This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/ifWB4vc9qFtHVpS0YI5P2BXL05w.roa File: ifWB4vc9qFtHVpS0YI5P2BXL05w.roa (raw, json) Hash identifier: 72Jjs1xc2pL2LvIq/8wmACvnX6p0xGHA2swVmmlBIwU= Subject key identifier: 89:F5:81:E2:F7:3D:A8:5B:47:56:94:B4:60:8E:4F:D8:15:CB:D3:9C Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Certificate serial: 019B7C12B27E82E2AAC9A3013D2A44A473D7 Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/ifWB4vc9qFtHVpS0YI5P2BXL05w.roa Signing time: Fri 02 Jan 2026 00:19:18 +0000 ROA not before: Fri 02 Jan 2026 00:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215455 IP address blocks: 2a09:d2c1:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b2:7e:82:e2:aa:c9:a3:01:3d:2a:44:a4:73:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Validity Not Before: Jan 2 00:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89f581e2f73da85b475694b4608e4fd815cbd39c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9f:b9:9d:5f:73:aa:b9:80:4f:00:02:06:17: de:e4:c1:1f:fd:c4:ca:a3:41:87:c5:23:3d:f4:49: 9c:83:d9:bd:6b:90:1a:8f:1b:a7:87:5f:90:1d:86: b1:b2:77:15:6e:b4:e7:3c:8c:e1:ce:d9:2c:e4:60: 52:70:cc:06:e0:9b:ee:e2:13:18:b2:a7:a5:54:ce: 9e:4b:06:6b:95:b0:28:2f:1e:57:5a:a2:b9:be:fb: 29:cc:8d:c5:62:39:cb:51:d4:e2:ff:23:a6:fe:1c: 70:b6:19:14:20:62:51:26:bb:98:a6:17:90:59:a3: 38:4d:0c:1c:18:7f:9a:46:96:c7:4f:83:5c:1d:00: de:3a:30:4b:1d:fd:eb:5c:4b:8b:26:52:d2:98:41: 63:14:ae:35:ee:c9:9f:c4:0b:80:2e:a9:0e:2b:39: a7:81:97:5b:42:39:d0:2b:5e:ec:b3:f6:23:a9:33: 5b:42:f3:56:03:95:fb:c6:a5:db:fb:22:ea:4b:f4: c7:3e:13:ba:be:d0:af:88:83:ff:76:a3:b9:ad:ae: c7:b5:28:3c:3a:1c:58:53:d1:ba:fb:76:35:4c:ea: 8b:c7:4a:f2:3d:a4:ee:5e:af:ae:36:da:2b:0f:df: 47:e1:fb:5a:69:72:12:e2:0d:c6:96:2f:a7:18:d1: 0d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F5:81:E2:F7:3D:A8:5B:47:56:94:B4:60:8E:4F:D8:15:CB:D3:9C X509v3 Authority Key Identifier: keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/ifWB4vc9qFtHVpS0YI5P2BXL05w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:d2c1:5::/48 Signature Algorithm: sha256WithRSAEncryption de:9e:45:22:25:b4:c8:d5:19:54:50:76:5e:70:f3:67:0f:6d: 5c:4d:1d:e0:f6:38:7b:46:f3:de:52:92:6e:3e:16:86:f1:f1: 0b:7e:b8:bf:b3:09:21:3f:9c:8b:cc:94:ba:ee:42:eb:35:98: 69:11:1b:94:13:54:9c:57:1c:d2:c2:8f:99:8b:96:e5:4e:0c: d5:2f:99:fc:61:a7:ee:97:c6:28:a7:d6:d7:2c:f5:4a:b3:87: d7:1d:2a:3d:9d:20:a3:31:70:82:be:c9:6c:6d:87:d8:f0:cf: 10:5a:d5:eb:a8:e3:74:a3:3e:08:e0:3c:fa:06:44:08:93:67: 4f:15:fb:35:f3:6c:15:4f:d4:f7:24:cb:61:02:72:da:20:58: 1b:95:3a:33:c7:68:db:20:40:6d:6c:01:f8:5d:67:e8:fb:8c: 7a:1b:05:ef:cc:c1:bb:4c:4d:ed:9f:df:00:e3:c4:6d:91:56: a1:fb:98:77:b8:f3:69:38:ba:80:8d:f4:d6:26:cb:68:3b:29: 1d:e2:5d:ac:0b:5b:98:76:f3:ab:bc:71:73:ef:cd:40:be:26: 5a:68:02:de:ac:be:41:76:f4:6c:b7:fc:f2:5c:bb:96:f2:b6: 93:2e:8a:13:e0:af:fa:e2:b4:83:d6:ad:cd:a8:42:4b:6f:7e: 6a:a5:28:07 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8ErJ+guKqyaMBPSpEpHPXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2Q3M2Y4MmMyNjBkYTg3Mzg2ZGNmN2JlMjZkNWM1NDQ1 NTI2ZmEwHhcNMjYwMTAyMDAxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWY1ODFlMmY3M2RhODViNDc1Njk0YjQ2MDhlNGZkODE1Y2JkMzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5+5nV9zqrmATwACBhfe5MEf/cTK o0GHxSM99Emcg9m9a5Aajxunh1+QHYaxsncVbrTnPIzhztks5GBScMwG4Jvu4hMY sqelVM6eSwZrlbAoLx5XWqK5vvspzI3FYjnLUdTi/yOm/hxwthkUIGJRJruYpheQ WaM4TQwcGH+aRpbHT4NcHQDeOjBLHf3rXEuLJlLSmEFjFK417smfxAuALqkOKzmn gZdbQjnQK17ss/YjqTNbQvNWA5X7xqXb+yLqS/THPhO6vtCviIP/dqO5ra7HtSg8 OhxYU9G6+3Y1TOqLx0ryPaTuXq+uNtorD99H4ftaaXIS4g3Gli+nGNENeQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIn1geL3PahbR1aUtGCOT9gVy9OcMB8GA1UdIwQY MBaAFM/Nc/gsJg2oc4bc974m1cVEVSb6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTct NmVkYzFiMjI1NjI1LzEvaWZXQjR2YzlxRnRIVnBTMFlJNVAyQlhMMDV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTctNmVkYzFiMjI1NjI1 LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgnSwQAF MA0GCSqGSIb3DQEBCwUAA4IBAQDenkUiJbTI1RlUUHZecPNnD21cTR3g9jh7RvPe UpJuPhaG8fELfri/swkhP5yLzJS67kLrNZhpERuUE1ScVxzSwo+Zi5blTgzVL5n8 Yaful8Yop9bXLPVKs4fXHSo9nSCjMXCCvslsbYfY8M8QWtXrqON0oz4I4Dz6BkQI k2dPFfs182wVT9T3JMthAnLaIFgblTozx2jbIEBtbAH4XWfo+4x6GwXvzMG7TE3t n98A48RtkVah+5h3uPNpOLqAjfTWJstoOykd4l2sC1uYdvOrvHFz781AviZaaALe rL5BdvRst/zyXLuW8raTLooT4K/64rSD1q3NqEJLb35qpSgH -----END CERTIFICATE-----Generated at Sun Jan 25 17:42:28 2026 by rpki-client