This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/i69vJEQPkDcWZtUI4FCC2gJOc0U.roa File: i69vJEQPkDcWZtUI4FCC2gJOc0U.roa (raw, json) Hash identifier: D7g5fdfmMlJvg4w+bYuZp2xJXQeTRhu8e3EybLceqmw= Subject key identifier: 8B:AF:6F:24:44:0F:90:37:16:66:D5:08:E0:50:82:DA:02:4E:73:45 Certificate issuer: /CN=bd5c08323ac27ab6553a5a69a73a58f802423d68 Certificate serial: 019B797E4DC933424BC103643EC952A31BC8 Authority key identifier: BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/i69vJEQPkDcWZtUI4FCC2gJOc0U.roa Signing time: Thu 01 Jan 2026 12:17:59 +0000 ROA not before: Thu 01 Jan 2026 12:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2119 IP address blocks: 2a03:96e0:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:4d:c9:33:42:4b:c1:03:64:3e:c9:52:a3:1b:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd5c08323ac27ab6553a5a69a73a58f802423d68 Validity Not Before: Jan 1 12:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8baf6f24440f90371666d508e05082da024e7345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6c:b9:a8:b9:cf:25:68:92:be:32:01:0c:78: ff:9d:a5:c2:43:f8:67:4b:74:3e:b5:3e:0c:76:02: d0:d8:37:4f:6c:e2:5a:ac:eb:91:6a:8c:7e:bf:32: 79:2a:e3:9d:2b:da:45:86:2a:5d:f9:3c:12:09:ec: 1f:43:5c:e6:a5:90:f1:8a:c8:50:91:91:e4:f6:56: 2a:57:36:6e:1f:cc:25:a3:a3:53:0a:a2:ab:eb:e1: 0d:34:ee:34:c6:4c:2d:53:c2:37:b2:d5:80:31:0f: 62:65:5a:44:ab:61:05:be:ad:9b:64:86:cc:f1:78: 47:6a:76:05:5b:09:b4:bd:aa:42:58:73:fc:0d:26: 6f:f5:ae:12:5d:a8:fd:a7:7c:28:32:37:b9:3b:80: 7f:5c:b0:dd:84:13:d0:d1:87:b7:f3:fb:ce:80:27: 6d:b8:2e:70:ac:e3:54:17:29:1e:63:13:40:ee:c6: dc:ed:de:ee:9a:f2:07:42:e3:9f:8d:6c:55:da:01: ea:39:53:9a:b4:a6:77:cf:71:66:df:01:d7:f5:70: 5c:e6:4e:9a:e4:e7:97:f7:7c:ac:26:72:eb:3b:c6: ba:e1:d7:78:b1:d8:2e:6a:f3:1f:71:6c:9a:c2:3e: 1a:2b:5b:e5:c7:e1:8f:e6:62:4f:e2:ee:77:c4:69: 62:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:AF:6F:24:44:0F:90:37:16:66:D5:08:E0:50:82:DA:02:4E:73:45 X509v3 Authority Key Identifier: keyid:BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/i69vJEQPkDcWZtUI4FCC2gJOc0U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:96e0:8000::/33 Signature Algorithm: sha256WithRSAEncryption 24:0c:b7:47:7d:75:2b:dc:14:64:ec:86:93:71:58:18:f5:f8: a9:d7:42:a2:bf:98:cc:69:2a:17:ad:c0:7c:b5:1d:13:9d:91: 75:52:64:4c:c4:b1:1a:20:3f:3a:1b:20:39:f1:b4:4e:1d:2c: 6b:fd:7f:de:77:88:20:63:90:4d:1a:51:7d:0f:2d:73:a1:5d: 67:b8:0b:4b:7c:f1:67:6e:2d:fb:d8:ca:c6:bb:50:ec:6f:4c: f4:43:cd:d5:0f:63:38:9f:94:97:3e:af:16:0c:94:0b:5e:ca: 00:f6:cf:06:37:7b:23:a4:39:b0:93:f1:b3:6b:81:3c:c6:24: 15:23:d3:88:08:19:02:0e:11:94:3d:d1:ff:c6:f7:ca:4c:65: bd:19:32:ac:70:5c:56:e4:88:9a:3a:c5:9c:19:ed:09:5d:27: ef:a1:69:81:a5:85:55:bb:55:4f:1d:65:a1:36:37:be:34:5e: b8:55:b9:3b:07:3d:0b:8e:a4:15:88:a3:e0:d2:70:48:23:a3: 14:4e:c5:7d:de:b8:61:de:ff:fa:76:0b:40:7f:11:d3:fe:68: 8b:2b:0b:b9:4f:3c:39:88:c4:1c:7b:e3:58:16:1f:f2:ae:5b: 5f:23:e6:a9:13:b1:63:eb:0e:45:67:a5:e8:83:e3:45:d1:0c: 8a:ce:7f:a5 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5fk3JM0JLwQNkPslSoxvIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNWMwODMyM2FjMjdhYjY1NTNhNWE2OWE3M2E1OGY4MDI0 MjNkNjgwHhcNMjYwMTAxMTIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmFmNmYyNDQ0MGY5MDM3MTY2NmQ1MDhlMDUwODJkYTAyNGU3MzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Gy5qLnPJWiSvjIBDHj/naXCQ/hn S3Q+tT4MdgLQ2DdPbOJarOuRaox+vzJ5KuOdK9pFhipd+TwSCewfQ1zmpZDxishQ kZHk9lYqVzZuH8wlo6NTCqKr6+ENNO40xkwtU8I3stWAMQ9iZVpEq2EFvq2bZIbM 8XhHanYFWwm0vapCWHP8DSZv9a4SXaj9p3woMje5O4B/XLDdhBPQ0Ye38/vOgCdt uC5wrONUFykeYxNA7sbc7d7umvIHQuOfjWxV2gHqOVOatKZ3z3Fm3wHX9XBc5k6a 5OeX93ysJnLrO8a64dd4sdguavMfcWyawj4aK1vlx+GP5mJP4u53xGliVwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFIuvbyRED5A3FmbVCOBQgtoCTnNFMB8GA1UdIwQY MBaAFL1cCDI6wnq2VTpaaac6WPgCQj1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84Y2NmMDctMWU4Yi00MTFmLWIwNDMt NDY0MWFiNmU0YmZiLzEvaTY5dkpFUVBrRGNXWnRVSTRGQ0MyZ0pPYzBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS84Y2NmMDctMWU4Yi00MTFmLWIwNDMtNDY0MWFiNmU0YmZi LzEvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHKgOW4IAw DQYJKoZIhvcNAQELBQADggEBACQMt0d9dSvcFGTshpNxWBj1+KnXQqK/mMxpKhet wHy1HROdkXVSZEzEsRogPzobIDnxtE4dLGv9f953iCBjkE0aUX0PLXOhXWe4C0t8 8WduLfvYysa7UOxvTPRDzdUPYziflJc+rxYMlAteygD2zwY3eyOkObCT8bNrgTzG JBUj04gIGQIOEZQ90f/G98pMZb0ZMqxwXFbkiJo6xZwZ7QldJ++haYGlhVW7VU8d ZaE2N740XrhVuTsHPQuOpBWIo+DScEgjoxROxX3euGHe//p2C0B/EdP+aIsrC7lP PDmIxBx741gWH/KuW18j5qkTsWPrDkVnpeiD40XRDIrOf6U= -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:36 2026 by rpki-client