This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aCGmjYqmsCdKH2Teofkg7ZKpzhs.roa File: aCGmjYqmsCdKH2Teofkg7ZKpzhs.roa (raw, json) Hash identifier: uppYWoeeyjZ7CNtAFv4LZrG3T+zbYE/SYVLtRIHNtvM= Subject key identifier: 68:21:A6:8D:8A:A6:B0:27:4A:1F:64:DE:A1:F9:20:ED:92:A9:CE:1B Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84B26BC95918430A3E1D0D74C7E819 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aCGmjYqmsCdKH2Teofkg7ZKpzhs.roa Signing time: Fri 02 Jan 2026 16:22:41 +0000 ROA not before: Fri 02 Jan 2026 16:22:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213069 IP address blocks: 2a14:6e40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b2:6b:c9:59:18:43:0a:3e:1d:0d:74:c7:e8:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6821a68d8aa6b0274a1f64dea1f920ed92a9ce1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:07:e9:4c:45:f6:a0:20:63:03:21:5c:7f:5c: 8a:6b:63:4b:65:99:58:7e:62:96:ac:4c:d3:9e:e4: a2:80:28:27:22:44:c7:e4:66:a3:6d:d5:02:d6:1b: 9b:a4:61:09:37:7b:f8:07:46:f7:0e:06:34:19:b8: 71:d4:16:e4:6c:60:1a:a1:2d:b0:25:84:87:3e:07: e2:ca:4f:1a:80:3b:9e:79:9d:45:3a:d9:8f:88:6a: 71:b3:82:d1:2e:0d:fa:6d:41:c6:fa:ca:6e:42:8f: 5f:4c:fb:94:80:5b:75:fa:67:95:c6:54:77:a8:79: b9:75:44:be:3e:a3:1b:3a:ab:8c:14:97:17:f0:af: cb:5b:72:13:1a:a7:78:9a:66:76:ef:ea:4f:ec:37: 29:80:97:a9:17:4b:d1:1f:0c:dd:20:e3:69:01:25: ba:de:da:6b:24:bf:ab:9c:a3:e9:df:f8:1b:ac:5b: dd:55:3a:10:3f:34:8f:31:9d:cd:05:b9:33:b2:ea: b2:10:ca:22:6e:81:87:f4:52:0a:33:a1:91:00:00: a7:a9:53:5f:d0:32:d7:f0:26:15:e7:19:c2:3d:de: 82:a6:e0:a1:4e:4e:a0:6c:04:54:45:eb:55:26:6e: 54:38:31:6c:55:94:5e:e9:61:a2:16:c5:3e:76:d2: 4c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:21:A6:8D:8A:A6:B0:27:4A:1F:64:DE:A1:F9:20:ED:92:A9:CE:1B X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aCGmjYqmsCdKH2Teofkg7ZKpzhs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:6e40:1::/48 Signature Algorithm: sha256WithRSAEncryption b1:81:ef:23:b2:f5:79:00:33:a0:c5:c1:1b:c6:fd:67:a1:d3: 8a:61:7a:d4:29:53:c8:93:ac:b2:c0:38:f2:68:05:9c:27:56: 32:65:d6:85:90:8f:76:03:53:77:63:cd:bf:21:52:13:78:52: 59:bd:37:6f:77:a1:88:c2:32:af:f4:43:26:77:1e:fe:3b:0a: 12:dc:1c:4f:d7:71:e2:0b:17:ee:dc:c7:e0:9f:bc:f2:5c:a9: d5:47:f5:47:42:34:06:4c:73:73:23:58:a8:54:00:18:f1:c4: ae:31:77:11:c3:1d:3e:0d:23:48:40:02:55:cb:b0:8f:d4:40: fd:10:23:a9:90:2f:94:fd:36:ff:78:7a:7a:d6:b4:23:74:0e: ef:cb:e9:6f:f7:a5:6c:e0:5a:74:3f:0c:62:76:84:8b:45:a3: 96:74:de:ce:a5:dd:1f:7c:f5:2a:f2:0d:0b:af:9e:94:a5:1b: 33:b7:de:76:d5:db:83:8a:ec:1e:06:91:f9:a4:17:03:c2:de: ae:52:0c:9d:11:84:be:6c:18:71:a9:83:ac:57:c1:8d:e7:63: 7f:b7:e3:46:0a:c3:6e:55:71:b8:58:1b:86:d7:61:1a:60:bc: e0:10:9e:13:84:bb:f6:55:cf:96:05:f2:b3:1d:8d:0a:74:6c: 24:7a:f3:07 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/hLJryVkYQwo+HQ10x+gZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODIxYTY4ZDhhYTZiMDI3NGExZjY0ZGVhMWY5MjBlZDkyYTljZTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwfpTEX2oCBjAyFcf1yKa2NLZZlY fmKWrEzTnuSigCgnIkTH5GajbdUC1hubpGEJN3v4B0b3DgY0Gbhx1BbkbGAaoS2w JYSHPgfiyk8agDueeZ1FOtmPiGpxs4LRLg36bUHG+spuQo9fTPuUgFt1+meVxlR3 qHm5dUS+PqMbOquMFJcX8K/LW3ITGqd4mmZ27+pP7DcpgJepF0vRHwzdIONpASW6 3tprJL+rnKPp3/gbrFvdVToQPzSPMZ3NBbkzsuqyEMoiboGH9FIKM6GRAACnqVNf 0DLX8CYV5xnCPd6CpuChTk6gbARURetVJm5UODFsVZRe6WGiFsU+dtJMEQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGghpo2KprAnSh9k3qH5IO2Sqc4bMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvYUNHbWpZcW1zQ2RLSDJUZW9ma2c3WktwemhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhRuQAAB MA0GCSqGSIb3DQEBCwUAA4IBAQCxge8jsvV5ADOgxcEbxv1nodOKYXrUKVPIk6yy wDjyaAWcJ1YyZdaFkI92A1N3Y82/IVITeFJZvTdvd6GIwjKv9EMmdx7+OwoS3BxP 13HiCxfu3Mfgn7zyXKnVR/VHQjQGTHNzI1ioVAAY8cSuMXcRwx0+DSNIQAJVy7CP 1ED9ECOpkC+U/Tb/eHp61rQjdA7vy+lv96Vs4Fp0PwxidoSLRaOWdN7Opd0ffPUq 8g0Lr56UpRszt9521duDiuweBpH5pBcDwt6uUgydEYS+bBhxqYOsV8GN52N/t+NG CsNuVXG4WBuG12EaYLzgEJ4ThLv2Vc+WBfKzHY0KdGwkevMH -----END CERTIFICATE-----Generated at Mon Jan 5 14:35:51 2026 by rpki-client