This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/aFx16ePNWGoW9v8yFdUWQ-e03AU.roa File: aFx16ePNWGoW9v8yFdUWQ-e03AU.roa (raw, json) Hash identifier: T/XXM1cDP1u1oX5Xr11/1FcYokvbAWI4NLMStv5cA8U= Subject key identifier: 68:5C:75:E9:E3:CD:58:6A:16:F6:FF:32:15:D5:16:43:E7:B4:DC:05 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910C850E632B4AB9CB24400D61CFE86 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/aFx16ePNWGoW9v8yFdUWQ-e03AU.roa Signing time: Thu 01 Jan 2026 10:18:21 +0000 ROA not before: Thu 01 Jan 2026 10:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216201 IP address blocks: 2a12:bec0:530::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c8:50:e6:32:b4:ab:9c:b2:44:00:d6:1c:fe:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=685c75e9e3cd586a16f6ff3215d51643e7b4dc05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:07:1c:3e:c7:6c:e6:7e:0a:77:ea:3e:5c:3e: fb:98:34:ad:2b:43:c0:49:75:df:fc:48:30:2e:39: fd:95:6f:80:a5:34:9b:d6:8c:62:8f:8a:2a:fd:e8: b4:ba:19:ff:2c:7c:85:df:72:1e:52:9e:a8:a9:6a: 77:43:52:92:ac:72:88:23:42:c2:b5:78:5c:21:9f: a5:81:c2:82:bf:0c:8d:2f:24:06:d5:32:d6:41:3f: 92:d0:6c:e2:e3:f2:d4:8f:dd:03:57:52:95:19:9a: c8:a0:7e:2c:79:e6:f2:d8:5f:1b:38:14:ad:f1:de: a4:52:c0:67:87:1a:d9:ae:4f:ac:43:ac:b0:77:91: 40:13:24:89:ce:5a:ba:d1:93:90:ff:7b:cf:de:fc: 93:14:a9:8b:05:09:41:c0:48:2d:79:29:75:36:b0: 90:00:fb:15:70:28:2c:d9:b2:38:4d:81:a2:90:1e: 5a:9b:e6:bc:6e:7e:2e:bc:39:fe:17:bc:e8:b0:64: 64:1d:c3:db:77:6e:d3:ff:d1:f8:e1:5f:2b:bc:cc: d2:5a:cf:29:d0:e5:64:30:7c:d2:8a:73:ab:a4:0c: 40:fb:04:fa:b4:a8:c7:c1:12:d1:32:c3:0b:c6:29: 8f:8b:c0:c2:7b:04:77:9f:67:16:53:0f:e6:9f:7d: 92:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5C:75:E9:E3:CD:58:6A:16:F6:FF:32:15:D5:16:43:E7:B4:DC:05 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/aFx16ePNWGoW9v8yFdUWQ-e03AU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:530::/44 Signature Algorithm: sha256WithRSAEncryption 59:a6:b1:98:d8:e9:95:50:66:77:e7:4a:cb:d4:56:a2:a7:ea: 9c:ae:64:26:e8:f7:cd:49:38:b3:8b:3f:c7:ab:db:56:f7:04: 24:55:2b:02:db:ab:8d:46:70:ba:c4:f9:7c:6a:b8:0c:c1:dd: 4b:e4:37:cf:1a:81:18:9f:0f:76:78:de:92:94:11:cc:4a:c4: f1:cf:f5:a8:48:35:79:ce:de:ea:ce:e7:e4:95:bd:f0:01:fa: 20:25:1c:11:a0:ca:7e:61:c3:b9:5b:ec:0b:b1:1d:cc:08:0e: 3d:0c:6d:a5:3a:20:42:7b:fe:5b:f3:49:c2:cf:7b:8a:f5:ca: 39:c3:ff:45:f9:6f:ca:22:9a:92:92:3d:29:f8:da:c1:3d:3b: 54:86:6a:f2:f7:42:5b:c3:e4:9e:c6:cd:e5:01:7f:3e:ae:9e: af:0b:07:e8:e0:45:98:91:ab:e2:0f:17:d9:de:c6:17:ac:1f: 3b:90:c8:7a:35:ba:e5:e4:8d:45:96:9e:67:cc:65:b5:47:b9: 4a:6d:06:b4:13:fb:05:25:c7:b5:2d:0e:e2:7f:62:e9:63:f7: 29:fd:82:8a:27:d2:6a:1e:a4:d1:4e:af:27:ee:1a:80:f2:53: f3:14:45:cc:ba:25:dc:40:36:a3:8d:1b:88:9f:5a:ad:25:c1: 29:56:84:0a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EMhQ5jK0q5yyRADWHP6GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODVjNzVlOWUzY2Q1ODZhMTZmNmZmMzIxNWQ1MTY0M2U3YjRkYzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQccPsds5n4Kd+o+XD77mDStK0PA SXXf/EgwLjn9lW+ApTSb1oxij4oq/ei0uhn/LHyF33IeUp6oqWp3Q1KSrHKII0LC tXhcIZ+lgcKCvwyNLyQG1TLWQT+S0Gzi4/LUj90DV1KVGZrIoH4seeby2F8bOBSt 8d6kUsBnhxrZrk+sQ6ywd5FAEySJzlq60ZOQ/3vP3vyTFKmLBQlBwEgteSl1NrCQ APsVcCgs2bI4TYGikB5am+a8bn4uvDn+F7zosGRkHcPbd27T/9H44V8rvMzSWs8p 0OVkMHzSinOrpAxA+wT6tKjHwRLRMsMLximPi8DCewR3n2cWUw/mn32SlQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGhcdenjzVhqFvb/MhXVFkPntNwFMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvYUZ4MTZlUE5XR29XOXY4eUZkVVdRLWUwM0FVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAUw MA0GCSqGSIb3DQEBCwUAA4IBAQBZprGY2OmVUGZ350rL1Faip+qcrmQm6PfNSTiz iz/Hq9tW9wQkVSsC26uNRnC6xPl8argMwd1L5DfPGoEYnw92eN6SlBHMSsTxz/Wo SDV5zt7qzufklb3wAfogJRwRoMp+YcO5W+wLsR3MCA49DG2lOiBCe/5b80nCz3uK 9co5w/9F+W/KIpqSkj0p+NrBPTtUhmry90Jbw+Sexs3lAX8+rp6vCwfo4EWYkavi DxfZ3sYXrB87kMh6Nbrl5I1Flp5nzGW1R7lKbQa0E/sFJce1LQ7if2LpY/cp/YKK J9JqHqTRTq8n7hqA8lPzFEXMuiXcQDajjRuIn1qtJcEpVoQK -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:29 2026 by rpki-client