This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/AWOByOdLz-pDy9BT7H091K60qsk.roa File: AWOByOdLz-pDy9BT7H091K60qsk.roa (raw, json) Hash identifier: O+97VBEDvL8gvGoSX/7wNxbWE7fg1IsWzOjltD6ZxKM= Subject key identifier: 01:63:81:C8:E7:4B:CF:EA:43:CB:D0:53:EC:7D:3D:D4:AE:B4:AA:C9 Certificate issuer: /CN=47b80caa97c13147d680c80976f8a4b15cade04f Certificate serial: 019B7C120467F852E5A9197617597610E4FE Authority key identifier: 47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/AWOByOdLz-pDy9BT7H091K60qsk.roa Signing time: Fri 02 Jan 2026 00:18:34 +0000 ROA not before: Fri 02 Jan 2026 00:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44547 IP address blocks: 2a07:5dc0::/29 maxlen: 29 2a0c:f500::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.crl rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:04:67:f8:52:e5:a9:19:76:17:59:76:10:e4:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47b80caa97c13147d680c80976f8a4b15cade04f Validity Not Before: Jan 2 00:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=016381c8e74bcfea43cbd053ec7d3dd4aeb4aac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f6:de:b4:2f:5f:cb:8a:6c:4c:4f:59:c1:59: 7d:76:8f:d7:b8:f9:7a:3e:ed:8c:f0:65:5d:98:5d: 78:9e:df:fc:20:95:90:14:e6:f9:3f:e1:f8:98:a6: 29:9b:1a:92:dc:53:3d:a6:ea:46:a3:6e:1d:59:80: a8:fd:07:20:32:fe:df:25:20:31:5a:60:16:67:33: c3:93:ce:0b:d0:26:ad:e4:55:4e:17:68:7e:c4:f1: 58:4c:78:53:9a:0b:26:42:7f:2a:92:3e:dd:8e:a0: 45:f8:98:31:f6:39:02:6e:59:4d:a8:e0:9f:d3:f7: f1:26:b6:c0:58:b2:b5:c7:f7:49:8b:4e:6e:81:fd: 9e:4f:ee:fe:15:66:85:e8:f6:02:8b:94:3e:fd:8e: 72:c2:70:4c:de:8e:ca:96:1d:4b:88:93:16:85:eb: d4:00:ad:c0:c1:f5:0e:f9:4e:69:eb:db:80:f0:d1: 9f:79:9e:9c:9b:6e:49:ff:a4:a6:f0:d2:5d:56:a5: 9d:b6:82:da:6c:b4:ef:b8:a4:9b:42:31:be:e8:84: 19:0b:0c:c2:e4:f9:3f:0a:50:cb:43:a4:a2:82:7c: 0f:7b:83:88:93:3a:18:73:fb:61:99:40:d5:a8:20: 23:14:aa:73:84:d8:d2:87:41:d4:c9:46:68:f5:38: 04:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:63:81:C8:E7:4B:CF:EA:43:CB:D0:53:EC:7D:3D:D4:AE:B4:AA:C9 X509v3 Authority Key Identifier: keyid:47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/AWOByOdLz-pDy9BT7H091K60qsk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:5dc0::/29 2a0c:f500::/29 Signature Algorithm: sha256WithRSAEncryption 1d:9a:0c:9b:35:5c:9c:9d:84:00:cc:c2:89:f1:6e:7f:44:86: 49:94:c9:ae:5d:b8:a3:2b:54:9c:0f:db:5f:2b:67:51:cb:d2: 