This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/raFSOgWUIEkOhnSrWVka4juqexk.roa File: raFSOgWUIEkOhnSrWVka4juqexk.roa (raw, json) Hash identifier: x4to3oz2RE6uG26GygbN0H3de/zoawFgVSneq2Yzr8M= Subject key identifier: AD:A1:52:3A:05:94:20:49:0E:86:74:AB:59:59:1A:E2:3B:AA:7B:19 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EABE3C58BE146C8DF6EC57D413DCF Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/raFSOgWUIEkOhnSrWVka4juqexk.roa Signing time: Thu 01 Jan 2026 12:18:23 +0000 ROA not before: Thu 01 Jan 2026 12:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207292 IP address blocks: 2a0e:aa06:560::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ab:e3:c5:8b:e1:46:c8:df:6e:c5:7d:41:3d:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ada1523a059420490e8674ab59591ae23baa7b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8f:87:c7:a9:19:0d:5d:3f:4f:21:33:54:22: a6:30:8d:7b:21:8d:be:fe:0d:01:64:99:5c:10:ed: cf:dd:02:33:ab:99:98:4b:f6:7d:04:4f:30:be:f4: 85:ce:24:9f:61:35:fe:a2:a2:ba:5b:db:74:c6:3f: d0:44:bc:99:d5:01:89:10:ab:f6:fd:dc:31:f2:97: 8f:87:64:99:4d:fe:f8:33:d9:52:9e:0d:92:77:a3: 66:07:04:ec:55:ac:d6:01:44:d7:df:70:15:23:43: e1:f7:61:79:21:93:cd:58:99:e6:14:ea:28:30:12: 77:df:28:bc:30:d3:0a:2a:58:58:59:bb:99:2d:25: 7e:40:7c:a5:88:20:bc:7b:f6:b3:37:5b:39:ae:b9: 8f:95:40:26:3d:5c:87:e0:bf:73:21:50:8a:de:31: e8:c2:2a:f2:a8:ec:23:8f:cc:97:98:6a:ef:96:50: 9e:7a:cb:da:45:8a:36:cd:e2:94:34:c8:be:91:9a: 0a:b8:d3:c0:d2:bc:e3:ab:69:01:09:98:00:98:70: f3:4d:cc:66:cd:71:40:63:ad:85:26:56:80:0e:c9: 8b:9b:66:93:2d:08:7c:80:c0:0b:15:0c:74:bc:77: 10:48:f8:70:13:d6:88:c5:40:25:ec:2e:3c:17:67: 77:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A1:52:3A:05:94:20:49:0E:86:74:AB:59:59:1A:E2:3B:AA:7B:19 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/raFSOgWUIEkOhnSrWVka4juqexk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa06:560::/44 Signature Algorithm: sha256WithRSAEncryption 01:79:6a:62:41:20:9f:24:f4:a6:5b:46:4d:f4:6e:43:e2:32: 1c:87:45:56:55:ac:e8:74:9b:b6:b2:0e:4f:ce:4f:44:d5:03: ca:5f:22:4a:05:1a:32:a0:0e:25:9a:5c:60:8e:93:6d:6f:0d: 13:0d:d8:df:44:e0:94:ef:68:f7:3b:95:a3:16:24:77:1a:f8: 32:33:7f:c6:97:cf:96:63:64:03:85:84:69:45:2f:0a:f1:f3: 82:34:1b:03:9c:3c:c4:2b:43:ee:9f:dd:d9:b5:c4:f4:2d:93: da:31:64:d5:0d:e7:b6:0b:d9:21:78:32:46:8c:79:ed:4c:8b: 7e:ef:18:37:99:e7:17:77:ad:0d:91:71:77:a8:84:3b:a8:fd: 78:17:92:f0:47:25:5d:f1:a6:5f:55:48:c9:b0:19:1a:fd:bc: 3e:4c:98:0b:8f:70:4c:82:88:91:54:a0:63:6c:4b:5f:99:fe: f2:27:fe:22:7b:15:6e:95:c5:d0:94:1e:aa:d4:e3:62:0e:0f: c1:18:dc:d5:6d:b4:d7:98:ca:4f:25:bc:ae:d7:9a:0b:69:b8: 49:4c:24:23:8a:a9:d2:5f:9a:98:9a:d2:ff:69:e1:bb:7a:9f: 42:ec:a8:8a:21:37:74:06:81:a2:03:e1:c3:63:88:59:13:c6: 2e:38:6b:8c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fqvjxYvhRsjfbsV9QT3PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGExNTIzYTA1OTQyMDQ5MGU4Njc0YWI1OTU5MWFlMjNiYWE3YjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY+Hx6kZDV0/TyEzVCKmMI17IY2+ /g0BZJlcEO3P3QIzq5mYS/Z9BE8wvvSFziSfYTX+oqK6W9t0xj/QRLyZ1QGJEKv2 /dwx8pePh2SZTf74M9lSng2Sd6NmBwTsVazWAUTX33AVI0Ph92F5IZPNWJnmFOoo MBJ33yi8MNMKKlhYWbuZLSV+QHyliCC8e/azN1s5rrmPlUAmPVyH4L9zIVCK3jHo wiryqOwjj8yXmGrvllCeesvaRYo2zeKUNMi+kZoKuNPA0rzjq2kBCZgAmHDzTcxm zXFAY62FJlaADsmLm2aTLQh8gMALFQx0vHcQSPhwE9aIxUAl7C48F2d3OQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFK2hUjoFlCBJDoZ0q1lZGuI7qnsZMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvcmFGU09nV1VJRWtPaG5TcldWa2E0anVxZXhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qBgVg MA0GCSqGSIb3DQEBCwUAA4IBAQABeWpiQSCfJPSmW0ZN9G5D4jIch0VWVazodJu2 sg5Pzk9E1QPKXyJKBRoyoA4lmlxgjpNtbw0TDdjfROCU72j3O5WjFiR3GvgyM3/G l8+WY2QDhYRpRS8K8fOCNBsDnDzEK0Pun93ZtcT0LZPaMWTVDee2C9kheDJGjHnt TIt+7xg3mecXd60NkXF3qIQ7qP14F5LwRyVd8aZfVUjJsBka/bw+TJgLj3BMgoiR VKBjbEtfmf7yJ/4iexVulcXQlB6q1ONiDg/BGNzVbbTXmMpPJbyu15oLabhJTCQj iqnSX5qYmtL/aeG7ep9C7KiKITd0BoGiA+HDY4hZE8YuOGuM -----END CERTIFICATE-----Generated at Tue Jan 6 21:32:05 2026 by rpki-client