This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/IoQMQIW0XWSI5_b5MMPHNLfrTLs.roa File: IoQMQIW0XWSI5_b5MMPHNLfrTLs.roa (raw, json) Hash identifier: VAo8djlNyx4sXM904+v7WPNvTL8d7Q3QF4Rk5oit41E= Subject key identifier: 22:84:0C:40:85:B4:5D:64:88:E7:F6:F9:30:C3:C7:34:B7:EB:4C:BB Certificate issuer: /CN=07594568618898a9fb720ae09bed0ed1be4f857e Certificate serial: 019B7B363C96C61AE629E136BD46B25BAB82 Authority key identifier: 07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/IoQMQIW0XWSI5_b5MMPHNLfrTLs.roa Signing time: Thu 01 Jan 2026 20:18:30 +0000 ROA not before: Thu 01 Jan 2026 20:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211895 IP address blocks: 2a11:b100:c100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:3c:96:c6:1a:e6:29:e1:36:bd:46:b2:5b:ab:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07594568618898a9fb720ae09bed0ed1be4f857e Validity Not Before: Jan 1 20:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22840c4085b45d6488e7f6f930c3c734b7eb4cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a7:dd:cb:a1:f8:89:57:0a:bb:ee:64:cc:e7: 9d:3a:b2:0f:dc:a7:d5:ac:7a:b4:d1:2e:44:e2:b1: 6d:15:0a:a2:2a:e1:27:95:47:d9:b3:fe:e7:65:3b: db:fe:86:3c:f7:33:f2:35:bf:72:81:03:b2:59:84: 64:ef:18:3b:49:c4:d0:66:b3:e4:9a:cd:eb:ac:5c: 27:99:04:7f:37:60:07:a5:3d:fe:fc:e9:8f:88:18: 24:d6:ed:93:7d:60:87:49:ec:26:2b:2b:ec:80:9a: 98:27:0d:3b:90:85:72:c7:ec:0f:71:ae:47:8d:0b: 47:52:35:26:9a:69:40:30:1d:54:68:67:36:93:c7: 80:6b:dd:ed:ad:ef:c5:26:f6:3c:d3:96:73:98:63: 04:17:09:f9:05:f3:3c:14:77:ef:5b:60:bd:e4:40: 12:78:f6:2b:19:75:80:e8:c7:60:92:3d:29:ce:0e: d0:22:c5:d2:b6:e2:a1:f5:26:82:c1:17:30:5f:c0: b9:33:2c:b6:a3:0e:78:6f:56:03:df:1f:1b:dc:72: d2:de:dc:11:b5:34:ee:13:b9:2f:3f:c6:b0:bb:90: ac:0d:56:98:7c:28:ca:68:cd:92:d0:d1:ed:d1:8f: 30:1e:85:c2:9e:f7:1c:ea:50:3c:51:6c:0a:4a:9f: f8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:84:0C:40:85:B4:5D:64:88:E7:F6:F9:30:C3:C7:34:B7:EB:4C:BB X509v3 Authority Key Identifier: keyid:07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/IoQMQIW0XWSI5_b5MMPHNLfrTLs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:b100:c100::/48 Signature Algorithm: sha256WithRSAEncryption 7e:c8:af:81:4d:9a:49:35:b1:1e:59:ba:41:b6:b1:3b:02:27: 7f:9f:26:c8:0f:07:c7:9b:f0:ec:3a:5a:c7:a7:ff:9d:0b:2b: 72:ed:34:8c:82:91:33:5e:30:70:8b:6f:df:a3:a4:bc:3d:1f: