This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/AVs0tuliwUi6xLLyi90OZYGXT2M.roa File: AVs0tuliwUi6xLLyi90OZYGXT2M.roa (raw, json) Hash identifier: txrc9e4RwHZNeP+Ca0podTlJqzb8siRnIPuSSPBk3eA= Subject key identifier: 01:5B:34:B6:E9:62:C1:48:BA:C4:B2:F2:8B:DD:0E:65:81:97:4F:63 Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA55BA85F55F8ED161FB4C336B1E8E2 Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/AVs0tuliwUi6xLLyi90OZYGXT2M.roa Signing time: Thu 01 Jan 2026 22:19:53 +0000 ROA not before: Thu 01 Jan 2026 22:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205923 IP address blocks: 2a0f:f44::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:5b:a8:5f:55:f8:ed:16:1f:b4:c3:36:b1:e8:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=015b34b6e962c148bac4b2f28bdd0e6581974f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:18:91:2f:56:e3:b7:92:49:2f:70:bd:40:c1: 73:43:3a:94:6a:a8:96:8d:ce:28:71:8b:81:6c:c6: 69:b4:1c:89:7e:2c:87:f0:4c:9a:cf:e2:f4:db:f7: c0:f8:bb:23:a1:41:f7:4b:75:2a:35:95:64:f4:38: 95:3b:c8:b1:ed:ab:50:0f:1e:d0:b2:c1:87:16:c9: 07:bf:83:78:c1:14:0b:aa:e9:bd:0b:60:3c:ca:b7: 62:e2:c2:6c:ec:77:27:8f:82:91:f9:37:6c:1e:9c: af:4c:ad:88:b6:f7:f5:a7:ac:c6:e1:78:3c:13:98: 8d:f2:c4:d9:3c:40:2d:50:79:4a:31:bd:69:99:4c: e5:72:83:22:b8:be:25:01:7a:42:2d:78:05:a5:3b: 61:34:cc:bf:80:6a:11:ac:02:93:ad:1b:79:48:97: 5f:3c:49:98:a7:de:0c:38:16:4b:47:9c:a9:e3:7d: d6:27:77:54:bd:16:5d:57:68:7b:45:bb:ad:94:f8: 2e:62:bb:cc:d5:6a:91:83:42:05:61:69:4b:55:ce: ec:e7:fa:a8:ed:9f:4d:b9:07:39:0e:15:6f:23:ed: 95:43:e8:fe:51:d0:9d:c1:04:fe:81:b3:31:cf:dd: 93:49:ca:92:78:f4:e3:d6:30:f2:02:fb:8f:7b:95: ab:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5B:34:B6:E9:62:C1:48:BA:C4:B2:F2:8B:DD:0E:65:81:97:4F:63 X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/AVs0tuliwUi6xLLyi90OZYGXT2M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:f44::/32 Signature Algorithm: sha256WithRSAEncryption 30:2d:7b:41:5b:a0:92:35:2f:51:ea:37:15:4d:35:13:f2:24: f7:2f:d1:4c:8d:ab:62:d4:46:16:b1:f4:aa:a8:65:01:7d:b9: 96:3b:a1:5c:f3:a4:3d:46:2d:db:06:d5:57:b6:67:22:e4:d9: ba:bd:44:66:6a:e9:cf:db:06:7e:28:54:27:74:0f:aa:af:70: 4d:68:ec:9b:2c:e7:75:21:68:01:77:3d:15:e8:a3:84:3a:a6: b8:3b:29:0d:29:6b:bc:61:1a:3a:7d:59:6e:5a:04:e2:08:3a: bd:34:ad:0c:ac:47:3d:9a:89:86:55:d6:3b:c6:73:b3:4a:8b: 66:b2:9b:10:56:fd:46:a9:41:b8:b4:84:ea:96:02:41:8c:4f: 90:6e:02:d2:eb:9d:13:40:ac:80:75:2f:92:1f:21:54:31:1b: 63:47:06:bc:a7:82:50:8b:73:74:07:6e:39:e7:31:39:48:40: 41:c4:40:67:db:9e:45:f0:dd:d7:da:7d:31:dc:66:a6:f1:d8: 40:4d:aa:f9:20:16:03:19:16:cd:7a:5b:b8:aa:a6:f0:dc:6a: 13:bf:d8:9e:b7:a0:45:11:ff:36:bf:7e:12:4b:71:53:8b:20: 21:a0:52:0a:d1:67:2b:51:8f:e2:80:35:dd:4e:8c:d3:35:ea: 40:31:72:b4 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7pVuoX1X47RYftMM2sejiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTViMzRiNmU5NjJjMTQ4YmFjNGIyZjI4YmRkMGU2NTgxOTc0ZjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxiRL1bjt5JJL3C9QMFzQzqUaqiW jc4ocYuBbMZptByJfiyH8Eyaz+L02/fA+LsjoUH3S3UqNZVk9DiVO8ix7atQDx7Q ssGHFskHv4N4wRQLqum9C2A8yrdi4sJs7Hcnj4KR+TdsHpyvTK2Itvf1p6zG4Xg8 E5iN8sTZPEAtUHlKMb1pmUzlcoMiuL4lAXpCLXgFpTthNMy/gGoRrAKTrRt5SJdf PEmYp94MOBZLR5yp433WJ3dUvRZdV2h7RbutlPguYrvM1WqRg0IFYWlLVc7s5/qo 7Z9NuQc5DhVvI+2VQ+j+UdCdwQT+gbMxz92TScqSePTj1jDyAvuPe5WrDQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFAFbNLbpYsFIusSy8ovdDmWBl09jMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvQVZzMHR1bGl3VWk2eExMeWk5ME9aWUdYVDJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg8PRDAN BgkqhkiG9w0BAQsFAAOCAQEAMC17QVugkjUvUeo3FU01E/Ik9y/RTI2rYtRGFrH0 qqhlAX25ljuhXPOkPUYt2wbVV7ZnIuTZur1EZmrpz9sGfihUJ3QPqq9wTWjsmyzn dSFoAXc9FeijhDqmuDspDSlrvGEaOn1ZbloE4gg6vTStDKxHPZqJhlXWO8Zzs0qL ZrKbEFb9RqlBuLSE6pYCQYxPkG4C0uudE0CsgHUvkh8hVDEbY0cGvKeCUItzdAdu OecxOUhAQcRAZ9ueRfDd19p9MdxmpvHYQE2q+SAWAxkWzXpbuKqm8NxqE7/Ynreg RRH/Nr9+EktxU4sgIaBSCtFnK1GP4oA13U6M0zXqQDFytA== -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:18 2026 by rpki-client