This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/IBrDKx3-hL2m6eK_AnO4AvBHD7U.roa File: IBrDKx3-hL2m6eK_AnO4AvBHD7U.roa (raw, json) Hash identifier: pmaFE96hLCvpJgnKb9xAQ3FBHDszY3+MnDTKdmd2aBc= Subject key identifier: 20:1A:C3:2B:1D:FE:84:BD:A6:E9:E2:BF:02:73:B8:02:F0:47:0F:B5 Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Certificate serial: 019B7D5CF9E681B7BFDA4083FF79E9CD5B06 Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/IBrDKx3-hL2m6eK_AnO4AvBHD7U.roa Signing time: Fri 02 Jan 2026 06:20:03 +0000 ROA not before: Fri 02 Jan 2026 06:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12337 IP address blocks: 2a12:6900:1100::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f9:e6:81:b7:bf:da:40:83:ff:79:e9:cd:5b:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Validity Not Before: Jan 2 06:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=201ac32b1dfe84bda6e9e2bf0273b802f0470fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:35:64:9d:1d:05:fe:7d:38:a2:2a:e4:ee:a9: 99:f7:10:4a:07:3c:15:5e:1c:89:91:7c:16:d8:43: 4a:e3:5d:c3:58:bd:ee:a8:23:e6:23:de:1a:be:84: 32:81:40:60:7f:48:69:12:d8:34:5d:b5:22:4a:98: 5e:8b:f7:bf:0a:ec:83:1d:35:a2:10:d3:6f:37:33: eb:df:72:66:1f:3b:2d:79:a6:df:e6:13:a8:90:dd: 20:15:33:d5:8e:cc:6a:e4:26:ee:cc:cb:88:23:59: 66:07:10:66:d5:27:82:2f:77:2b:0a:03:d5:18:7a: d9:de:f2:80:31:43:88:64:6b:04:bc:06:78:b8:da: 53:2f:65:11:53:78:6f:fb:00:3f:ac:e3:60:6c:b3: 72:38:1a:88:95:1d:21:ad:19:5f:fe:da:65:a4:48: 9f:6e:ea:bf:a5:81:e2:7d:53:60:5b:36:b7:39:98: 68:fe:1e:da:cb:6d:f8:78:c5:bc:b0:25:05:8e:21: ab:7b:a6:37:7f:7e:7d:05:e4:d1:71:e3:51:92:5c: 62:c8:ab:a5:ae:3d:1d:13:15:7e:bf:3b:f9:0d:61: 46:24:96:f7:25:fd:0e:ef:dd:b8:e2:8c:de:01:9b: 23:c2:7b:b7:f8:97:f5:0e:00:6e:1f:7f:89:f7:ca: 73:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1A:C3:2B:1D:FE:84:BD:A6:E9:E2:BF:02:73:B8:02:F0:47:0F:B5 X509v3 Authority Key Identifier: keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/IBrDKx3-hL2m6eK_AnO4AvBHD7U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:6900:1100::/40 Signature Algorithm: sha256WithRSAEncryption 0b:90:18:bc:e2:f4:16:0e:6b:93:11:e0:85:90:a1:25:1c:a9: 72:5b:26:d5:24:08:ca:b4:5a:a1:fb:ad:6b:af:2a:97:dd:df: 7f:56:8d:ca:f5:4f:32:cd:80:ba:23:33:80:85:db:03:ef:c2: 13:ca:5a:6b:ca:73:21:3b:9a:d5:96:b1:56:f1:6b:50:ac:74: a1:1c:5f:d6:ec:78:8f:24:58:60:6b:16:cf:51:c4:e1:b3:ca: 76:6d:e7:54:a6:bb:90:55:7b:07:05:58:5d:c9:bd:15:85:00: 37:85:9f:87:b7:3f:a7:d7:fc:6c:40:0b:70:67:15:1c:83:cb: 49:86:19:65:07:5b:2a:27:3b:e2:1a:ee:b1:44:97:e6:3a:9c: 95:22:a5:10:32:7c:90:82:a1:a9:ec:a3:8f:1d:05:15:cc:13: 63:49:68:0f:e5:f3:18:0f:7e:70:c8:bc:ad:31:31:4b:d2:37: 56:ff:d2:be:f5:d7:4b:63:04:87:b0:ee:e8:6f:04:52:4b:93: 41:86:f4:ab:72:21:b0:f6:31:54:7e:1e:06:9b:21:8d:9f:d8: 1e:50:54:5b:0b:0d:35:ef:2c:f3:36:2f:06:25:73:77:31:bd: 7e:0f:c0:12:56:34:a8:7e:dd:77:c5:e9:17:cb:10:6f:30:68: b0:b2:c9:ec -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9XPnmgbe/2kCD/3npzVsGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZGU5MWEwZmIxZjRkZDE3OTAwZDA2ZGI2ZTg4MzM2Zjc4 YjVjMDUwHhcNMjYwMTAyMDYyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDFhYzMyYjFkZmU4NGJkYTZlOWUyYmYwMjczYjgwMmYwNDcwZmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jVknR0F/n04oirk7qmZ9xBKBzwV XhyJkXwW2ENK413DWL3uqCPmI94avoQygUBgf0hpEtg0XbUiSphei/e/CuyDHTWi ENNvNzPr33JmHzsteabf5hOokN0gFTPVjsxq5CbuzMuII1lmBxBm1SeCL3crCgPV GHrZ3vKAMUOIZGsEvAZ4uNpTL2URU3hv+wA/rONgbLNyOBqIlR0hrRlf/tplpEif buq/pYHifVNgWza3OZho/h7ay234eMW8sCUFjiGre6Y3f359BeTRceNRklxiyKul rj0dExV+vzv5DWFGJJb3Jf0O79244ozeAZsjwnu3+Jf1DgBuH3+J98pzTQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFCAawysd/oS9punivwJzuALwRw+1MB8GA1UdIwQY MBaAFN7ekaD7H03ReQDQbbbogzb3i1wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMt MjFhNzAwYzcxMTlmLzEvSUJyREt4My1oTDJtNmVLX0FuTzRBdkJIRDdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMtMjFhNzAwYzcxMTlm LzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhJpABEw DQYJKoZIhvcNAQELBQADggEBAAuQGLzi9BYOa5MR4IWQoSUcqXJbJtUkCMq0WqH7 rWuvKpfd339Wjcr1TzLNgLojM4CF2wPvwhPKWmvKcyE7mtWWsVbxa1CsdKEcX9bs eI8kWGBrFs9RxOGzynZt51Smu5BVewcFWF3JvRWFADeFn4e3P6fX/GxAC3BnFRyD y0mGGWUHWyonO+Ia7rFEl+Y6nJUipRAyfJCCoanso48dBRXME2NJaA/l8xgPfnDI vK0xMUvSN1b/0r7110tjBIew7uhvBFJLk0GG9KtyIbD2MVR+HgabIY2f2B5QVFsL DTXvLPM2LwYlc3cxvX4PwBJWNKh+3XfF6RfLEG8waLCyyew= -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:37 2026 by rpki-client