b7:c3:aa:f7:d0:04:70:a6:eb:65:c0:d5:1d:a4:4c:30:3b:1c: 99:5c:ab:31:e7:09:55:2f:00:b0:4b:ab:11:b2:21:b9:f2:65: b7:6f:d5:5e:86:56:29:0c:08:8b:77:79:74:c6:9d:31:b8:db: c0:f3:f4:7f:74:27:2f:db:a4:7b:47:99:64:8d:d6:1d:06:38: 0b:1a:ea:87:e6:2f:1d:af:29:17:b6:d1:1c:63:5b:38:ea:8c: 82:9a:9f:9a:75:e8:02:31:d1:fb:a5:c9:60:50:35:95:05:94: 58:fa:70:fa:7f:0d:c1:23:69:4c:02:3d:1f:6b:32:1b:bf:3b: a1:7d:e7:19:e9:2d:62:87:47:f2:e9:61:34:db:13:40:5a:ab: af:b1:c4:1f:d6:66:e4:2d:17:ee:ae:b7:52:16:11:89:39:54: 1e:0b:96:b1:70:f8:29:9a:7d:0e:04:5c:93:8e:04:5b:c7:ee: a0:f5:a7:d2:31:47:19:71:ba:28:d6:03:02:87:99:1a:1c:b0: c7:20:7d:73 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7NjyWxhrmKeE2vUayW6uCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NTk0NTY4NjE4ODk4YTlmYjcyMGFlMDliZWQwZWQxYmU0 Zjg1N2UwHhcNMjYwMTAxMjAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjg0MGM0MDg1YjQ1ZDY0ODhlN2Y2ZjkzMGMzYzczNGI3ZWI0Y2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKfdy6H4iVcKu+5kzOedOrIP3KfV rHq00S5E4rFtFQqiKuEnlUfZs/7nZTvb/oY89zPyNb9ygQOyWYRk7xg7ScTQZrPk ms3rrFwnmQR/N2AHpT3+/OmPiBgk1u2TfWCHSewmKyvsgJqYJw07kIVyx+wPca5H jQtHUjUmmmlAMB1UaGc2k8eAa93tre/FJvY805ZzmGMEFwn5BfM8FHfvW2C95EAS ePYrGXWA6Mdgkj0pzg7QIsXStuKh9SaCwRcwX8C5Myy2ow54b1YD3x8b3HLS3twR tTTuE7kvP8awu5CsDVaYfCjKaM2S0NHt0Y8wHoXCnvcc6lA8UWwKSp/4pQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCKEDECFtF1kiOf2+TDDxzS360y7MB8GA1UdIwQY MBaAFAdZRWhhiJip+3IK4JvtDtG+T4V+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjFsRmFHR0ltS243Y2dyZ20tME8wYjVQaFg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85ZmFkYTEtNjBmOS00ZWY3LTgxZDgt MWVjY2JlNjdjNjYxLzEvSW9RTVFJVzBYV1NJNV9iNU1NUEhOTGZyVExzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS85ZmFkYTEtNjBmOS00ZWY3LTgxZDgtMWVjY2JlNjdjNjYx LzEvQjFsRmFHR0ltS243Y2dyZ20tME8wYjVQaFg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhGxAMEA MA0GCSqGSIb3DQEBCwUAA4IBAQB+yK+BTZpJNbEeWbpBtrE7Aid/nybIDwfHm/Ds OlrHp/+dCyty7TSMgpEzXjBwi2/fo6S8PR+3w6r30ARwputlwNUdpEwwOxyZXKsx 5wlVLwCwS6sRsiG58mW3b9VehlYpDAiLd3l0xp0xuNvA8/R/dCcv26R7R5lkjdYd BjgLGuqH5i8drykXttEcY1s46oyCmp+adegCMdH7pclgUDWVBZRY+nD6fw3BI2lM Aj0fazIbvzuhfecZ6S1ih0fy6WE02xNAWquvscQf1mbkLRfurrdSFhGJOVQeC5ax cPgpmn0OBFyTjgRbx+6g9afSMUcZcboo1gMCh5kaHLDHIH1z -----END CERTIFICATE-----Generated at Mon Jan 26 03:06:12 2026 by rpki-client