This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/IvYaWiyU4-mF6Hfr6yvUs-TfOx8.roa File: IvYaWiyU4-mF6Hfr6yvUs-TfOx8.roa (raw, json) Hash identifier: vzEeCN8mv8JAbDyh2EAs7UGT1vMJ7VBIlnfY4XE6ETA= Subject key identifier: 22:F6:1A:5A:2C:94:E3:E9:85:E8:77:EB:EB:2B:D4:B3:E4:DF:3B:1F Certificate issuer: /CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d Certificate serial: 019B7E376E510BF58B5630E32BD723CB8697 Authority key identifier: BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/IvYaWiyU4-mF6Hfr6yvUs-TfOx8.roa Signing time: Fri 02 Jan 2026 10:18:40 +0000 ROA not before: Fri 02 Jan 2026 10:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1257 IP address blocks: 2001:678:450::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:6e:51:0b:f5:8b:56:30:e3:2b:d7:23:cb:86:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d Validity Not Before: Jan 2 10:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22f61a5a2c94e3e985e877ebeb2bd4b3e4df3b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:80:57:23:79:34:24:c8:96:db:50:a6:d8:7f: 0b:3b:ef:d0:99:96:93:3f:f2:08:09:c4:b7:93:7c: a6:9c:99:1b:5d:10:ba:75:46:1a:da:c4:e7:31:b7: 01:32:6f:80:1e:fd:95:0c:65:88:c3:2d:f3:d5:ab: 0b:51:2d:da:c1:2f:e1:80:b1:91:0f:e2:73:46:a8: 0a:c5:b0:10:79:85:81:8b:f3:14:a7:33:62:a7:6c: 4f:26:d0:d2:64:84:3d:0b:88:d7:a4:4c:96:40:3a: 24:37:0e:62:f2:c7:d4:22:a2:dd:21:1e:e3:7b:89: 69:d0:01:34:39:cb:4d:8e:0a:68:ab:b3:87:08:0c: b0:f4:21:b3:f7:17:a7:57:f7:1e:5c:3c:70:fb:ca: fd:83:1b:e6:1e:ce:be:e8:53:e8:dc:a3:78:2c:89: e4:88:42:0e:ed:23:d5:3e:e6:c6:5c:cc:25:d8:c1: 39:45:ac:e4:36:b4:0d:78:6e:aa:08:57:a3:78:4a: 28:61:8f:90:22:a1:7b:af:77:42:cb:45:d9:62:f3: ee:44:f8:c0:4d:47:a1:6e:6d:bd:cd:72:a3:ca:00: cf:fd:08:38:13:c3:5c:6f:c4:63:44:8e:b9:9b:39: b8:b6:27:25:8e:42:5e:87:ee:22:9b:0f:49:45:47: 37:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F6:1A:5A:2C:94:E3:E9:85:E8:77:EB:EB:2B:D4:B3:E4:DF:3B:1F X509v3 Authority Key Identifier: keyid:BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/IvYaWiyU4-mF6Hfr6yvUs-TfOx8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:450::/48 Signature Algorithm: sha256WithRSAEncryption 2b:09:a5:14:cf:b6:f9:b5:76:79:ea:a0:68:4f:27:07:c0:c6: 88:5a:6d:79:5f:ca:35:f7:ee:e4:21:ba:a9:6f:cb:4f:58:f6: 27:94:10:1b:03:2e:28:49:8b:e4:92:77:7f:68:c7:a3:41:9b: 4f:cc:06:de:fb:56:c7:c9:ec:d0:1c:b5:ce:5e:04:8c:ab:1f: 5c:70:c4:12:7d:07:f4:5e:b3:d7:cf:f1:1b:5b:34:b2:3b:f5: c4:27:1f:15:28:ae:b6:fb:a1:24:d3:ec:9c:df:6d:c5:35:71: 00:fc:f3:59:05:32:56:84:28:63:d3:ac:e6:94:9a:fb:34:5b: 0a:dc:28:63:60:3c:cd:d0:09:b3:cf:a0:ec:dd:4d:aa:7b:53: 1c:8b:4c:ac:57:7b:59:f7:db:7b:32:20:88:86:0c:85:54:e0: 53:bb:c9:ee:76:85:23:68:18:1a:07:e4:e5:a8:db:7c:43:29: 72:a3:d6:fb:c7:6e:26:9a:39:f1:b2:0e:fa:bc:f5:cc:4c:88: d3:e9:65:05:54:26:53:03:34:eb:67:c0:24:be:3a:04:a5:6d: 91:62:3f:3c:10:10:bd:1d:6a:60:cd:b9:b5:97:6d:8e:e3:58: 62:f6:8c:91:1f:f8:a0:5e:60:70:6c:d3:2a:91:a4:b3:e1:fb: 7e:88:54:bd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+N25RC/WLVjDjK9cjy4aXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZTJjYzIwZDY5YjMwZGRlMThlYzBkMDAyY2UyZjkxNDli ZmIwNmQwHhcNMjYwMTAyMTAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmY2MWE1YTJjOTRlM2U5ODVlODc3ZWJlYjJiZDRiM2U0ZGYzYjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIBXI3k0JMiW21Cm2H8LO+/QmZaT P/IICcS3k3ymnJkbXRC6dUYa2sTnMbcBMm+AHv2VDGWIwy3z1asLUS3awS/hgLGR D+JzRqgKxbAQeYWBi/MUpzNip2xPJtDSZIQ9C4jXpEyWQDokNw5i8sfUIqLdIR7j e4lp0AE0OctNjgpoq7OHCAyw9CGz9xenV/ceXDxw+8r9gxvmHs6+6FPo3KN4LInk iEIO7SPVPubGXMwl2ME5RazkNrQNeG6qCFejeEooYY+QIqF7r3dCy0XZYvPuRPjA TUehbm29zXKjygDP/Qg4E8Ncb8RjRI65mzm4ticljkJeh+4imw9JRUc3uwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCL2GloslOPpheh36+sr1LPk3zsfMB8GA1UdIwQY MBaAFLvizCDWmzDd4Y7A0ALOL5FJv7BtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdS1MTUlOYWJNTjNoanNEUUFzNHZrVW1fc0cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84YjRiMWEtZWE0Zi00MmUxLWI5NDIt YjExOWMyNThjZmFkLzEvSXZZYVdpeVU0LW1GNkhmcjZ5dlVzLVRmT3g4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi84YjRiMWEtZWE0Zi00MmUxLWI5NDItYjExOWMyNThjZmFk LzEvdS1MTUlOYWJNTjNoanNEUUFzNHZrVW1fc0cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeARQ MA0GCSqGSIb3DQEBCwUAA4IBAQArCaUUz7b5tXZ56qBoTycHwMaIWm15X8o19+7k Ibqpb8tPWPYnlBAbAy4oSYvkknd/aMejQZtPzAbe+1bHyezQHLXOXgSMqx9ccMQS fQf0XrPXz/EbWzSyO/XEJx8VKK62+6Ek0+yc323FNXEA/PNZBTJWhChj06zmlJr7 NFsK3ChjYDzN0Amzz6Ds3U2qe1Mci0ysV3tZ99t7MiCIhgyFVOBTu8nudoUjaBga B+TlqNt8Qylyo9b7x24mmjnxsg76vPXMTIjT6WUFVCZTAzTrZ8AkvjoEpW2RYj88 EBC9HWpgzbm1l22O41hi9oyRH/igXmBwbNMqkaSz4ft+iFS9 -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:51 2026 by rpki-client