This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/akoyrsz0bJoDNQgMyC8c-JmQRQQ.roa File: akoyrsz0bJoDNQgMyC8c-JmQRQQ.roa (raw, json) Hash identifier: nhX5fVxRS3e4icCOygzdch8SpwXkUN5wlZ7uTW93Gsk= Subject key identifier: 6A:4A:32:AE:CC:F4:6C:9A:03:35:08:0C:C8:2F:1C:F8:99:90:45:04 Certificate issuer: /CN=6aa8fa75c5020cd6218cf7f109de420265204bac Certificate serial: 019B7FF20659ADBAD1155DEE082679640911 Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/akoyrsz0bJoDNQgMyC8c-JmQRQQ.roa Signing time: Fri 02 Jan 2026 18:22:06 +0000 ROA not before: Fri 02 Jan 2026 18:22:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202525 IP address blocks: 46.29.36.0/24 maxlen: 24 2a13:d040::/48 maxlen: 48 2a13:d040:2::/48 maxlen: 48 2a13:d040:3::/48 maxlen: 48 2a13:d040:5::/48 maxlen: 48 2a13:d040:6::/48 maxlen: 48 2a13:d040:7::/48 maxlen: 48 2a13:d046:fffc::/48 maxlen: 48 2a13:d046:fffd::/48 maxlen: 48 2a13:d046:fffe::/48 maxlen: 48 2a13:d046:ffff::/48 maxlen: 48 2a13:d047::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:06:59:ad:ba:d1:15:5d:ee:08:26:79:64:09:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac Validity Not Before: Jan 2 18:22:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4a32aeccf46c9a0335080cc82f1cf899904504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f0:58:b9:7e:8f:ed:e7:87:05:2d:d2:c7:61: 79:c7:39:6a:cb:1a:f9:bb:d9:10:9f:bb:ad:d7:a5: 0c:53:9d:3a:be:5b:cc:6d:e1:40:35:af:4f:d7:b8: a0:50:f5:c1:03:70:3c:92:e6:38:16:4a:46:99:e9: 17:38:f0:a3:17:c1:43:ad:9a:42:22:a0:42:00:08: 06:2c:3b:41:9e:f6:fd:e6:a2:bc:16:5a:b6:b2:c0: a7:41:f0:76:dd:15:b4:f2:69:ed:f7:ea:75:a4:c3: 78:e3:26:fe:dc:c2:1e:0c:4e:27:38:7b:15:7c:2c: ca:77:da:4f:14:73:df:cf:dc:36:ad:81:ef:ba:07: c9:60:d0:79:4c:8e:b8:b2:28:5b:7a:b7:2c:62:a2: 70:cf:51:7e:53:b8:23:05:0d:bf:05:8d:b1:41:56: 82:92:46:e8:eb:c9:be:f4:74:3b:03:3d:08:b5:6e: 58:21:45:b4:dc:9a:58:ff:a5:ab:0f:67:2f:ff:e5: b7:b2:64:a3:eb:d8:c0:0e:b2:f1:6e:8c:86:22:47: 02:11:dd:8e:11:43:f3:76:7f:80:de:19:bb:31:89: 53:88:30:b9:47:6f:1c:c9:1d:9b:18:57:e5:7b:ad: 3d:e6:ac:cd:92:c9:82:04:86:b8:fd:a1:b0:0e:fa: a5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4A:32:AE:CC:F4:6C:9A:03:35:08:0C:C8:2F:1C:F8:99:90:45:04 X509v3 Authority Key Identifier: keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/akoyrsz0bJoDNQgMyC8c-JmQRQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.29.36.0/24 IPv6: 2a13:d040::/48 2a13:d040:2::/47 2a13:d040:5::-2a13:d040:7:ffff:ffff:ffff:ffff:ffff 2a13:d046:fffc::-2a13:d047:0:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 