This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/AJXkjzoozD2UZ-UGtOvfGHct3rI.roa File: AJXkjzoozD2UZ-UGtOvfGHct3rI.roa (raw, json) Hash identifier: TaHdT7ku0QOHwdGlIBgSwO87Zn4JRxw7kaBQIz+nitM= Subject key identifier: 00:95:E4:8F:3A:28:CC:3D:94:67:E5:06:B4:EB:DF:18:77:2D:DE:B2 Certificate issuer: /CN=212ba8ccf345eef0dcf7d0154920818f319c25f8 Certificate serial: 019B797E84DB360A963161B5578CC1E7AB09 Authority key identifier: 21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/AJXkjzoozD2UZ-UGtOvfGHct3rI.roa Signing time: Thu 01 Jan 2026 12:18:13 +0000 ROA not before: Thu 01 Jan 2026 12:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204255 IP address blocks: 2001:678:1120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 15:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:84:db:36:0a:96:31:61:b5:57:8c:c1:e7:ab:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=212ba8ccf345eef0dcf7d0154920818f319c25f8 Validity Not Before: Jan 1 12:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0095e48f3a28cc3d9467e506b4ebdf18772ddeb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:17:fc:f7:34:6e:67:e3:83:8f:40:2a:75:e6: 66:f5:1f:1e:30:8f:45:84:1d:8c:dc:34:e6:bb:fb: f4:da:8f:23:17:80:ba:2f:cc:14:31:03:9b:d6:d1: 96:0a:92:4a:16:2a:91:66:9d:50:9b:e3:43:09:b9: 47:be:5f:ca:72:2f:86:ec:ff:1d:f0:32:bb:3a:f0: 2a:81:10:19:a3:1f:00:d9:18:f1:69:24:25:4a:b9: 93:11:a1:14:fb:ff:98:40:4d:af:1d:91:5e:69:25: 27:04:88:52:c3:4b:d8:3e:f9:a6:5b:f1:83:2f:3f: ec:40:45:86:b1:48:ef:dc:7a:8b:6f:85:24:62:38: ef:f6:63:2d:b7:51:64:af:bf:e9:1d:64:4b:5b:95: 46:4a:4d:0c:0d:50:f5:dd:fe:9d:cd:c4:34:44:93: 95:3f:a4:a0:08:d2:f5:ca:eb:ba:f2:d6:5a:08:77: f7:72:32:aa:2c:96:96:9b:7c:6d:4c:b0:06:ad:eb: c8:45:b9:16:4b:0e:7e:b8:2e:f3:26:82:5d:66:e7: 6b:6f:9e:35:60:e4:fb:7f:f0:97:54:cb:71:98:02: ec:fc:90:8d:60:ba:18:a8:51:bb:dc:74:14:eb:be: b9:c6:1a:7e:a2:db:aa:6b:79:1f:84:96:f0:60:fd: 65:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:95:E4:8F:3A:28:CC:3D:94:67:E5:06:B4:EB:DF:18:77:2D:DE:B2 X509v3 Authority Key Identifier: keyid:21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/AJXkjzoozD2UZ-UGtOvfGHct3rI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:1120::/48 Signature Algorithm: sha256WithRSAEncryption b2:7e:27:b5:c9:44:5c:83:6d:5a:28:46:ee:33:39:5e:f4:ab: 04:7e:6f:0f:88:2b:87:28:e4:63:61:b6:0e:3e:19:70:f9:65: 