This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aEtzU78Hv1rlj-QwTEfoD8KKcUI.roa File: aEtzU78Hv1rlj-QwTEfoD8KKcUI.roa (raw, json) Hash identifier: 9Qe37IvnqUdA1Zd6d5eygzdGqYjOCAlc3QrDYCeA2gA= Subject key identifier: 68:4B:73:53:BF:07:BF:5A:E5:8F:E4:30:4C:47:E8:0F:C2:8A:71:42 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019BFBF9D107343CF2F1DE8B37C4E1FFDF6C Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aEtzU78Hv1rlj-QwTEfoD8KKcUI.roa Signing time: Mon 26 Jan 2026 20:23:31 +0000 ROA not before: Mon 26 Jan 2026 20:23:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201950 IP address blocks: 2a0e:97c0:aa7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:f9:d1:07:34:3c:f2:f1:de:8b:37:c4:e1:ff:df:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 26 20:23:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=684b7353bf07bf5ae58fe4304c47e80fc28a7142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cc:c1:93:3c:cb:a8:70:71:20:5e:06:55:2f: 89:48:05:1c:35:c3:13:90:5d:3d:8c:df:28:66:cd: b4:35:46:35:d4:d2:b1:a6:d3:21:60:9e:6e:9e:b8: 5f:07:c3:21:90:ec:33:d9:da:86:aa:a4:6d:d6:bf: e8:19:41:aa:f5:09:2f:e6:37:6b:78:c5:0d:4f:a7: 33:73:f5:c9:95:e8:72:38:ff:c1:41:37:6c:aa:6a: 18:17:cc:76:87:eb:e2:a0:06:cd:e3:5e:cf:81:1b: 1c:57:31:4b:2c:72:59:62:a3:29:be:41:a0:a9:66: ab:da:bd:33:0f:83:1a:f6:3f:48:12:1a:6f:ec:89: b7:87:ea:43:77:46:7b:df:87:01:ed:f5:4b:51:83: 4b:c3:77:5e:9a:4e:31:3c:d4:ad:88:29:d3:af:ae: f2:f8:3f:3d:e7:b3:34:30:f6:a4:26:fe:b5:7b:f5: b4:38:40:c7:6d:85:68:89:e7:c5:74:ea:9a:8b:91: 07:6f:c7:26:ff:71:e5:2a:f9:e2:2c:76:03:c8:79: ee:09:12:55:3f:56:c6:ed:52:23:a5:dd:6b:8d:c0: 8a:67:7c:a9:5e:27:8e:90:1b:47:d2:55:cf:5e:de: d5:b5:de:9d:4f:d0:ee:9c:8c:a6:18:33:e9:a8:45: cc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4B:73:53:BF:07:BF:5A:E5:8F:E4:30:4C:47:E8:0F:C2:8A:71:42 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aEtzU78Hv1rlj-QwTEfoD8KKcUI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:aa7::/48 Signature Algorithm: sha256WithRSAEncryption 6c:8f:10:6d:bf:88:10:bd:59:1c:36:6c:50:1a:f9:4a:38:5f: e5:29:ff:b6:3a:b0:31:45:ec:2c:61:f3:b9:88:2a:26:55:d0: 0b:e7:22:5b:21:bf:c8:4d:48:63:90:b8:96:a5:c8:b3:34:15: 5b:2b:f1:4e:2c:78:00:27:76:15:e7:ff:b2:9b:1e:03:d7:ff: 3f:3c:08:c9:4c:3d:77:46:ac:c1:3a:37:82:e6:c2:48:75:5c: a0:71:53:bf:ed:c6:b1:c1:e7:78:1a:da:05:93:f3:12:13:8c: c3:46:b6:21:72:c5:7e:6a:c0:ad:1f:db:0c:f0:e7:81:0f:2c: b5:c6:f1:91:22:0d:f3:0e:60:74:42:9d:08:8b:c2:c0:67:c1: ce:31:ee:eb:a5:8c:d6:67:91:2f:5d:e0:e3:c1:74:2c:54:0b: c1:23:13:46:cc:51:d1:cd:7e:b9:34:d5:09:80:f9:d8:b4:2f: 96:ad:f0:79:82:72:b3:1f:10:d8:20:7a:10:de:8e:1a:5f:49: da:14:c2:9d:73:f0:68:17:eb:b6:07:61:8d:81:ad:9c:c2:0a: 94:ad:cb:7d:a8:af:36:00:e6:14:5e:b9:f2:a5:e8:34:9c:63: dd:5b:ad:8d:b3:68:b4:60:1d:da:ea:c6:37:d3:43:d9:0c:5c: d9:db:6e:71 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZv7+dEHNDzy8d6LN8Th/99sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTI2MjAyMzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODRiNzM1M2JmMDdiZjVhZTU4ZmU0MzA0YzQ3ZTgwZmMyOGE3MTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMzBkzzLqHBxIF4GVS+JSAUcNcMT kF09jN8oZs20NUY11NKxptMhYJ5unrhfB8MhkOwz2dqGqqRt1r/oGUGq9Qkv5jdr eMUNT6czc/XJlehyOP/BQTdsqmoYF8x2h+vioAbN417PgRscVzFLLHJZYqMpvkGg qWar2r0zD4Ma9j9IEhpv7Im3h+pDd0Z734cB7fVLUYNLw3demk4xPNStiCnTr67y +D8957M0MPakJv61e/W0OEDHbYVoiefFdOqai5EHb8cm/3HlKvniLHYDyHnuCRJV P1bG7VIjpd1rjcCKZ3ypXieOkBtH0lXPXt7Vtd6dT9DunIymGDPpqEXMfQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGhLc1O/B79a5Y/kMExH6A/CinFCMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvYUV0elU3OEh2MXJsai1Rd1RFZm9EOEtLY1VJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6XwAqn MA0GCSqGSIb3DQEBCwUAA4IBAQBsjxBtv4gQvVkcNmxQGvlKOF/lKf+2OrAxRews YfO5iComVdAL5yJbIb/ITUhjkLiWpcizNBVbK/FOLHgAJ3YV5/+ymx4D1/8/PAjJ TD13RqzBOjeC5sJIdVygcVO/7caxwed4GtoFk/MSE4zDRrYhcsV+asCtH9sM8OeB Dyy1xvGRIg3zDmB0Qp0Ii8LAZ8HOMe7rpYzWZ5EvXeDjwXQsVAvBIxNGzFHRzX65 NNUJgPnYtC+WrfB5gnKzHxDYIHoQ3o4aX0naFMKdc/BoF+u2B2GNga2cwgqUrct9 qK82AOYUXrnypeg0nGPdW62Ns2i0YB3a6sY300PZDFzZ225x -----END CERTIFICATE-----Generated at Tue Jan 27 07:18:26 2026 by rpki-client