:9b: 93:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:30:17:0E:43:81:BD:54:20:89:C7:6A:41:C0:DD:AA:32:9B:13:16 X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/IjAXDkOBvVQgicdqQcDdqjKbExY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:5b81:2140::/44 Signature Algorithm: sha256WithRSAEncryption b4:4f:5a:74:83:e1:ab:84:0c:f3:a8:68:ff:75:a4:28:a2:6a: 01:14:dc:06:03:ab:8a:15:82:44:30:af:e2:05:c4:03:c4:24: e8:25:0f:81:ea:a3:54:d5:74:47:f3:b3:d5:41:42:26:32:a8: ef:e1:fa:cc:27:05:4a:fe:d5:ec:9e:27:ca:6e:e7:3c:b2:f1: be:0a:a9:c4:94:be:cf:b6:41:3f:d7:65:3b:a4:9f:bf:b1:b6: 68:c2:89:a0:b3:3a:11:2d:b0:77:c4:be:4b:32:fd:ce:99:40: 5b:60:45:1d:b4:c8:ab:e1:9e:85:34:3a:54:e9:3b:76:66:a4: d0:6e:53:8f:f1:e9:1b:51:5d:e1:87:4a:07:79:c0:28:92:da: f3:30:65:97:30:fc:20:ef:a5:65:a1:77:ec:1a:d7:c4:23:9c: 75:fb:bd:f9:04:6f:ba:bd:3d:c2:af:d9:4b:91:55:be:9d:a7: a2:cf:aa:d0:1b:1a:a6:c2:ca:9d:aa:e1:a1:a1:83:11:d5:7c: 3d:63:60:55:5b:ff:4d:64:a0:3f:ec:ce:58:f3:70:37:c9:5a: a8:c0:95:c4:9c:b6:35:80:5f:52:d3:a4:31:db:bc:0d:52:9e: 90:32:08:da:ec:dd:0c:d1:97:09:bd:55:e4:66:6c:de:b8:d9: 75:3b:af:2a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yUKywgcnA2G7ACFv98BCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjYwMTAxMTgxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjMwMTcwZTQzODFiZDU0MjA4OWM3NmE0MWMwZGRhYTMyOWIxMzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOY4D2U3/xlAG/7u+fJQtY6IdHhN Vp39MBFQJNo56zAKhSgsgCCp99xDrwhtb1G0jRUgLq0f0T9Gtk6U+ITrFwq7n4fD TxAxuqjPplp2TO37FYj/7b27RLg4XjyNsvTsfGmbj9bbhxfCjHubLayTS4lcIOZ5 gHioXuCQdUl2BIE9XHVn3UZUKDoo61OT6NIZMNEGhA7iwt0f1jqIPuobhaERy4vC /m8fflFfAu6U/evz6UXwy5PoZKn19q47J5M4bm2V+1Ilw6Xnr3vgxMGUGgNdhCIy HcQUuwxkJVtHeZZp+0lRZcvoWmSTl/vt0Oj8eCZZ09o90+YiBOjEU5uTewIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCIwFw5Dgb1UIInHakHA3aoymxMWMB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvSWpBWERrT0J2VlFnaWNkcVFjRGRxaktiRXhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgRbgSFA MA0GCSqGSIb3DQEBCwUAA4IBAQC0T1p0g+GrhAzzqGj/daQoomoBFNwGA6uKFYJE MK/iBcQDxCToJQ+B6qNU1XRH87PVQUImMqjv4frMJwVK/tXsnifKbuc8svG+CqnE lL7PtkE/12U7pJ+/sbZowomgszoRLbB3xL5LMv3OmUBbYEUdtMir4Z6FNDpU6Tt2 ZqTQblOP8ekbUV3hh0oHecAoktrzMGWXMPwg76VloXfsGtfEI5x1+735BG+6vT3C r9lLkVW+naeiz6rQGxqmwsqdquGhoYMR1Xw9Y2BVW/9NZKA/7M5Y83A3yVqowJXE nLY1gF9S06Qx27wNUp6QMgja7N0M0ZcJvVXkZmzeuNl1O68q -----END CERTIFICATE-----Generated at Sun Jan 25 10:53:09 2026 by rpki-client