This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/IwxdusqS3Ab_hpHPJ_FWRPbtoeg.roa File: IwxdusqS3Ab_hpHPJ_FWRPbtoeg.roa (raw, json) Hash identifier: H55puMmQB5OWgkG+g+z4d3V7omo2rQK1VzH3hQXYY3o= Subject key identifier: 23:0C:5D:BA:CA:92:DC:06:FF:86:91:CF:27:F1:56:44:F6:ED:A1:E8 Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Certificate serial: 019B7C11379B16AC1EBE14D144239FADAD2D Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/IwxdusqS3Ab_hpHPJ_FWRPbtoeg.roa Signing time: Fri 02 Jan 2026 00:17:41 +0000 ROA not before: Fri 02 Jan 2026 00:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61050 IP address blocks: 2a00:ece1:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:37:9b:16:ac:1e:be:14:d1:44:23:9f:ad:ad:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Validity Not Before: Jan 2 00:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=230c5dbaca92dc06ff8691cf27f15644f6eda1e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5f:6a:bd:87:9e:92:a7:cb:d9:fa:c8:99:e2: 3b:9a:60:4d:7e:dd:af:96:59:6f:fa:ed:5f:ec:d3: b0:3d:74:a1:fd:cd:53:7c:c4:f8:a8:0b:83:36:0e: 93:8a:a9:9c:00:a2:a9:a8:d9:fd:9f:c1:00:e5:e6: e6:a7:cb:5c:89:7e:83:13:3e:e2:eb:4c:93:ec:e4: cb:ab:e6:42:88:f9:e9:7b:63:52:1d:16:28:1c:6e: db:6c:03:e4:4d:2c:d2:57:ef:12:8c:6f:dd:45:5c: 7c:b0:48:82:a8:fb:85:cd:00:5b:d9:66:cd:a5:28: 03:16:7e:61:0e:79:94:04:11:2c:ae:05:23:a3:ae: 5f:00:2e:65:12:09:b1:f2:63:1c:39:cd:a3:19:32: b0:89:08:ac:72:6b:e1:a5:f7:5a:60:20:a8:a0:08: 70:cf:bf:2a:c5:9d:9c:5e:48:71:c0:a7:3c:50:ba: 24:0f:b5:af:c1:10:6c:3e:b7:b2:3f:69:b7:d8:37: 0c:8f:d1:40:37:8a:84:e1:7a:81:1f:03:5b:36:86: c8:9f:cf:f5:50:7c:e5:29:87:94:5d:c3:8e:b8:d4: 25:10:4e:53:5c:34:45:11:6d:75:ed:94:f1:19:5f: d9:10:03:8f:5e:36:d4:e8:39:08:bb:27:e5:b0:88: 2f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:0C:5D:BA:CA:92:DC:06:FF:86:91:CF:27:F1:56:44:F6:ED:A1:E8 X509v3 Authority Key Identifier: keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/IwxdusqS3Ab_hpHPJ_FWRPbtoeg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:ece1:1::/48 Signature Algorithm: sha256WithRSAEncryption 06:10:8e:1d:70:6f:c5:d3:10:0d:5a:c1:19:a3:75:9c:b9:14: 88:6e:a8:16:ad:97:27:08:36:7f:62:e1:73:2e:4e:9c:70:a3: e1:91:f0:c3:0d:af:bf:97:ac:5e:1f:09:ec:03:65:6e:0d:a0: 06:19:5e:d2:eb:d5:d8:c5:ca:b0:35:9d:6e:8c:05:53:9e:98: fb:67:71:11:f9:d2:3d:66:76:39:d4:59:6f:c1:26:fa:dc:ad: 28:5b:b0:1c:7d:a8:2f:36:5e:3a:f7:65:c9:e1:24:4a:23:98: 7a:40:70:85:7b:df:0f:26:81:35:ad:dd:af:71:c5:f4:ee:5b: be:ec:4b:f3:a4:88:1b:d6:01:76:48:3a:1c:19:b1:d1:d2:ed: 59:f2:fc:7b:c3:79:dc:d8:7a:b2:7c:20:f2:90:37:1f:fe:83: 64:05:13:18:ab:03:2e:c2:9a:00:67:8d:43:f5:1a:11:b8:59: 55:fa:5e:b4:af:99:d0:2a:9e:44:7a:44:8f:ac:d1:d1:7b:b6: 0d:78:99:dd:4d:84:e7:7f:55:2d:ce:88:e5:e4:51:b0:17:f0: 44:e5:d8:44:26:74:8a:e8:6b:40:93:dc:86:91:ac:82:fe:4b: 45:9f:27:2c:16:50:c2:40:8a:fd:82:a0:3f:db:e4:9d:be:61: d7:e9:01:e7 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8ETebFqwevhTRRCOfra0tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYzIwYWUxZGFjY2EzMTgxNWIyNzQ3MDI5MjdjMWE1YTlk YmM3YjMwHhcNMjYwMTAyMDAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzBjNWRiYWNhOTJkYzA2ZmY4NjkxY2YyN2YxNTY0NGY2ZWRhMWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF9qvYeekqfL2frImeI7mmBNft2v lllv+u1f7NOwPXSh/c1TfMT4qAuDNg6TiqmcAKKpqNn9n8EA5ebmp8tciX6DEz7i 60yT7OTLq+ZCiPnpe2NSHRYoHG7bbAPkTSzSV+8SjG/dRVx8sEiCqPuFzQBb2WbN pSgDFn5hDnmUBBEsrgUjo65fAC5lEgmx8mMcOc2jGTKwiQiscmvhpfdaYCCooAhw z78qxZ2cXkhxwKc8ULokD7WvwRBsPreyP2m32DcMj9FAN4qE4XqBHwNbNobIn8/1 UHzlKYeUXcOOuNQlEE5TXDRFEW117ZTxGV/ZEAOPXjbU6DkIuyflsIgv8QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCMMXbrKktwG/4aRzyfxVkT27aHoMB8GA1UdIwQY MBaAFLDCCuHazKMYFbJ0cCknwaWp28ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYt NTQ4NDQwMmNlYjdhLzEvSXd4ZHVzcVMzQWJfaHBIUEpfRldSUGJ0b2VnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYtNTQ4NDQwMmNlYjdh LzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgDs4QAB MA0GCSqGSIb3DQEBCwUAA4IBAQAGEI4dcG/F0xANWsEZo3WcuRSIbqgWrZcnCDZ/ YuFzLk6ccKPhkfDDDa+/l6xeHwnsA2VuDaAGGV7S69XYxcqwNZ1ujAVTnpj7Z3ER +dI9ZnY51FlvwSb63K0oW7AcfagvNl4692XJ4SRKI5h6QHCFe98PJoE1rd2vccX0 7lu+7EvzpIgb1gF2SDocGbHR0u1Z8vx7w3nc2HqyfCDykDcf/oNkBRMYqwMuwpoA Z41D9RoRuFlV+l60r5nQKp5EekSPrNHRe7YNeJndTYTnf1Utzojl5FGwF/BE5dhE JnSK6GtAk9yGkayC/ktFnycsFlDCQIr9gqA/2+SdvmHX6QHn -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:54 2026 by rpki-client