This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/iUEHX1o0_l8jTQlhzAvjptzhPL0.roa File: iUEHX1o0_l8jTQlhzAvjptzhPL0.roa (raw, json) Hash identifier: DpWo5iq7cHsCZy0a6PUHW0Vs0n1oWSh3Ty0O4gm3/dU= Subject key identifier: 89:41:07:5F:5A:34:FE:5F:23:4D:09:61:CC:0B:E3:A6:DC:E1:3C:BD Certificate issuer: /CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954 Certificate serial: 019B7E378DC7B8F52454826788FB2085F0BD Authority key identifier: CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/iUEHX1o0_l8jTQlhzAvjptzhPL0.roa Signing time: Fri 02 Jan 2026 10:18:48 +0000 ROA not before: Fri 02 Jan 2026 10:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15435 IP address blocks: 2001:67c:2c24::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:8d:c7:b8:f5:24:54:82:67:88:fb:20:85:f0:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954 Validity Not Before: Jan 2 10:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8941075f5a34fe5f234d0961cc0be3a6dce13cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:61:4f:9d:6f:06:8d:0a:c8:aa:af:43:4f:6f: df:cd:ac:cf:44:b7:5e:6b:9a:16:73:98:cc:5d:c9: 58:65:0b:3e:94:f7:7f:27:43:0e:7a:75:c0:31:16: b6:02:d3:2e:a6:fb:9c:c3:2b:a3:8b:0b:f7:02:f3: 9c:e7:ec:8d:90:da:10:bd:32:84:b6:c5:48:ef:ec: ad:d3:46:9a:28:33:23:8a:70:f1:e9:dc:a1:fd:bf: bd:6f:a1:4c:c2:85:71:29:0f:fd:72:87:6d:ad:6b: 38:ef:53:4b:56:95:c5:c5:89:ed:3c:85:40:12:e2: 2a:30:1a:ad:c3:95:e3:ea:76:ab:7a:28:a9:f9:35: f4:91:4f:4e:8b:90:89:23:ab:24:a5:b8:32:f1:29: a9:35:5c:04:65:bb:df:08:b7:fe:02:96:21:5f:21: c2:fa:04:77:56:dd:41:60:df:c3:fe:68:8c:6a:72: b5:4e:4b:c4:5a:a1:73:4b:ce:28:73:97:96:21:18: d0:67:bc:78:8b:21:28:9f:41:76:53:30:d7:d1:55: e8:5f:e4:c0:de:55:6d:ae:39:02:23:f1:c4:c0:d7: 5d:01:05:f1:0b:2a:1a:92:19:8d:e8:5e:3a:18:63: de:03:91:df:e4:c9:ed:5f:2d:d4:54:a1:73:55:03: 86:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:41:07:5F:5A:34:FE:5F:23:4D:09:61:CC:0B:E3:A6:DC:E1:3C:BD X509v3 Authority Key Identifier: keyid:CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/iUEHX1o0_l8jTQlhzAvjptzhPL0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2c24::/48 Signature Algorithm: sha256WithRSAEncryption 85:61:97:eb:c2:4f:db:b0:27:cd:d1:51:a2:c7:3c:70:5b:33: 1a:c8:e4:7c:f0:15:5f:e5:e9:2d:30:81:8a:bf:ef:89:d9:f2: 85:65:e0:6a:a4:04:54:12:d3:a2:88:51:b5:fb:88:63:9e:98: 58:b8:14:63:8f:ad:2c:9e:3a:d7:d7:8c:13:3c:0d:74:4f:16: ea:0f:07:2c:43:ee:6e:42:e6:e2:32:ac:7c:35:45:95:c9:9c: 73:b9:8f:0c:a2:7c:0c:b0:8d:63:a3:71:17:c0:b8:b0:2e:d2: dd:54:53:08:cb:8c:db:95:b7:81:0c:aa:fa:6e:47:3d:0f:0d: 00:af:5e:1b:d8:27:18:88:3b:8e:f0:af:a1:41:21:18:04:1f: b4:97:b8:0a:9b:1e:41:e3:8b:56:75:0b:fa:39:2e:c5:57:fa: 13:9d:bc:1e:b1:d5:11:d2:01:9a:d2:b5:9f:56:ca:c8:4f:9b: aa:cc:75:8f:51:82:24:f6:20:8c:a9:25:62:bc:13:97:b4:6c: b9:83:e7:8c:90:e0:26:39:64:78:46:07:a1:c4:c9:8b:c4:3e: 3d:10:e0:c4:bc:ba:2f:27:5e:80:a7:b4:4c:0a:33:98:f4:9d: 6a:5a:95:31:b3:41:33:dc:22:58:1c:96:2e:4e:ba:c9:a7:ec: 1f:44:85:d2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+N43HuPUkVIJniPsghfC9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZmE4OGMyMmIxZTdjNTJkZTcxYTM3NjQzZGVhM2MzZmNk ZDQ5NTQwHhcNMjYwMTAyMTAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTQxMDc1ZjVhMzRmZTVmMjM0ZDA5NjFjYzBiZTNhNmRjZTEzY2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+GFPnW8GjQrIqq9DT2/fzazPRLde a5oWc5jMXclYZQs+lPd/J0MOenXAMRa2AtMupvucwyujiwv3AvOc5+yNkNoQvTKE tsVI7+yt00aaKDMjinDx6dyh/b+9b6FMwoVxKQ/9codtrWs471NLVpXFxYntPIVA EuIqMBqtw5Xj6nareiip+TX0kU9Oi5CJI6skpbgy8SmpNVwEZbvfCLf+ApYhXyHC +gR3Vt1BYN/D/miManK1TkvEWqFzS84oc5eWIRjQZ7x4iyEon0F2UzDX0VXoX+TA 3lVtrjkCI/HEwNddAQXxCyoakhmN6F46GGPeA5Hf5MntXy3UVKFzVQOGEQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIlBB19aNP5fI00JYcwL46bc4Ty9MB8GA1UdIwQY MBaAFMz6iMIrHnxS3nGjdkPeo8P83UlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelBxSXdpc2VmRkxlY2FOMlE5Nmp3X3pkU1ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xYWUyYjAtZDkzYS00NjNjLWE2Yjkt ODI3YjY0M2FmM2Q3LzEvaVVFSFgxbzBfbDhqVFFsaHpBdmpwdHpoUEwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8xYWUyYjAtZDkzYS00NjNjLWE2YjktODI3YjY0M2FmM2Q3 LzEvelBxSXdpc2VmRkxlY2FOMlE5Nmp3X3pkU1ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCwk MA0GCSqGSIb3DQEBCwUAA4IBAQCFYZfrwk/bsCfN0VGixzxwWzMayOR88BVf5ekt MIGKv++J2fKFZeBqpARUEtOiiFG1+4hjnphYuBRjj60snjrX14wTPA10TxbqDwcs Q+5uQubiMqx8NUWVyZxzuY8MonwMsI1jo3EXwLiwLtLdVFMIy4zblbeBDKr6bkc9 Dw0Ar14b2CcYiDuO8K+hQSEYBB+0l7gKmx5B44tWdQv6OS7FV/oTnbwesdUR0gGa 0rWfVsrIT5uqzHWPUYIk9iCMqSVivBOXtGy5g+eMkOAmOWR4RgehxMmLxD49EODE vLovJ16Ap7RMCjOY9J1qWpUxs0Ez3CJYHJYuTrrJp+wfRIXS -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:52 2026 by rpki-client