This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/aQL-QgzBoFHwD6FPBMOxZizIfVI.roa File: aQL-QgzBoFHwD6FPBMOxZizIfVI.roa (raw, json) Hash identifier: sVeXUiCfsCZvClsm84u2EWIKU3Bpl8jTIXuMZA3WpDA= Subject key identifier: 69:02:FE:42:0C:C1:A0:51:F0:0F:A1:4F:04:C3:B1:66:2C:C8:7D:52 Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Certificate serial: 019B7F84D042C887A48FA17B4A6526391653 Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/aQL-QgzBoFHwD6FPBMOxZizIfVI.roa Signing time: Fri 02 Jan 2026 16:22:49 +0000 ROA not before: Fri 02 Jan 2026 16:22:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214477 IP address blocks: 2a12:6f40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d0:42:c8:87:a4:8f:a1:7b:4a:65:26:39:16:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Validity Not Before: Jan 2 16:22:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6902fe420cc1a051f00fa14f04c3b1662cc87d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:3e:3c:23:13:27:15:b3:7d:87:8d:1c:42:01: 6b:a8:df:7e:02:aa:61:55:d7:a9:d3:1b:30:60:46: 39:ed:ff:6a:02:33:f2:60:35:1c:2c:c7:15:b6:fa: 67:d0:62:95:90:51:74:e9:8d:9d:10:52:71:0e:30: 7d:52:ae:29:43:79:ef:c8:94:2e:4d:66:c3:9d:ff: 63:e7:5a:c9:65:24:50:0f:44:70:ed:a9:23:5c:39: ce:7e:b2:e4:76:17:57:99:fc:64:8d:bd:46:1c:d0: 18:72:d5:03:48:30:62:e7:a5:41:c8:c2:8e:ff:d4: a8:d8:9e:07:9a:0a:cf:8d:13:e8:9b:80:4c:50:18: 5f:78:0a:68:9d:fc:a2:cb:bf:f6:f2:7e:c2:b7:54: f3:d9:1d:cd:2d:22:f3:db:90:05:f8:c8:c1:28:3a: 90:f3:7c:bc:f1:55:97:f2:d2:ae:40:d0:f2:0b:d2: 8b:57:2f:48:d7:66:f9:ab:75:5f:5e:e6:30:8e:5b: 0e:d9:8c:f4:58:de:b5:99:e0:d4:9d:71:55:df:a4: 30:90:99:70:9e:6e:3c:a5:2b:87:25:6f:cf:ce:36: 9e:15:ce:9e:f4:62:59:a9:62:14:8c:f7:9a:f8:a0: 16:ee:72:c8:49:f2:e4:b5:20:82:bb:59:ab:4c:bf: 4a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:02:FE:42:0C:C1:A0:51:F0:0F:A1:4F:04:C3:B1:66:2C:C8:7D:52 X509v3 Authority Key Identifier: keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/aQL-QgzBoFHwD6FPBMOxZizIfVI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:6f40::/29 Signature Algorithm: sha256WithRSAEncryption 5f:b2:28:14:4e:08:ba:3b:aa:79:fb:26:a2:95:3b:03:5c:bb: 0e:68:d4:0b:38:16:06:4f:ff:16:ee:67:da:8e:1f:be:51:d5: 03:a7:e0:c1:5c:c8:be:2f:65:97:a0:96:c7:c0:f8:3e:f0:73: 78:43:e2:94:44:88:df:1b:f6:44:bf:89:25:4d:49:36:db:14: f8:dc:d8:12:a2:26:c6:e4:53:89:9c:c2:07:f0:b2:ac:a4:36: 55:19:cc:9d:93:7e:48:01:0f:0a:60:d7:99:cf:9a:f7:15:2c: 2c:67:27:24:93:90:52:3d:6e:f1:c0:1d:a5:6c:17:51:8b:ad: 4e:c1:bf:64:c1:10:07:b6:34:85:34:d5:e6:3f:de:5d:3b:ce: 56:5c:d3:d6:84:f0:ed:6a:26:cc:35:88:4a:d6:b1:8c:88:31: 7f:f9:e0:f5:de:be:59:16:c8:db:63:e7:9a:1b:8e:df:bf:86: 58:1e:31:40:cb:19:ef:65:87:ff:82:9d:99:23:f0:5b:86:2d: 53:03:89:7a:0b:ab:42:25:76:db:3e:cd:51:df:71:ba:7f:c3: 25:05:e2:43:3e:11:8e:26:28:f1:64:cb:9b:3e:e0:c3:26:95: cc:83:62:47:2d:94:8b:97:fe:2c:67:ca:0d:59:50:37:c3:5a: 2b:ba:35:56 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/hNBCyIekj6F7SmUmORZTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz Mjc2ZTMwHhcNMjYwMTAyMTYyMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTAyZmU0MjBjYzFhMDUxZjAwZmExNGYwNGMzYjE2NjJjYzg3ZDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8T48IxMnFbN9h40cQgFrqN9+Aqph Vdep0xswYEY57f9qAjPyYDUcLMcVtvpn0GKVkFF06Y2dEFJxDjB9Uq4pQ3nvyJQu TWbDnf9j51rJZSRQD0Rw7akjXDnOfrLkdhdXmfxkjb1GHNAYctUDSDBi56VByMKO /9So2J4HmgrPjRPom4BMUBhfeAponfyiy7/28n7Ct1Tz2R3NLSLz25AF+MjBKDqQ 83y88VWX8tKuQNDyC9KLVy9I12b5q3VfXuYwjlsO2Yz0WN61meDUnXFV36QwkJlw nm48pSuHJW/PzjaeFc6e9GJZqWIUjPea+KAW7nLISfLktSCCu1mrTL9KPwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFGkC/kIMwaBR8A+hTwTDsWYsyH1SMB8GA1UdIwQY MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt YTJhNGM2YTYyMWNkLzEvYVFMLVFnekJvRkh3RDZGUEJNT3haaXpJZlZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhJvQDAN BgkqhkiG9w0BAQsFAAOCAQEAX7IoFE4IujuqefsmopU7A1y7DmjUCzgWBk//Fu5n 2o4fvlHVA6fgwVzIvi9ll6CWx8D4PvBzeEPilESI3xv2RL+JJU1JNtsU+NzYEqIm xuRTiZzCB/CyrKQ2VRnMnZN+SAEPCmDXmc+a9xUsLGcnJJOQUj1u8cAdpWwXUYut TsG/ZMEQB7Y0hTTV5j/eXTvOVlzT1oTw7WomzDWIStaxjIgxf/ng9d6+WRbI22Pn mhuO37+GWB4xQMsZ72WH/4KdmSPwW4YtUwOJegurQiV22z7NUd9xun/DJQXiQz4R jiYo8WTLmz7gwyaVzINiRy2Ui5f+LGfKDVlQN8NaK7o1Vg== -----END CERTIFICATE-----Generated at Tue Jan 27 01:14:23 2026 by rpki-client