This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/aZBPshcpYuW3uiPNklELJKpWxB0.roa File: aZBPshcpYuW3uiPNklELJKpWxB0.roa (raw, json) Hash identifier: FDs/jppjg3SFmpeDxF8pcdK8smBMdmkqoES9cLDqS0U= Subject key identifier: 69:90:4F:B2:17:29:62:E5:B7:BA:23:CD:92:51:0B:24:AA:56:C4:1D Certificate issuer: /CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1 Certificate serial: 019B7DCB5ACDB97D6415B41A5676C19D88C3 Authority key identifier: 2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/aZBPshcpYuW3uiPNklELJKpWxB0.roa Signing time: Fri 02 Jan 2026 08:20:37 +0000 ROA not before: Fri 02 Jan 2026 08:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2a00:dc80::/33 maxlen: 48 2a00:dc87:8000::/33 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 23:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5a:cd:b9:7d:64:15:b4:1a:56:76:c1:9d:88:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1 Validity Not Before: Jan 2 08:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69904fb2172962e5b7ba23cd92510b24aa56c41d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:42:5d:23:82:2d:3b:36:c3:6c:cf:e5:0d:40: 4b:82:0c:cd:3c:e2:0e:08:22:43:75:71:1a:c0:d3: 40:f2:71:7c:aa:37:95:b6:6f:ec:69:7d:d3:96:b2: dc:e6:30:fc:77:0d:e8:96:ad:3b:45:87:bb:eb:5f: d4:7f:88:69:13:7a:59:54:e3:12:21:9c:d7:35:37: 31:bf:69:92:2c:ed:98:ed:3f:23:21:9e:5c:6a:48: 36:20:96:09:84:c7:7e:24:d5:56:46:0d:37:f6:84: ec:fd:b0:97:8d:73:52:93:5f:aa:a8:eb:22:67:60: 1d:07:28:4f:f6:32:fb:7c:38:d4:17:8c:f2:de:5f: 98:92:32:1f:dc:a3:d0:9c:72:97:98:a0:7c:c8:31: 76:c2:87:de:35:89:58:cc:44:a1:75:dd:65:25:c1: 22:4f:5d:ea:a7:1b:e5:29:c1:ea:96:dc:54:5c:2d: d9:27:fe:a2:8c:9e:24:29:c1:3a:59:da:fc:bf:87: c4:2e:4a:58:8b:cc:9a:37:8e:b2:0d:13:15:53:2b: 8d:16:03:5e:fc:88:19:7c:80:1a:ca:2b:57:f6:de: 07:a2:dc:23:62:4c:20:57:51:bc:ef:5d:97:d5:44: 21:27:c8:16:b3:2d:81:80:ee:62:1a:0f:d3:b5:ab: f8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:90:4F:B2:17:29:62:E5:B7:BA:23:CD:92:51:0B:24:AA:56:C4:1D X509v3 Authority Key Identifier: keyid:2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/aZBPshcpYuW3uiPNklELJKpWxB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:dc80::/33 2a00:dc87:8000::/33 Signature Algorithm: sha256WithRSAEncryption 4b:37:bc:16:06:15:19:c3:99:eb:e2:ea:84:cb:2a:7f:77:d9: 8d:63:18:fb:13:9d:4e:75:6f:b0:cf:f0:7f:05:95:4f:98:db: 9f:6d:74:6e:60:c0:30:98:09:9d:49:27:d1:63:d0:0d:0f:94: 06:af:fd:c9:54:4e:f4:82:5d:ec:bd:be:7b:15:64:39:31:11: e2:54:ed:51:31:be:d4:78:2c:fd:69:ad:fe:30:3d:15:05:69: c5:33:01:5c:4b:5c:28:bd:f6:ee:bf:71:e4:3a:75:34:48:31: f0:55:46:de:ef:7c:2a:d5:38:bd:f8:56:e7:42:2b:e4:50:1e: 75:05:93:13:73:01:53:5b:68:a0:7b:52:b8:75:bb:55:fb:b7: 62:05:91:b0:2b:a6:87:35:81:59:d7:e9:fe:75:e9:bd:10:8b: b1:dc:2d:70:46:c0:d0:4d:31:c0:3f:16:e9:2a:44:47:06:fa: 9a:ff:61:c0:de:fe:03:39:19:8a:78:8b:62:e4:f0:d8:60:4e: 6c:4b:6e:cf:70:49:cd:3b:b4:6f:29:96:f7:fe:ba:7b:82:4f: 62:2c:2c:36:cb:bc:a6:09:de:49:15:a0:d5:35:92:77:02:7b: 33:e6:8a:ee:d2:f1:b7:d8:50:51:3c:ca:8c:b5:0f:ef:35:bb: f1:f3:80:25 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt9y1rNuX1kFbQaVnbBnYjDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjM2IwYWU1YjdmNzgxMTIyYzcwOWEyNjUwYWRmOTcyOTE4 N2UxZTEwHhcNMjYwMTAyMDgyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTkwNGZiMjE3Mjk2MmU1YjdiYTIzY2Q5MjUxMGIyNGFhNTZjNDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkJdI4ItOzbDbM/lDUBLggzNPOIO CCJDdXEawNNA8nF8qjeVtm/saX3TlrLc5jD8dw3olq07RYe761/Uf4hpE3pZVOMS IZzXNTcxv2mSLO2Y7T8jIZ5cakg2IJYJhMd+JNVWRg039oTs/bCXjXNSk1+qqOsi Z2AdByhP9jL7fDjUF4zy3l+YkjIf3KPQnHKXmKB8yDF2wofeNYlYzEShdd1lJcEi T13qpxvlKcHqltxUXC3ZJ/6ijJ4kKcE6Wdr8v4fELkpYi8yaN46yDRMVUyuNFgNe /IgZfIAayitX9t4HotwjYkwgV1G8712X1UQhJ8gWsy2BgO5iGg/Ttav4kwIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFGmQT7IXKWLlt7ojzZJRCySqVsQdMB8GA1UdIwQY MBaAFCw7CuW394ESLHCaJlCt+XKRh+HhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTERzSzViZjNnUklzY0pvbVVLMzVjcEdINGVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81M2UyNmItZTdlZS00NzNlLWE1NGEt ZmZjY2EzZTFmMTdmLzEvYVpCUHNoY3BZdVczdWlQTmtsRUxKS3BXeEIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi81M2UyNmItZTdlZS00NzNlLWE1NGEtZmZjY2EzZTFmMTdm LzEvTERzSzViZjNnUklzY0pvbVVLMzVjcEdINGVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYHKgDcgAAD BgcqANyHgDANBgkqhkiG9w0BAQsFAAOCAQEASze8FgYVGcOZ6+LqhMsqf3fZjWMY +xOdTnVvsM/wfwWVT5jbn210bmDAMJgJnUkn0WPQDQ+UBq/9yVRO9IJd7L2+exVk OTER4lTtUTG+1Hgs/Wmt/jA9FQVpxTMBXEtcKL327r9x5Dp1NEgx8FVG3u98KtU4 vfhW50Ir5FAedQWTE3MBU1tooHtSuHW7Vfu3YgWRsCumhzWBWdfp/nXpvRCLsdwt cEbA0E0xwD8W6SpERwb6mv9hwN7+AzkZiniLYuTw2GBObEtuz3BJzTu0bymW9/66 e4JPYiwsNsu8pgneSRWg1TWSdwJ7M+aK7tLxt9hQUTzKjLUP7zW78fOAJQ== -----END CERTIFICATE-----Generated at Sat Jan 17 06:45:36 2026 by rpki-client