This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/iTrKyBgs_fihjw2gMNeMi35dTSA.roa File: iTrKyBgs_fihjw2gMNeMi35dTSA.roa (raw, json) Hash identifier: zNTMLDdPTDqmLO0jhMMrsQBD6z1cOUxn49L1ph7eXpE= Subject key identifier: 89:3A:CA:C8:18:2C:FD:F8:A1:8F:0D:A0:30:D7:8C:8B:7E:5D:4D:20 Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a Certificate serial: 019B7BA463CDD3A3D3D60BECE9FE4558D595 Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/iTrKyBgs_fihjw2gMNeMi35dTSA.roa Signing time: Thu 01 Jan 2026 22:18:49 +0000 ROA not before: Thu 01 Jan 2026 22:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60666 IP address blocks: 2a12:3fc2:aa40::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:63:cd:d3:a3:d3:d6:0b:ec:e9:fe:45:58:d5:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a Validity Not Before: Jan 1 22:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=893acac8182cfdf8a18f0da030d78c8b7e5d4d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bb:d6:a1:b7:0d:03:93:cb:d6:08:c8:11:f6: 4d:88:8f:2a:c7:f4:37:9b:7a:e4:a7:a6:cc:7f:5f: 34:b3:af:fd:bc:37:97:9a:f1:d4:5e:94:48:b6:86: 0b:81:db:76:62:20:b5:8b:5f:8d:13:86:a8:fb:d6: 5c:7c:c3:fa:fd:dd:ad:ef:6b:c9:77:57:12:44:76: f8:00:f4:b7:e2:30:31:c4:85:a4:40:bd:5a:69:b6: bc:4b:c1:b3:e1:59:67:ce:9d:1f:eb:02:de:94:9d: e5:fe:89:bb:10:62:f3:53:44:50:00:eb:3b:2c:07: c1:fa:5f:db:98:f1:57:b6:4d:d3:75:81:cf:95:df: b6:90:48:23:80:f5:09:18:a5:89:c5:d3:6e:33:b3: ac:e8:65:cb:39:2b:26:be:57:fe:9e:f0:e6:dd:66: 05:33:7d:60:1f:f6:52:41:f3:5d:a8:ef:a3:fd:46: 82:8b:dc:91:91:3b:87:e9:50:be:9b:e6:cf:19:01: f1:dc:6e:b6:29:25:71:8c:4b:b4:de:4e:05:15:5b: d4:2d:d1:a6:e8:08:62:a5:b3:2e:6a:1d:e4:91:96: c6:40:c3:b2:88:e5:8d:2e:37:aa:36:49:8c:f2:ac: 35:22:0e:b7:30:fe:25:dd:3b:ca:69:d2:40:0e:22: cb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3A:CA:C8:18:2C:FD:F8:A1:8F:0D:A0:30:D7:8C:8B:7E:5D:4D:20 X509v3 Authority Key Identifier: keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/iTrKyBgs_fihjw2gMNeMi35dTSA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:3fc2:aa40::/44 Signature Algorithm: sha256WithRSAEncryption 07:57:c8:f9:ee:4c:73:67:9b:9f:9b:31:97:10:5f:b4:94:19: b5:80:9f:86:51:76:a1:05:7e:9f:12:e6:eb:fc:d7:aa:15:b3: f6:b5:d2:24:94:87:31:b4:69:77:d8:57:49:1d:e3:9c:96:a5: ec:b5:61:af:5c:0c:3a:fb:86:a1:fd:04:e1:4d:96:a0:f4:49: d4:2a:ad:a7:27:b0:90:5b:75:5b:a0:fe:05:e7:57:b3:67:31: c6:0c:8e:da:9f:2d:21:ea:26:37:a9:e6:e5:07:e3:76:5d:bb: e3:74:b5:8e:1e:f3:f0:f4:a4:1e:eb:41:53:c1:15:30:b9:1e: 3b:95:14:f1:c9:3d:f5:b8:a5:03:47:13:15:9d:f6:0a:f2:11: b6:a6:6e:16:b4:5f:e7:7a:3b:9c:f8:e6:0b:8e:25:ee:43:47: c9:a0:ab:3d:fd:2b:1e:bb:1a:cd:c6:e9:e1:29:fb:32:6f:96: 86:06:ea:3b:5b:b8:fb:e2:61:d8:84:c0:e5:7a:84:c3:a9:bf: 20:90:eb:ca:78:42:87:fc:76:01:7e:b9:a0:ee:07:fa:cd:61: ca:8d:37:f8:bd:7a:c9:39:ed:e4:c0:c1:c7:71:10:c3:6d:a6: 9f:1c:be:e4:eb:43:50:f7:e7:4f:34:31:90:f9:bd:35:ee:61: 60:cc:80:0a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7pGPN06PT1gvs6f5FWNWVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMTZhYmNjNDRjOWE5NTU0MGNkZjViMWRjNTQyZWM3ZDEx ZmUwN2EwHhcNMjYwMTAxMjIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTNhY2FjODE4MmNmZGY4YTE4ZjBkYTAzMGQ3OGM4YjdlNWQ0ZDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbvWobcNA5PL1gjIEfZNiI8qx/Q3 m3rkp6bMf180s6/9vDeXmvHUXpRItoYLgdt2YiC1i1+NE4ao+9ZcfMP6/d2t72vJ d1cSRHb4APS34jAxxIWkQL1aaba8S8Gz4Vlnzp0f6wLelJ3l/om7EGLzU0RQAOs7 LAfB+l/bmPFXtk3TdYHPld+2kEgjgPUJGKWJxdNuM7Os6GXLOSsmvlf+nvDm3WYF M31gH/ZSQfNdqO+j/UaCi9yRkTuH6VC+m+bPGQHx3G62KSVxjEu03k4FFVvULdGm 6AhipbMuah3kkZbGQMOyiOWNLjeqNkmM8qw1Ig63MP4l3TvKadJADiLLtwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIk6ysgYLP34oY8NoDDXjIt+XU0gMB8GA1UdIwQY MBaAFBIWq8xEyalVQM31sdxULsfRH+B6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hYzljZjYtMWJlYy00MjRiLWFhNTEt YTA5NjJkOTk4ZTYwLzEvaVRyS3lCZ3NfZmloancyZ01OZU1pMzVkVFNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9hYzljZjYtMWJlYy00MjRiLWFhNTEtYTA5NjJkOTk4ZTYw LzEvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhI/wqpA MA0GCSqGSIb3DQEBCwUAA4IBAQAHV8j57kxzZ5ufmzGXEF+0lBm1gJ+GUXahBX6f Eubr/NeqFbP2tdIklIcxtGl32FdJHeOclqXstWGvXAw6+4ah/QThTZag9EnUKq2n J7CQW3VboP4F51ezZzHGDI7any0h6iY3qeblB+N2XbvjdLWOHvPw9KQe60FTwRUw uR47lRTxyT31uKUDRxMVnfYK8hG2pm4WtF/nejuc+OYLjiXuQ0fJoKs9/SseuxrN xunhKfsyb5aGBuo7W7j74mHYhMDleoTDqb8gkOvKeEKH/HYBfrmg7gf6zWHKjTf4 vXrJOe3kwMHHcRDDbaafHL7k60NQ9+dPNDGQ+b017mFgzIAK -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:01 2026 by rpki-client