This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ah0jiQnxjyeZK5he6RdTUE-ipnY.roa File: ah0jiQnxjyeZK5he6RdTUE-ipnY.roa (raw, json) Hash identifier: JJj18HJFbOb1f81VJKQKUC1al7turx0OrE/9nAccLK8= Subject key identifier: 6A:1D:23:89:09:F1:8F:27:99:2B:98:5E:E9:17:53:50:4F:A2:A6:76 Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Certificate serial: 019B7E380451983DBFED73BB680C265BB256 Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ah0jiQnxjyeZK5he6RdTUE-ipnY.roa Signing time: Fri 02 Jan 2026 10:19:18 +0000 ROA not before: Fri 02 Jan 2026 10:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8772 IP address blocks: 2a0a:b42::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:04:51:98:3d:bf:ed:73:bb:68:0c:26:5b:b2:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Validity Not Before: Jan 2 10:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a1d238909f18f27992b985ee91753504fa2a676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:aa:bd:ed:d0:aa:84:00:4f:ce:77:f2:04:b7: 36:c2:cb:89:f2:0d:93:97:de:57:8e:40:9f:a0:c3: bd:e8:48:9f:d2:15:04:ce:63:de:1c:54:1f:69:1a: 41:af:96:2f:c0:b6:bc:6d:73:b0:4c:b3:cd:66:ff: 65:13:97:56:bf:1f:16:3a:34:7b:92:07:dc:23:bc: c8:03:9c:3d:d9:12:55:60:96:7e:66:1e:c3:3d:64: 9c:2a:55:a4:3c:cf:38:50:be:38:51:21:82:2c:b7: 6a:a7:59:c7:9f:89:70:86:2e:4a:a4:ca:f5:7e:a3: 67:0c:1f:8d:b6:5e:79:6c:bb:96:78:4b:42:db:69: a4:30:e5:db:f8:6d:2e:7e:15:8b:02:8b:e2:2f:27: 46:17:41:f5:3f:bb:7d:ed:02:b4:4d:82:8a:1e:02: ed:4a:5f:ca:26:c9:02:40:dc:40:0c:c8:9d:9b:b0: 29:00:c4:99:98:ef:98:45:cd:9f:03:dc:dc:7b:b3: 35:ab:f6:2d:ed:8a:9b:1a:db:d0:0d:5a:06:d3:01: 7a:89:bd:a6:f9:e2:35:c1:d4:07:4d:2a:31:47:39: e7:a2:27:12:1f:af:6a:d6:00:81:a0:20:38:73:e3: 13:8a:02:af:47:76:56:9a:97:93:17:4f:c2:23:fa: bd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:1D:23:89:09:F1:8F:27:99:2B:98:5E:E9:17:53:50:4F:A2:A6:76 X509v3 Authority Key Identifier: keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ah0jiQnxjyeZK5he6RdTUE-ipnY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:b42::/32 Signature Algorithm: sha256WithRSAEncryption 5f:a7:d4:c3:5f:4f:53:9a:c2:d0:3b:e5:d2:39:ea:ae:96:bd: 82:28:96:a9:fb:0e:24:d4:94:f6:45:f0:68:02:31:fd:e5:87: bc:8b:d3:6c:e7:67:af:c4:fd:bf:01:df:37:62:a4:21:cb:25: b0:eb:96:64:1e:31:fe:c0:23:18:3a:eb:71:56:b7:2b:74:41: 21:8e:ec:e2:b3:54:8b:26:57:93:ff:2b:51:c2:6d:8c:1f:7d: 00:83:66:39:a4:e3:a7:c4:83:b2:45:d5:35:02:55:ad:ed:74: 44:c1:90:80:d5:ed:66:03:d3:28:dd:4a:4e:ed:41:1a:0c:f1: 97:70:d0:b0:f0:91:bb:eb:9c:16:0b:c2:fa:75:e5:8d:13:28: f6:22:0c:c5:62:d2:6d:77:ba:bb:9a:e3:94:af:52:bd:da:05: 03:bc:62:91:fa:c3:07:d9:94:71:cd:6f:9e:ea:44:c8:b9:b0: 46:1d:de:fd:e8:ed:23:63:35:bc:06:7a:48:35:c6:e7:c8:04: 2c:97:e2:75:33:8b:83:bb:16:70:29:4b:38:3b:be:b7:cc:a6: e2:85:dd:14:d7:03:dc:f9:27:94:1f:43:a4:84:26:87:41:6a: 15:99:50:78:71:94:69:d1:e4:5c:ad:58:0a:33:c7:04:91:fe: 66:a4:0b:b5 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+OARRmD2/7XO7aAwmW7JWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3 NzliYjEwHhcNMjYwMTAyMTAxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTFkMjM4OTA5ZjE4ZjI3OTkyYjk4NWVlOTE3NTM1MDRmYTJhNjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaq97dCqhABPznfyBLc2wsuJ8g2T l95XjkCfoMO96Eif0hUEzmPeHFQfaRpBr5YvwLa8bXOwTLPNZv9lE5dWvx8WOjR7 kgfcI7zIA5w92RJVYJZ+Zh7DPWScKlWkPM84UL44USGCLLdqp1nHn4lwhi5KpMr1 fqNnDB+Ntl55bLuWeEtC22mkMOXb+G0ufhWLAoviLydGF0H1P7t97QK0TYKKHgLt Sl/KJskCQNxADMidm7ApAMSZmO+YRc2fA9zce7M1q/Yt7YqbGtvQDVoG0wF6ib2m +eI1wdQHTSoxRznnoicSH69q1gCBoCA4c+MTigKvR3ZWmpeTF0/CI/q9GQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFGodI4kJ8Y8nmSuYXukXU1BPoqZ2MB8GA1UdIwQY MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt NmI0MzcyNjAyMDk2LzEvYWgwamlRbnhqeWVaSzVoZTZSZFRVRS1pcG5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2 LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgoLQjAN BgkqhkiG9w0BAQsFAAOCAQEAX6fUw19PU5rC0Dvl0jnqrpa9giiWqfsOJNSU9kXw aAIx/eWHvIvTbOdnr8T9vwHfN2KkIcslsOuWZB4x/sAjGDrrcVa3K3RBIY7s4rNU iyZXk/8rUcJtjB99AINmOaTjp8SDskXVNQJVre10RMGQgNXtZgPTKN1KTu1BGgzx l3DQsPCRu+ucFgvC+nXljRMo9iIMxWLSbXe6u5rjlK9SvdoFA7xikfrDB9mUcc1v nupEyLmwRh3e/ejtI2M1vAZ6SDXG58gELJfidTOLg7sWcClLODu+t8ym4oXdFNcD 3PknlB9DpIQmh0FqFZlQeHGUadHkXK1YCjPHBJH+ZqQLtQ== -----END CERTIFICATE-----Generated at Tue Jan 20 17:19:13 2026 by rpki-client