This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/IQZgisUvqq6AOXyb4Rxfqw_msJ8.roa File: IQZgisUvqq6AOXyb4Rxfqw_msJ8.roa (raw, json) Hash identifier: 4T4CN7TKv+CMYzGbaTe2HA/gr50fscRLXntOxAqEXZQ= Subject key identifier: 21:06:60:8A:C5:2F:AA:AE:80:39:7C:9B:E1:1C:5F:AB:0F:E6:B0:9F Certificate issuer: /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b Certificate serial: 019B7F15E12F0958A21643C7C0F9A5036CFA Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/IQZgisUvqq6AOXyb4Rxfqw_msJ8.roa Signing time: Fri 02 Jan 2026 14:21:38 +0000 ROA not before: Fri 02 Jan 2026 14:21:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49689 IP address blocks: 2a10:8b40:1001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e1:2f:09:58:a2:16:43:c7:c0:f9:a5:03:6c:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b Validity Not Before: Jan 2 14:21:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2106608ac52faaae80397c9be11c5fab0fe6b09f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:de:69:56:43:8d:60:28:67:a1:57:ab:af:64: a2:78:04:a5:32:7a:2b:36:1f:33:ce:39:21:aa:a8: c9:b3:fd:fa:3a:73:33:4a:16:43:fa:d0:cd:bd:ec: 39:3a:76:37:d6:b2:32:0d:dd:85:98:a4:f2:12:a1: ff:75:7f:fe:88:30:c9:dd:c1:f0:e5:9f:cf:62:a8: bf:38:7e:b5:f7:03:cf:89:5b:ba:aa:99:23:c4:90: 26:df:21:7c:f3:c5:7a:74:32:e2:04:49:4f:03:8e: 10:52:8e:2c:3e:5f:0e:85:c0:48:aa:df:ce:7b:24: 81:55:a0:55:4d:cf:87:e8:65:72:2f:03:c8:79:a6: 7d:94:1d:f6:20:17:46:45:b9:68:b9:49:a9:49:47: 67:2b:a3:79:4c:c1:15:99:00:59:37:f0:e3:93:cc: 26:ff:ae:a2:f2:eb:69:2a:1a:9c:d5:fa:5e:5a:02: 91:b9:7b:88:71:a4:a6:20:58:99:a5:5f:73:9c:b8: a8:dc:e8:7c:10:7b:7a:9d:02:13:ef:b5:ec:06:15: 15:cc:02:89:92:39:19:ec:4d:a4:ef:9d:56:fc:92: a4:63:d5:a5:52:fc:bc:58:f5:a3:33:5c:80:36:f5: b6:7f:c6:fd:d3:a0:08:1d:b3:13:a1:c6:9e:a7:e9: ae:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:06:60:8A:C5:2F:AA:AE:80:39:7C:9B:E1:1C:5F:AB:0F:E6:B0:9F X509v3 Authority Key Identifier: keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/IQZgisUvqq6AOXyb4Rxfqw_msJ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:8b40:1001::/48 Signature Algorithm: sha256WithRSAEncryption 98:3c:75:8f:6c:0c:2f:82:ce:4f:56:58:17:ee:93:05:2b:f4: bc:2d:4f:f0:63:7e:52:01:57:92:62:05:08:3f:7c:d3:d5:1a: 80:ce:c7:b0:6f:6c:56:03:c5:3f:f3:61:56:15:9b:e4:e0:0f: d0:39:0d:b9:03:ac:98:52:5f:25:d3:60:18:b8:d1:7a:c4:46: c8:33:ec:ab:f6:e3:2b:86:9e:9e:a2:56:e3:66:86:78:bb:a7: e7:c4:98:66:00:27:43:b0:c7:3d:23:02:0b:84:c0:83:1b:76: 94:a1:55:77:76:09:c6:5e:c1:af:df:e4:12:20:b5:ad:fb:ca: d1:f6:ea:bb:cd:6e:d2:57:c9:34:d3:7e:c8:22:69:57:e7:ee: 5d:25:c5:89:49:7e:d2:24:39:11:45:c7:b8:07:b9:13:6d:5c: 3a:82:41:6d:3f:39:70:84:37:ab:bb:86:12:16:48:ec:50:a5: 7e:c1:9d:3c:e7:94:bb:cb:0c:26:71:e1:ca:b7:be:5b:36:99: c6:11:a4:97:17:56:3d:23:42:87:3e:92:f7:f5:77:e2:2e:22: 93:f1:7f:5b:59:3e:c2:90:32:4c:fa:e0:e4:d0:0a:2b:8d:b2: ff:79:1e:7b:46:fe:6f:38:43:5f:c3:5a:a2:f0:3b:ad:67:4f: 37:a8:16:17 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt/FeEvCViiFkPHwPmlA2z6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MGUwMTdjZjE3MTE1MTliMGZmOWY2NTg1OGM0OTFiMmZh NWQ0MGIwHhcNMjYwMTAyMTQyMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTA2NjA4YWM1MmZhYWFlODAzOTdjOWJlMTFjNWZhYjBmZTZiMDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt5pVkONYChnoVerr2SieASlMnor Nh8zzjkhqqjJs/36OnMzShZD+tDNvew5OnY31rIyDd2FmKTyEqH/dX/+iDDJ3cHw 5Z/PYqi/OH619wPPiVu6qpkjxJAm3yF888V6dDLiBElPA44QUo4sPl8OhcBIqt/O eySBVaBVTc+H6GVyLwPIeaZ9lB32IBdGRblouUmpSUdnK6N5TMEVmQBZN/Djk8wm /66i8utpKhqc1fpeWgKRuXuIcaSmIFiZpV9znLio3Oh8EHt6nQIT77XsBhUVzAKJ kjkZ7E2k751W/JKkY9WlUvy8WPWjM1yANvW2f8b906AIHbMTocaep+mucQIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFCEGYIrFL6qugDl8m+EcX6sP5rCfMB8GA1UdIwQY MBaAFPgOAXzxcRUZsP+fZYWMSRsvpdQLMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1BNEJmUEZ4RlJtd181OWxoWXhKR3ktbDFBcy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvMmRjMTM2LTQwMGQtNDBlNy1hZDg2 LThjZTYwYTVjOGIxZi8xL0lRWmdpc1V2cXE2QU9YeWI0UnhmcXdfbXNKOC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODcvMmRjMTM2LTQwMGQtNDBlNy1hZDg2LThjZTYwYTVjOGIx Zi8xLzEtQTRCZlBGeEZSbXdfNTlsaFl4Skd5LWwxQXMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqEItA EAEwDQYJKoZIhvcNAQELBQADggEBAJg8dY9sDC+Czk9WWBfukwUr9LwtT/BjflIB V5JiBQg/fNPVGoDOx7BvbFYDxT/zYVYVm+TgD9A5DbkDrJhSXyXTYBi40XrERsgz 7Kv24yuGnp6iVuNmhni7p+fEmGYAJ0Owxz0jAguEwIMbdpShVXd2CcZewa/f5BIg ta37ytH26rvNbtJXyTTTfsgiaVfn7l0lxYlJftIkORFFx7gHuRNtXDqCQW0/OXCE N6u7hhIWSOxQpX7BnTznlLvLDCZx4cq3vls2mcYRpJcXVj0jQoc+kvf1d+IuIpPx f1tZPsKQMkz64OTQCiuNsv95HntG/m84Q1/DWqLwO61nTzeoFhc= -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:53 2026 by rpki-client