This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/aQCGqbkR7pZwAY5aB2nDuU5di8E.roa File: aQCGqbkR7pZwAY5aB2nDuU5di8E.roa (raw, json) Hash identifier: 6xFhZTjV0UNGd+XOChz+C1HRl/SOHjV9aweW1aP17pY= Subject key identifier: 69:00:86:A9:B9:11:EE:96:70:01:8E:5A:07:69:C3:B9:4E:5D:8B:C1 Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2 Certificate serial: 019B7C7F4CB19B1CE4152F017F50B45914DE Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/aQCGqbkR7pZwAY5aB2nDuU5di8E.roa Signing time: Fri 02 Jan 2026 02:17:56 +0000 ROA not before: Fri 02 Jan 2026 02:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8422 IP address blocks: 2a00:a200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:4c:b1:9b:1c:e4:15:2f:01:7f:50:b4:59:14:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2 Validity Not Before: Jan 2 02:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=690086a9b911ee9670018e5a0769c3b94e5d8bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a7:26:67:a4:57:d1:0c:51:75:0d:b8:41:fc: 0f:0d:bf:0a:85:e9:04:2c:c0:bd:46:29:e6:27:ec: f6:94:40:34:14:10:e8:01:5a:31:12:87:4a:6f:7f: 88:47:2d:7d:41:77:dd:a3:ce:04:c2:63:e7:ff:55: 7e:63:6b:9f:07:52:ba:5a:46:5a:47:47:97:c5:a4: 2c:61:42:82:1b:8a:75:9d:ed:cc:fa:87:df:04:2a: 7a:fd:00:54:2b:21:41:65:58:55:2b:42:01:3c:59: 5a:bb:97:3d:37:90:65:fe:fa:90:a6:5c:c0:34:2e: af:72:7b:67:89:c1:2b:db:a6:23:18:4a:dc:9c:8d: 6e:89:04:f2:2e:36:95:d7:31:a0:53:7c:b0:ce:26: b5:fb:7d:2a:18:11:69:b9:2a:f8:67:02:fb:74:17: 89:d3:d6:a8:24:c3:b3:ce:a1:43:33:a4:15:bd:c2: ec:c4:3b:2f:ab:b4:be:44:cc:0d:b4:bf:13:94:0e: 2e:43:4a:77:35:9b:00:23:0d:d7:93:81:ff:6c:92: d6:45:3c:d4:7f:62:7d:f7:1e:26:24:9e:00:d0:c1: 3e:bb:73:c3:fa:69:19:6c:a7:30:ac:29:1c:7e:f5: 16:b6:fb:68:80:aa:65:4a:48:e5:1f:ca:88:04:ac: c6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:00:86:A9:B9:11:EE:96:70:01:8E:5A:07:69:C3:B9:4E:5D:8B:C1 X509v3 Authority Key Identifier: keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/aQCGqbkR7pZwAY5aB2nDuU5di8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:a200::/32 Signature Algorithm: sha256WithRSAEncryption 39:97:db:b0:6f:be:0e:fb:b3:b2:57:ca:7a:3a:62:5c:77:c3: 6e:c9:6f:d9:a5:c9:fd:de:40:01:2e:de:cf:47:b3:79:f9:1c: 66:e8:18:ec:6f:fe:e5:23:c1:19:6a:fa:d6:f3:a3:e0:b4:5a: 1b:e4:4f:f6:e4:0b:a8:fd:dd:ef:c1:93:c9:c7:3f:37:b6:8e: b2:29:03:4b:9a:a9:a6:5a:b3:45:f2:b1:6a:0f:2e:40:fd:62: 83:0e:4c:aa:32:98:98:d3:f9:4f:dd:a2:34:d5:5a:f2:7a:63: d1:71:56:84:7a:fd:9d:58:29:8e:6f:3b:09:8b:2f:9c:5c:f0: ac:27:8a:98:10:1d:ed:a2:53:f2:39:67:1b:03:fb:80:0f:92: 68:f6:30:d6:d2:10:bb:86:66:42:90:e9:b0:86:cf:c8:44:fd: ed:d8:5b:5c:85:45:e6:d1:f5:9c:e0:cd:1e:bc:52:64:ae:23: 39:2a:60:75:18:13:43:9c:5e:fe:db:a6:34:09:43:2f:a0:e4: bb:a6:16:7e:20:64:c5:43:5a:86:26:01:98:4f:53:e4:b9:49: 95:3b:4f:5b:1a:fc:c1:0f:4e:f1:86:d4:ab:92:20:41:9a:dd: a4:40:cc:1d:22:66:6d:f0:70:13:74:9e:a6:86:41:e9:43:10: 49:0a:a2:95 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8f0yxmxzkFS8Bf1C0WRTeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNTc2MTkxM2Y1NzVjNDExYzk5MjMyMmViYjA2Y2QyZjM3 ZjAyYTIwHhcNMjYwMTAyMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTAwODZhOWI5MTFlZTk2NzAwMThlNWEwNzY5YzNiOTRlNWQ4YmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6cmZ6RX0QxRdQ24QfwPDb8KhekE LMC9RinmJ+z2lEA0FBDoAVoxEodKb3+IRy19QXfdo84EwmPn/1V+Y2ufB1K6WkZa R0eXxaQsYUKCG4p1ne3M+offBCp6/QBUKyFBZVhVK0IBPFlau5c9N5Bl/vqQplzA NC6vcntnicEr26YjGErcnI1uiQTyLjaV1zGgU3ywzia1+30qGBFpuSr4ZwL7dBeJ 09aoJMOzzqFDM6QVvcLsxDsvq7S+RMwNtL8TlA4uQ0p3NZsAIw3Xk4H/bJLWRTzU f2J99x4mJJ4A0ME+u3PD+mkZbKcwrCkcfvUWtvtogKplSkjlH8qIBKzGJQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFGkAhqm5Ee6WcAGOWgdpw7lOXYvBMB8GA1UdIwQY MBaAFFNXYZE/V1xBHJkjIuuwbNLzfwKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTFkaGtUOVhYRUVjbVNNaTY3QnMwdk5fQXFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS85ZjAwYTktYjYwZi00ZTMyLTkwMzct MDRkZmMzNjYzZTM1LzEvYVFDR3Fia1I3cFp3QVk1YUIybkR1VTVkaThFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS85ZjAwYTktYjYwZi00ZTMyLTkwMzctMDRkZmMzNjYzZTM1 LzEvVTFkaGtUOVhYRUVjbVNNaTY3QnMwdk5fQXFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgCiADAN BgkqhkiG9w0BAQsFAAOCAQEAOZfbsG++DvuzslfKejpiXHfDbslv2aXJ/d5AAS7e z0ezefkcZugY7G/+5SPBGWr61vOj4LRaG+RP9uQLqP3d78GTycc/N7aOsikDS5qp plqzRfKxag8uQP1igw5MqjKYmNP5T92iNNVa8npj0XFWhHr9nVgpjm87CYsvnFzw rCeKmBAd7aJT8jlnGwP7gA+SaPYw1tIQu4ZmQpDpsIbPyET97dhbXIVF5tH1nODN HrxSZK4jOSpgdRgTQ5xe/tumNAlDL6Dku6YWfiBkxUNahiYBmE9T5LlJlTtPWxr8 wQ9O8YbUq5IgQZrdpEDMHSJmbfBwE3SepoZB6UMQSQqilQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:33 2026 by rpki-client