This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/iMhNJE5p5L2ep5kn_4UGFqS_FzQ.roa File: iMhNJE5p5L2ep5kn_4UGFqS_FzQ.roa (raw, json) Hash identifier: /o+DNzqxV3sGJxv69LjWdzbAz++QWXgqCHTiiA6AqZw= Subject key identifier: 88:C8:4D:24:4E:69:E4:BD:9E:A7:99:27:FF:85:06:16:A4:BF:17:34 Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Certificate serial: 019BE07963C42DCF13413B7AD0016C584486 Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/iMhNJE5p5L2ep5kn_4UGFqS_FzQ.roa Signing time: Wed 21 Jan 2026 12:13:30 +0000 ROA not before: Wed 21 Jan 2026 12:13:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214024 IP address blocks: 2a14:c380:19::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:79:63:c4:2d:cf:13:41:3b:7a:d0:01:6c:58:44:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Validity Not Before: Jan 21 12:13:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88c84d244e69e4bd9ea79927ff850616a4bf1734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:44:af:ae:ff:1b:e9:b9:be:4c:fa:ba:f1:32: a7:8b:99:1f:57:54:71:cf:40:ca:84:d2:f6:36:1d: 5a:20:f9:9e:49:4d:59:1e:46:b8:30:0b:27:46:dd: 4a:1e:3e:f2:de:6e:c7:4a:7f:34:2f:08:66:17:07: 28:de:fc:f6:21:ea:42:4a:9c:f5:51:44:59:fe:0c: af:f6:91:f9:5b:71:61:18:ae:98:9f:87:86:b2:54: 2c:77:d8:96:e6:3a:31:5f:82:37:21:31:42:10:55: 69:a2:6c:74:5b:fb:64:b1:01:90:03:36:04:0d:01: 12:14:72:2c:7e:7e:db:92:39:4b:12:1b:25:37:17: f9:ed:df:3c:d4:13:3c:af:18:ef:13:85:47:77:55: ef:8e:a4:85:73:8c:57:22:5d:c4:8f:47:84:be:e7: dd:ce:f9:8d:87:c3:0d:9c:67:e3:5a:88:81:1b:f8: c5:e5:c2:96:26:5a:56:47:8e:f1:68:68:ee:c8:4b: 19:7c:be:c0:ce:91:44:c7:2c:c7:bd:b0:e9:c8:b0: 7b:47:39:32:c2:5a:5c:25:11:c7:64:6f:72:4a:c1: d0:ca:48:d2:01:f9:88:0c:20:8d:ce:99:71:8f:3d: 42:7f:81:3c:db:03:61:4c:95:58:d5:66:b4:e5:51: 33:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C8:4D:24:4E:69:E4:BD:9E:A7:99:27:FF:85:06:16:A4:BF:17:34 X509v3 Authority Key Identifier: keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/iMhNJE5p5L2ep5kn_4UGFqS_FzQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c380:19::/48 Signature Algorithm: sha256WithRSAEncryption 01:b6:12:24:61:a8:e7:8d:94:cb:4e:c0:1b:09:f4:f6:12:23: 6b:d9:1b:24:d6:80:b2:8b:41:13:33:c2:00:42:97:67:d9:35: ab:e7:f2:12:ec:0c:9f:13:56:29:5b:d6:c2:89:ed:e6:1e:bc: 4d:95:8a:30:ba:07:1a:df:7f:fc:5c:6b:37:a4:a8:b8:af:d0: 9c:fd:8e:03:8a:f6:2f:d9:11:32:49:0a:17:2f:6d:c5:89:07: 3e:96:db:10:fb:2e:f1:07:ba:83:d3:d2:0a:d9:d2:2e:67:e0: d7:04:24:9d:0f:1f:fd:74:f6:1d:b9:e5:db:48:4d:9c:99:b2: f3:6e:b9:d1:89:00:55:74:8c:1a:38:50:c1:d8:0a:59:6c:c6: 60:fd:b7:2e:f0:e1:a1:a4:29:66:6c:5e:dc:f5:d3:da:c6:78: 09:23:af:c8:52:ee:0a:25:e8:a2:bc:c4:9d:b9:0b:31:1c:e1: 8b:15:5b:f6:d8:79:18:62:07:49:81:38:26:94:c4:da:a0:96: ee:2b:b2:42:f9:ef:9d:e3:c5:eb:51:c2:6a:45:65:4c:b3:1b: 62:26:d9:20:7d:a8:0d:d4:20:62:c8:16:08:72:62:17:85:2d: 31:1c:a6:f1:05:a8:c2:f1:96:8f:8a:89:03:17:89:71:0f:06: 1f:d3:47:fc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZvgeWPELc8TQTt60AFsWESGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2 ZDI1MTIwHhcNMjYwMTIxMTIxMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGM4NGQyNDRlNjllNGJkOWVhNzk5MjdmZjg1MDYxNmE0YmYxNzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60Svrv8b6bm+TPq68TKni5kfV1Rx z0DKhNL2Nh1aIPmeSU1ZHka4MAsnRt1KHj7y3m7HSn80LwhmFwco3vz2IepCSpz1 UURZ/gyv9pH5W3FhGK6Yn4eGslQsd9iW5joxX4I3ITFCEFVpomx0W/tksQGQAzYE DQESFHIsfn7bkjlLEhslNxf57d881BM8rxjvE4VHd1XvjqSFc4xXIl3Ej0eEvufd zvmNh8MNnGfjWoiBG/jF5cKWJlpWR47xaGjuyEsZfL7AzpFExyzHvbDpyLB7Rzky wlpcJRHHZG9ySsHQykjSAfmIDCCNzplxjz1Cf4E82wNhTJVY1Wa05VEzKQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIjITSROaeS9nqeZJ/+FBhakvxc0MB8GA1UdIwQY MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt NTMyMWQ2OWQ5NzlkLzEvaU1oTkpFNXA1TDJlcDVrbl80VUdGcVNfRnpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhTDgAAZ MA0GCSqGSIb3DQEBCwUAA4IBAQABthIkYajnjZTLTsAbCfT2EiNr2Rsk1oCyi0ET M8IAQpdn2TWr5/IS7AyfE1YpW9bCie3mHrxNlYowugca33/8XGs3pKi4r9Cc/Y4D ivYv2REySQoXL23FiQc+ltsQ+y7xB7qD09IK2dIuZ+DXBCSdDx/9dPYdueXbSE2c mbLzbrnRiQBVdIwaOFDB2ApZbMZg/bcu8OGhpClmbF7c9dPaxngJI6/IUu4KJeii vMSduQsxHOGLFVv22HkYYgdJgTgmlMTaoJbuK7JC+e+d48XrUcJqRWVMsxtiJtkg fagN1CBiyBYIcmIXhS0xHKbxBajC8ZaPiokDF4lxDwYf00f8 -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:50 2026 by rpki-client