This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/aSLViT9CsAg8mBzLCCV32X3K09k.roa File: aSLViT9CsAg8mBzLCCV32X3K09k.roa (raw, json) Hash identifier: bgwghdY2bgRlJXQAYmYRzBvBpjsZNJjnzvTDgBQoXys= Subject key identifier: 69:22:D5:89:3F:42:B0:08:3C:98:1C:CB:08:25:77:D9:7D:CA:D3:D9 Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Certificate serial: 019BDB08213E02C02A47233BB9FB88C4B14D Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/aSLViT9CsAg8mBzLCCV32X3K09k.roa Signing time: Tue 20 Jan 2026 10:51:41 +0000 ROA not before: Tue 20 Jan 2026 10:51:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206134 IP address blocks: 2a01:ecc0:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 13:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:08:21:3e:02:c0:2a:47:23:3b:b9:fb:88:c4:b1:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Validity Not Before: Jan 20 10:51:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6922d5893f42b0083c981ccb082577d97dcad3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3e:1a:7d:ee:dd:dc:14:12:05:3b:e6:e3:f8: 1b:7a:87:13:7c:66:9d:ac:aa:a3:53:20:5f:d8:62: 84:96:1b:c7:32:ca:c3:e6:21:25:3e:b1:c3:1f:c1: 0f:12:c7:b7:28:58:30:2f:13:a6:1f:eb:1a:b5:ec: ab:2b:bb:df:7d:03:37:30:43:fc:95:30:a4:62:1b: c4:c2:3d:0d:86:fe:ef:37:61:bf:ce:3e:55:b7:1a: 3f:9d:c9:1b:4f:84:6b:6a:85:04:ee:4f:fd:06:05: 2b:02:27:04:2d:e9:8c:3f:25:3b:d9:08:26:41:16: f2:9c:af:8c:06:fe:8f:70:b6:13:1c:62:16:8c:79: 67:1b:a4:be:56:cb:03:c8:ad:84:d5:29:9c:d5:60: 91:ea:ad:69:f2:1d:d7:2b:9a:92:73:16:a3:36:31: 6c:02:2f:7a:d5:38:a2:21:74:e3:63:24:ac:fa:4d: a5:7e:9d:76:45:65:ee:17:04:95:1b:45:11:28:21: 20:64:51:14:f6:9a:3e:85:ca:2c:c0:dd:98:f6:46: 6d:fb:a0:b9:51:f1:3a:49:b5:e3:7b:18:16:e2:ed: 8b:19:70:21:54:bb:22:27:f4:b6:99:76:cf:c3:38: 46:13:8e:13:62:90:aa:a6:5d:93:3a:f1:1b:72:b3: eb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:22:D5:89:3F:42:B0:08:3C:98:1C:CB:08:25:77:D9:7D:CA:D3:D9 X509v3 Authority Key Identifier: keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/aSLViT9CsAg8mBzLCCV32X3K09k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:ecc0:3000::/36 Signature Algorithm: sha256WithRSAEncryption b1:10:1f:78:89:ce:f2:73:6c:b3:8c:7a:c1:12:c7:b3:09:2d: fb:1e:cb:e9:87:63:3d:d9:db:d3:64:fe:ed:69:ba:37:9d:bc: 3e:c7:d4:ac:c9:20:77:6e:09:e3:ee:e3:68:0f:41:d8:4b:94: 30:cc:46:26:b8:0a:4a:32:af:1a:8d:55:11:ca:b6:6e:06:b8: 42:78:8d:0a:44:06:ba:c2:49:ea:e1:81:3e:77:ea:8d:2d:05: 98:02:b7:17:3d:ac:63:4a:df:a7:84:da:21:da:c0:0c:c2:ab: 9d:72:26:0d:04:06:03:29:c9:59:ee:85:26:45:91:1d:86:75: 6a:c3:6d:69:11:46:f1:66:a0:e3:15:9f:24:53:37:d9:71:45: be:90:d8:1d:02:28:ab:95:8a:94:5d:d8:7a:9f:f8:2c:e9:5d: 59:3e:46:90:59:ca:50:aa:00:82:f8:ef:0f:db:85:2c:36:58: 47:4b:48:6f:b8:4f:08:7c:b7:25:41:68:4d:d9:79:77:aa:d5: f0:c4:23:a0:7d:e8:f7:08:42:4c:3c:59:9d:49:71:02:73:7c: 04:09:ca:64:43:ab:98:c7:7f:ec:de:d0:05:88:85:54:25:84: cd:1e:5a:c7:0c:f7:8b:2f:0a:d9:a1:ff:dc:69:98:17:4e:62: 98:65:22:99 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZvbCCE+AsAqRyM7ufuIxLFNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNDNhMjQ4NDU2OWQyMGUzZjUzYzE3YmU3YjlmYjI5YzM0 ZWU1YmUwHhcNMjYwMTIwMTA1MTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTIyZDU4OTNmNDJiMDA4M2M5ODFjY2IwODI1NzdkOTdkY2FkM2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj4afe7d3BQSBTvm4/gbeocTfGad rKqjUyBf2GKElhvHMsrD5iElPrHDH8EPEse3KFgwLxOmH+sateyrK7vffQM3MEP8 lTCkYhvEwj0Nhv7vN2G/zj5Vtxo/nckbT4RraoUE7k/9BgUrAicELemMPyU72Qgm QRbynK+MBv6PcLYTHGIWjHlnG6S+VssDyK2E1Smc1WCR6q1p8h3XK5qScxajNjFs Ai961TiiIXTjYySs+k2lfp12RWXuFwSVG0URKCEgZFEU9po+hcoswN2Y9kZt+6C5 UfE6SbXjexgW4u2LGXAhVLsiJ/S2mXbPwzhGE44TYpCqpl2TOvEbcrPrlQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFGki1Yk/QrAIPJgcywgld9l9ytPZMB8GA1UdIwQY MBaAFB1DokhFadIOP1PBe+e5+ynDTuW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjkt NjM0NTE1NDg5NzlkLzEvYVNMVmlUOUNzQWc4bUJ6TENDVjMyWDNLMDlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjktNjM0NTE1NDg5Nzlk LzEvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgHswDAw DQYJKoZIhvcNAQELBQADggEBALEQH3iJzvJzbLOMesESx7MJLfsey+mHYz3Z29Nk /u1pujedvD7H1KzJIHduCePu42gPQdhLlDDMRia4CkoyrxqNVRHKtm4GuEJ4jQpE BrrCSerhgT536o0tBZgCtxc9rGNK36eE2iHawAzCq51yJg0EBgMpyVnuhSZFkR2G dWrDbWkRRvFmoOMVnyRTN9lxRb6Q2B0CKKuVipRd2Hqf+CzpXVk+RpBZylCqAIL4 7w/bhSw2WEdLSG+4Twh8tyVBaE3ZeXeq1fDEI6B96PcIQkw8WZ1JcQJzfAQJymRD q5jHf+ze0AWIhVQlhM0eWscM94svCtmh/9xpmBdOYphlIpk= -----END CERTIFICATE-----Generated at Wed Jan 21 19:44:14 2026 by rpki-client