85:60:b2:02:bc:64:6a:bd:98:49:41:55:e9:d4:46:f8:1b:eb: e2:98:e2:bd:0d:00:17:1a:c3:b7:bc:20:01:f0:0b:65:be:f5: d6:ef:d1:1b:f9:78:a4:fe:6c:86:a6:11:70:53:80:c9:52:b0: f7:05:5a:bd:87:23:c8:32:0d:a8:61:40:2c:58:10:31:da:7b: 1d:b0:13:3f:5b:2e:0d:88:c0:16:94:61:56:9b:0c:26:91:14: c9:ce:85:c3:a3:36:86:9d:6b:a8:aa:a9:c6:b8:fc:3c:59:70: df:58:a7:97:f5:92:77:78:86:52:b9:80:3d:1a:66:98:fa:0e: 2e:5a:18:ed:de:64:cd:d1:4b:79:7c:47:e8:03:64:83:37:79: f8:f8:e6:7a:a2:31:6e:77:33:83:8b:77:45:72:8a:a2:4e:c3: c3:5b:53:3a:df:09:b7:ac:01:28:2f:60:d8:d1:be:18:45:23: 8a:5f:44:2d:66:f4:c0:9f:2a:8c:92:b2:ef:a2:8b:85:f4:65: 51:cd:41:49:a1:bb:6c:89:ef:6c:ab:18:2f:b7:87:b4:f7:72: 3b:72:78:49 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5foTbNgqWMWG1V4zB56sJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMmJhOGNjZjM0NWVlZjBkY2Y3ZDAxNTQ5MjA4MThmMzE5 YzI1ZjgwHhcNMjYwMTAxMTIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDk1ZTQ4ZjNhMjhjYzNkOTQ2N2U1MDZiNGViZGYxODc3MmRkZWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRf89zRuZ+ODj0AqdeZm9R8eMI9F hB2M3DTmu/v02o8jF4C6L8wUMQOb1tGWCpJKFiqRZp1Qm+NDCblHvl/Kci+G7P8d 8DK7OvAqgRAZox8A2RjxaSQlSrmTEaEU+/+YQE2vHZFeaSUnBIhSw0vYPvmmW/GD Lz/sQEWGsUjv3HqLb4UkYjjv9mMtt1Fkr7/pHWRLW5VGSk0MDVD13f6dzcQ0RJOV P6SgCNL1yuu68tZaCHf3cjKqLJaWm3xtTLAGrevIRbkWSw5+uC7zJoJdZudrb541 YOT7f/CXVMtxmALs/JCNYLoYqFG73HQU6765xhp+otuqa3kfhJbwYP1lPQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFACV5I86KMw9lGflBrTr3xh3Ld6yMB8GA1UdIwQY MBaAFCErqMzzRe7w3PfQFUkggY8xnCX4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVN1b3pQTkY3dkRjOTlBVlNTQ0JqekdjSmZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84MzQyOTgtMzdmNy00ODMwLTg5NDMt ZTA2NmUwMDQxYTA1LzEvQUpYa2p6b296RDJVWi1VR3RPdmZHSGN0M3JJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC84MzQyOTgtMzdmNy00ODMwLTg5NDMtZTA2NmUwMDQxYTA1 LzEvSVN1b3pQTkY3dkRjOTlBVlNTQ0JqekdjSmZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBEg MA0GCSqGSIb3DQEBCwUAA4IBAQCyfie1yURcg21aKEbuMzle9KsEfm8PiCuHKORj YbYOPhlw+WWFYLICvGRqvZhJQVXp1Eb4G+vimOK9DQAXGsO3vCAB8AtlvvXW79Eb +Xik/myGphFwU4DJUrD3BVq9hyPIMg2oYUAsWBAx2nsdsBM/Wy4NiMAWlGFWmwwm kRTJzoXDozaGnWuoqqnGuPw8WXDfWKeX9ZJ3eIZSuYA9GmaY+g4uWhjt3mTN0Ut5 fEfoA2SDN3n4+OZ6ojFudzODi3dFcoqiTsPDW1M63wm3rAEoL2DY0b4YRSOKX0Qt ZvTAnyqMkrLvoouF9GVRzUFJobtsie9sqxgvt4e093I7cnhJ -----END CERTIFICATE-----Generated at Sun Jan 11 21:00:53 2026 by rpki-client