This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/A2ExeyQHGNk51S6yOHeJr6XOVf4.roa File: A2ExeyQHGNk51S6yOHeJr6XOVf4.roa (raw, json) Hash identifier: GO30lk5aBIlBJaHx15f4eDa39AuOipkWS6SvYKidn14= Subject key identifier: 03:61:31:7B:24:07:18:D9:39:D5:2E:B2:38:77:89:AF:A5:CE:55:FE Certificate issuer: /CN=3e9bd18a3531353566ed18140cad741905beafae Certificate serial: 019C4409674DD3835858B42B2F4ED389B9D2 Authority key identifier: 3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/A2ExeyQHGNk51S6yOHeJr6XOVf4.roa Signing time: Mon 09 Feb 2026 20:13:12 +0000 ROA not before: Mon 09 Feb 2026 20:13:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199008 IP address blocks: 2a09:1187::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:13:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:09:67:4d:d3:83:58:58:b4:2b:2f:4e:d3:89:b9:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e9bd18a3531353566ed18140cad741905beafae Validity Not Before: Feb 9 20:13:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0361317b240718d939d52eb2387789afa5ce55fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7a:46:7c:6c:ad:d7:75:a9:9e:b7:43:91:33: f1:26:d3:34:4d:f8:51:00:81:5a:b4:6a:3e:f5:7e: f5:c1:55:b0:ec:04:3e:97:34:93:f9:0d:92:56:73: cb:b8:40:41:ac:42:df:9e:9a:58:4b:6e:a2:98:31: a0:6b:d2:c1:f8:89:9c:3c:51:65:6d:74:5a:ed:31: 36:46:a3:13:f5:8a:26:8d:3f:35:9a:fa:fe:ca:fb: 9e:cb:2a:d8:aa:01:f8:d3:41:81:69:48:e2:e4:18: d2:7d:2c:71:3f:0c:f4:fd:b4:5f:49:32:82:5f:78: 51:d5:a7:c5:7b:b5:9c:03:8c:52:ad:64:24:cf:ef: b8:b9:68:ea:90:2b:51:69:82:00:75:28:dd:1e:a8: f5:dd:50:0a:bf:0b:a4:d4:ef:ad:f7:93:5a:6f:b4: bc:fc:24:b1:6f:18:02:02:ed:b9:d5:17:29:2b:0b: 51:18:41:8d:21:a2:1a:51:cb:67:e4:7e:cd:68:04: 3a:99:d6:2e:4d:8b:90:83:55:52:fa:51:99:67:8f: be:3e:d3:f5:12:e4:e7:56:b2:54:40:c3:b7:08:d2: 30:41:17:04:e9:a8:3e:03:eb:30:51:06:d8:0d:99: 77:c2:8d:ae:f5:98:d6:48:c9:92:4f:e7:98:ec:61: 57:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:61:31:7B:24:07:18:D9:39:D5:2E:B2:38:77:89:AF:A5:CE:55:FE X509v3 Authority Key Identifier: keyid:3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/A2ExeyQHGNk51S6yOHeJr6XOVf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:1187::/32 Signature Algorithm: sha256WithRSAEncryption 11:8a:34:66:2d:15:0d:69:ff:4f:74:38:90:24:cd:00:00:4c: 0a:ca:30:2d:e9:7f:9f:dd:8a:80:8c:b4:cf:78:d0:b7:2a:8c: 10:cb:92:c3:6d:75:1b:50:fe:27:07:f4:31:39:4a:5e:37:30: db:a7:26:2e:d8:76:a7:23:20:41:09:f5:8f:e5:95:82:c4:2a: b7:46:aa:d5:99:6f:c7:b7:dc:7f:80:9f:49:34:62:3a:7a:3f: 04:2d:dd:31:90:60:22:d6:36:04:e1:08:65:af:3d:4f:58:d4: cd:6d:f0:89:a7:32:fd:45:7a:f4:39:60:bf:19:d1:64:3b:69: 88:72:75:7c:53:a7:b3:33:6c:38:b3:98:40:19:61:dd:fa:50: 59:d7:cc:cb:10:01:3c:15:32:08:62:e0:e4:dc:86:78:08:3d: 48:63:d3:e2:ee:19:33:3c:c9:d5:56:fa:c3:8f:10:ca:e0:92: 1e:ed:80:43:f9:68:82:5e:41:37:37:9e:3c:31:a8:31:03:47: fe:41:ce:c4:b9:3a:08:84:b7:20:c7:63:93:4d:b5:5f:e0:98: 9f:52:d0:36:5e:6c:66:9d:91:ee:ca:37:da:a7:2b:66:a8:6f: 9f:9c:66:63:d8:f6:1d:c1:7e:42:fe:aa:be:13:05:12:05:bc: 15:8f:10:93 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZxECWdN04NYWLQrL07TibnSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlOWJkMThhMzUzMTM1MzU2NmVkMTgxNDBjYWQ3NDE5MDVi ZWFmYWUwHhcNMjYwMjA5MjAxMzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzYxMzE3YjI0MDcxOGQ5MzlkNTJlYjIzODc3ODlhZmE1Y2U1NWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0npGfGyt13WpnrdDkTPxJtM0TfhR AIFatGo+9X71wVWw7AQ+lzST+Q2SVnPLuEBBrELfnppYS26imDGga9LB+ImcPFFl bXRa7TE2RqMT9YomjT81mvr+yvueyyrYqgH400GBaUji5BjSfSxxPwz0/bRfSTKC X3hR1afFe7WcA4xSrWQkz++4uWjqkCtRaYIAdSjdHqj13VAKvwuk1O+t95Nab7S8 /CSxbxgCAu251RcpKwtRGEGNIaIaUctn5H7NaAQ6mdYuTYuQg1VS+lGZZ4++PtP1 EuTnVrJUQMO3CNIwQRcE6ag+A+swUQbYDZl3wo2u9ZjWSMmST+eY7GFXewIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFANhMXskBxjZOdUusjh3ia+lzlX+MB8GA1UdIwQY MBaAFD6b0Yo1MTU1Zu0YFAytdBkFvq+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHB2UmlqVXhOVFZtN1JnVURLMTBHUVctcjY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS84NmRiYjQtNmFlNC00NzZlLWE2MDEt ZWEyNzdiNDkyZjFlLzEvQTJFeGV5UUhHTms1MVM2eU9IZUpyNlhPVmY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS84NmRiYjQtNmFlNC00NzZlLWE2MDEtZWEyNzdiNDkyZjFl LzEvUHB2UmlqVXhOVFZtN1JnVURLMTBHUVctcjY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgkRhzAN BgkqhkiG9w0BAQsFAAOCAQEAEYo0Zi0VDWn/T3Q4kCTNAABMCsowLel/n92KgIy0 z3jQtyqMEMuSw211G1D+Jwf0MTlKXjcw26cmLth2pyMgQQn1j+WVgsQqt0aq1Zlv x7fcf4CfSTRiOno/BC3dMZBgItY2BOEIZa89T1jUzW3wiacy/UV69DlgvxnRZDtp iHJ1fFOnszNsOLOYQBlh3fpQWdfMyxABPBUyCGLg5NyGeAg9SGPT4u4ZMzzJ1Vb6 w48QyuCSHu2AQ/logl5BNzeePDGoMQNH/kHOxLk6CIS3IMdjk021X+CYn1LQNl5s Zp2R7so32qcrZqhvn5xmY9j2HcF+Qv6qvhMFEgW8FY8Qkw== -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:24 2026 by rpki-client