This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/aqUiuM7FSwO0jQrVAdkkACyulNU.roa File: aqUiuM7FSwO0jQrVAdkkACyulNU.roa (raw, json) Hash identifier: QJoSdYm5s8mfEJjbCj5VhQz2H0KAbaPDRRmLmgZWht0= Subject key identifier: 6A:A5:22:B8:CE:C5:4B:03:B4:8D:0A:D5:01:D9:24:00:2C:AE:94:D5 Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Certificate serial: 019B797F180B3379370E41D06212A9BB585F Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/aqUiuM7FSwO0jQrVAdkkACyulNU.roa Signing time: Thu 01 Jan 2026 12:18:50 +0000 ROA not before: Thu 01 Jan 2026 12:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203624 IP address blocks: 2a14:c887:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 18:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:18:0b:33:79:37:0e:41:d0:62:12:a9:bb:58:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Validity Not Before: Jan 1 12:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6aa522b8cec54b03b48d0ad501d924002cae94d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6e:0f:8b:ac:3f:a1:50:de:7e:dc:f3:90:0c: 46:23:b5:8f:0e:9b:70:2a:9a:88:a6:31:32:85:5c: 3a:89:27:e2:3f:ce:88:b9:53:c8:76:66:8c:2c:e3: 4a:61:93:94:11:f8:9b:a8:c0:f7:48:0b:c8:55:81: d2:a1:a3:40:dc:26:e3:cf:e3:33:80:e9:13:43:19: d1:02:b7:82:39:dd:df:6c:4c:4d:c0:8d:18:31:3c: db:48:1f:bf:b5:84:ce:2b:bd:f8:6a:3a:ca:04:a5: 5e:3f:de:09:6a:3a:f5:f9:7a:58:0a:4f:81:a1:12: 2f:6c:51:80:db:42:eb:0f:a6:57:4d:33:da:1a:02: 94:da:e5:88:64:0d:38:a1:42:db:ea:e9:0c:f3:aa: 57:f9:ad:56:8b:2d:78:a5:83:5b:3d:fc:21:7b:46: cc:1d:1a:e6:f6:9c:24:9a:dc:5b:37:c6:d6:9e:f3: 7f:02:e2:3e:46:b4:c9:39:1d:43:0c:93:0b:be:53: f0:ba:dc:47:94:61:c5:f6:bd:07:41:fa:e3:a9:13: e6:ef:a2:b7:9c:f4:1b:b5:18:dc:db:0f:22:54:08: 91:24:06:e5:01:a1:35:37:71:1a:f5:d9:b6:24:8b: 3a:fc:e9:96:ec:36:5b:89:17:3c:64:8b:8b:fd:fc: a2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A5:22:B8:CE:C5:4B:03:B4:8D:0A:D5:01:D9:24:00:2C:AE:94:D5 X509v3 Authority Key Identifier: keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/aqUiuM7FSwO0jQrVAdkkACyulNU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c887:8000::/33 Signature Algorithm: sha256WithRSAEncryption 4b:c8:57:17:26:bc:30:f8:5e:0c:c5:84:d7:95:6f:42:3c:09: c7:13:90:e2:9a:0f:2e:5a:fa:bf:58:53:47:8d:a1:61:d1:6d: c1:bd:b4:a1:96:97:2e:1d:91:02:76:7a:b5:8a:93:fc:78:ad: 1f:be:9a:73:47:88:9e:bd:d2:39:8a:8c:31:ae:4b:48:42:6b: 83:3e:27:58:30:2e:91:c9:7f:f7:f9:fd:91:10:84:9e:ea:84: 6b:68:7e:73:7c:b6:61:59:5e:2d:ec:38:66:a0:ff:b9:21:55: 3e:8c:0e:f0:74:1f:d4:78:07:26:f3:58:73:12:1d:9f:97:d8: aa:3c:b7:45:12:db:00:10:cc:cd:39:ee:fd:f7:4d:d5:2c:af: 77:af:3b:c0:24:31:19:b8:27:1b:cf:fc:9e:e1:6c:2c:01:c4: 83:00:64:7d:d1:23:88:54:a2:38:60:97:aa:a2:44:54:74:23: 9e:d2:0d:92:bb:cd:4f:56:2c:d1:71:76:43:18:4e:1a:01:22: f3:96:36:f0:2c:25:96:bd:34:bf:0d:67:1b:be:0b:10:35:0d: 7d:eb:d7:77:48:68:ea:f8:3f:f1:0a:ce:ec:c5:cc:5c:58:da: db:e5:bf:68:fb:f1:09:fd:5d:7a:fd:73:00:5a:5c:fc:35:4b: 1c:db:96:25 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5fxgLM3k3DkHQYhKpu1hfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl MTRlNDQwHhcNMjYwMTAxMTIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWE1MjJiOGNlYzU0YjAzYjQ4ZDBhZDUwMWQ5MjQwMDJjYWU5NGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG4Pi6w/oVDeftzzkAxGI7WPDptw KpqIpjEyhVw6iSfiP86IuVPIdmaMLONKYZOUEfibqMD3SAvIVYHSoaNA3Cbjz+Mz gOkTQxnRAreCOd3fbExNwI0YMTzbSB+/tYTOK734ajrKBKVeP94Jajr1+XpYCk+B oRIvbFGA20LrD6ZXTTPaGgKU2uWIZA04oULb6ukM86pX+a1Wiy14pYNbPfwhe0bM HRrm9pwkmtxbN8bWnvN/AuI+RrTJOR1DDJMLvlPwutxHlGHF9r0HQfrjqRPm76K3 nPQbtRjc2w8iVAiRJAblAaE1N3Ea9dm2JIs6/OmW7DZbiRc8ZIuL/fyiHQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFGqlIrjOxUsDtI0K1QHZJAAsrpTVMB8GA1UdIwQY MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt NzlmN2I2ZWE3YzE0LzEvYXFVaXVNN0ZTd08walFyVkFka2tBQ3l1bE5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0 LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHKhTIh4Aw DQYJKoZIhvcNAQELBQADggEBAEvIVxcmvDD4XgzFhNeVb0I8CccTkOKaDy5a+r9Y U0eNoWHRbcG9tKGWly4dkQJ2erWKk/x4rR++mnNHiJ690jmKjDGuS0hCa4M+J1gw LpHJf/f5/ZEQhJ7qhGtofnN8tmFZXi3sOGag/7khVT6MDvB0H9R4BybzWHMSHZ+X 2Ko8t0US2wAQzM057v33TdUsr3evO8AkMRm4JxvP/J7hbCwBxIMAZH3RI4hUojhg l6qiRFR0I57SDZK7zU9WLNFxdkMYThoBIvOWNvAsJZa9NL8NZxu+CxA1DX3r13dI aOr4P/EKzuzFzFxY2tvlv2j78Qn9XXr9cwBaXPw1SxzbliU= -----END CERTIFICATE-----Generated at Sun Jan 25 03:15:57 2026 by rpki-client