This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/I9LHF-RZZYWSxcstDpnevIA6riE.roa File: I9LHF-RZZYWSxcstDpnevIA6riE.roa (raw, json) Hash identifier: vYLGIUfFYxCx7fMsQHhbZTUJyamMIn1ZfEPepnwBTW8= Subject key identifier: 23:D2:C7:17:E4:59:65:85:92:C5:CB:2D:0E:99:DE:BC:80:3A:AE:21 Certificate issuer: /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021 Certificate serial: 019B7B35A6F50E2B6D70ABCEA0EC6B79A052 Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/I9LHF-RZZYWSxcstDpnevIA6riE.roa Signing time: Thu 01 Jan 2026 20:17:52 +0000 ROA not before: Thu 01 Jan 2026 20:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212362 IP address blocks: 2a0e:acc7::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:a6:f5:0e:2b:6d:70:ab:ce:a0:ec:6b:79:a0:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021 Validity Not Before: Jan 1 20:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23d2c717e459658592c5cb2d0e99debc803aae21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:52:f1:d3:81:e9:56:16:a6:e8:93:34:ec:2b: ad:e3:15:c8:2c:2f:d7:fa:7e:52:15:ae:a2:52:3f: a9:3c:26:aa:3d:ec:33:82:8a:6a:1d:9c:37:73:76: c3:39:ac:43:3c:69:b6:74:7e:7e:dc:de:cc:3d:11: e6:66:81:21:95:70:b6:0b:20:8f:e5:c1:fe:39:e2: d9:9d:d5:c2:96:a5:4f:10:2d:1a:ec:0c:ed:36:09: 53:ff:8f:39:31:6b:84:e5:d3:c4:de:80:5e:f9:41: 88:7d:3b:0e:b7:18:6d:63:75:d2:44:95:e2:cd:01: 3c:97:f0:c4:38:20:48:84:3d:cd:11:d0:d2:8b:6c: 0c:1a:54:1a:9d:5f:53:a1:ed:fd:9f:00:b5:ea:55: 30:a7:74:82:d3:24:b7:1e:fe:ab:9b:57:a9:3d:9d: 6b:7e:be:13:62:f0:b4:dd:a8:21:ee:7e:65:f7:5b: a4:a2:ef:b3:f2:13:6b:53:2c:9e:72:16:6f:64:33: 60:d9:0d:4a:f0:79:fa:0c:96:ce:fe:8b:a3:0d:16: 96:29:38:0e:70:b2:00:c2:0c:17:92:cd:6f:95:1c: 25:4d:6e:30:8b:6f:98:5d:2d:96:a3:60:8d:27:17: e2:18:b2:9e:3a:4d:a8:cb:16:84:92:06:d6:f6:5f: 93:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D2:C7:17:E4:59:65:85:92:C5:CB:2D:0E:99:DE:BC:80:3A:AE:21 X509v3 Authority Key Identifier: keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/I9LHF-RZZYWSxcstDpnevIA6riE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:acc7::/32 Signature Algorithm: sha256WithRSAEncryption 41:2c:f4:19:6d:76:15:ee:97:0e:e4:79:3f:a1:4a:bc:99:ff: d6:90:0a:ac:b2:04:64:20:f5:9e:7d:ec:8f:25:c4:a3:4c:e6: ae:85:bf:09:a1:90:b9:4a:12:61:a8:69:7d:26:7e:26:83:04: 69:2b:bd:06:bb:ff:f4:5e:db:57:c1:aa:70:5c:81:97:55:d6: 2d:7e:cf:12:63:ca:3a:2b:3c:49:02:8d:d5:88:d1:42:59:f0: e0:f0:62:ee:7c:cf:54:63:ce:4a:40:b6:02:4d:70:5c:6b:f7: cb:67:e9:76:fe:83:ba:a0:d4:65:b7:e5:f7:02:d7:6f:78:18: 57:44:7c:16:e9:2b:5d:db:1d:a1:c6:2a:9a:00:88:b4:13:43: 63:e5:05:d2:37:34:9c:83:da:7d:da:a4:e9:0d:62:61:a0:fc: ef:8a:6c:c0:3a:67:52:76:3f:fe:f5:35:32:48:58:1c:47:26: 4b:08:27:13:64:76:0f:16:e9:39:1d:a1:12:9e:78:00:d1:13: 2b:f1:48:81:5d:9f:19:49:3e:c3:ac:bd:40:af:de:01:50:a3: d1:d6:8d:9d:0b:e7:44:42:a6:c5:df:92:6e:7b:53:28:e4:e4: 87:72:2e:88:97:ae:e7:71:0d:d2:60:c1:02:a4:65:28:0d:61: d2:c2:5a:0c -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7Nab1DittcKvOoOxreaBSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YjlkZjdlOThmNmYzOWZlMmJhNDAyMmRhMjc3ZDI4MTk4 MjgwMjEwHhcNMjYwMTAxMjAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2QyYzcxN2U0NTk2NTg1OTJjNWNiMmQwZTk5ZGViYzgwM2FhZTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFLx04HpVham6JM07Cut4xXILC/X +n5SFa6iUj+pPCaqPewzgopqHZw3c3bDOaxDPGm2dH5+3N7MPRHmZoEhlXC2CyCP 5cH+OeLZndXClqVPEC0a7AztNglT/485MWuE5dPE3oBe+UGIfTsOtxhtY3XSRJXi zQE8l/DEOCBIhD3NEdDSi2wMGlQanV9Toe39nwC16lUwp3SC0yS3Hv6rm1epPZ1r fr4TYvC03agh7n5l91ukou+z8hNrUyyechZvZDNg2Q1K8Hn6DJbO/oujDRaWKTgO cLIAwgwXks1vlRwlTW4wi2+YXS2Wo2CNJxfiGLKeOk2oyxaEkgbW9l+TZQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFCPSxxfkWWWFksXLLQ6Z3ryAOq4hMB8GA1UdIwQY MBaAFKW5336Y9vOf4rpAItonfSgZgoAhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGJuZmZwajI4NV9pdWtBaTJpZDlLQm1DZ0NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC85NzMwNDctODkxNC00MWM2LWExZTAt MGFjN2I3ZWRlNDJiLzEvSTlMSEYtUlpaWVdTeGNzdERwbmV2SUE2cmlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC85NzMwNDctODkxNC00MWM2LWExZTAtMGFjN2I3ZWRlNDJi LzEvcGJuZmZwajI4NV9pdWtBaTJpZDlLQm1DZ0NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg6sxzAN BgkqhkiG9w0BAQsFAAOCAQEAQSz0GW12Fe6XDuR5P6FKvJn/1pAKrLIEZCD1nn3s jyXEo0zmroW/CaGQuUoSYahpfSZ+JoMEaSu9Brv/9F7bV8GqcFyBl1XWLX7PEmPK Ois8SQKN1YjRQlnw4PBi7nzPVGPOSkC2Ak1wXGv3y2fpdv6DuqDUZbfl9wLXb3gY V0R8FukrXdsdocYqmgCItBNDY+UF0jc0nIPafdqk6Q1iYaD874pswDpnUnY//vU1 MkhYHEcmSwgnE2R2DxbpOR2hEp54ANETK/FIgV2fGUk+w6y9QK/eAVCj0daNnQvn REKmxd+SbntTKOTkh3IuiJeu53EN0mDBAqRlKA1h0sJaDA== -----END CERTIFICATE-----Generated at Mon Jan 26 18:39:16 2026 by rpki-client