This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/aYcABBM17vKpidVxv4dDvc0izk4.roa File: aYcABBM17vKpidVxv4dDvc0izk4.roa (raw, json) Hash identifier: VT+VaP2zSkhx5KLY4JaNYQ0Mx9eNUshXMFv4opUiNg0= Subject key identifier: 69:87:00:04:13:35:EE:F2:A9:89:D5:71:BF:87:43:BD:CD:22:CE:4E Certificate issuer: /CN=e91ef22adaa16d53dcf637c569f4131f26215b91 Certificate serial: 019B7A5A98376194853BA15E0DB3E234DCDF Authority key identifier: E9:1E:F2:2A:DA:A1:6D:53:DC:F6:37:C5:69:F4:13:1F:26:21:5B:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/aYcABBM17vKpidVxv4dDvc0izk4.roa Signing time: Thu 01 Jan 2026 16:18:36 +0000 ROA not before: Thu 01 Jan 2026 16:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205007 IP address blocks: 2a09:31c0:babe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.crl rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.mft rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 22:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:98:37:61:94:85:3b:a1:5e:0d:b3:e2:34:dc:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e91ef22adaa16d53dcf637c569f4131f26215b91 Validity Not Before: Jan 1 16:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=698700041335eef2a989d571bf8743bdcd22ce4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a0:a2:28:97:bf:e4:cf:f0:76:62:42:73:3a: b8:1b:7d:41:f7:56:31:4b:07:f6:b0:27:73:6c:12: 77:62:2c:b1:1c:08:9c:c7:2a:fe:43:94:08:a2:62: 82:9d:7e:18:f1:6d:73:f9:b5:a0:55:c4:4c:e3:48: 45:df:28:07:2e:76:15:be:85:79:b9:b8:5e:fe:a7: 20:14:87:8a:c9:f3:6c:0b:2d:4a:9b:80:00:80:4d: c8:9a:db:00:38:93:fc:4d:06:8d:ff:5a:d8:fc:72: d5:ab:8c:2e:96:d1:72:2b:e1:81:00:04:4c:3b:c7: 21:07:c1:b5:5f:b1:af:f8:4d:47:28:9b:27:2c:8d: 9a:12:71:2f:12:3a:ec:1f:2b:19:ba:33:e1:14:d1: 58:bc:6f:98:d6:ea:43:74:34:28:66:3f:9c:4f:83: da:61:02:8a:e4:f6:5a:e3:f5:d0:e2:ec:48:c1:6a: b6:8c:42:cd:7a:ac:c1:3e:c1:1a:db:e7:8e:c3:c6: 9b:f8:cb:fa:09:9e:2c:e3:62:f0:08:7c:b9:97:b3: f9:73:ad:6f:a9:b6:2c:f8:84:22:c0:63:8e:f9:ea: de:7c:8f:df:5d:e9:7b:a5:2c:ff:59:85:83:f6:6f: 77:6d:c0:68:6f:aa:6f:85:79:30:c4:ea:c5:0e:30: b0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:87:00:04:13:35:EE:F2:A9:89:D5:71:BF:87:43:BD:CD:22:CE:4E X509v3 Authority Key Identifier: keyid:E9:1E:F2:2A:DA:A1:6D:53:DC:F6:37:C5:69:F4:13:1F:26:21:5B:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/aYcABBM17vKpidVxv4dDvc0izk4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:31c0:babe::/48 Signature Algorithm: sha256WithRSAEncryption 