This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/sI_BcImvqhW1VB2jGwFKlyR2UJw.roa File: sI_BcImvqhW1VB2jGwFKlyR2UJw.roa (raw, json) Hash identifier: rZhI4UUGBH6D1Xl5jMVJTIkzsORgEFhu4vJQGMva6aU= Subject key identifier: B0:8F:C1:70:89:AF:AA:15:B5:54:1D:A3:1B:01:4A:97:24:76:50:9C Certificate issuer: /CN=593b53fb9306346f272494928d77839cbaf9ddc7 Certificate serial: 019B7B36E0B6936DCA0A6AB0BE4280CCDC63 Authority key identifier: 59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/sI_BcImvqhW1VB2jGwFKlyR2UJw.roa Signing time: Thu 01 Jan 2026 20:19:12 +0000 ROA not before: Thu 01 Jan 2026 20:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12637 IP address blocks: 2a0b:ee40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.mft rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:e0:b6:93:6d:ca:0a:6a:b0:be:42:80:cc:dc:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=593b53fb9306346f272494928d77839cbaf9ddc7 Validity Not Before: Jan 1 20:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b08fc17089afaa15b5541da31b014a972476509c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:12:68:e5:07:4a:f5:af:83:8b:c9:8e:20:f4: ec:48:e9:bc:8d:17:1f:6d:4e:ef:b5:0e:b8:87:44: d5:c0:95:4b:cc:da:c1:bd:70:86:4b:f9:d8:d4:5e: 12:63:7a:6d:eb:3f:44:75:61:3c:07:a4:68:ca:6d: c5:f0:2a:ad:05:7f:88:db:fd:c4:fa:d5:16:32:14: 24:94:33:5c:ae:e4:35:30:ed:fe:04:fe:82:70:7a: 10:cd:57:55:d8:ed:0b:aa:12:5e:e4:a2:5e:35:03: da:aa:f1:de:49:c2:8d:a7:06:4d:3d:d1:30:c3:84: b8:c3:89:74:ba:b8:9e:fa:bf:a3:82:29:21:31:ba: 16:10:f5:4d:32:96:ac:0f:6e:57:34:1d:3b:6c:b9: af:3a:e5:40:8e:62:54:6a:85:94:c3:70:60:ba:57: ab:3f:ae:83:43:5c:4d:bd:eb:99:01:c4:2b:c3:3a: 2b:32:44:b1:c2:0e:97:29:65:6a:c2:72:f7:41:af: 4a:05:ce:bf:7b:ee:aa:d9:5a:b8:46:41:c0:40:aa: d9:69:76:c8:60:6e:c2:cb:5f:9a:ca:6c:bc:ad:7f: 34:8e:36:c3:2d:91:d9:bd:fa:77:f7:53:cd:74:de: d6:65:2f:93:61:57:c1:78:31:27:53:39:2c:91:95: d8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:8F:C1:70:89:AF:AA:15:B5:54:1D:A3:1B:01:4A:97:24:76:50:9C X509v3 Authority Key Identifier: keyid:59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/sI_BcImvqhW1VB2jGwFKlyR2UJw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:ee40::/29 Signature Algorithm: sha256WithRSAEncryption 5d:05:97:94:d7:cf:b4:de:e1:d5:03:82:0b:34:81:ad:45:08: 01:31:6e:33:62:90:91:1c:fd:72:da:b4:40:eb:7d:d0:df:6d: 78:5c:58:ad:53:26:68:db:69:2d:e5:fd:ad:0c:7e:47:b8:79: 70:ab:a9:21:a7:64:f6:cb:00:00:99:ab:26:0d:ef:ed:11:00: a5:5e:8a:9b:fb:c3:4b:5b:65:d9:13:ea:2d:7a:f8:b0:6c:bd: fc:e8:6f:41:47:de:55:d1:3a:b4:78:44:b9:c5:92:ca:30:5a: 51:af:11:25:67:5f:cf:e8:73:d7:69:00:52:08:49:86:14:dd: bc:33:87:18:bf:13:4a:6b:09:57:31:af:97:40:46:55:ba:7d: 1f:88:c5:41:79:1c:ac:5e:69:2e:b1:f5:9d:1c:d7:34:4d:dc: 22:76:b2:08:04:06:ec:64:13:2b:f7:56:1b:89:bf:6e:3f:79: f8:73:7e:b0:d1:33:b0:91:40:22:b0:23:35:6f:c2:d2:ed:fa: de:89:8d:bd:af:c5:6a:67:38:47:a1:da:46:47:88:cb:04:58: f2:6c:ea:cf:07:46:d7:9b:f1:5f:d0:c8:89:59:69:ca:55:c1: 6f:4c:c7:94:6c:40:8b:4b:04:07:86:a9:4e:18:bb:bb:ff:fb: 37:42:4a:c3 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7NuC2k23KCmqwvkKAzNxjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5M2I1M2ZiOTMwNjM0NmYyNzI0OTQ5MjhkNzc4MzljYmFm OWRkYzcwHhcNMjYwMTAxMjAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDhmYzE3MDg5YWZhYTE1YjU1NDFkYTMxYjAxNGE5NzI0NzY1MDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRJo5QdK9a+Di8mOIPTsSOm8jRcf bU7vtQ64h0TVwJVLzNrBvXCGS/nY1F4SY3pt6z9EdWE8B6Roym3F8CqtBX+I2/3E +tUWMhQklDNcruQ1MO3+BP6CcHoQzVdV2O0LqhJe5KJeNQPaqvHeScKNpwZNPdEw w4S4w4l0urie+r+jgikhMboWEPVNMpasD25XNB07bLmvOuVAjmJUaoWUw3Bguler P66DQ1xNveuZAcQrwzorMkSxwg6XKWVqwnL3Qa9KBc6/e+6q2Vq4RkHAQKrZaXbI YG7Cy1+aymy8rX80jjbDLZHZvfp391PNdN7WZS+TYVfBeDEnUzkskZXYRwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFLCPwXCJr6oVtVQdoxsBSpckdlCcMB8GA1UdIwQY MBaAFFk7U/uTBjRvJySUko13g5y6+d3HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1R0VC01TUdORzhuSkpTU2pYZURuTHI1M2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMmZjOWUtZWEzYi00MWMwLTk1MGUt NDQ3NWE5YmYyNTBlLzEvc0lfQmNJbXZxaFcxVkIyakd3RktseVIyVUp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8xMmZjOWUtZWEzYi00MWMwLTk1MGUtNDQ3NWE5YmYyNTBl LzEvV1R0VC01TUdORzhuSkpTU2pYZURuTHI1M2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgvuQDAN BgkqhkiG9w0BAQsFAAOCAQEAXQWXlNfPtN7h1QOCCzSBrUUIATFuM2KQkRz9ctq0 QOt90N9teFxYrVMmaNtpLeX9rQx+R7h5cKupIadk9ssAAJmrJg3v7REApV6Km/vD S1tl2RPqLXr4sGy9/OhvQUfeVdE6tHhEucWSyjBaUa8RJWdfz+hz12kAUghJhhTd vDOHGL8TSmsJVzGvl0BGVbp9H4jFQXkcrF5pLrH1nRzXNE3cInayCAQG7GQTK/dW G4m/bj95+HN+sNEzsJFAIrAjNW/C0u363omNva/Famc4R6HaRkeIywRY8mzqzwdG 15vxX9DIiVlpylXBb0zHlGxAi0sEB4apThi7u//7N0JKww== -----END CERTIFICATE-----Generated at Sun Jan 25 21:26:03 2026 by rpki-client