This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/iufQHL1rrp5XzvULdBkr0SPCCu8.roa File: iufQHL1rrp5XzvULdBkr0SPCCu8.roa (raw, json) Hash identifier: o7Un0OaNswzLrJGI0RBqiK6v18+B62LAaKhklEYedo4= Subject key identifier: 8A:E7:D0:1C:BD:6B:AE:9E:57:CE:F5:0B:74:19:2B:D1:23:C2:0A:EF Certificate issuer: /CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8 Certificate serial: 019B7758C2ADF65305619566E568E687673C Authority key identifier: 8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/iufQHL1rrp5XzvULdBkr0SPCCu8.roa Signing time: Thu 01 Jan 2026 02:17:44 +0000 ROA not before: Thu 01 Jan 2026 02:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213092 IP address blocks: 2001:678:d90::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c2:ad:f6:53:05:61:95:66:e5:68:e6:87:67:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8 Validity Not Before: Jan 1 02:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ae7d01cbd6bae9e57cef50b74192bd123c20aef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3f:42:11:c8:e2:e5:67:9e:44:09:da:f7:61: 7a:80:61:8b:65:0c:df:0b:e2:6f:da:ff:3e:38:22: b6:bd:b7:a1:70:8d:6a:b3:27:61:af:fc:d7:ea:18: ea:9a:7e:10:df:f5:b9:29:66:d0:72:71:68:ca:3a: 67:20:bc:eb:e7:64:44:d6:bf:d5:fa:e5:56:ba:b6: ee:92:b0:7a:c2:95:c8:1c:9a:37:c6:33:f9:11:d9: 97:97:37:0c:a0:40:92:19:84:41:a0:94:0e:04:89: 3d:16:cc:48:0f:d0:4f:3a:74:00:a0:20:c1:97:ae: 80:83:37:95:88:35:24:81:ea:14:4a:14:ba:df:9d: 65:62:33:61:c1:e0:56:78:ff:2e:7a:7c:91:51:53: c9:4f:d3:af:58:29:e7:8f:05:13:02:a0:48:80:fa: 5c:10:70:a1:d3:e3:ba:e9:c7:ef:e1:e8:df:3a:fd: ea:e7:e8:8c:8d:57:a9:95:9e:ba:af:03:4e:f6:d4: 46:0b:da:79:c7:d4:4d:e4:05:d1:09:26:31:7c:79: c5:84:bf:3c:40:9d:00:c7:30:09:3e:ef:a2:97:4b: 0e:d1:f4:0a:ef:58:85:8d:1f:d7:9e:bd:d7:53:c5: 4b:d3:74:42:42:5e:29:59:75:7c:6c:ca:e8:dc:db: 66:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E7:D0:1C:BD:6B:AE:9E:57:CE:F5:0B:74:19:2B:D1:23:C2:0A:EF X509v3 Authority Key Identifier: keyid:8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/iufQHL1rrp5XzvULdBkr0SPCCu8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:d90::/48 Signature Algorithm: sha256WithRSAEncryption 57:ba:07:ce:e3:fc:8f:d4:bb:c1:d7:fa:da:59:34:7a:c9:83: f1:d8:07:a7:77:be:fd:ff:8d:c9:7e:05:42:c5:7b:1e:fb:93: cb:77:84:17:60:27:a8:46:3e:69:c0:46:50:06:cb:fc:7e:3a: 1a:0f:2f:48:c6:3d:d9:de:0d:cd:11:14:bb:1a:3c:9a:a8:e2: c5:c0:92:44:ed:d5:f5:2b:c2:56:f0:af:8f:b5:0a:ee:fe:2c: c8:4c:0b:1e:d9:30:2c:eb:ea:ce:c8:5a:82:1a:e6:47:ac:c7: 65:fc:d5:3d:00:86:26:52:da:bc:c8:8f:a8:8f:9e:04:db:fd: 3d:0b:49:8e:18:db:92:ff:51:72:99:5e:62:b5:dc:4c:6d:8b: 44:94:48:1c:80:04:00:ec:0b:bb:71:ad:8e:93:78:e0:b7:06: 50:41:00:7f:ab:8e:4f:22:11:71:95:bc:58:d1:ea:81:b9:f3: 31:e8:24:fb:cc:db:0c:ab:3b:79:21:5e:23:08:96:11:fd:99: c0:83:0a:28:a6:29:06:98:3c:25:e0:15:3e:62:2a:16:bd:92: 58:86:7a:e7:d8:31:d3:7f:05:2b:11:f7:d8:da:a6:54:3f:fb: b7:45:16:46:09:13:03:56:fb:a4:9d:f3:3b:7b:63:ce:e7:70: c7:b4:b1:61 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WMKt9lMFYZVm5Wjmh2c8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMzM3YzBjODU2OTQ2YjhmYmRhZjI4NWY1MmNhZGRjZjM4 YWQwYTgwHhcNMjYwMTAxMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWU3ZDAxY2JkNmJhZTllNTdjZWY1MGI3NDE5MmJkMTIzYzIwYWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz9CEcji5WeeRAna92F6gGGLZQzf C+Jv2v8+OCK2vbehcI1qsydhr/zX6hjqmn4Q3/W5KWbQcnFoyjpnILzr52RE1r/V +uVWurbukrB6wpXIHJo3xjP5EdmXlzcMoECSGYRBoJQOBIk9FsxID9BPOnQAoCDB l66AgzeViDUkgeoUShS6351lYjNhweBWeP8uenyRUVPJT9OvWCnnjwUTAqBIgPpc EHCh0+O66cfv4ejfOv3q5+iMjVeplZ66rwNO9tRGC9p5x9RN5AXRCSYxfHnFhL88 QJ0AxzAJPu+il0sO0fQK71iFjR/Xnr3XU8VL03RCQl4pWXV8bMro3NtmNwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIrn0By9a66eV871C3QZK9EjwgrvMB8GA1UdIwQY MBaAFI0zfAyFaUa4+9ryhfUsrdzzitCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalROOERJVnBScmo3MnZLRjlTeXQzUE9LMEtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni81YzliZDktMDlhZC00ZmFjLWJiYmMt M2YxNWY4ODM2ZGJiLzEvaXVmUUhMMXJycDVYenZVTGRCa3IwU1BDQ3U4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni81YzliZDktMDlhZC00ZmFjLWJiYmMtM2YxNWY4ODM2ZGJi LzEvalROOERJVnBScmo3MnZLRjlTeXQzUE9LMEtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA2Q MA0GCSqGSIb3DQEBCwUAA4IBAQBXugfO4/yP1LvB1/raWTR6yYPx2Aend779/43J fgVCxXse+5PLd4QXYCeoRj5pwEZQBsv8fjoaDy9Ixj3Z3g3NERS7GjyaqOLFwJJE 7dX1K8JW8K+PtQru/izITAse2TAs6+rOyFqCGuZHrMdl/NU9AIYmUtq8yI+oj54E 2/09C0mOGNuS/1FymV5itdxMbYtElEgcgAQA7Au7ca2Ok3jgtwZQQQB/q45PIhFx lbxY0eqBufMx6CT7zNsMqzt5IV4jCJYR/ZnAgwoopikGmDwl4BU+YioWvZJYhnrn 2DHTfwUrEffY2qZUP/u3RRZGCRMDVvuknfM7e2PO53DHtLFh -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:22 2026 by rpki-client