04:e3:f1:bf:08:72:2a:92:74:36:42:dc:22:b3:7f:d7:2d:77: f6:92:ee:9b:59:0f:02:f3:ce:01:2d:61:9d:61:e6:45:69:38: 78:da:6a:c7:0c:a3:ba:b1:65:26:e1:bd:a0:49:f2:99:a3:25: 7c:3a:af:e2:92:e7:8e:aa:a0:81:71:ec:b5:05:33:23:0a:7f: eb:c0:9a:e8:db:16:05:7e:b8:d9:7f:23:34:a5:78:9d:fa:74: dc:08:4c:18:69:b7:80:36:c4:c0:07:22:c5:ab:95:41:3a:6e: 2a:ea:78:a7:be:da:ad:6c:71:bc:90:5a:ed:44:e9:91:69:c3: c1:39:a6:ec:98:a5:e7:54:9c:a1:40:26:96:41:a1:d4:60:09: df:28:ab:0c:05:15:3f:2e:4b:a1:70:40:7b:b5:03:2c:c6:6b: ed:ed:d8:ec:b6:24:fd:2e:4c:d0:6a:ce:07:02:e5:88:b4:53: 47:51:60:a5:71:c3:77:52:d0:c9:0b:0b:87:d4:f4:3b:4e:76: 0e:a9:8a:25:1a:ec:c5:c9:f3:96:22:10:d7:db:cc:bb:53:a2: 84:26:ec:e0:d6:36:31:75:a9:b2:08:a1:1b:60:70:81:21:76: c8:32:4f:7a:c9:3e:4d:fe:76:63:fa:cb:b5:ef:86:9e:01:01: a3:5a:b4:44 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6Wpg3YZSFO6FeDbPiNNzfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MWVmMjJhZGFhMTZkNTNkY2Y2MzdjNTY5ZjQxMzFmMjYy MTViOTEwHhcNMjYwMTAxMTYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTg3MDAwNDEzMzVlZWYyYTk4OWQ1NzFiZjg3NDNiZGNkMjJjZTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6CiKJe/5M/wdmJCczq4G31B91Yx Swf2sCdzbBJ3YiyxHAicxyr+Q5QIomKCnX4Y8W1z+bWgVcRM40hF3ygHLnYVvoV5 ubhe/qcgFIeKyfNsCy1Km4AAgE3ImtsAOJP8TQaN/1rY/HLVq4wultFyK+GBAARM O8chB8G1X7Gv+E1HKJsnLI2aEnEvEjrsHysZujPhFNFYvG+Y1upDdDQoZj+cT4Pa YQKK5PZa4/XQ4uxIwWq2jELNeqzBPsEa2+eOw8ab+Mv6CZ4s42LwCHy5l7P5c61v qbYs+IQiwGOO+erefI/fXel7pSz/WYWD9m93bcBob6pvhXkwxOrFDjCw5wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGmHAAQTNe7yqYnVcb+HQ73NIs5OMB8GA1UdIwQY MBaAFOke8iraoW1T3PY3xWn0Ex8mIVuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlI3eUt0cWhiVlBjOWpmRmFmUVRIeVloVzVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8xMTEzODUtMmViNi00YzZhLWI5YzQt MzRhZTg5MWE3MmNmLzEvYVljQUJCTTE3dktwaWRWeHY0ZER2YzBpems0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8xMTEzODUtMmViNi00YzZhLWI5YzQtMzRhZTg5MWE3MmNm LzEvNlI3eUt0cWhiVlBjOWpmRmFmUVRIeVloVzVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgkxwLq+ MA0GCSqGSIb3DQEBCwUAA4IBAQAE4/G/CHIqknQ2Qtwis3/XLXf2ku6bWQ8C884B LWGdYeZFaTh42mrHDKO6sWUm4b2gSfKZoyV8Oq/ikueOqqCBcey1BTMjCn/rwJro 2xYFfrjZfyM0pXid+nTcCEwYabeANsTAByLFq5VBOm4q6ninvtqtbHG8kFrtROmR acPBOabsmKXnVJyhQCaWQaHUYAnfKKsMBRU/LkuhcEB7tQMsxmvt7djstiT9LkzQ as4HAuWItFNHUWClccN3UtDJCwuH1PQ7TnYOqYolGuzFyfOWIhDX28y7U6KEJuzg 1jYxdamyCKEbYHCBIXbIMk96yT5N/nZj+su174aeAQGjWrRE -----END CERTIFICATE-----Generated at Wed Jan 7 06:55:25 2026 by rpki-client