This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/AWu7wA3SXFgivZ88lWaB13hhWvc.roa File: AWu7wA3SXFgivZ88lWaB13hhWvc.roa (raw, json) Hash identifier: UQPMSXsKJeH/EgOwn0EOl/X4aZHj6HCt5kEQkuA1/Rs= Subject key identifier: 01:6B:BB:C0:0D:D2:5C:58:22:BD:9F:3C:95:66:81:D7:78:61:5A:F7 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797E9FEB32ACF3041A54656748AAE2E2 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/AWu7wA3SXFgivZ88lWaB13hhWvc.roa Signing time: Thu 01 Jan 2026 12:18:20 +0000 ROA not before: Thu 01 Jan 2026 12:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58235 IP address blocks: 2a0e:aa01:ab01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:9f:eb:32:ac:f3:04:1a:54:65:67:48:aa:e2:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=016bbbc00dd25c5822bd9f3c956681d778615af7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:77:fd:ea:82:f8:09:3e:39:7b:ca:fe:53:ec: fa:97:0c:0b:90:97:b7:ff:1f:c9:13:58:98:62:67: 41:5d:17:ab:ef:2e:30:31:1e:5f:21:c3:f8:d2:c5: b8:f3:d9:c1:d5:3d:2c:67:16:55:86:eb:1b:8d:62: b3:c0:0e:7c:c4:b7:f3:63:09:87:66:8d:2a:0a:07: 3f:1d:90:78:f6:d2:50:87:d1:32:e1:fe:97:67:09: 2e:87:f7:32:16:60:f0:73:76:ea:f1:70:09:fa:9c: cd:c9:93:94:24:3d:a5:64:49:c0:27:4e:43:61:0e: d8:cd:51:3a:81:46:8f:1a:9a:01:9f:71:ea:05:f0: 14:88:8b:fa:8e:33:e1:8c:87:68:da:32:73:d3:9c: 89:4e:72:1f:12:2b:a8:b5:40:3c:1d:a0:23:57:b1: 2f:e6:ba:eb:0c:35:a8:96:35:5a:ff:de:18:36:c5: bf:84:9c:24:35:ee:55:19:d3:6b:73:d0:93:cc:b2: 0d:7e:1a:5e:ea:17:40:a8:11:29:cc:f3:0f:68:ee: 79:3a:06:4b:ee:55:ce:4c:63:20:9a:ff:e3:5c:42: be:42:91:02:38:08:a9:8a:bb:c1:b1:f1:97:83:48: 13:89:71:ab:6c:ee:47:41:43:63:e9:82:bc:f4:fa: ad:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:6B:BB:C0:0D:D2:5C:58:22:BD:9F:3C:95:66:81:D7:78:61:5A:F7 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/AWu7wA3SXFgivZ88lWaB13hhWvc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa01:ab01::/48 Signature Algorithm: sha256WithRSAEncryption 82:0c:fd:68:5e:f2:3d:5d:20:90:9a:99:4f:7d:a7:57:b0:3e: 31:2d:db:c6:ca:c2:8b:7c:84:6e:68:e8:91:9a:86:da:4b:30: 3e:34:95:43:0c:6d:e4:30:29:a6:08:b6:57:a9:d9:db:d7:47: a7:37:03:c4:e4:e4:ee:1b:6c:c7:f8:5e:4a:26:3d:8c:43:f3: 87:e7:e9:e5:73:8d:5e:7c:38:eb:c2:b6:1b:2e:69:09:33:3c: f4:4c:60:d0:58:82:0f:7a:f3:9b:2a:27:d6:55:4f:8c:d2:ad: f0:9c:08:fe:6b:9f:3f:7f:a3:61:fc:42:9c:51:1e:f9:5e:39: 50:d4:c5:e1:a5:69:71:e8:ba:13:a3:6c:b0:bd:d9:33:ea:f4: 31:eb:f2:46:60:6a:97:71:fb:d3:a6:69:1e:6e:ee:72:15:7d: 3f:a6:f7:4d:bc:39:19:5d:9b:e9:de:7c:f4:0e:24:46:cf:ec: 3a:78:05:f6:7c:8c:d7:a4:e3:87:1c:6c:cd:94:e0:84:c1:6b: 3a:76:55:82:26:ba:2c:1a:81:e2:8a:34:70:f9:4a:b4:e0:04: 7e:db:b6:44:45:fb:14:4f:af:db:05:42:c7:d0:57:82:45:d6: 41:13:15:43:45:92:3a:cb:2a:bb:03:02:c0:15:7e:11:e4:86: 0d:7d:61:c1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fp/rMqzzBBpUZWdIquLiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTZiYmJjMDBkZDI1YzU4MjJiZDlmM2M5NTY2ODFkNzc4NjE1YWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Hf96oL4CT45e8r+U+z6lwwLkJe3 /x/JE1iYYmdBXRer7y4wMR5fIcP40sW489nB1T0sZxZVhusbjWKzwA58xLfzYwmH Zo0qCgc/HZB49tJQh9Ey4f6XZwkuh/cyFmDwc3bq8XAJ+pzNyZOUJD2lZEnAJ05D YQ7YzVE6gUaPGpoBn3HqBfAUiIv6jjPhjIdo2jJz05yJTnIfEiuotUA8HaAjV7Ev 5rrrDDWoljVa/94YNsW/hJwkNe5VGdNrc9CTzLINfhpe6hdAqBEpzPMPaO55OgZL 7lXOTGMgmv/jXEK+QpECOAipirvBsfGXg0gTiXGrbO5HQUNj6YK89PqthQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAFru8AN0lxYIr2fPJVmgdd4YVr3MB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvQVd1N3dBM1NYRmdpdlo4OGxXYUIxM2hoV3ZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qAasB MA0GCSqGSIb3DQEBCwUAA4IBAQCCDP1oXvI9XSCQmplPfadXsD4xLdvGysKLfIRu aOiRmobaSzA+NJVDDG3kMCmmCLZXqdnb10enNwPE5OTuG2zH+F5KJj2MQ/OH5+nl c41efDjrwrYbLmkJMzz0TGDQWIIPevObKifWVU+M0q3wnAj+a58/f6Nh/EKcUR75 XjlQ1MXhpWlx6LoTo2ywvdkz6vQx6/JGYGqXcfvTpmkebu5yFX0/pvdNvDkZXZvp 3nz0DiRGz+w6eAX2fIzXpOOHHGzNlOCEwWs6dlWCJrosGoHiijRw+Uq04AR+27ZE RfsUT6/bBULH0FeCRdZBExVDRZI6yyq7AwLAFX4R5IYNfWHB -----END CERTIFICATE-----Generated at Tue Jan 6 21:31:59 2026 by rpki-client