This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ADLUorAePDEH1hKJJZug19PIuhA.roa File: ADLUorAePDEH1hKJJZug19PIuhA.roa (raw, json) Hash identifier: /ZtfIj7LQbYJzMKnyqkO2pkBNcTRVPILBsSJ2hlrLWs= Subject key identifier: 00:32:D4:A2:B0:1E:3C:31:07:D6:12:89:25:9B:A0:D7:D3:C8:BA:10 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EBBA49C58A4CBA300C775A68524E8 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ADLUorAePDEH1hKJJZug19PIuhA.roa Signing time: Thu 01 Jan 2026 12:18:27 +0000 ROA not before: Thu 01 Jan 2026 12:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213891 IP address blocks: 2a0e:aa07:e150::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:bb:a4:9c:58:a4:cb:a3:00:c7:75:a6:85:24:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0032d4a2b01e3c3107d61289259ba0d7d3c8ba10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5a:d5:7c:01:6e:d4:49:e3:02:62:b3:84:5d: dc:26:bc:e3:28:c6:b7:67:42:9e:17:0d:34:b9:92: f8:3e:aa:f9:28:b5:a2:89:44:6e:62:00:1a:b9:cd: 54:c6:e0:36:fc:fe:5b:19:ce:c7:92:56:aa:9a:53: 96:94:9d:3b:aa:a4:23:11:9b:5e:c5:bc:1a:5c:c7: b9:41:d8:6f:13:ca:52:8b:55:ca:5e:b6:0a:99:79: e2:d7:63:24:5c:26:ac:29:3d:f0:ad:83:3f:11:8f: 0d:9a:f5:76:06:8c:d2:12:69:a1:9d:2c:59:ad:41: 16:08:92:2a:ff:ef:1a:14:8c:fe:d2:3c:28:48:84: 15:ac:34:d5:c5:61:a8:e0:a4:f5:8f:6d:a3:20:7d: 86:0f:c3:3f:45:1f:9a:19:31:d3:7e:f6:87:34:a5: 17:06:73:6d:36:d7:75:6a:a7:3b:0d:f9:a2:63:67: f9:e4:cf:96:b5:40:11:61:7c:67:41:78:7a:bf:79: ce:e8:ad:aa:97:22:3f:df:18:b4:38:07:96:92:4e: 59:70:81:fe:ae:b2:9f:92:f1:c2:98:1d:86:16:3b: 95:32:b0:b9:fd:26:43:92:ec:23:73:ad:3d:2c:28: b1:04:27:5a:17:b3:f7:e2:bf:4a:e5:b3:e5:f3:87: 4b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:32:D4:A2:B0:1E:3C:31:07:D6:12:89:25:9B:A0:D7:D3:C8:BA:10 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ADLUorAePDEH1hKJJZug19PIuhA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e150::/44 Signature Algorithm: sha256WithRSAEncryption 76:0e:4f:a6:bc:50:78:c1:a6:08:56:37:ba:0e:9b:09:85:e3: 05:8e:40:25:e8:3f:bb:8c:86:db:c6:32:99:2b:65:47:a5:83: ee:d3:b9:d8:35:9b:1e:38:68:99:21:30:96:a2:00:34:cd:f1: 43:6d:3e:ac:e5:02:e1:69:b0:37:4e:bd:32:99:d1:c4:a0:6e: 05:0b:40:89:8d:76:1c:02:34:27:fc:d9:51:98:28:ed:d9:c0: e1:8e:13:c1:ea:8e:f9:91:e1:ad:10:c4:76:b8:40:83:98:98: 59:a8:8e:f9:ff:96:df:5c:dc:c9:90:60:38:37:67:86:39:4c: 1a:86:d4:5a:f8:4a:8f:e1:a5:3a:63:19:ab:33:61:0c:5e:44: 4f:6e:d8:92:67:61:5b:03:11:57:88:09:8c:10:25:47:9d:b0: c9:31:e6:0b:95:dc:7f:7a:7c:28:18:d4:ab:b4:97:0e:47:8e: 55:84:16:95:37:d1:d1:65:40:82:f3:f8:c5:26:43:51:cc:5d: 04:12:63:11:08:46:1f:20:a7:4b:e3:65:a3:29:6d:c7:f3:c2: 8d:d7:93:9a:44:60:53:e8:cd:53:f6:a1:10:c9:7a:50:74:ca: 07:06:c9:7b:6c:cf:cf:f6:d7:59:d6:14:83:0b:06:76:a7:49: be:0b:2c:39 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fruknFiky6MAx3WmhSToMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDMyZDRhMmIwMWUzYzMxMDdkNjEyODkyNTliYTBkN2QzYzhiYTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lrVfAFu1EnjAmKzhF3cJrzjKMa3 Z0KeFw00uZL4Pqr5KLWiiURuYgAauc1UxuA2/P5bGc7HklaqmlOWlJ07qqQjEZte xbwaXMe5QdhvE8pSi1XKXrYKmXni12MkXCasKT3wrYM/EY8NmvV2BozSEmmhnSxZ rUEWCJIq/+8aFIz+0jwoSIQVrDTVxWGo4KT1j22jIH2GD8M/RR+aGTHTfvaHNKUX BnNtNtd1aqc7DfmiY2f55M+WtUARYXxnQXh6v3nO6K2qlyI/3xi0OAeWkk5ZcIH+ rrKfkvHCmB2GFjuVMrC5/SZDkuwjc609LCixBCdaF7P34r9K5bPl84dLbwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAAy1KKwHjwxB9YSiSWboNfTyLoQMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvQURMVW9yQWVQREVIMWhLSkpadWcxOVBJdWhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB+FQ MA0GCSqGSIb3DQEBCwUAA4IBAQB2Dk+mvFB4waYIVje6DpsJheMFjkAl6D+7jIbb xjKZK2VHpYPu07nYNZseOGiZITCWogA0zfFDbT6s5QLhabA3Tr0ymdHEoG4FC0CJ jXYcAjQn/NlRmCjt2cDhjhPB6o75keGtEMR2uECDmJhZqI75/5bfXNzJkGA4N2eG OUwahtRa+EqP4aU6YxmrM2EMXkRPbtiSZ2FbAxFXiAmMECVHnbDJMeYLldx/enwo GNSrtJcOR45VhBaVN9HRZUCC8/jFJkNRzF0EEmMRCEYfIKdL42WjKW3H88KN15Oa RGBT6M1T9qEQyXpQdMoHBsl7bM/P9tdZ1hSDCwZ2p0m+Cyw5 -----END CERTIFICATE-----Generated at Tue Jan 6 21:30:42 2026 by rpki-client