This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/IvGUn_2-YX3IhLfXSvYGkrdm6NU.roa File: IvGUn_2-YX3IhLfXSvYGkrdm6NU.roa (raw, json) Hash identifier: tNs9qrcIboBy4IbyGsAG+6ZLzNLrX28RoLdHaH5fRLc= Subject key identifier: 22:F1:94:9F:FD:BE:61:7D:C8:84:B7:D7:4A:F6:06:92:B7:66:E8:D5 Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f Certificate serial: 019B7B36492EF4B1B3294199EBAC7397B9F1 Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/IvGUn_2-YX3IhLfXSvYGkrdm6NU.roa Signing time: Thu 01 Jan 2026 20:18:33 +0000 ROA not before: Thu 01 Jan 2026 20:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8772 IP address blocks: 2a0b:480::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:49:2e:f4:b1:b3:29:41:99:eb:ac:73:97:b9:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f Validity Not Before: Jan 1 20:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22f1949ffdbe617dc884b7d74af60692b766e8d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6b:6a:2e:12:76:a9:78:ff:fe:7a:7a:7f:59: 7c:0d:1b:fa:4d:bb:37:15:89:b4:d0:67:d0:1f:ad: 61:87:f6:a5:ed:04:65:cc:06:5a:02:a3:7f:6c:c8: 5a:99:42:5a:ff:b8:46:7b:11:3b:08:b2:b4:76:c1: 36:44:f5:ee:0f:45:8f:18:be:b7:39:e5:e2:f7:06: 93:58:18:20:54:dd:00:ef:d3:e3:f5:6a:2f:25:ae: 62:da:0e:ca:84:d6:a0:73:88:67:98:19:f2:3d:89: 6a:eb:a8:31:79:00:c9:2b:80:85:96:5b:dd:00:16: 25:ea:21:57:63:e2:cb:59:d9:d0:16:f5:31:23:99: 2c:37:fa:7d:cd:47:bc:80:7d:0c:8a:e6:c0:7a:7f: 42:b9:ba:5e:c6:eb:0f:cf:65:14:ed:0c:cf:cc:7d: cf:50:40:5d:42:c4:d8:4a:1d:b5:7e:bb:df:68:d6: 9b:ef:4c:40:95:cf:6a:77:5e:2a:bd:2b:87:b4:d5: ef:0a:52:de:06:74:62:ac:02:e5:81:4b:14:59:87: ab:ab:d2:87:12:ad:6b:e8:89:36:d7:26:37:ad:7b: cc:dc:d2:c3:ec:20:a6:44:30:54:f8:72:bb:e1:39: 79:fc:2b:97:12:ae:63:4d:49:4a:2e:24:c4:80:eb: f9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F1:94:9F:FD:BE:61:7D:C8:84:B7:D7:4A:F6:06:92:B7:66:E8:D5 X509v3 Authority Key Identifier: keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/IvGUn_2-YX3IhLfXSvYGkrdm6NU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:480::/29 Signature Algorithm: sha256WithRSAEncryption 3e:eb:5b:17:fe:43:fe:3e:8f:3d:f2:96:99:76:b5:a5:6a:55: bc:70:ba:12:a1:f8:7c:18:c8:8f:74:cf:63:39:51:03:a7:42: 74:1b:25:cc:1d:99:d2:bc:50:fe:32:2d:2f:29:0b:e0:df:bf: 98:fa:f5:0c:71:78:64:fd:92:fe:91:b6:ec:09:37:f8:b4:74: 84:4f:47:be:c0:33:45:f4:94:e5:72:84:a3:4a:e4:6c:03:c8: 64:e4:59:c8:2f:ad:ee:3c:05:12:1b:f6:71:d8:98:f3:69:0d: dc:6d:3d:f5:c2:a1:62:37:68:de:e8:5d:ed:7a:a4:a8:bf:4d: c7:41:fa:da:0d:ce:69:85:67:be:6d:9d:2b:a1:3d:b0:4d:e5: db:34:b5:ea:34:5c:70:a8:2c:e8:02:15:2a:3d:8c:45:1d:9a: 1a:78:13:dc:30:5b:98:3b:65:4e:a2:98:2f:b0:2e:dc:e9:9d: 45:95:fb:07:8f:05:3c:5c:d8:fc:d9:f5:65:74:5b:24:37:a5: 2f:87:84:ea:5a:6c:d7:23:6d:18:f0:43:b3:eb:5d:76:65:74: d7:0a:4f:00:7a:5b:27:b1:d9:6c:69:85:58:8b:63:14:44:09: f0:11:b8:cd:e6:76:ca:74:ea:49:8b:52:ff:dd:99:7d:0a:d3: b5:3d:74:3d -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7Nkku9LGzKUGZ66xzl7nxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNzY0NjdlZjA5MjFjNTExOTBlMmVhNjBmMmFiYjNiZDZl OWMxOWYwHhcNMjYwMTAxMjAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmYxOTQ5ZmZkYmU2MTdkYzg4NGI3ZDc0YWY2MDY5MmI3NjZlOGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmtqLhJ2qXj//np6f1l8DRv6Tbs3 FYm00GfQH61hh/al7QRlzAZaAqN/bMhamUJa/7hGexE7CLK0dsE2RPXuD0WPGL63 OeXi9waTWBggVN0A79Pj9WovJa5i2g7KhNagc4hnmBnyPYlq66gxeQDJK4CFllvd ABYl6iFXY+LLWdnQFvUxI5ksN/p9zUe8gH0MiubAen9CubpexusPz2UU7QzPzH3P UEBdQsTYSh21frvfaNab70xAlc9qd14qvSuHtNXvClLeBnRirALlgUsUWYerq9KH Eq1r6Ik21yY3rXvM3NLD7CCmRDBU+HK74Tl5/CuXEq5jTUlKLiTEgOv5mwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFCLxlJ/9vmF9yIS310r2BpK3ZujVMB8GA1UdIwQY MBaAFFN2Rn7wkhxRGQ4upg8quzvW6cGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9jOWRiMGUtOTAzZS00ODVlLWI2N2Yt MmM3YTJhNzQ2Mjc5LzEvSXZHVW5fMi1ZWDNJaExmWFN2WUdrcmRtNk5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9jOWRiMGUtOTAzZS00ODVlLWI2N2YtMmM3YTJhNzQ2Mjc5 LzEvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgsEgDAN BgkqhkiG9w0BAQsFAAOCAQEAPutbF/5D/j6PPfKWmXa1pWpVvHC6EqH4fBjIj3TP YzlRA6dCdBslzB2Z0rxQ/jItLykL4N+/mPr1DHF4ZP2S/pG27Ak3+LR0hE9HvsAz RfSU5XKEo0rkbAPIZORZyC+t7jwFEhv2cdiY82kN3G099cKhYjdo3uhd7XqkqL9N x0H62g3OaYVnvm2dK6E9sE3l2zS16jRccKgs6AIVKj2MRR2aGngT3DBbmDtlTqKY L7Au3OmdRZX7B48FPFzY/Nn1ZXRbJDelL4eE6lps1yNtGPBDs+tddmV01wpPAHpb J7HZbGmFWItjFEQJ8BG4zeZ2ynTqSYtS/92ZfQrTtT10PQ== -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:46 2026 by rpki-client