0e:b6:68:e7:fe:84:c4:62:c8:42:ba:d4:74:30:f9:8a:df:8f: 0c:4f:cc:52:8c:77:36:06:a2:a8:67:b0:14:fa:e5:fb:f2:a1: 7e:b0:37:f7:a2:14:4f:16:12:e3:54:59:d7:1c:9a:80:68:f0: 2a:a9:31:3f:ea:c0:85:bc:09:d5:3e:92:77:14:b0:8e:25:09: 16:d6:1b:1e:f9:81:f9:10:1a:a0:2c:c5:6a:ec:e5:9e:8e:c0: 30:37:c4:c4:b4:df:6e:02:8c:60:33:2a:f7:ae:08:34:80:8a: 7b:73:6f:8f:13:32:3e:82:27:88:1f:db:93:66:8f:86:ca:de: cd:f6:3e:f1:b3:20:23:03:c6:6d:a6:7f:a0:58:ef:d6:c7:e9: 3a:f4:2c:05:36:0e:a3:91:44:38:f3:ed:b9:3b:df:93:ed:c4: 61:0d:ce:ff:cb:43:fa:64:63:41:0e:39:9f:28:f8:0f:bf:f6: 12:cf:63:8d:44:6d:e9:a6:67:fd:63:03:ab:39:4e:98:46:7a: 24:dd:06:f6:12:0d:9a:d5:e3:eb:cf:27:67:0d:a1:94:c6:76: 2c:df:88:f4 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8EgRn+FLlqRl2F1l2EOT+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3YjgwY2FhOTdjMTMxNDdkNjgwYzgwOTc2ZjhhNGIxNWNh ZGUwNGYwHhcNMjYwMTAyMDAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTYzODFjOGU3NGJjZmVhNDNjYmQwNTNlYzdkM2RkNGFlYjRhYWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvbetC9fy4psTE9ZwVl9do/XuPl6 Pu2M8GVdmF14nt/8IJWQFOb5P+H4mKYpmxqS3FM9pupGo24dWYCo/QcgMv7fJSAx WmAWZzPDk84L0Cat5FVOF2h+xPFYTHhTmgsmQn8qkj7djqBF+Jgx9jkCbllNqOCf 0/fxJrbAWLK1x/dJi05ugf2eT+7+FWaF6PYCi5Q+/Y5ywnBM3o7Klh1LiJMWhevU AK3AwfUO+U5p69uA8NGfeZ6cm25J/6Sm8NJdVqWdtoLabLTvuKSbQjG+6IQZCwzC 5Pk/ClDLQ6SignwPe4OIkzoYc/thmUDVqCAjFKpzhNjSh0HUyUZo9TgE8wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFAFjgcjnS8/qQ8vQU+x9PdSutKrJMB8GA1UdIwQY MBaAFEe4DKqXwTFH1oDICXb4pLFcreBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjdnTXFwZkJNVWZXZ01nSmR2aWtzVnl0NEU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9hNTlmYzUtMjA0OS00MmRlLWIxYjAt MTBlMjRlOWQwZmE3LzEvQVdPQnlPZEx6LXBEeTlCVDdIMDkxSzYwcXNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9hNTlmYzUtMjA0OS00MmRlLWIxYjAtMTBlMjRlOWQwZmE3 LzEvUjdnTXFwZkJNVWZXZ01nSmR2aWtzVnl0NEU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKgddwAMF AyoM9QAwDQYJKoZIhvcNAQELBQADggEBAB2aDJs1XJydhADMwonxbn9EhkmUya5d uKMrVJwP218rZ1HL0g62aOf+hMRiyEK61HQw+YrfjwxPzFKMdzYGoqhnsBT65fvy oX6wN/eiFE8WEuNUWdccmoBo8CqpMT/qwIW8CdU+kncUsI4lCRbWGx75gfkQGqAs xWrs5Z6OwDA3xMS0324CjGAzKveuCDSAintzb48TMj6CJ4gf25Nmj4bK3s32PvGz ICMDxm2mf6BY79bH6Tr0LAU2DqORRDjz7bk735PtxGENzv/LQ/pkY0EOOZ8o+A+/ 9hLPY41EbemmZ/1jA6s5TphGeiTdBvYSDZrV4+vPJ2cNoZTGdizfiPQ= -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:10 2026 by rpki-client