80:c0:82:68:63:8c:1c:2d:02:b0:e7:28:14:51:40:ba:c0:ff: ec:46:ad:67:30:07:61:7a:02:68:f7:72:ce:9e:91:4c:3e:a8: 01:b9:cb:54:9b:a1:2f:b4:96:47:ad:8d:c5:6f:ec:11:c7:6d: 37:33:b0:ca:0c:da:a1:1a:c9:fa:ff:c6:98:90:d0:ed:1a:87: 66:85:6d:46:fe:54:2f:fc:32:70:f1:be:a5:e3:ee:1d:3b:b7: 0e:bf:12:23:65:25:62:fc:c3:4e:63:3a:a3:2d:9d:fb:ea:c6: 06:c9:03:d7:ea:bd:90:b5:5b:2f:f0:b8:38:e8:d0:d6:bd:67: e0:5f:3d:b2:7d:4f:ba:3e:71:c0:f7:ee:61:1c:b6:d1:5a:c9: e1:a0:8b:80:77:a6:2e:20:c1:d8:9d:d0:9d:b3:f9:7d:02:76: 63:4d:20:fb:8f:be:de:a1:c8:c6:25:fb:9f:43:7f:b8:58:c0: 32:66:d6:f3:4c:f4:c7:ae:8d:dd:c5:2c:1c:74:fc:2b:34:1e: 10:8f:1f:42:f0:2b:0a:d9:88:b2:39:15:77:b8:84:c2:55:98: bc:63:9d:ca:94:79:8e:fc:1a:01:1c:2b:08:20:d3:61:b8:8d: c4:a8:96:3d:01:10:94:ac:01:0a:8a:e8:fb:e8:68:68:e9:b5: f3:ec:36:d2 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt/8gZZrbrRFV3uCCZ5ZAkRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhYThmYTc1YzUwMjBjZDYyMThjZjdmMTA5ZGU0MjAyNjUy MDRiYWMwHhcNMjYwMTAyMTgyMjA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTRhMzJhZWNjZjQ2YzlhMDMzNTA4MGNjODJmMWNmODk5OTA0NTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/BYuX6P7eeHBS3Sx2F5xzlqyxr5 u9kQn7ut16UMU506vlvMbeFANa9P17igUPXBA3A8kuY4FkpGmekXOPCjF8FDrZpC IqBCAAgGLDtBnvb95qK8Flq2ssCnQfB23RW08mnt9+p1pMN44yb+3MIeDE4nOHsV fCzKd9pPFHPfz9w2rYHvugfJYNB5TI64sihbercsYqJwz1F+U7gjBQ2/BY2xQVaC kkbo68m+9HQ7Az0ItW5YIUW03JpY/6WrD2cv/+W3smSj69jADrLxboyGIkcCEd2O EUPzdn+A3hm7MYlTiDC5R28cyR2bGFfle6095qzNksmCBIa4/aGwDvqlxQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGpKMq7M9GyaAzUIDMgvHPiZkEUEMB8GA1UdIwQY MBaAFGqo+nXFAgzWIYz38QneQgJlIEusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXFqNmRjVUNETlloalBmeENkNUNBbVVnUzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy83MDEyZDgtYWZhMS00MTliLThiNjAt MzVjNjNmYTc2NWEyLzEvYWtveXJzejBiSm9ETlFnTXlDOGMtSm1RUlFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy83MDEyZDgtYWZhMS00MTliLThiNjAtMzVjNjNmYTc2NWEy LzEvYXFqNmRjVUNETlloalBmeENkNUNBbVVnUzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDAMBAIAATAGAwQALh0kMEAE AgACMDoDBwAqE9BAAAADBwEqE9BAAAIwEgMHACoT0EAABQMHAyoT0EAAADASAwcC KhPQRv/8AwcAKhPQRwAAMA0GCSqGSIb3DQEBCwUAA4IBAQCAwIJoY4wcLQKw5ygU UUC6wP/sRq1nMAdhegJo93LOnpFMPqgBuctUm6EvtJZHrY3Fb+wRx203M7DKDNqh Gsn6/8aYkNDtGodmhW1G/lQv/DJw8b6l4+4dO7cOvxIjZSVi/MNOYzqjLZ376sYG yQPX6r2QtVsv8Lg46NDWvWfgXz2yfU+6PnHA9+5hHLbRWsnhoIuAd6YuIMHYndCd s/l9AnZjTSD7j77eocjGJfufQ3+4WMAyZtbzTPTHro3dxSwcdPwrNB4Qjx9C8CsK 2YiyORV3uITCVZi8Y53KlHmO/BoBHCsIINNhuI3EqJY9ARCUrAEKiuj76Gho6bXz 7DbS -----END CERTIFICATE-----Generated at Sat Jan 10 22:32:28 2026 by rpki-client