This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/aY-gHcvtsPJsNOwIpm_qT_fqvQ8.roa File: aY-gHcvtsPJsNOwIpm_qT_fqvQ8.roa (raw, json) Hash identifier: wNGsaDekSfzDyxVuy33QU7KevVbyLx5/MhnPP194+qU= Subject key identifier: 69:8F:A0:1D:CB:ED:B0:F2:6C:34:EC:08:A6:6F:EA:4F:F7:EA:BD:0F Certificate issuer: /CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4 Certificate serial: 019B797ED09EF9F5C9087A9B9DF15495CED5 Authority key identifier: 6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/aY-gHcvtsPJsNOwIpm_qT_fqvQ8.roa Signing time: Thu 01 Jan 2026 12:18:32 +0000 ROA not before: Thu 01 Jan 2026 12:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197942 IP address blocks: 2001:67c:a30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d0:9e:f9:f5:c9:08:7a:9b:9d:f1:54:95:ce:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4 Validity Not Before: Jan 1 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=698fa01dcbedb0f26c34ec08a66fea4ff7eabd0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f3:7c:9a:02:10:56:f9:6f:ed:f3:bf:f0:cb: 40:7d:0f:7f:e9:ea:8b:ff:f7:c9:37:2e:fa:6b:7e: 34:10:7b:25:e1:4f:a4:fd:fd:81:65:cf:96:53:2e: 9a:a7:b1:e0:e6:75:6f:3a:1f:b3:f7:4c:e9:c8:5f: ba:e8:0b:00:bc:f1:74:04:2d:94:64:94:4c:48:50: 46:4c:3c:1a:c1:de:98:92:21:24:07:cf:15:32:54: 8c:6f:92:13:8e:81:2b:8e:bc:48:b7:ae:d8:50:6a: e3:1f:48:c8:2d:72:c0:f6:c2:50:c4:85:a7:ec:bf: 15:34:9f:bc:8d:ee:3d:a1:93:e1:8f:6f:03:d9:bb: 9b:3f:eb:cf:6f:0c:65:df:fe:83:9e:eb:7e:37:85: c2:bf:f4:d6:ef:3c:22:2a:a5:22:30:fd:d4:b5:00: d1:13:be:a5:99:e4:31:cd:97:19:96:56:a6:b2:a9: 72:8a:4e:f4:59:6f:26:77:31:d1:f8:13:80:fd:c3: 7d:07:c0:6a:4a:2e:44:10:6c:1c:6f:a9:d2:bc:af: 98:03:29:7a:92:99:11:34:93:c9:93:df:d1:a6:27: 73:4c:d5:7a:1f:eb:3f:d8:1c:93:47:c0:ed:64:c4: 55:2d:fc:16:ca:f0:0e:c3:95:cf:d4:8f:46:4a:06: 7e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:8F:A0:1D:CB:ED:B0:F2:6C:34:EC:08:A6:6F:EA:4F:F7:EA:BD:0F X509v3 Authority Key Identifier: keyid:6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/aY-gHcvtsPJsNOwIpm_qT_fqvQ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:a30::/48 Signature Algorithm: sha256WithRSAEncryption 13:71:92:30:10:ce:25:a3:46:b5:7e:d0:6d:92:62:af:65:92: f8:73:56:8b:33:2d:4a:1c:2c:97:59:1f:8f:01:37:ae:b8:33: 0a:96:a6:1b:86:0d:c2:2d:4b:a4:9e:65:50:1d:e2:c0:71:41: 5b:14:a3:0d:2b:a7:de:c8:d4:dc:94:43:68:c9:92:7e:4a:90: b4:8e:44:7a:f1:a0:ed:cc:cf:39:12:7e:f6:e0:3a:26:ac:3d: 8c:28:38:32:2e:03:c4:60:51:5a:77:5c:b8:fd:ee:f2:19:a0: 33:e6:ac:b7:58:5b:8d:f9:74:14:e5:68:38:aa:5f:9e:ef:d6: f9:66:44:93:73:df:55:d5:e9:b1:7d:09:0c:fb:b1:62:97:f6: eb:2d:b4:8d:4f:87:82:7d:4e:20:ad:39:f9:1a:2b:b5:d4:b3: 14:d0:45:e1:8c:e0:74:e6:f8:b4:cb:a4:e7:a7:df:bb:8a:c1: 6e:02:98:b5:f8:55:76:14:ad:ee:7f:3c:07:c0:bb:7e:51:ec: 66:01:0e:d5:d2:fd:da:c1:10:49:fc:13:83:05:d5:8c:85:ee: 8f:c1:71:f5:f0:00:83:3b:70:c4:93:d9:81:e1:5b:bc:b9:bf: a8:c3:d6:b0:77:3f:8e:48:5c:63:85:af:ac:d5:66:63:32:19: 1f:49:03:77 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5ftCe+fXJCHqbnfFUlc7VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhYmQyNzEwYzJmY2Y1NTFiMzFmZDdjY2M2MGRmMWY2YmI0 YTkyYzQwHhcNMjYwMTAxMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OThmYTAxZGNiZWRiMGYyNmMzNGVjMDhhNjZmZWE0ZmY3ZWFiZDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vN8mgIQVvlv7fO/8MtAfQ9/6eqL //fJNy76a340EHsl4U+k/f2BZc+WUy6ap7Hg5nVvOh+z90zpyF+66AsAvPF0BC2U ZJRMSFBGTDwawd6YkiEkB88VMlSMb5ITjoErjrxIt67YUGrjH0jILXLA9sJQxIWn 7L8VNJ+8je49oZPhj28D2bubP+vPbwxl3/6Dnut+N4XCv/TW7zwiKqUiMP3UtQDR E76lmeQxzZcZllamsqlyik70WW8mdzHR+BOA/cN9B8BqSi5EEGwcb6nSvK+YAyl6 kpkRNJPJk9/RpidzTNV6H+s/2ByTR8DtZMRVLfwWyvAOw5XP1I9GSgZ+0wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGmPoB3L7bDybDTsCKZv6k/36r0PMB8GA1UdIwQY MBaAFGq9JxDC/PVRsx/XzMYN8fa7SpLEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82MmY4MDktZTIzMS00ZWY1LTkwMTQt NzRlMzMxZGJkMDdmLzEvYVktZ0hjdnRzUEpzTk93SXBtX3FUX2ZxdlE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC82MmY4MDktZTIzMS00ZWY1LTkwMTQtNzRlMzMxZGJkMDdm LzEvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAow MA0GCSqGSIb3DQEBCwUAA4IBAQATcZIwEM4lo0a1ftBtkmKvZZL4c1aLMy1KHCyX WR+PATeuuDMKlqYbhg3CLUuknmVQHeLAcUFbFKMNK6feyNTclENoyZJ+SpC0jkR6 8aDtzM85En724DomrD2MKDgyLgPEYFFad1y4/e7yGaAz5qy3WFuN+XQU5Wg4ql+e 79b5ZkSTc99V1emxfQkM+7Fil/brLbSNT4eCfU4grTn5Giu11LMU0EXhjOB05vi0 y6Tnp9+7isFuApi1+FV2FK3ufzwHwLt+UexmAQ7V0v3awRBJ/BODBdWMhe6PwXH1 8ACDO3DEk9mB4Vu8ub+ow9awdz+OSFxjha+s1WZjMhkfSQN3 -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:51 2026 by rpki-client