This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/IhUUSRuZPQ93qmBEuCsX-VJJ8_Y.roa File: IhUUSRuZPQ93qmBEuCsX-VJJ8_Y.roa (raw, json) Hash identifier: wQMNMlSi7ML40phwxmQnjfrhkgmt/fkZEJZEruvJetM= Subject key identifier: 22:15:14:49:1B:99:3D:0F:77:AA:60:44:B8:2B:17:F9:52:49:F3:F6 Certificate issuer: /CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6 Certificate serial: 019B7FF074B3D21AE8BE31FA69376808B84D Authority key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/IhUUSRuZPQ93qmBEuCsX-VJJ8_Y.roa Signing time: Fri 02 Jan 2026 18:20:23 +0000 ROA not before: Fri 02 Jan 2026 18:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48233 IP address blocks: 2a06:9686::/39 maxlen: 39 2a06:9686:200::/39 maxlen: 39 2a06:9686:400::/39 maxlen: 39 2a06:9686:600::/39 maxlen: 39 2a06:9686:800::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:74:b3:d2:1a:e8:be:31:fa:69:37:68:08:b8:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6 Validity Not Before: Jan 2 18:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=221514491b993d0f77aa6044b82b17f95249f3f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c3:dc:26:29:0d:80:13:d8:37:0e:64:56:8d: fb:80:da:21:40:7e:83:d1:f7:7e:89:b1:20:8a:a2: 0f:78:60:39:9f:81:d4:a2:43:57:4d:76:23:7c:21: d0:52:88:ff:ec:34:3a:aa:94:5e:75:45:f1:68:b4: 5e:bb:bf:83:e2:b3:04:79:ec:ea:c7:42:ed:30:4c: 20:1b:a6:86:0c:42:69:8b:d4:56:9a:45:61:92:53: 10:25:ea:c5:57:c6:c8:b6:ec:13:f3:e6:b7:e7:e8: bf:d4:5a:54:d9:87:a0:94:cd:7a:89:8d:56:8e:a5: 40:c3:1b:de:73:9a:a2:9c:06:0c:b6:ff:98:fe:4b: cc:bd:02:d7:d1:f4:11:b4:98:73:b2:bf:e3:d0:67: a0:ae:86:d8:03:f6:ce:df:8d:80:b3:90:f0:1a:62: 8c:07:48:59:fa:47:4e:24:a9:29:90:1a:8e:01:7c: 73:80:33:b2:f3:10:37:eb:2f:61:71:82:17:07:fd: fc:f8:ef:bd:c9:22:37:a8:8b:eb:44:24:65:d4:99: 8b:c5:12:be:68:a4:a0:fd:e0:43:74:cf:d1:d6:58: 6e:ea:12:4c:58:55:c6:da:a2:f9:15:39:c9:e2:e7: c9:6f:54:35:74:17:9f:26:12:fe:08:01:32:4a:65: 95:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:15:14:49:1B:99:3D:0F:77:AA:60:44:B8:2B:17:F9:52:49:F3:F6 X509v3 Authority Key Identifier: keyid:7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/IhUUSRuZPQ93qmBEuCsX-VJJ8_Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9686::-2a06:9686:9ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 08:16:b5:99:4c:b1:0f:82:e5:01:d0:2b:5b:17:78:d1:70:19: cd:31:f8:5e:89:b4:aa:91:0f:69:db:1f:24:93:37:5e:8e:02: b0:ce:c4:54:8d:48:65:e4:e0:13:56:f6:be:13:db:a1:23:a3: ed:34:cf:4d:48:a6:bc:9e:e4:62:63:35:65:c3:e3:20:d5:9b: b3:6f:ea:42:cc:5b:a2:f4:61:ea:8b:5c:64:c2:f9:68:d3:f6: 85:a6:c4:c8:92:d0:e1:fb:09:f2:08:5f:c6:71:73:3b:54:4a: f2:b3:0d:6e:20:f6:64:ca:ef:97:fb:d4:5f:80:8e:5a:84:05: 81:c5:15:ee:7f:9b:23:af:b9:3f:0d:b0:62:f7:d5:d0:08:00: 0e:1c:f7:db:eb:70:4f:ef:6a:70:96:99:e7:99:8d:c3:f0:65: b6:c6:33:f5:87:75:05:97:ba:34:9d:f5:0b:52:73:79:e5:c1: 59:fe:e9:d8:0d:7c:72:98:dc:eb:6e:a9:7d:46:bc:d5:75:84: fe:e6:47:e7:0b:61:c3:a9:81:21:22:90:a6:0e:16:94:77:67: b6:74:30:91:37:70:fe:87:e0:c6:d3:0f:84:d7:e7:3e:89:2b: 6d:be:22:db:51:f4:26:40:65:69:6f:b5:32:da:32:cb:1a:94: 10:7d:aa:a3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt/8HSz0hrovjH6aTdoCLhNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2I4ODc3ZTFhMTMwZmU1MDM4NmM2MTBkNmVhZDU2NDFi OTdiYTYwHhcNMjYwMTAyMTgyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjE1MTQ0OTFiOTkzZDBmNzdhYTYwNDRiODJiMTdmOTUyNDlmM2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MPcJikNgBPYNw5kVo37gNohQH6D 0fd+ibEgiqIPeGA5n4HUokNXTXYjfCHQUoj/7DQ6qpRedUXxaLReu7+D4rMEeezq x0LtMEwgG6aGDEJpi9RWmkVhklMQJerFV8bItuwT8+a35+i/1FpU2YeglM16iY1W jqVAwxvec5qinAYMtv+Y/kvMvQLX0fQRtJhzsr/j0GegrobYA/bO342As5DwGmKM B0hZ+kdOJKkpkBqOAXxzgDOy8xA36y9hcYIXB/38+O+9ySI3qIvrRCRl1JmLxRK+ aKSg/eBDdM/R1lhu6hJMWFXG2qL5FTnJ4ufJb1Q1dBefJhL+CAEySmWVIQIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFCIVFEkbmT0Pd6pgRLgrF/lSSfP2MB8GA1UdIwQY MBaAFHw7iHfhoTD+UDhsYQ1urVZBuXumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xN2E3MTItNGU1YS00MGM1LWEzYTIt MTIwMjVjNTRmNDg0LzEvSWhVVVNSdVpQUTkzcW1CRXVDc1gtVkpKOF9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8xN2E3MTItNGU1YS00MGM1LWEzYTItMTIwMjVjNTRmNDg0 LzEvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARMA8DBQEqBpaG AwYBKgaWhggwDQYJKoZIhvcNAQELBQADggEBAAgWtZlMsQ+C5QHQK1sXeNFwGc0x +F6JtKqRD2nbHySTN16OArDOxFSNSGXk4BNW9r4T26Ejo+00z01Iprye5GJjNWXD 4yDVm7Nv6kLMW6L0YeqLXGTC+WjT9oWmxMiS0OH7CfIIX8ZxcztUSvKzDW4g9mTK 75f71F+AjlqEBYHFFe5/myOvuT8NsGL31dAIAA4c99vrcE/vanCWmeeZjcPwZbbG M/WHdQWXujSd9QtSc3nlwVn+6dgNfHKY3OtuqX1GvNV1hP7mR+cLYcOpgSEikKYO FpR3Z7Z0MJE3cP6H4MbTD4TX5z6JK22+IttR9CZAZWlvtTLaMssalBB9qqM= -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:43 2026 by rpki-client