This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/iir-MP9u--5X9N6sLaapXHQB96w.roa File: iir-MP9u--5X9N6sLaapXHQB96w.roa (raw, json) Hash identifier: KYgiiMZkt1y8OXMvRPUfLQi6b3EsUMCv28kMOUxnz3s= Subject key identifier: 8A:2A:FE:30:FF:6E:FB:EE:57:F4:DE:AC:2D:A6:A9:5C:74:01:F7:AC Certificate issuer: /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0 Certificate serial: 019B7CEE56E23D5E17B58EBC809B6616E9E9 Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/iir-MP9u--5X9N6sLaapXHQB96w.roa Signing time: Fri 02 Jan 2026 04:19:13 +0000 ROA not before: Fri 02 Jan 2026 04:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215540 IP address blocks: 2a00:b703:fff1::/48 maxlen: 48 2a00:b703:fff2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:56:e2:3d:5e:17:b5:8e:bc:80:9b:66:16:e9:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0 Validity Not Before: Jan 2 04:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a2afe30ff6efbee57f4deac2da6a95c7401f7ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0d:1d:3b:36:df:2d:7c:8e:4e:a1:f9:f0:61: dc:99:9e:f8:b4:65:52:d7:a3:ea:8a:0a:7f:ce:8a: e8:3b:cb:8a:49:19:e2:3f:70:b4:18:fd:eb:7f:d8: 84:da:f3:2f:f1:1c:c1:11:e6:eb:61:2c:17:86:52: 54:80:08:a7:5d:09:af:ae:5c:71:6b:d1:0e:76:a4: 0c:c9:b4:14:86:4d:bb:8e:18:16:fd:1e:77:c8:b1: a6:8c:a3:68:01:ed:42:3c:bb:d3:40:c6:30:06:19: d2:a3:ea:1d:1b:73:67:66:dc:25:9f:f4:46:37:f9: 78:67:fa:09:a8:68:bd:cb:33:1d:91:f4:8a:ed:df: ca:7d:c3:4e:f2:3d:b6:4c:81:da:40:91:a2:f5:d6: 65:f9:f1:d8:b2:5a:d0:03:81:d1:6e:92:77:a6:37: 11:b4:aa:f1:9b:5e:0e:f7:e8:67:fa:dc:1a:e1:ef: 43:b1:e3:f6:b4:23:d2:33:f8:65:0b:f7:3d:6b:a1: c2:79:01:55:db:ca:b0:98:cc:95:c7:4a:87:e7:3d: 06:bd:aa:0c:9f:8b:5d:f0:62:6e:0d:c5:81:ab:0d: 5e:8c:53:0f:8a:5d:ad:0c:75:df:98:00:8f:d2:ef: e1:06:1b:3e:24:1f:ff:17:5b:47:d5:a2:c6:1a:e9: 55:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2A:FE:30:FF:6E:FB:EE:57:F4:DE:AC:2D:A6:A9:5C:74:01:F7:AC X509v3 Authority Key Identifier: keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/iir-MP9u--5X9N6sLaapXHQB96w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:b703:fff1::-2a00:b703:fff2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 50:09:80:b4:e7:d6:9e:15:a9:71:78:23:23:39:4f:3f:e9:eb: dc:cb:eb:e5:55:c0:0a:bc:7e:3c:40:7e:5e:4a:5a:5a:cb:b3: b4:27:a3:b8:71:f0:de:a7:cd:5f:bf:7f:33:54:16:c4:fe:d6: 98:2a:4f:71:9f:31:d1:c2:4e:e4:a6:18:d8:8a:c3:a6:92:c6: 84:26:10:b6:33:2c:a5:cb:30:c3:4d:5b:94:35:bb:5e:ef:91: c4:63:8f:3f:e4:4b:d1:3d:93:ad:c0:96:c0:5a:ca:9c:90:ba: c0:8a:c2:c8:bd:5a:66:b2:f4:f8:ce:d8:e2:a5:73:44:64:f6: 1e:e9:5f:22:f7:79:0a:66:ec:19:48:10:b5:0f:74:ad:d6:7a: 07:b6:51:dd:86:e4:6d:38:1c:c7:08:c1:8f:9f:a6:41:11:76: 56:91:c5:89:a0:9e:cb:b5:c1:96:be:09:e6:ed:10:dd:78:99: 7e:17:1d:ee:80:22:86:a2:9b:04:00:d5:5a:40:2c:c4:58:f3: 41:63:70:02:cf:1f:08:71:83:07:ed:dd:9e:91:44:57:d8:5a: 8f:f5:f5:1f:7c:60:55:d1:62:98:6b:da:e9:b0:dd:72:ce:5c: 72:6c:2a:f7:16:af:33:8f:84:9b:fc:bf:e4:6e:23:e6:ba:39: 5d:50:2f:ab -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt87lbiPV4XtY68gJtmFunpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNWNiOWFmYzhhODY3MGUxZjExNmNiZDIxNDk5YzlmNzEy MTViYzAwHhcNMjYwMTAyMDQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTJhZmUzMGZmNmVmYmVlNTdmNGRlYWMyZGE2YTk1Yzc0MDFmN2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Q0dOzbfLXyOTqH58GHcmZ74tGVS 16Pqigp/zoroO8uKSRniP3C0GP3rf9iE2vMv8RzBEebrYSwXhlJUgAinXQmvrlxx a9EOdqQMybQUhk27jhgW/R53yLGmjKNoAe1CPLvTQMYwBhnSo+odG3NnZtwln/RG N/l4Z/oJqGi9yzMdkfSK7d/KfcNO8j22TIHaQJGi9dZl+fHYslrQA4HRbpJ3pjcR tKrxm14O9+hn+twa4e9DseP2tCPSM/hlC/c9a6HCeQFV28qwmMyVx0qH5z0GvaoM n4td8GJuDcWBqw1ejFMPil2tDHXfmACP0u/hBhs+JB//F1tH1aLGGulVHQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFIoq/jD/bvvuV/TerC2mqVx0AfesMB8GA1UdIwQY MBaAFPFcua/IqGcOHxFsvSFJnJ9xIVvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85NzdkNzAtNmM4Ny00MDlkLThlZjgt MDI3YTc0M2JhNDYyLzEvaWlyLU1QOXUtLTVYOU42c0xhYXBYSFFCOTZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi85NzdkNzAtNmM4Ny00MDlkLThlZjgtMDI3YTc0M2JhNDYy LzEvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqALcD //EDBwAqALcD//IwDQYJKoZIhvcNAQELBQADggEBAFAJgLTn1p4VqXF4IyM5Tz/p 69zL6+VVwAq8fjxAfl5KWlrLs7Qno7hx8N6nzV+/fzNUFsT+1pgqT3GfMdHCTuSm GNiKw6aSxoQmELYzLKXLMMNNW5Q1u17vkcRjjz/kS9E9k63AlsBaypyQusCKwsi9 Wmay9PjO2OKlc0Rk9h7pXyL3eQpm7BlIELUPdK3Wege2Ud2G5G04HMcIwY+fpkER dlaRxYmgnsu1wZa+CebtEN14mX4XHe6AIoaimwQA1VpALMRY80FjcALPHwhxgwft 3Z6RRFfYWo/19R98YFXRYphr2umw3XLOXHJsKvcWrzOPhJv8v+RuI+a6OV1QL6s= -----END CERTIFICATE-----Generated at Sun Jan 25 16:39:46 2026 by rpki-client