This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/AYYfOelXA_KC94AmW07goJ1sDNM.roa File: AYYfOelXA_KC94AmW07goJ1sDNM.roa (raw, json) Hash identifier: G3bFe4ykRMrvksPEIPlMzRpYOczTGF04bPmehlKEdvY= Subject key identifier: 01:86:1F:39:E9:57:03:F2:82:F7:80:26:5B:4E:E0:A0:9D:6C:0C:D3 Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811 Certificate serial: 019B7D5C541DE8C1B0AB06E809DE2EF3AB1A Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/AYYfOelXA_KC94AmW07goJ1sDNM.roa Signing time: Fri 02 Jan 2026 06:19:21 +0000 ROA not before: Fri 02 Jan 2026 06:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8966 IP address blocks: 2a03:2887:ff0c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:54:1d:e8:c1:b0:ab:06:e8:09:de:2e:f3:ab:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=375a064f301026bc3cf87666d6a820128212a811 Validity Not Before: Jan 2 06:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01861f39e95703f282f780265b4ee0a09d6c0cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:2a:2c:f8:76:9d:3f:78:e8:f7:b6:5c:ee:50: 6e:da:e2:c5:2e:c4:6b:85:8e:0f:45:70:17:40:b1: 05:36:d2:54:1c:12:3b:45:e2:c5:82:c1:c7:3b:e7: ce:89:b2:4a:f0:b0:b5:37:03:ff:96:71:f4:2f:07: f1:69:93:41:04:2b:c6:f1:eb:9b:57:d0:d5:c8:76: 7b:b2:a9:5d:46:4c:84:5f:38:16:2b:50:c1:b5:6d: 89:f2:8c:39:ab:34:c1:41:78:41:78:62:ab:98:07: 64:3b:53:f6:37:52:c2:d2:31:25:74:c8:fb:30:ed: 2b:01:eb:9a:42:86:70:eb:30:71:98:27:44:55:23: 43:d0:3c:9b:27:fc:ea:18:ef:5f:f3:91:35:63:50: 46:37:aa:36:9e:55:02:ec:60:f7:d1:52:12:ec:6d: 2c:41:a9:2e:61:bf:32:4e:e6:80:36:29:2d:4c:e5: 0c:36:72:bb:bd:af:6a:50:4b:d6:63:e3:ec:bd:8e: 66:6e:99:62:e1:16:5b:f2:44:e0:62:b4:be:b1:86: d8:e9:70:5f:6b:68:2e:95:45:9f:5e:25:0a:f3:5c: 38:eb:bf:c7:32:82:0c:8e:d9:88:92:b7:63:1e:1d: c3:b5:bb:96:f0:e1:d9:72:8d:e4:76:20:dc:8c:84: db:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:86:1F:39:E9:57:03:F2:82:F7:80:26:5B:4E:E0:A0:9D:6C:0C:D3 X509v3 Authority Key Identifier: keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/AYYfOelXA_KC94AmW07goJ1sDNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:2887:ff0c::/48 Signature Algorithm: sha256WithRSAEncryption be:10:a9:9a:06:21:16:06:92:5f:3a:50:d9:78:9c:ae:29:cb: ac:9f:69:80:18:59:31:13:1c:7b:2c:66:40:b4:17:68:1e:37: d7:ac:49:28:91:5a:ad:44:ca:77:be:0d:ee:43:b5:83:0c:a6: e6:bf:51:43:52:07:59:0f:45:01:10:4e:65:b6:90:95:c1:3a: 9b:ce:5a:df:ac:88:d4:55:90:a4:94:21:b6:1a:1e:2a:74:44: 70:04:ec:0e:92:8e:9b:d4:c6:74:62:1d:0f:43:72:bb:c7:60: dc:d0:26:d6:80:21:8a:88:48:5f:46:7c:cb:30:8f:f0:c1:2c: 0a:27:27:41:5f:a4:eb:f1:69:3c:bf:53:11:53:5a:5a:8f:79: 78:cc:e6:c1:9d:b0:99:2b:47:08:06:6b:27:4d:05:27:77:bf: a1:db:a6:04:53:7b:f5:ca:cd:49:83:bb:85:52:7d:d5:99:12: 85:61:e9:63:fc:0d:73:67:bd:f4:55:16:06:4b:a6:f1:82:b5: 30:b6:0b:f6:1f:3c:dd:88:d2:aa:68:44:5a:e7:3d:80:30:9d: 81:13:cd:e5:d9:7d:b1:b6:17:42:00:88:7e:e2:3c:66:4b:8c: 32:e8:c9:d4:79:76:de:e5:eb:40:0c:15:50:e1:83:85:ba:48: ca:4d:36:5a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XFQd6MGwqwboCd4u86saMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NWEwNjRmMzAxMDI2YmMzY2Y4NzY2NmQ2YTgyMDEyODIx MmE4MTEwHhcNMjYwMTAyMDYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTg2MWYzOWU5NTcwM2YyODJmNzgwMjY1YjRlZTBhMDlkNmMwY2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yos+HadP3jo97Zc7lBu2uLFLsRr hY4PRXAXQLEFNtJUHBI7ReLFgsHHO+fOibJK8LC1NwP/lnH0LwfxaZNBBCvG8eub V9DVyHZ7sqldRkyEXzgWK1DBtW2J8ow5qzTBQXhBeGKrmAdkO1P2N1LC0jEldMj7 MO0rAeuaQoZw6zBxmCdEVSND0DybJ/zqGO9f85E1Y1BGN6o2nlUC7GD30VIS7G0s QakuYb8yTuaANiktTOUMNnK7va9qUEvWY+PsvY5mbpli4RZb8kTgYrS+sYbY6XBf a2gulUWfXiUK81w467/HMoIMjtmIkrdjHh3DtbuW8OHZco3kdiDcjITb6wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAGGHznpVwPygveAJltO4KCdbAzTMB8GA1UdIwQY MBaAFDdaBk8wECa8PPh2ZtaoIBKCEqgRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFvR1R6QVFKcnc4LUhabTFxZ2dFb0lTcUJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kYzU4ODEtMzYzMi00NWFmLWJmNTkt ZjQ0YTU3Y2VkNzNkLzEvQVlZZk9lbFhBX0tDOTRBbVcwN2dvSjFzRE5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9kYzU4ODEtMzYzMi00NWFmLWJmNTktZjQ0YTU3Y2VkNzNk LzEvTjFvR1R6QVFKcnc4LUhabTFxZ2dFb0lTcUJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgMoh/8M MA0GCSqGSIb3DQEBCwUAA4IBAQC+EKmaBiEWBpJfOlDZeJyuKcusn2mAGFkxExx7 LGZAtBdoHjfXrEkokVqtRMp3vg3uQ7WDDKbmv1FDUgdZD0UBEE5ltpCVwTqbzlrf rIjUVZCklCG2Gh4qdERwBOwOko6b1MZ0Yh0PQ3K7x2Dc0CbWgCGKiEhfRnzLMI/w wSwKJydBX6Tr8Wk8v1MRU1paj3l4zObBnbCZK0cIBmsnTQUnd7+h26YEU3v1ys1J g7uFUn3VmRKFYelj/A1zZ730VRYGS6bxgrUwtgv2HzzdiNKqaERa5z2AMJ2BE83l 2X2xthdCAIh+4jxmS4wy6MnUeXbe5etADBVQ4YOFukjKTTZa -----END CERTIFICATE-----Generated at Wed Jan 21 13:18:01 2026 by rpki-client