This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/ImYdN1r7SuqmH4KCOghmFfGT43A.roa File: ImYdN1r7SuqmH4KCOghmFfGT43A.roa (raw, json) Hash identifier: C3iHTDptRbcDAgsUC9QRyc1MkBmaJjNlKZ93XUJOKLw= Subject key identifier: 22:66:1D:37:5A:FB:4A:EA:A6:1F:82:82:3A:08:66:15:F1:93:E3:70 Certificate issuer: /CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9 Certificate serial: 019B78351304824C9C36916C9809820CF1A6 Authority key identifier: 7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/ImYdN1r7SuqmH4KCOghmFfGT43A.roa Signing time: Thu 01 Jan 2026 06:18:22 +0000 ROA not before: Thu 01 Jan 2026 06:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57712 IP address blocks: 2a13:8e40:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:13:04:82:4c:9c:36:91:6c:98:09:82:0c:f1:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9 Validity Not Before: Jan 1 06:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22661d375afb4aeaa61f82823a086615f193e370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:15:b7:96:85:da:eb:ef:f9:15:c7:c6:e8:3a: f5:ad:c1:38:9c:7a:47:d3:e7:30:41:e1:fd:fa:dd: a3:db:06:cd:bc:eb:41:41:1c:af:59:5c:85:17:49: 99:b5:41:e6:d0:9a:9e:d2:c3:b2:59:6c:69:24:62: bb:9f:02:dc:df:66:35:1c:a5:6b:85:b8:b9:a0:f9: 14:5d:11:de:28:db:e3:28:ca:6c:66:98:3f:b5:19: ea:10:2f:28:e2:62:09:f7:7a:22:d5:f6:07:85:a4: ea:57:83:d2:48:26:10:cc:dc:59:38:dd:0e:0d:b2: 88:ca:e1:5c:96:7f:17:5d:8f:ad:1b:51:fe:15:6c: bc:aa:2d:05:20:67:38:50:b6:c0:0e:94:59:30:9a: 2d:87:65:f2:74:52:11:76:98:7b:4b:5b:32:f8:51: 23:69:8c:c5:c3:99:20:7b:3c:9a:a9:3e:0b:db:76: 3c:83:79:d1:25:c4:4c:4d:8b:f9:fe:b1:ee:b4:51: fb:39:47:eb:7b:07:ac:27:55:13:33:77:88:b1:ea: df:48:d9:89:e3:8b:cc:9f:ad:4e:cf:ad:e2:7f:9b: 03:d0:41:e9:97:c2:52:7c:19:39:b0:d1:75:37:ce: 7e:a0:6a:25:b7:cb:0d:71:cc:db:02:51:8f:ca:97: fe:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:66:1D:37:5A:FB:4A:EA:A6:1F:82:82:3A:08:66:15:F1:93:E3:70 X509v3 Authority Key Identifier: keyid:7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/ImYdN1r7SuqmH4KCOghmFfGT43A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:8e40:1000::/36 Signature Algorithm: sha256WithRSAEncryption a1:59:88:36:e6:81:a4:89:f7:23:7a:9b:d4:9b:36:55:34:b3: 21:ef:72:de:6a:7d:b4:9e:c6:22:d7:5d:db:32:4a:27:26:72: c3:3f:d6:39:d5:e5:97:f0:e4:cd:62:73:4c:20:b6:0f:09:b1: 94:a7:22:57:ed:1f:2e:b7:a1:fc:50:9a:84:ee:33:c3:fa:b9: 2b:9f:cb:0f:79:94:44:fd:0e:7b:e1:e3:4f:3f:69:c7:9f:61: d9:93:da:d3:03:e0:fc:ed:a0:cc:b9:d3:71:b7:eb:f3:64:07: 27:82:7f:77:eb:44:60:fe:60:65:b1:95:82:2f:68:22:1f:89: c8:38:04:0b:3a:c8:6e:f1:a9:2a:24:21:c9:8f:32:50:bc:4c: 35:ba:06:37:e3:4b:35:16:ba:ac:e6:ea:bf:f1:fb:74:e9:2e: 04:7d:31:95:db:93:cb:76:df:dd:79:fe:99:01:a4:4b:a7:51: 2d:a9:d6:f2:80:48:6f:20:73:98:90:2e:ee:8e:6f:d4:38:5f: 97:9b:93:01:6d:77:56:b5:9e:d4:85:7d:c3:1a:0a:03:5c:9e: ca:3d:ba:86:cd:a0:be:5e:cf:cd:37:2f:6d:cb:c8:9b:2d:01: d3:9c:18:83:fe:03:b9:96:21:5e:0d:31:7b:74:18:a5:42:47: dc:b7:22:f8 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt4NRMEgkycNpFsmAmCDPGmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMjljMmY1NzIzZjI5ZWM1ZTBlNzkzZTczYWI1NWI4YTFj ODZiYTkwHhcNMjYwMTAxMDYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjY2MWQzNzVhZmI0YWVhYTYxZjgyODIzYTA4NjYxNWYxOTNlMzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxW3loXa6+/5FcfG6Dr1rcE4nHpH 0+cwQeH9+t2j2wbNvOtBQRyvWVyFF0mZtUHm0Jqe0sOyWWxpJGK7nwLc32Y1HKVr hbi5oPkUXRHeKNvjKMpsZpg/tRnqEC8o4mIJ93oi1fYHhaTqV4PSSCYQzNxZON0O DbKIyuFcln8XXY+tG1H+FWy8qi0FIGc4ULbADpRZMJoth2XydFIRdph7S1sy+FEj aYzFw5kgezyaqT4L23Y8g3nRJcRMTYv5/rHutFH7OUfrewesJ1UTM3eIserfSNmJ 44vMn61Oz63if5sD0EHpl8JSfBk5sNF1N85+oGolt8sNcczbAlGPypf+2QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFCJmHTda+0rqph+CgjoIZhXxk+NwMB8GA1UdIwQY MBaAFHwpwvVyPynsXg55PnOrVbihyGupMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkNuQzlYSV9LZXhlRG5rLWM2dFZ1S0hJYTZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kOTlmYWMtMzVkYy00ZjJjLThmOTUt ZjE5NTIyM2QwM2IzLzEvSW1ZZE4xcjdTdXFtSDRLQ09naG1GZkdUNDNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9kOTlmYWMtMzVkYy00ZjJjLThmOTUtZjE5NTIyM2QwM2Iz LzEvZkNuQzlYSV9LZXhlRG5rLWM2dFZ1S0hJYTZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKhOOQBAw DQYJKoZIhvcNAQELBQADggEBAKFZiDbmgaSJ9yN6m9SbNlU0syHvct5qfbSexiLX XdsySicmcsM/1jnV5Zfw5M1ic0wgtg8JsZSnIlftHy63ofxQmoTuM8P6uSufyw95 lET9Dnvh408/acefYdmT2tMD4PztoMy503G36/NkByeCf3frRGD+YGWxlYIvaCIf icg4BAs6yG7xqSokIcmPMlC8TDW6BjfjSzUWuqzm6r/x+3TpLgR9MZXbk8t23915 /pkBpEunUS2p1vKASG8gc5iQLu6Ob9Q4X5ebkwFtd1a1ntSFfcMaCgNcnso9uobN oL5ez803L23LyJstAdOcGIP+A7mWIV4NMXt0GKVCR9y3Ivg= -----END CERTIFICATE-----Generated at Mon Jan 26 04:41:00 2026 by rpki-client