This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/AefDuTJ4ZK8s2ox-WeMFdNh_-P8.roa File: AefDuTJ4ZK8s2ox-WeMFdNh_-P8.roa (raw, json) Hash identifier: mP9r5bHKqvTF04z/muFWJWKezK9dgv4QboSZ9CrEMjQ= Subject key identifier: 01:E7:C3:B9:32:78:64:AF:2C:DA:8C:7E:59:E3:05:74:D8:7F:F8:FF Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Certificate serial: 019B7F84CC3B260D87E561ED3FB3403AC124 Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/AefDuTJ4ZK8s2ox-WeMFdNh_-P8.roa Signing time: Fri 02 Jan 2026 16:22:48 +0000 ROA not before: Fri 02 Jan 2026 16:22:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204669 IP address blocks: 2a06:b441::/32 maxlen: 32 2a11:2f40::/29 maxlen: 29 2a11:7240::/29 maxlen: 29 2a11:f240::/29 maxlen: 29 2a12:6f40::/29 maxlen: 29 2a12:7740::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:cc:3b:26:0d:87:e5:61:ed:3f:b3:40:3a:c1:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Validity Not Before: Jan 2 16:22:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01e7c3b9327864af2cda8c7e59e30574d87ff8ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:61:f7:ed:e5:a0:e0:46:2d:76:80:4e:58:34: 81:9b:be:ab:05:7d:cd:e0:8d:b6:da:15:28:a9:b4: 02:73:6a:c2:bb:a4:7d:05:13:e5:31:34:17:d4:83: c3:fd:55:97:cf:66:cc:42:22:9a:5e:a5:30:69:4a: b6:55:16:39:2e:7c:27:52:81:c2:64:9b:74:7e:5d: 22:33:0d:ca:fe:13:96:e1:e4:0b:81:cf:9d:8f:df: f3:c8:9b:14:24:bb:6a:ad:85:ce:5e:14:fe:43:f7: 0d:d4:93:0a:78:a8:11:ef:6c:f4:67:77:40:d8:44: 2a:7d:5e:15:ed:17:5e:c1:ae:22:2c:35:61:ca:c4: f4:aa:46:3f:aa:f4:6a:a8:a2:6f:c8:ec:81:b4:f7: 95:e5:b2:ee:30:53:52:38:a3:3e:53:54:4d:03:e9: 07:c2:de:65:db:0e:82:bd:9d:30:b5:d5:ae:34:77: 30:ed:94:c5:86:c4:ad:b1:c6:b4:ee:2d:41:f8:38: 88:19:af:07:9d:b1:c5:c5:ed:46:56:bd:cf:35:11: 4d:32:13:77:8e:59:f3:10:dd:3b:98:93:52:12:80: 9c:0f:05:80:e0:ca:9d:15:c2:87:ea:56:28:3c:7f: 81:a7:af:20:fe:87:eb:d9:53:05:49:e1:26:83:e0: 17:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E7:C3:B9:32:78:64:AF:2C:DA:8C:7E:59:E3:05:74:D8:7F:F8:FF X509v3 Authority Key Identifier: keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/AefDuTJ4ZK8s2ox-WeMFdNh_-P8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:b441::/32 2a11:2f40::/29 2a11:7240::/29 2a11:f240::/29 2a12:6f40::/29 2a12:7740::/29 Signature Algorithm: sha256WithRSAEncryption c0:bf:d8:82:7e:de:97:c1:5d:4d:d4:57:ec:a3:f9:1b:d6:a9: 7b:21:42:b2:3f:25:d6:1f:b7:47:0f:84:e9:8c:e4:1d:3d:e9: 73:20:27:da:a1:40:28:10:ae:a7:a6:52:ce:a8:e1:3c:15:ce: 6b:7a:aa:30:d2:b5:79:a2:cf:7d:50:52:ce:dd:bb:5d:85:ed: d0:13:43:8a:70:8b:81:34:98:fd:d4:87:ea:58:93:b6:7f:7a: 36:cc:da:00:0d:1e:24:33:5d:06:c2:46:06:aa:41:7c:02:fd: 92:88:ef:9f:34:a8:65:a7:29:e8:f2:df:4d:9d:6a:bc:61:67: 39:b6:d7:02:53:88:f0:2b:20:95:e7:fe:e6:fd:65:e6:09:0e: 11:a7:5d:99:b4:a7:d2:2c:38:3e:04:c5:a8:02:6e:00:0d:41: df:bf:a7:69:08:a7:7d:a1:59:35:93:89:a5:e8:d4:19:24:d3: 15:87:33:d4:f1:c9:75:18:66:f1:3a:e6:57:6d:66:9f:0e:d9: e2:3e:2f:4e:1d:c3:8e:75:07:95:a9:8f:68:cd:ee:df:1a:c7: 2a:39:27:97:80:3c:12:d4:e8:a4:3d:bb:4f:4c:84:b4:47:85: 89:f8:a5:a0:97:bc:23:31:f3:19:69:2a:be:52:21:c4:a1:61: 62:5c:e1:05 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt/hMw7Jg2H5WHtP7NAOsEkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz Mjc2ZTMwHhcNMjYwMTAyMTYyMjQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWU3YzNiOTMyNzg2NGFmMmNkYThjN2U1OWUzMDU3NGQ4N2ZmOGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGH37eWg4EYtdoBOWDSBm76rBX3N 4I222hUoqbQCc2rCu6R9BRPlMTQX1IPD/VWXz2bMQiKaXqUwaUq2VRY5LnwnUoHC ZJt0fl0iMw3K/hOW4eQLgc+dj9/zyJsUJLtqrYXOXhT+Q/cN1JMKeKgR72z0Z3dA 2EQqfV4V7Rdewa4iLDVhysT0qkY/qvRqqKJvyOyBtPeV5bLuMFNSOKM+U1RNA+kH wt5l2w6CvZ0wtdWuNHcw7ZTFhsStsca07i1B+DiIGa8HnbHFxe1GVr3PNRFNMhN3 jlnzEN07mJNSEoCcDwWA4MqdFcKH6lYoPH+Bp68g/ofr2VMFSeEmg+AX9QIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFAHnw7kyeGSvLNqMflnjBXTYf/j/MB8GA1UdIwQY MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt YTJhNGM2YTYyMWNkLzEvQWVmRHVUSjRaSzhzMm94LVdlTUZkTmhfLVA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAAjAqAwUAKga0QQMF AyoRL0ADBQMqEXJAAwUDKhHyQAMFAyoSb0ADBQMqEndAMA0GCSqGSIb3DQEBCwUA A4IBAQDAv9iCft6XwV1N1Ffso/kb1ql7IUKyPyXWH7dHD4TpjOQdPelzICfaoUAo EK6nplLOqOE8Fc5reqow0rV5os99UFLO3btdhe3QE0OKcIuBNJj91IfqWJO2f3o2 zNoADR4kM10GwkYGqkF8Av2SiO+fNKhlpyno8t9NnWq8YWc5ttcCU4jwKyCV5/7m /WXmCQ4Rp12ZtKfSLDg+BMWoAm4ADUHfv6dpCKd9oVk1k4ml6NQZJNMVhzPU8cl1 GGbxOuZXbWafDtniPi9OHcOOdQeVqY9oze7fGscqOSeXgDwS1OikPbtPTIS0R4WJ +KWgl7wjMfMZaSq+UiHEoWFiXOEF -----END CERTIFICATE-----Generated at Mon Jan 26 23:21:04 2026 by rpki-client