This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/AVv-zYyVWWfaUS_H-7YWKIB-6Fc.roa File: AVv-zYyVWWfaUS_H-7YWKIB-6Fc.roa (raw, json) Hash identifier: lIJiJU65FC3rB1bJF8H1DYJMexlX72mQ4jqOpVKpzBo= Subject key identifier: 01:5B:FE:CD:8C:95:59:67:DA:51:2F:C7:FB:B6:16:28:80:7E:E8:57 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6C8D1E37BD9AE857305D65AE1A6AF Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/AVv-zYyVWWfaUS_H-7YWKIB-6Fc.roa Signing time: Fri 02 Jan 2026 12:20:18 +0000 ROA not before: Fri 02 Jan 2026 12:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43927 IP address blocks: 2a0c:9a40:8088::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c8:d1:e3:7b:d9:ae:85:73:05:d6:5a:e1:a6:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=015bfecd8c955967da512fc7fbb61628807ee857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9f:b5:33:55:a6:0e:87:47:bc:f6:7c:8e:b6: 8e:f9:d0:58:53:ef:5e:7b:a2:1b:32:17:77:e2:c0: e5:16:14:48:1c:a6:c6:f5:45:69:2a:de:2a:52:34: a1:52:37:f3:e1:d2:f5:d1:05:9a:9a:87:df:97:86: b5:48:08:6c:7e:96:11:f5:80:bc:df:a7:e9:fc:f6: 0e:76:bf:6d:af:c8:76:d9:4c:7e:e3:f6:f9:fc:4e: a9:e0:94:a0:39:d5:d8:85:7c:6e:d5:f3:5a:29:62: 34:f8:72:3c:37:e1:8e:04:b5:ca:28:f7:11:da:09: f2:18:07:8c:f5:ed:40:3d:76:38:81:83:ed:3b:a0: 0e:11:bf:10:f2:6d:17:6a:96:85:8a:c7:d6:2a:49: b2:26:25:04:61:2b:e8:a7:ce:b2:8d:69:ec:64:70: 79:8f:42:68:ee:e7:69:ae:a6:74:5a:d2:29:0b:d3: f8:1f:e7:de:15:81:64:84:e2:59:7a:c9:3c:c6:80: 9a:37:6e:78:82:81:34:39:a7:ae:97:3f:2d:a1:72: a4:8c:fb:72:a9:7c:5f:11:17:88:37:bb:8f:65:22: ba:ca:7b:db:16:51:c1:81:ce:92:26:60:75:80:47: 9d:a3:72:e2:01:63:db:48:43:53:75:e2:c4:30:24: 78:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5B:FE:CD:8C:95:59:67:DA:51:2F:C7:FB:B6:16:28:80:7E:E8:57 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/AVv-zYyVWWfaUS_H-7YWKIB-6Fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8088::/48 Signature Algorithm: sha256WithRSAEncryption 0d:f2:06:91:ae:20:e7:27:63:00:55:cf:7c:f4:34:a7:94:28: ac:96:1a:b3:8e:1a:73:7c:7d:aa:a9:06:f6:34:05:16:20:df: 7c:4f:53:69:62:0b:d4:58:e2:f8:a6:fe:a8:54:ef:94:1f:1a: b7:c5:fc:86:08:80:b1:c8:1c:6f:ab:bf:8a:9a:68:3e:aa:6a: d7:35:82:44:f3:23:d5:df:6e:d2:79:fa:98:ce:c6:59:ee:43: 79:9c:95:67:6b:5c:36:26:a3:ee:74:f4:33:d9:19:78:ab:a0: 35:02:41:38:07:ea:61:aa:3d:d0:19:3d:5a:22:a4:5e:2c:85: 94:e5:49:8e:19:09:dc:25:a5:fd:fa:ad:2f:e0:8d:28:6b:e6: dc:93:33:4a:0d:ab:91:f0:44:a7:dd:26:5c:c7:38:77:dc:2d: 23:87:64:80:a4:38:f7:06:c2:cd:8d:f8:37:7b:3c:65:97:32: 75:c1:40:6e:0c:b3:98:b1:a0:aa:15:ae:47:0c:02:56:c4:47: 03:af:37:24:54:ed:39:46:97:00:55:c6:3d:7f:e6:d9:02:85: 5a:04:c0:98:4b:03:25:0a:6d:75:a7:ac:44:26:f4:e5:95:1c: cc:99:4d:29:76:a1:97:02:9f:f5:32:41:a6:e9:5f:24:3a:53: 70:d9:ee:fd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+psjR43vZroVzBdZa4aavMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTViZmVjZDhjOTU1OTY3ZGE1MTJmYzdmYmI2MTYyODgwN2VlODU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1p+1M1WmDodHvPZ8jraO+dBYU+9e e6IbMhd34sDlFhRIHKbG9UVpKt4qUjShUjfz4dL10QWamoffl4a1SAhsfpYR9YC8 36fp/PYOdr9tr8h22Ux+4/b5/E6p4JSgOdXYhXxu1fNaKWI0+HI8N+GOBLXKKPcR 2gnyGAeM9e1APXY4gYPtO6AOEb8Q8m0XapaFisfWKkmyJiUEYSvop86yjWnsZHB5 j0Jo7udprqZ0WtIpC9P4H+feFYFkhOJZesk8xoCaN254goE0Oaeulz8toXKkjPty qXxfEReIN7uPZSK6ynvbFlHBgc6SJmB1gEedo3LiAWPbSENTdeLEMCR4OwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAFb/s2MlVln2lEvx/u2FiiAfuhXMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvQVZ2LXpZeVZXV2ZhVVNfSC03WVdLSUItNkZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQICI MA0GCSqGSIb3DQEBCwUAA4IBAQAN8gaRriDnJ2MAVc989DSnlCislhqzjhpzfH2q qQb2NAUWIN98T1NpYgvUWOL4pv6oVO+UHxq3xfyGCICxyBxvq7+Kmmg+qmrXNYJE 8yPV327SefqYzsZZ7kN5nJVna1w2JqPudPQz2Rl4q6A1AkE4B+phqj3QGT1aIqRe LIWU5UmOGQncJaX9+q0v4I0oa+bckzNKDauR8ESn3SZcxzh33C0jh2SApDj3BsLN jfg3ezxllzJ1wUBuDLOYsaCqFa5HDAJWxEcDrzckVO05RpcAVcY9f+bZAoVaBMCY SwMlCm11p6xEJvTllRzMmU0pdqGXAp/1MkGm6V8kOlNw2e79 -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:40 2026 by rpki-client