This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/AcLuMtzmG5HCUQt8MEl-8BboLPI.roa File: AcLuMtzmG5HCUQt8MEl-8BboLPI.roa (raw, json) Hash identifier: QH9VOyls19cPOdc9vMFsenjiN1BXeIcDGCf56mlERm8= Subject key identifier: 01:C2:EE:32:DC:E6:1B:91:C2:51:0B:7C:30:49:7E:F0:16:E8:2C:F2 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6C3351FECE0553D9FD40C94401134 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/AcLuMtzmG5HCUQt8MEl-8BboLPI.roa Signing time: Fri 02 Jan 2026 12:20:16 +0000 ROA not before: Fri 02 Jan 2026 12:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13830 IP address blocks: 2a0c:9a40:8084::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c3:35:1f:ec:e0:55:3d:9f:d4:0c:94:40:11:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01c2ee32dce61b91c2510b7c30497ef016e82cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:60:88:b9:89:9f:70:4e:25:b0:05:0a:bb:3b: 39:51:b1:b6:32:27:71:0d:33:5f:24:c6:d1:fb:27: d7:97:b2:b8:f0:c1:c9:70:2d:1d:63:19:82:92:d9: 6a:ab:3e:c5:58:ed:98:3c:19:9c:3b:4f:1b:f3:ab: 45:63:16:c8:9c:be:cd:d7:71:31:05:4c:d4:28:89: 2a:3a:6f:4e:bb:1b:65:8d:a8:b1:2a:88:33:71:d1: de:ec:34:cc:ce:1d:75:48:82:bd:82:79:88:d2:76: 57:8e:dc:c6:62:5a:45:da:14:44:5f:a8:c2:a3:a4: 9b:5b:97:2c:e7:55:64:b5:0a:3f:4e:2b:2e:fb:65: d2:46:8a:00:7c:45:94:36:46:2b:4b:56:0d:73:cc: db:45:32:26:9e:9f:3e:98:df:dc:d9:b0:6d:5e:06: cd:77:2c:2f:ef:35:4b:fe:a6:a8:b4:6f:0e:4d:f3: ad:a1:65:df:c4:48:f3:51:1c:69:66:ea:53:e6:f9: e4:3e:78:74:a5:c4:a4:03:5a:58:87:57:4a:f6:b6: 2a:95:72:e5:05:39:2e:52:3b:08:87:8a:c5:4c:ca: 8c:e1:d4:47:ad:e3:f0:16:26:a2:d7:9f:83:46:fc: be:5e:e5:6c:52:f1:9f:36:ae:b0:2b:55:04:73:93: 98:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C2:EE:32:DC:E6:1B:91:C2:51:0B:7C:30:49:7E:F0:16:E8:2C:F2 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/AcLuMtzmG5HCUQt8MEl-8BboLPI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8084::/48 Signature Algorithm: sha256WithRSAEncryption 5b:07:69:17:8a:54:b1:00:7d:6d:b0:fe:54:56:c0:53:90:01: ee:6a:22:14:75:3c:4d:a3:62:72:32:62:9d:85:67:0b:93:7e: 3d:cb:89:41:66:11:73:6e:d0:47:22:a0:1c:a7:21:2f:96:90: bd:50:93:02:53:1c:b9:c2:b7:a7:ae:7d:43:55:5f:06:89:d2: 4d:8d:96:45:9f:35:12:8d:06:8a:62:9e:7a:4b:c5:c9:ca:79: 4b:71:1f:12:bd:e9:3c:3c:c2:50:fe:9a:23:41:90:93:c9:c5: 6a:d8:fb:d7:91:cc:53:56:c5:a9:3e:3e:6c:31:13:e5:c1:42: ba:7e:73:6c:db:26:9a:a9:f1:7e:18:7e:81:4f:93:01:a1:69: 96:3b:4a:ac:81:5d:4e:9f:ae:6e:ae:22:cb:54:55:50:f8:ac: 20:da:bc:24:bd:ef:bc:63:32:6d:90:81:02:09:10:51:51:9a: 9f:8c:e8:47:93:05:dd:0f:35:44:fa:68:86:57:d9:6b:be:23: 53:db:c5:22:50:d8:e7:89:a7:80:22:e9:15:26:8c:00:7e:fa: ad:3f:6b:ea:f9:7c:31:de:f4:f9:88:24:7c:fd:68:b2:d8:5b: 31:07:26:68:18:ad:24:3f:e5:2c:bf:66:ec:c6:4b:61:d1:c2: 4f:74:f5:73 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+psM1H+zgVT2f1AyUQBE0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWMyZWUzMmRjZTYxYjkxYzI1MTBiN2MzMDQ5N2VmMDE2ZTgyY2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGCIuYmfcE4lsAUKuzs5UbG2Midx DTNfJMbR+yfXl7K48MHJcC0dYxmCktlqqz7FWO2YPBmcO08b86tFYxbInL7N13Ex BUzUKIkqOm9OuxtljaixKogzcdHe7DTMzh11SIK9gnmI0nZXjtzGYlpF2hREX6jC o6SbW5cs51VktQo/Tisu+2XSRooAfEWUNkYrS1YNc8zbRTImnp8+mN/c2bBtXgbN dywv7zVL/qaotG8OTfOtoWXfxEjzURxpZupT5vnkPnh0pcSkA1pYh1dK9rYqlXLl BTkuUjsIh4rFTMqM4dRHrePwFiai15+DRvy+XuVsUvGfNq6wK1UEc5OYKQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAHC7jLc5huRwlELfDBJfvAW6CzyMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvQWNMdU10em1HNUhDVVF0OE1FbC04QmJvTFBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQICE MA0GCSqGSIb3DQEBCwUAA4IBAQBbB2kXilSxAH1tsP5UVsBTkAHuaiIUdTxNo2Jy MmKdhWcLk349y4lBZhFzbtBHIqAcpyEvlpC9UJMCUxy5wrenrn1DVV8GidJNjZZF nzUSjQaKYp56S8XJynlLcR8Svek8PMJQ/pojQZCTycVq2PvXkcxTVsWpPj5sMRPl wUK6fnNs2yaaqfF+GH6BT5MBoWmWO0qsgV1On65uriLLVFVQ+Kwg2rwkve+8YzJt kIECCRBRUZqfjOhHkwXdDzVE+miGV9lrviNT28UiUNjniaeAIukVJowAfvqtP2vq +Xwx3vT5iCR8/Wiy2FsxByZoGK0kP+Usv2bsxkth0cJPdPVz -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:40 2026 by rpki-client