This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/ItZWQRkmls0VdU1nZishuLkd2eA.roa File: ItZWQRkmls0VdU1nZishuLkd2eA.roa (raw, json) Hash identifier: MAZ2gdn6yEjn53jWafviOI61qsnSQITSXZRf/tbFFMA= Subject key identifier: 22:D6:56:41:19:26:96:CD:15:75:4D:67:66:2B:21:B8:B9:1D:D9:E0 Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Certificate serial: 019B7910CBD99CDC51F429E768CE1E657BDD Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/ItZWQRkmls0VdU1nZishuLkd2eA.roa Signing time: Thu 01 Jan 2026 10:18:22 +0000 ROA not before: Thu 01 Jan 2026 10:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60115 IP address blocks: 2a07:2918:6000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:cb:d9:9c:dc:51:f4:29:e7:68:ce:1e:65:7b:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Validity Not Before: Jan 1 10:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22d65641192696cd15754d67662b21b8b91dd9e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:23:d6:23:61:46:bf:1e:cb:83:96:da:4b:ee: 2d:42:40:37:f4:67:21:3d:1f:86:c9:d8:60:2a:a7: 92:0e:d9:a6:6b:4a:95:38:d7:7a:23:d4:95:7c:88: 31:66:42:24:a4:d7:93:f9:bf:6b:96:cb:f3:73:4b: a0:b3:33:d4:21:8c:36:71:9a:60:55:b2:00:3d:89: 2d:bf:d8:52:4f:26:19:96:b0:d7:5a:d3:29:74:40: 1d:18:85:0a:62:59:db:df:da:95:12:2e:12:3a:bb: b4:c7:81:fd:ba:98:8d:aa:ec:a2:4e:fe:94:b7:e3: 83:1d:9e:c9:41:8e:d5:88:d8:9f:0e:54:d5:0f:77: d8:1c:21:87:9d:4b:d8:a7:3e:01:b8:32:ac:3b:e5: 01:ed:e0:13:51:74:4d:f3:0b:d2:9b:ef:c5:2a:d4: 62:8b:d5:60:7f:5d:ea:fd:09:07:a0:94:1f:69:35: d9:03:c5:b7:f4:68:df:ce:1b:c2:7d:ea:49:8e:dd: 4b:e5:b1:a9:6f:12:bc:5f:cf:5a:b3:8e:3d:9b:6e: 32:84:3c:d5:0f:8b:a4:6e:b8:7b:97:00:cb:f4:5f: 5f:7d:c4:f3:3f:6c:9a:d3:b8:82:ce:eb:5a:d0:66: 88:c9:bf:e7:4e:c9:bf:bf:11:5d:50:0d:f3:14:14: 7f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D6:56:41:19:26:96:CD:15:75:4D:67:66:2B:21:B8:B9:1D:D9:E0 X509v3 Authority Key Identifier: keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/ItZWQRkmls0VdU1nZishuLkd2eA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:2918:6000::/36 Signature Algorithm: sha256WithRSAEncryption 8b:4e:6b:01:e2:87:6d:14:a3:ce:d9:79:27:34:2e:34:35:6d: 64:06:57:66:9e:1e:77:7d:57:c0:6a:6a:7c:dd:2c:91:2d:fd: 49:8d:82:0c:03:94:05:80:db:47:dd:9c:3b:a9:a6:db:8e:c8: f2:f0:21:07:99:10:22:be:4a:17:2e:65:9a:9c:b8:b4:54:d1: 75:e8:93:94:1e:c0:92:46:ef:de:b2:a7:b9:fb:66:fa:51:62: fd:d4:41:6d:ec:d8:96:fe:7e:de:7a:52:48:92:f7:b1:aa:f4: 43:30:19:e2:43:5b:51:bb:82:84:8d:00:d6:04:e1:85:f7:90: bc:00:ff:c2:e2:48:1e:a8:2a:59:97:b4:1f:93:82:2a:c0:67: 79:74:4f:bb:1e:0c:22:35:de:8b:f2:ce:28:19:a7:1e:83:9e: 97:11:00:4b:38:75:a5:06:ef:20:7d:83:e0:ee:6a:a1:13:ed: 6c:a9:63:29:13:50:48:54:9b:8f:e9:6d:40:e7:b8:fb:9d:06: 86:fd:d2:97:8b:8d:b1:7f:79:7b:ef:71:64:26:08:37:82:3a: f3:8a:ba:25:3c:ff:d8:99:e0:56:46:13:d7:17:f8:93:dd:00: ee:5b:44:de:ef:0f:22:22:28:93:de:69:9b:c8:4d:e8:2b:bc: ab:1c:54:50 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5EMvZnNxR9CnnaM4eZXvdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWM2ODNjYjFlYjljMGY0OWI5NjdlM2JkOWI4Yjg0Y2Yw OTliYjgwHhcNMjYwMTAxMTAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmQ2NTY0MTE5MjY5NmNkMTU3NTRkNjc2NjJiMjFiOGI5MWRkOWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiPWI2FGvx7Lg5baS+4tQkA39Gch PR+GydhgKqeSDtmma0qVONd6I9SVfIgxZkIkpNeT+b9rlsvzc0ugszPUIYw2cZpg VbIAPYktv9hSTyYZlrDXWtMpdEAdGIUKYlnb39qVEi4SOru0x4H9upiNquyiTv6U t+ODHZ7JQY7ViNifDlTVD3fYHCGHnUvYpz4BuDKsO+UB7eATUXRN8wvSm+/FKtRi i9Vgf13q/QkHoJQfaTXZA8W39GjfzhvCfepJjt1L5bGpbxK8X89as449m24yhDzV D4ukbrh7lwDL9F9ffcTzP2ya07iCzuta0GaIyb/nTsm/vxFdUA3zFBR/tQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFCLWVkEZJpbNFXVNZ2YrIbi5HdngMB8GA1UdIwQY MBaAFMRcaDyx65wPSbln472bi4TPCZu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYt ODhkMmRmMTBkMTViLzEvSXRaV1FSa21sczBWZFUxblppc2h1TGtkMmVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYtODhkMmRmMTBkMTVi LzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgcpGGAw DQYJKoZIhvcNAQELBQADggEBAItOawHih20Uo87ZeSc0LjQ1bWQGV2aeHnd9V8Bq anzdLJEt/UmNggwDlAWA20fdnDupptuOyPLwIQeZECK+ShcuZZqcuLRU0XXok5Qe wJJG796yp7n7ZvpRYv3UQW3s2Jb+ft56UkiS97Gq9EMwGeJDW1G7goSNANYE4YX3 kLwA/8LiSB6oKlmXtB+TgirAZ3l0T7seDCI13ovyzigZpx6DnpcRAEs4daUG7yB9 g+DuaqET7WypYykTUEhUm4/pbUDnuPudBob90peLjbF/eXvvcWQmCDeCOvOKuiU8 /9iZ4FZGE9cX+JPdAO5bRN7vDyIiKJPeaZvITegrvKscVFA= -----END CERTIFICATE-----Generated at Mon Jan 26 01:42:03 2026 by rpki-client