This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/IxwIjHVYTFyVPPJeuiO1JpcCvzM.roa File: IxwIjHVYTFyVPPJeuiO1JpcCvzM.roa (raw, json) Hash identifier: uGsI2smQZDACq5TGrMadh8kVvnRLPaTcj/HGRS+HaPA= Subject key identifier: 23:1C:08:8C:75:58:4C:5C:95:3C:F2:5E:BA:23:B5:26:97:02:BF:33 Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506 Certificate serial: 019B77C7130C08D4844B9D43151A0C5258AC Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/IxwIjHVYTFyVPPJeuiO1JpcCvzM.roa Signing time: Thu 01 Jan 2026 04:18:13 +0000 ROA not before: Thu 01 Jan 2026 04:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29330 IP address blocks: 2a01:190:15e8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:13:0c:08:d4:84:4b:9d:43:15:1a:0c:52:58:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506 Validity Not Before: Jan 1 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=231c088c75584c5c953cf25eba23b5269702bf33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:56:49:d2:01:f5:23:31:b5:ca:59:01:1b:3c: ff:76:7a:2e:29:39:d0:9e:dd:40:f9:49:00:b8:77: a8:c8:65:b9:15:fa:ba:8f:73:7a:63:de:d4:cd:88: e6:f6:86:bb:de:10:a9:f0:75:46:89:37:7a:c9:b3: a3:fe:e8:39:1d:ad:02:a1:02:fe:48:9a:87:a8:44: a7:f9:94:b5:11:4b:1a:72:6b:70:e7:bd:36:a4:41: 73:56:a2:24:ad:c1:38:ba:51:70:96:fa:8f:35:6e: 86:a4:bb:27:de:70:bf:a5:9a:5b:56:c9:8b:2a:65: b6:10:e4:d4:1a:e0:86:f0:62:b9:7e:be:00:f5:3b: 7a:0a:1e:1f:7f:3f:dd:f6:b3:21:85:ae:0d:66:23: fd:ee:9d:dd:27:6c:65:d9:c0:23:4d:ee:07:ae:1b: e3:e3:e3:93:b9:56:ed:f7:6e:68:71:fb:b5:63:d7: cc:cd:3e:a6:17:37:80:aa:a5:ab:61:17:2b:40:44: ce:80:b0:f4:1b:65:b4:97:ed:4c:18:d0:14:c5:c0: 91:e1:bb:7c:68:8f:5d:ba:24:c9:9d:82:ae:a9:80: 80:75:0b:7f:a4:82:1c:94:89:9c:72:5a:2f:48:b2: 8f:17:a5:52:69:41:8f:a0:b7:9e:a7:4e:74:5b:97: d5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1C:08:8C:75:58:4C:5C:95:3C:F2:5E:BA:23:B5:26:97:02:BF:33 X509v3 Authority Key Identifier: keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/IxwIjHVYTFyVPPJeuiO1JpcCvzM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:190:15e8::/48 Signature Algorithm: sha256WithRSAEncryption ce:09:8c:a1:69:5e:10:4b:2d:08:88:ac:4f:ff:5e:36:5f:92: d0:83:e5:18:d8:41:49:65:0b:40:51:27:9f:06:2c:67:fb:74: dc:a6:aa:3c:f5:2a:0c:bc:41:f3:73:5b:84:a9:a1:ec:ac:72: 8a:c0:95:9f:e6:35:06:40:9e:4f:a1:de:32:f4:ff:91:d6:4f: 88:4d:3d:fe:b7:cf:5c:f7:42:cb:0f:fd:ec:9a:14:2b:64:c4: 55:8f:b5:67:e4:49:66:de:60:a9:af:8a:13:93:01:be:f1:f0: a0:0b:8a:2e:a2:cb:8e:f7:61:a2:79:89:74:d8:87:b9:74:10: d7:79:af:66:54:08:12:61:6f:25:35:24:f3:08:98:fe:66:af: 23:94:17:ad:ad:3e:1d:a4:6f:ef:a5:36:80:54:ee:b1:70:87: 38:11:0c:9d:50:08:2b:1b:a2:ee:b4:3e:08:7e:8e:0f:7b:a1: 63:44:6b:8c:f1:ef:0b:e5:ce:ef:01:79:40:76:2b:48:64:9f: f7:d6:95:68:c4:fc:02:3b:e9:99:02:99:32:da:74:9d:72:ce: 05:e6:51:21:0e:25:0a:36:98:3e:7c:3d:b7:4b:31:bd:23:f2: bf:1e:a0:65:f3:a4:2f:32:3a:21:f7:3c:08:b8:17:13:d1:e1: bf:3a:20:e3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3xxMMCNSES51DFRoMUlisMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw YjQ1MDYwHhcNMjYwMTAxMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzFjMDg4Yzc1NTg0YzVjOTUzY2YyNWViYTIzYjUyNjk3MDJiZjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlZJ0gH1IzG1ylkBGzz/dnouKTnQ nt1A+UkAuHeoyGW5Ffq6j3N6Y97UzYjm9oa73hCp8HVGiTd6ybOj/ug5Ha0CoQL+ SJqHqESn+ZS1EUsacmtw5702pEFzVqIkrcE4ulFwlvqPNW6GpLsn3nC/pZpbVsmL KmW2EOTUGuCG8GK5fr4A9Tt6Ch4ffz/d9rMhha4NZiP97p3dJ2xl2cAjTe4Hrhvj 4+OTuVbt925ocfu1Y9fMzT6mFzeAqqWrYRcrQETOgLD0G2W0l+1MGNAUxcCR4bt8 aI9duiTJnYKuqYCAdQt/pIIclImcclovSLKPF6VSaUGPoLeep050W5fVPQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCMcCIx1WExclTzyXrojtSaXAr8zMB8GA1UdIwQY MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt OGVlYjc1N2NmNTQ1LzEvSXh3SWpIVllURnlWUFBKZXVpTzFKcGNDdnpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1 LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgEBkBXo MA0GCSqGSIb3DQEBCwUAA4IBAQDOCYyhaV4QSy0IiKxP/142X5LQg+UY2EFJZQtA USefBixn+3Tcpqo89SoMvEHzc1uEqaHsrHKKwJWf5jUGQJ5Pod4y9P+R1k+ITT3+ t89c90LLD/3smhQrZMRVj7Vn5Elm3mCpr4oTkwG+8fCgC4ouosuO92GieYl02Ie5 dBDXea9mVAgSYW8lNSTzCJj+Zq8jlBetrT4dpG/vpTaAVO6xcIc4EQydUAgrG6Lu tD4Ifo4Pe6FjRGuM8e8L5c7vAXlAditIZJ/31pVoxPwCO+mZApky2nSdcs4F5lEh DiUKNpg+fD23SzG9I/K/HqBl86QvMjoh9zwIuBcT0eG/OiDj -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:49 2026 by rpki-client