This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/iYgL9YAcXTZTdezPKH7kUPhkmN0.roa File: iYgL9YAcXTZTdezPKH7kUPhkmN0.roa (raw, json) Hash identifier: +UrmUxN9VwigyNaXGlHJ5mAa5ZCnHwM1WUcwK+R8j8E= Subject key identifier: 89:88:0B:F5:80:1C:5D:36:53:75:EC:CF:28:7E:E4:50:F8:64:98:DD Certificate issuer: /CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d Certificate serial: 019B7E376F9634340F4676E129B27F88FBFB Authority key identifier: BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/iYgL9YAcXTZTdezPKH7kUPhkmN0.roa Signing time: Fri 02 Jan 2026 10:18:40 +0000 ROA not before: Fri 02 Jan 2026 10:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214202 IP address blocks: 2001:678:450::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:6f:96:34:34:0f:46:76:e1:29:b2:7f:88:fb:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d Validity Not Before: Jan 2 10:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89880bf5801c5d365375eccf287ee450f86498dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e2:83:b2:f0:14:55:2d:08:3b:02:70:05:b1: 97:cf:c1:1d:3d:e6:70:4e:f9:6e:dd:2a:65:37:70: f7:0a:5c:48:65:3d:04:3f:cd:5a:db:54:25:c5:21: 4f:4d:89:fa:56:4c:be:f8:2e:70:5d:89:05:ba:7b: 3b:ca:da:77:0a:08:ba:56:ca:7a:61:36:33:2a:6e: 9b:b4:91:fd:72:40:9c:bb:5b:f8:c8:3e:f5:ed:e7: 9b:4a:32:7a:15:6e:8a:c1:78:18:94:af:88:4e:c2: 8c:bc:91:94:65:77:52:aa:2a:3d:4a:a9:31:82:ef: 3c:f8:0c:e2:25:be:0c:15:d4:6f:78:15:e2:7d:e4: c5:3b:d2:32:ad:20:cf:61:60:ce:ba:dd:e7:a5:ee: b4:fa:dc:27:50:5c:d3:0c:6d:91:ec:6f:e8:9f:e1: fc:8d:0d:e2:69:6b:24:be:b6:47:be:c6:ef:fb:90: be:f7:5d:30:96:88:92:3f:de:20:75:61:38:70:f4: d4:e9:e2:fe:98:8a:2d:99:14:05:2f:11:2c:1b:42: 50:e3:dc:f5:37:06:de:ea:ed:55:bb:cf:e4:f6:f2: 2e:47:b0:f2:26:ed:24:79:8f:69:6a:df:55:ad:9b: f5:99:8a:b8:61:0e:8a:8d:94:69:70:44:43:b3:fb: 82:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:88:0B:F5:80:1C:5D:36:53:75:EC:CF:28:7E:E4:50:F8:64:98:DD X509v3 Authority Key Identifier: keyid:BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/iYgL9YAcXTZTdezPKH7kUPhkmN0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:450::/48 Signature Algorithm: sha256WithRSAEncryption 18:bc:c0:18:8a:e4:9c:b4:6d:6a:43:4b:d1:3b:72:ec:0d:f8: 72:4a:23:42:82:80:a9:24:30:31:a9:cd:cf:7c:c3:82:38:bc: 78:bc:8f:9d:22:03:f5:82:15:20:e1:c0:e6:cb:0e:12:65:05: a7:0e:e8:97:07:1e:0c:92:09:a3:7c:a9:a7:16:6d:22:e2:12: eb:19:d8:e9:f5:5b:18:a4:13:04:5d:c8:4a:fb:a6:d7:59:83: 86:9c:09:db:c0:19:9a:82:81:24:71:9b:80:24:04:d9:b3:e8: 2b:b0:a5:18:c3:7a:7d:8d:d9:74:d9:b2:77:9b:c0:e8:85:d2: 1a:b6:3d:e9:e9:3a:95:b3:2f:d4:cf:96:72:a3:8d:52:99:20: 49:43:b0:cf:3b:ae:b9:19:a8:0d:09:e3:4b:77:ef:d0:86:6b: b8:25:44:34:a1:7e:c0:80:b8:f8:bf:68:51:79:88:fa:60:22: f3:ec:46:b0:11:2e:7a:44:ef:c8:98:1a:1e:ce:46:c2:32:02: 1a:eb:8a:c3:08:07:f6:4e:4b:d5:c5:35:bf:fe:76:0f:2f:ce: fc:68:04:e6:71:07:40:d8:2e:6a:8b:9c:0a:12:9b:45:af:9e: 7b:98:6f:f8:19:d7:de:4c:5b:14:ab:69:73:d7:11:89:5f:af: c7:89:ec:1c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+N2+WNDQPRnbhKbJ/iPv7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZTJjYzIwZDY5YjMwZGRlMThlYzBkMDAyY2UyZjkxNDli ZmIwNmQwHhcNMjYwMTAyMTAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTg4MGJmNTgwMWM1ZDM2NTM3NWVjY2YyODdlZTQ1MGY4NjQ5OGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+KDsvAUVS0IOwJwBbGXz8EdPeZw Tvlu3SplN3D3ClxIZT0EP81a21QlxSFPTYn6Vky++C5wXYkFuns7ytp3Cgi6Vsp6 YTYzKm6btJH9ckCcu1v4yD717eebSjJ6FW6KwXgYlK+ITsKMvJGUZXdSqio9Sqkx gu88+AziJb4MFdRveBXifeTFO9IyrSDPYWDOut3npe60+twnUFzTDG2R7G/on+H8 jQ3iaWskvrZHvsbv+5C+910wloiSP94gdWE4cPTU6eL+mIotmRQFLxEsG0JQ49z1 Nwbe6u1Vu8/k9vIuR7DyJu0keY9pat9VrZv1mYq4YQ6KjZRpcERDs/uCOQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFImIC/WAHF02U3Xszyh+5FD4ZJjdMB8GA1UdIwQY MBaAFLvizCDWmzDd4Y7A0ALOL5FJv7BtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdS1MTUlOYWJNTjNoanNEUUFzNHZrVW1fc0cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84YjRiMWEtZWE0Zi00MmUxLWI5NDIt YjExOWMyNThjZmFkLzEvaVlnTDlZQWNYVFpUZGV6UEtIN2tVUGhrbU4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi84YjRiMWEtZWE0Zi00MmUxLWI5NDItYjExOWMyNThjZmFk LzEvdS1MTUlOYWJNTjNoanNEUUFzNHZrVW1fc0cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeARQ MA0GCSqGSIb3DQEBCwUAA4IBAQAYvMAYiuSctG1qQ0vRO3LsDfhySiNCgoCpJDAx qc3PfMOCOLx4vI+dIgP1ghUg4cDmyw4SZQWnDuiXBx4MkgmjfKmnFm0i4hLrGdjp 9VsYpBMEXchK+6bXWYOGnAnbwBmagoEkcZuAJATZs+grsKUYw3p9jdl02bJ3m8Do hdIatj3p6TqVsy/Uz5Zyo41SmSBJQ7DPO665GagNCeNLd+/Qhmu4JUQ0oX7AgLj4 v2hReYj6YCLz7EawES56RO/ImBoezkbCMgIa64rDCAf2TkvVxTW//nYPL878aATm cQdA2C5qi5wKEptFr557mG/4GdfeTFsUq2lz1xGJX6/Hiewc -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:12 2026 by rpki-client