This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/A0BdIUg-tIB8xYgoBPkgZQEJZFM.roa File: A0BdIUg-tIB8xYgoBPkgZQEJZFM.roa (raw, json) Hash identifier: vAFPQ7/zBwmd5lfN1DQPlwlOlVHsgUGVyWdvSmPAIkg= Subject key identifier: 03:40:5D:21:48:3E:B4:80:7C:C5:88:28:04:F9:20:65:01:09:64:53 Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Certificate serial: 019B7E37DCB046704DFE939A16CFEC7E76E7 Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/A0BdIUg-tIB8xYgoBPkgZQEJZFM.roa Signing time: Fri 02 Jan 2026 10:19:08 +0000 ROA not before: Fri 02 Jan 2026 10:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23506 IP address blocks: 2a14:6781:f156::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:dc:b0:46:70:4d:fe:93:9a:16:cf:ec:7e:76:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Validity Not Before: Jan 2 10:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03405d21483eb4807cc5882804f9206501096453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:48:53:3d:12:6c:38:31:43:e1:cf:db:ff:d9: 4f:e2:2d:dd:6a:08:7d:43:f5:6d:87:8b:4f:1a:a3: 38:9d:56:22:f4:ff:de:db:f0:5f:aa:e7:c4:1e:37: 71:da:0f:1f:a9:61:da:ac:0c:75:60:e7:bc:e6:82: a1:0c:a0:bc:36:90:53:df:73:33:85:73:ed:e1:39: 03:dc:cc:96:7a:b1:2e:88:e4:a8:69:34:4f:d3:8b: c5:6f:0b:fa:32:72:55:3f:5f:ae:81:5b:ce:35:10: 46:df:5a:74:e5:66:a9:d8:db:ba:e8:1b:14:91:1f: 03:93:b6:d1:27:9f:07:6b:b3:46:5a:2b:00:1c:3e: 0e:77:d8:50:80:a7:18:f4:a1:36:0a:f8:72:a2:b9: 55:bc:23:57:21:8d:b2:7c:9a:f5:0d:26:01:7a:3b: 3b:fe:de:91:cd:21:23:f9:f6:d5:09:ca:a0:44:2c: 13:50:b6:a5:0c:d2:9e:be:c2:52:5e:4e:08:88:f9: b8:b4:71:52:b9:3c:1c:a2:d3:24:41:fd:bc:8d:40: 9f:3d:5f:45:69:6f:bd:39:6c:43:44:db:9a:c1:14: 00:93:df:91:e2:79:71:db:44:94:ec:60:f9:af:08: 6b:05:7a:5a:9f:7d:cd:1a:77:78:68:01:81:81:f4: 34:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:40:5D:21:48:3E:B4:80:7C:C5:88:28:04:F9:20:65:01:09:64:53 X509v3 Authority Key Identifier: keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/A0BdIUg-tIB8xYgoBPkgZQEJZFM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:6781:f156::/48 Signature Algorithm: sha256WithRSAEncryption 4b:b3:49:37:50:8c:b5:89:63:c6:ed:bd:f4:59:54:fe:84:44: c9:ad:18:fd:fa:93:c6:f8:e6:02:b3:c6:6f:b6:0f:90:2d:0e: ca:f8:33:c6:3a:d5:85:96:dd:06:d5:bd:b4:0a:86:9d:43:6d: 0f:cd:36:6c:10:89:1e:5a:32:9c:7c:ac:bf:ba:33:0f:1d:5a: 86:eb:29:81:69:6c:6d:c6:d1:a6:e9:39:a1:be:93:b2:a9:ed: f4:29:e3:4b:20:67:39:54:6c:df:4a:1b:a9:44:39:06:70:94: b1:8e:a5:3a:db:59:58:0f:8b:c4:0e:42:6a:08:f6:ab:82:de: 82:91:b9:a0:59:1e:29:a7:ec:b3:f0:77:24:be:44:33:5b:d4: 03:c4:9a:12:5e:9b:8d:37:17:06:27:2e:57:b6:c8:43:d9:13: b4:24:dd:9f:e9:90:33:05:93:31:93:52:c4:d6:53:db:f9:6e: 90:73:02:e3:2e:64:4c:25:98:a9:87:b0:9b:37:9a:53:f1:69: 61:e4:c3:00:a1:0a:d4:dd:a7:4c:81:da:10:21:e5:00:57:0a: 17:5d:bf:ef:cf:c2:c8:4f:4a:d6:73:26:b6:03:1c:9c:33:46: b4:c0:44:c6:0d:f2:f3:e7:b0:aa:bb:81:2f:e2:b0:e0:72:6e: 87:d8:9a:73 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+N9ywRnBN/pOaFs/sfnbnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx YmM3N2YwHhcNMjYwMTAyMTAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzQwNWQyMTQ4M2ViNDgwN2NjNTg4MjgwNGY5MjA2NTAxMDk2NDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0hTPRJsODFD4c/b/9lP4i3dagh9 Q/Vth4tPGqM4nVYi9P/e2/BfqufEHjdx2g8fqWHarAx1YOe85oKhDKC8NpBT33Mz hXPt4TkD3MyWerEuiOSoaTRP04vFbwv6MnJVP1+ugVvONRBG31p05Wap2Nu66BsU kR8Dk7bRJ58Ha7NGWisAHD4Od9hQgKcY9KE2CvhyorlVvCNXIY2yfJr1DSYBejs7 /t6RzSEj+fbVCcqgRCwTULalDNKevsJSXk4IiPm4tHFSuTwcotMkQf28jUCfPV9F aW+9OWxDRNuawRQAk9+R4nlx20SU7GD5rwhrBXpan33NGnd4aAGBgfQ0dQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFANAXSFIPrSAfMWIKAT5IGUBCWRTMB8GA1UdIwQY MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt YWE2ZWQ0ZGFmYjNiLzEvQTBCZElVZy10SUI4eFlnb0JQa2daUUVKWkZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhRngfFW MA0GCSqGSIb3DQEBCwUAA4IBAQBLs0k3UIy1iWPG7b30WVT+hETJrRj9+pPG+OYC s8Zvtg+QLQ7K+DPGOtWFlt0G1b20CoadQ20PzTZsEIkeWjKcfKy/ujMPHVqG6ymB aWxtxtGm6TmhvpOyqe30KeNLIGc5VGzfShupRDkGcJSxjqU621lYD4vEDkJqCPar gt6CkbmgWR4pp+yz8HckvkQzW9QDxJoSXpuNNxcGJy5XtshD2RO0JN2f6ZAzBZMx k1LE1lPb+W6QcwLjLmRMJZiph7CbN5pT8Wlh5MMAoQrU3adMgdoQIeUAVwoXXb/v z8LIT0rWcya2AxycM0a0wETGDfLz57Cqu4Ev4rDgcm6H2Jpz -----END CERTIFICATE-----Generated at Wed Jan 21 11:09:05 2026 by rpki-client