This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/ATMhPpa483CrpmIs3jmKf4Lfb9Q.roa File: ATMhPpa483CrpmIs3jmKf4Lfb9Q.roa (raw, json) Hash identifier: A86PQ/iyszG+BWtmyVBkR/FpnfeQe0gn6PRItvHkIl4= Subject key identifier: 01:33:21:3E:96:B8:F3:70:AB:A6:62:2C:DE:39:8A:7F:82:DF:6F:D4 Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019B7E38BCDF5816B964304CB37AA5DDF3CA Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/ATMhPpa483CrpmIs3jmKf4Lfb9Q.roa Signing time: Fri 02 Jan 2026 10:20:06 +0000 ROA not before: Fri 02 Jan 2026 10:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214050 IP address blocks: 2a13:a5c7:2400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:bc:df:58:16:b9:64:30:4c:b3:7a:a5:dd:f3:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 2 10:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0133213e96b8f370aba6622cde398a7f82df6fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1e:1b:d3:e8:5f:c5:db:77:6a:8b:51:51:1c: 01:52:d8:06:be:17:2c:13:df:54:53:5e:69:50:c8: bd:f9:0b:0a:17:b5:de:cb:80:76:7f:71:47:90:a2: 30:df:62:07:a1:a8:de:c0:3b:7b:d9:10:69:e5:5c: 35:3f:7b:9f:6f:9a:2d:6c:55:31:63:36:28:7e:1c: 7d:51:10:77:03:47:d8:11:e3:87:88:cf:6d:f0:4f: 78:88:ac:95:fc:86:14:9b:cb:d6:66:9c:a8:8f:74: 1b:f3:05:83:74:ce:49:3e:4e:81:23:88:a0:ce:5e: 07:97:1f:a2:db:a6:1c:db:c2:4b:1b:82:af:e5:be: c5:2e:b9:ff:1d:ef:77:a9:34:4d:15:1f:48:e3:d0: f7:3c:47:a2:23:d4:b3:14:22:cd:35:3f:a2:40:ae: a7:3a:79:dc:bd:39:15:5c:6a:ce:3b:3c:be:36:fd: a8:01:68:3e:f8:9f:2b:30:6f:0e:92:1e:19:5b:a1: 79:10:84:cb:57:ff:21:b9:fd:25:83:4e:d5:8d:85: f4:2e:f9:2b:85:e8:3d:81:2d:dd:5d:5b:b8:25:1d: d0:91:3f:7c:c3:34:f7:62:99:a0:e6:34:58:8b:a8: 13:f3:9d:4c:9c:82:ad:41:2f:98:7e:bb:a6:37:be: 4e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:33:21:3E:96:B8:F3:70:AB:A6:62:2C:DE:39:8A:7F:82:DF:6F:D4 X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/ATMhPpa483CrpmIs3jmKf4Lfb9Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a5c7:2400::/40 Signature Algorithm: sha256WithRSAEncryption 6a:55:33:8e:2e:dc:9b:ff:8b:a7:b7:09:26:9a:2e:43:2f:6f: 5a:e3:6a:87:dc:4d:83:9f:21:7e:59:0e:bb:1b:fa:2f:d6:c8: 0d:2b:03:c5:e8:a4:ba:79:d9:04:c4:f0:29:13:f3:7c:d3:64: bd:f2:44:1d:70:26:0b:a7:7f:7d:18:29:4f:9d:38:47:83:6b: 1a:13:2c:50:78:f0:8e:8c:57:53:c7:9f:ef:52:50:f7:0f:5e: 23:a1:5a:a6:af:e4:9e:9a:53:d9:4d:ac:c1:8b:64:0a:46:47: 79:ea:e1:b2:04:27:3e:e0:12:a7:3a:0f:97:fa:1c:66:9f:ce: 90:c8:4a:9c:88:3c:d8:a3:15:cb:b3:c4:39:e7:ca:e0:2f:54: 98:3c:d2:c4:de:74:de:d5:e8:26:69:a9:7b:fb:05:4e:ef:91: 35:09:c2:8c:87:ae:0c:3a:31:40:09:1b:7f:02:5c:cb:86:87: 59:84:5b:54:05:4a:af:eb:16:a7:60:9f:8c:97:40:5e:6b:4f: 0f:5c:da:b8:ef:50:93:aa:3f:5a:1f:f1:68:68:96:89:3a:02: 3f:00:47:ab:56:e2:b8:25:5d:fd:a8:03:b1:05:b8:9c:4e:cd: a1:3d:29:f6:40:cb:94:e2:8b:7b:58:d3:12:9f:25:72:6a:86: ba:85:b7:61 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OLzfWBa5ZDBMs3ql3fPKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTAyMTAyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTMzMjEzZTk2YjhmMzcwYWJhNjYyMmNkZTM5OGE3ZjgyZGY2ZmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzh4b0+hfxdt3aotRURwBUtgGvhcs E99UU15pUMi9+QsKF7Xey4B2f3FHkKIw32IHoajewDt72RBp5Vw1P3ufb5otbFUx YzYofhx9URB3A0fYEeOHiM9t8E94iKyV/IYUm8vWZpyoj3Qb8wWDdM5JPk6BI4ig zl4Hlx+i26Yc28JLG4Kv5b7FLrn/He93qTRNFR9I49D3PEeiI9SzFCLNNT+iQK6n OnncvTkVXGrOOzy+Nv2oAWg++J8rMG8Okh4ZW6F5EITLV/8huf0lg07VjYX0Lvkr heg9gS3dXVu4JR3QkT98wzT3Ypmg5jRYi6gT851MnIKtQS+YfrumN75OiwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFAEzIT6WuPNwq6ZiLN45in+C32/UMB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvQVRNaFBwYTQ4M0NycG1JczNqbUtmNExmYjlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhOlxyQw DQYJKoZIhvcNAQELBQADggEBAGpVM44u3Jv/i6e3CSaaLkMvb1rjaofcTYOfIX5Z Drsb+i/WyA0rA8XopLp52QTE8CkT83zTZL3yRB1wJgunf30YKU+dOEeDaxoTLFB4 8I6MV1PHn+9SUPcPXiOhWqav5J6aU9lNrMGLZApGR3nq4bIEJz7gEqc6D5f6HGaf zpDISpyIPNijFcuzxDnnyuAvVJg80sTedN7V6CZpqXv7BU7vkTUJwoyHrgw6MUAJ G38CXMuGh1mEW1QFSq/rFqdgn4yXQF5rTw9c2rjvUJOqP1of8Wholok6Aj8AR6tW 4rglXf2oA7EFuJxOzaE9KfZAy5Tii3tY0xKfJXJqhrqFt2E= -----END CERTIFICATE-----Generated at Mon Jan 5 03:47:28 2026 by rpki-client