This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/Ac2bylIr7B437ec52nmYNkxcBLU.roa File: Ac2bylIr7B437ec52nmYNkxcBLU.roa (raw, json) Hash identifier: NVzCCl4oqQBqLlnzk4NHLtjdOZIYGTwFiCs0i6US8YQ= Subject key identifier: 01:CD:9B:CA:52:2B:EC:1E:37:ED:E7:39:DA:79:98:36:4C:5C:04:B5 Certificate issuer: /CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69 Certificate serial: 019B797F0F94867061682AB6A3C3308ED238 Authority key identifier: E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/Ac2bylIr7B437ec52nmYNkxcBLU.roa Signing time: Thu 01 Jan 2026 12:18:48 +0000 ROA not before: Thu 01 Jan 2026 12:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8987 IP address blocks: 2a00:42e0:1000::/36 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 06:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:0f:94:86:70:61:68:2a:b6:a3:c3:30:8e:d2:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69 Validity Not Before: Jan 1 12:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01cd9bca522bec1e37ede739da7998364c5c04b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:92:ab:47:1f:62:76:61:c6:03:15:49:9a:57: c5:4e:c4:24:8b:0f:c2:b2:ad:80:56:e5:dc:cc:b8: cd:90:57:31:df:b1:c8:ce:e8:6d:fa:06:b4:89:60: 3a:ef:dc:1b:e2:43:6e:1a:5a:81:03:df:75:09:26: 11:c8:58:5e:49:ee:2b:d1:f2:fe:99:af:8c:d0:b7: 36:ba:a5:a1:2b:70:30:b5:71:87:0a:ea:f9:50:8d: 2d:e1:9c:0d:50:70:79:fa:3d:05:87:f0:1d:49:9c: 9b:4e:04:01:f3:0e:c6:c9:33:9e:41:4a:b6:e5:dc: f9:bb:39:90:67:b1:d7:58:18:46:b5:8d:51:e3:34: c5:1d:7a:7d:58:d3:13:1f:56:24:e7:d6:02:4d:20: eb:f1:54:55:13:ec:31:a0:be:f5:5e:64:ab:f5:a5: 5a:c7:27:a9:1a:c4:18:a2:9c:43:75:8f:6b:a1:27: be:bd:00:09:10:ab:39:5d:09:f5:a6:84:34:37:ae: 90:e4:22:03:d9:1f:10:fe:98:a8:ca:e1:a9:05:28: 11:19:5e:2a:88:69:e9:0a:d2:99:0c:a3:9b:cc:83: 30:5b:3d:e0:bf:6f:5e:9a:8e:4b:bc:64:e8:22:10: f2:f4:5b:e5:52:18:e1:9e:28:cd:25:c6:ce:cf:fe: dc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CD:9B:CA:52:2B:EC:1E:37:ED:E7:39:DA:79:98:36:4C:5C:04:B5 X509v3 Authority Key Identifier: keyid:E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/Ac2bylIr7B437ec52nmYNkxcBLU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:42e0:1000::/36 Signature Algorithm: sha256WithRSAEncryption c1:f1:50:2b:81:75:83:7e:9d:04:86:fd:5c:d6:bb:75:a3:94: 65:94:1c:0e:6e:14:a0:0f:94:16:a7:30:aa:46:95:80:1b:18: 23:11:cc:e8:46:31:1e:62:67:a1:b7:62:56:8a:fb:7b:3b:71: 77:d1:1e:e1:cb:ac:a1:91:69:cb:42:8b:e6:cc:50:79:06:67: b2:c9:74:19:d8:31:ac:1f:1f:3a:9e:d5:a1:78:07:d6:5b:b3: 76:48:48:c4:3b:76:cb:d1:cf:95:62:9d:78:3f:90:81:ab:41: dc:a5:a0:a3:25:67:aa:91:34:f4:74:47:f8:b9:e5:e2:35:65: 9c:6e:25:28:91:30:fc:04:75:5b:7e:a1:a1:8e:11:7b:af:9f: 5f:82:31:2d:b4:89:63:34:cd:25:5d:ed:fc:2a:16:f5:83:66: bc:64:44:33:bf:f7:52:38:d2:4a:41:11:76:d9:65:15:21:c8: 8b:10:07:6d:4d:c6:0a:61:a1:3f:52:fb:35:e7:2e:f2:67:6e: 1d:bf:47:83:27:d8:77:2b:cc:21:0f:51:f6:3f:6e:19:61:99: 73:6e:53:7c:20:b6:9a:a5:95:e7:ca:8c:6e:6c:80:1a:23:c2: f4:d3:d3:54:66:40:9f:56:01:7c:08:d3:a9:64:7e:14:e5:62: 0c:ab:d6:cd -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5fw+UhnBhaCq2o8MwjtI4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNjgyODYzZTk5ODdhOWViODY2OGJhMDdjOTZjOTlhMWIy ZGZlNjkwHhcNMjYwMTAxMTIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWNkOWJjYTUyMmJlYzFlMzdlZGU3MzlkYTc5OTgzNjRjNWMwNGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5KrRx9idmHGAxVJmlfFTsQkiw/C sq2AVuXczLjNkFcx37HIzuht+ga0iWA679wb4kNuGlqBA991CSYRyFheSe4r0fL+ ma+M0Lc2uqWhK3AwtXGHCur5UI0t4ZwNUHB5+j0Fh/AdSZybTgQB8w7GyTOeQUq2 5dz5uzmQZ7HXWBhGtY1R4zTFHXp9WNMTH1Yk59YCTSDr8VRVE+wxoL71XmSr9aVa xyepGsQYopxDdY9roSe+vQAJEKs5XQn1poQ0N66Q5CID2R8Q/pioyuGpBSgRGV4q iGnpCtKZDKObzIMwWz3gv29emo5LvGToIhDy9FvlUhjhnijNJcbOz/7cAQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFAHNm8pSK+weN+3nOdp5mDZMXAS1MB8GA1UdIwQY MBaAFOFoKGPpmHqeuGaLoHyWyZobLf5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFdnb1ktbVllcDY0Wm91Z2ZKYkptaHN0X21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lY2RjNWEtZWY1Mi00MTA3LWIzY2It M2JkYTM1MzljNmJjLzEvQWMyYnlsSXI3QjQzN2VjNTJubVlOa3hjQkxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9lY2RjNWEtZWY1Mi00MTA3LWIzY2ItM2JkYTM1MzljNmJj LzEvNFdnb1ktbVllcDY0Wm91Z2ZKYkptaHN0X21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgBC4BAw DQYJKoZIhvcNAQELBQADggEBAMHxUCuBdYN+nQSG/VzWu3WjlGWUHA5uFKAPlBan MKpGlYAbGCMRzOhGMR5iZ6G3YlaK+3s7cXfRHuHLrKGRactCi+bMUHkGZ7LJdBnY MawfHzqe1aF4B9Zbs3ZISMQ7dsvRz5VinXg/kIGrQdyloKMlZ6qRNPR0R/i55eI1 ZZxuJSiRMPwEdVt+oaGOEXuvn1+CMS20iWM0zSVd7fwqFvWDZrxkRDO/91I40kpB EXbZZRUhyIsQB21NxgphoT9S+zXnLvJnbh2/R4Mn2HcrzCEPUfY/bhlhmXNuU3wg tpqllefKjG5sgBojwvTT01RmQJ9WAXwI06lkfhTlYgyr1s0= -----END CERTIFICATE-----Generated at Fri Jan 2 16:04:15 2026 by rpki-client