This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/0yjFYiyH8c4Kvnnuzk3XUQWka3U.roa File: 0yjFYiyH8c4Kvnnuzk3XUQWka3U.roa (raw, json) Hash identifier: 8CbnBqCqNuJJeCjiCl9MVRUgtudEnYSxf9iLux5cWW4= Subject key identifier: D3:28:C5:62:2C:87:F1:CE:0A:BE:79:EE:CE:4D:D7:51:05:A4:6B:75 Certificate issuer: /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283 Certificate serial: 019B7B3562446600DA463642D2FF201077D4 Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/0yjFYiyH8c4Kvnnuzk3XUQWka3U.roa Signing time: Thu 01 Jan 2026 20:17:34 +0000 ROA not before: Thu 01 Jan 2026 20:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59747 IP address blocks: 2001:148f:fffc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:62:44:66:00:da:46:36:42:d2:ff:20:10:77:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283 Validity Not Before: Jan 1 20:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d328c5622c87f1ce0abe79eece4dd75105a46b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e8:29:26:c9:2e:c1:0d:b7:29:c8:48:8b:3e: d4:f8:f0:7d:5a:da:f2:68:f3:7d:b6:6f:0b:1c:05: d1:81:d8:8a:2b:c3:6e:4f:ad:4c:97:a7:39:a2:65: 80:61:c8:62:86:98:8c:ef:ce:b8:6a:b5:32:bf:3a: f9:2f:4f:ed:0c:99:b8:73:a4:77:a8:ab:ad:05:88: 57:70:dc:db:f2:1d:90:1d:46:73:61:7c:8a:f8:e0: e9:1b:16:19:12:2d:5a:2e:93:a9:a3:47:0f:3b:ee: af:ff:58:37:ad:1e:1d:89:b7:7c:e0:67:33:35:7b: 9a:84:60:5f:d2:2b:f3:5a:b7:88:59:b9:dd:ea:32: f3:d7:30:d2:88:12:e5:8e:5c:10:ef:8d:5a:15:64: 8d:a8:20:9e:44:99:a6:de:f5:d4:04:a1:d7:93:a0: b5:e0:52:63:3e:44:ca:94:c7:a0:1a:a5:66:cb:52: 0b:eb:7b:3c:41:48:7e:e2:4b:8f:95:32:84:51:26: 9f:94:e9:3d:c5:5b:5a:1c:ca:c8:55:27:0e:fa:4b: 74:3b:98:84:91:d3:55:bd:ff:e6:fd:8a:00:26:e3: 53:99:d6:80:de:e2:cd:2e:99:91:ec:39:c5:a9:bb: 22:d7:6c:57:cf:76:7a:4d:af:c0:d2:66:ff:20:3d: c4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:28:C5:62:2C:87:F1:CE:0A:BE:79:EE:CE:4D:D7:51:05:A4:6B:75 X509v3 Authority Key Identifier: keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/0yjFYiyH8c4Kvnnuzk3XUQWka3U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:148f:fffc::/48 Signature Algorithm: sha256WithRSAEncryption 5c:b7:3c:b6:c8:9d:6a:43:65:b8:67:1f:b8:ec:72:5c:ea:9d: 4f:a9:a2:14:ad:4a:6a:23:e5:fe:ad:10:18:45:0c:15:59:7d: 9d:8c:f0:d4:90:31:bd:e1:31:31:93:a3:c2:b1:1f:15:36:d8: 3b:f0:6e:31:ad:d1:4b:78:3e:a7:11:7b:73:b8:10:b3:ed:13: ed:72:67:78:77:58:e0:43:9e:94:76:36:e2:fc:d8:ca:ac:69: 79:50:36:75:c0:b3:a3:f2:76:65:e8:50:95:3d:06:ad:e7:6c: 66:9b:3d:4b:ef:6f:b0:e6:28:db:7b:fd:a1:23:3e:65:5f:53: 82:3c:36:28:2b:e0:68:ad:73:07:25:55:23:76:fe:dd:7f:f1: 71:f4:f9:72:b2:09:75:62:c6:83:59:bc:b7:9f:5c:06:0a:c7: 1a:1b:ba:af:88:37:9f:33:42:00:44:cc:99:fe:15:94:de:c4: 5e:c1:71:4a:50:9e:68:cb:28:4a:61:98:a2:d7:4c:b4:19:11: 35:6f:8e:3a:b8:56:5a:ea:44:55:80:13:f6:74:f7:cd:cc:2f: 0a:3c:02:1d:27:92:34:ea:44:48:15:65:f1:f2:c3:5e:3e:65: 86:9e:2d:68:5f:fc:71:29:0d:ca:49:55:54:31:cf:38:74:ef: 1a:83:29:e4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7NWJEZgDaRjZC0v8gEHfUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNTdmZmU4MjJiM2JhN2JjMTk0ZGI3YTczNGM4NWVmY2Vm MmYyODMwHhcNMjYwMTAxMjAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzI4YzU2MjJjODdmMWNlMGFiZTc5ZWVjZTRkZDc1MTA1YTQ2Yjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5egpJskuwQ23KchIiz7U+PB9Wtry aPN9tm8LHAXRgdiKK8NuT61Ml6c5omWAYchihpiM7864arUyvzr5L0/tDJm4c6R3 qKutBYhXcNzb8h2QHUZzYXyK+ODpGxYZEi1aLpOpo0cPO+6v/1g3rR4dibd84Gcz NXuahGBf0ivzWreIWbnd6jLz1zDSiBLljlwQ741aFWSNqCCeRJmm3vXUBKHXk6C1 4FJjPkTKlMegGqVmy1IL63s8QUh+4kuPlTKEUSaflOk9xVtaHMrIVScO+kt0O5iE kdNVvf/m/YoAJuNTmdaA3uLNLpmR7DnFqbsi12xXz3Z6Ta/A0mb/ID3EHwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNMoxWIsh/HOCr557s5N11EFpGt1MB8GA1UdIwQY MBaAFGpX/+gis7p7wZTbenNMhe/O8vKDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWxmXzZDS3p1bnZCbE50NmMweUY3ODd5OG9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hZmVmMTItMWYwOC00YjQ2LTk0N2It Y2EwYzYyNjIxMDk4LzEvMHlqRllpeUg4YzRLdm5udXprM1hVUVdrYTNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9hZmVmMTItMWYwOC00YjQ2LTk0N2ItY2EwYzYyNjIxMDk4 LzEvYWxmXzZDS3p1bnZCbE50NmMweUY3ODd5OG9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEUj//8 MA0GCSqGSIb3DQEBCwUAA4IBAQBctzy2yJ1qQ2W4Zx+47HJc6p1PqaIUrUpqI+X+ rRAYRQwVWX2djPDUkDG94TExk6PCsR8VNtg78G4xrdFLeD6nEXtzuBCz7RPtcmd4 d1jgQ56Udjbi/NjKrGl5UDZ1wLOj8nZl6FCVPQat52xmmz1L72+w5ijbe/2hIz5l X1OCPDYoK+BorXMHJVUjdv7df/Fx9Plysgl1YsaDWby3n1wGCscaG7qviDefM0IA RMyZ/hWU3sRewXFKUJ5oyyhKYZii10y0GRE1b446uFZa6kRVgBP2dPfNzC8KPAId J5I06kRIFWXx8sNePmWGni1oX/xxKQ3KSVVUMc84dO8agynk -----END CERTIFICATE-----Generated at Mon Feb 9 20:02:56 2026 by rpki-client