This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/aIBfj9UZLvGshSDR2ZOW5IOATok.roa File: aIBfj9UZLvGshSDR2ZOW5IOATok.roa (raw, json) Hash identifier: 7BztgvdXzg/5xYNouWVQ2j3glkAXtTFZb6+osIJ4RHI= Subject key identifier: 68:80:5F:8F:D5:19:2E:F1:AC:85:20:D1:D9:93:96:E4:83:80:4E:89 Certificate issuer: /CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e Certificate serial: 019B7C121B63AB4E9EEB05CAD50D1F627745 Authority key identifier: DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/aIBfj9UZLvGshSDR2ZOW5IOATok.roa Signing time: Fri 02 Jan 2026 00:18:40 +0000 ROA not before: Fri 02 Jan 2026 00:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 2a01:e5c0:2000::/36 maxlen: 36 2a01:e5c0:3000::/36 maxlen: 36 2a01:e5c0:4000::/36 maxlen: 36 2a01:e5c0:5000::/36 maxlen: 36 2a01:e5c0:6000::/36 maxlen: 36 2a01:e5c0:7000::/36 maxlen: 36 2a01:e5c0:8003::/48 maxlen: 48 2a01:e5c0:8004::/48 maxlen: 48 2a01:e5c0:8008::/48 maxlen: 48 2a01:e5c0:9000::/36 maxlen: 36 2a01:e5c0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:1b:63:ab:4e:9e:eb:05:ca:d5:0d:1f:62:77:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e Validity Not Before: Jan 2 00:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68805f8fd5192ef1ac8520d1d99396e483804e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9a:16:93:5d:e0:8c:1f:a3:72:bc:80:6b:66: 4b:ae:0b:2a:bb:f3:3b:e1:6c:b1:fd:fe:5f:4e:3f: 2f:22:23:e5:b4:48:ed:f5:71:26:e7:be:eb:88:ad: 1e:5b:4c:6e:cc:45:f9:94:98:f8:d9:d0:de:6c:bc: ff:d1:1e:c5:a6:f6:b4:76:ca:22:b5:4b:4f:ee:47: a6:7a:24:c3:b0:1e:6e:51:8b:46:d1:58:a9:d4:a4: 84:7d:1d:5b:68:12:f7:b7:66:91:50:c0:25:f9:97: ae:76:91:23:db:a1:9f:85:26:af:b4:9d:92:ec:7a: c0:35:cd:89:d6:ed:c8:ad:4a:ef:6a:4a:17:2a:ef: fe:54:2f:95:36:2c:ab:5f:55:fb:53:86:4c:a8:90: 85:7b:be:6d:03:53:b2:e1:f6:e7:a9:d5:50:45:40: 62:04:d5:ad:6b:ca:71:e2:2e:14:60:55:92:3f:75: a9:f9:4b:cb:85:42:f3:e6:b5:da:a3:90:e2:09:40: 6d:cf:88:0e:f6:df:4f:d7:7b:91:2d:dc:aa:f4:f1: f7:e9:d1:cc:de:7a:05:1a:1e:ec:68:c0:d8:4e:7e: ed:0c:6e:68:75:18:0d:92:aa:04:5b:d5:62:e1:38: c3:2c:d4:22:43:4c:87:87:84:53:02:07:cb:cd:8c: 82:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:80:5F:8F:D5:19:2E:F1:AC:85:20:D1:D9:93:96:E4:83:80:4E:89 X509v3 Authority Key Identifier: keyid:DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/aIBfj9UZLvGshSDR2ZOW5IOATok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e5c0:2000::-2a01:e5c0:7fff:ffff:ffff:ffff:ffff:ffff 2a01:e5c0:8003::-2a01:e5c0:8004:ffff:ffff:ffff:ffff:ffff 2a01:e5c0:8008::/48 2a01:e5c0:9000::/36 2a01:e5c0:f000::/36 Signature Algorithm: sha256WithRSAEncryption 95:38:96:7f:7d:f9:ba:6a:96:4b:b1:a8:fc:2a:6e:e2:42:d1: 07:e8:2f:a4:b1:47:05:3d:94:c5:72:93:c2:65:fb:71:1f:78: 09:2d:9e:14:0b:e4:f8:e8:80:b6:11:e4:36:4d:e5:f9:75:d2: b4:d4:5a:19:69:d9:49:51:dd:b1:25:6b:9e:2c:58:20:2e:37: 25:e3:74:8f:23:54:17:2d:be:54:d5:2e:0c:ee:27:35:e9:f7: c4:a5:df:cd:01:9e:8e:df:68:78:00:4b:54:31:e1:a0:1b:c0: 7d:48:2c:2e:90:e1:a8:d3:65:3f:63:d1:ef:69:3b:b1:d0:91: 38:2c:71:0d:07:a0:6e:08:6a:2b:9b:44:2f:fa:45:34:dc:56: c8:bf:81:88:e0:3a:86:2f:e5:a9:bc:a6:7c:03:d5:9d:01:12: 66:c2:fc:13:1a:38:d7:99:e2:79:e1:f5:a1:47:77:4b:1f:53: c3:bb:10:e6:eb:dd:81:cc:a7:f0:c6:b5:77:d1:dc:93:e2:b4: eb:55:4d:52:1b:21:2b:e2:67:8d:4b:e4:8e:ba:5e:8c:6a:74: 05:19:41:1a:da:06:4f:42:1b:76:c2:2c:d1:2c:c1:ab:dc:e7: b2:2e:f6:31:87:c8:92:4d:3c:3d:66:ab:66:e7:d5:f0:97:03: 5e:c5:22:23 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt8Ehtjq06e6wXK1Q0fYndFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhN2Q1ZmNhMWU0Njk5MjlkNGE4YjZmNTdhZjNjYmNkYzYz OWEzNWUwHhcNMjYwMTAyMDAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODgwNWY4ZmQ1MTkyZWYxYWM4NTIwZDFkOTkzOTZlNDgzODA0ZTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJoWk13gjB+jcryAa2ZLrgsqu/M7 4Wyx/f5fTj8vIiPltEjt9XEm577riK0eW0xuzEX5lJj42dDebLz/0R7Fpva0dsoi tUtP7kemeiTDsB5uUYtG0Vip1KSEfR1baBL3t2aRUMAl+ZeudpEj26GfhSavtJ2S 7HrANc2J1u3IrUrvakoXKu/+VC+VNiyrX1X7U4ZMqJCFe75tA1Oy4fbnqdVQRUBi BNWta8px4i4UYFWSP3Wp+UvLhULz5rXao5DiCUBtz4gO9t9P13uRLdyq9PH36dHM 3noFGh7saMDYTn7tDG5odRgNkqoEW9Vi4TjDLNQiQ0yHh4RTAgfLzYyCrQIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFGiAX4/VGS7xrIUg0dmTluSDgE6JMB8GA1UdIwQY MBaAFNp9X8oeRpkp1Ki29Xrzy83GOaNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm4xZnloNUdtU25VcUxiMWV2UEx6Y1k1bzE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8wNjBmMzItYTQ4Yi00NjU3LWE1OGIt NDFiNzMwMzI3Yzc4LzEvYUlCZmo5VVpMdkdzaFNEUjJaT1c1SU9BVG9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8wNjBmMzItYTQ4Yi00NjU3LWE1OGItNDFiNzMwMzI3Yzc4 LzEvMm4xZnloNUdtU25VcUxiMWV2UEx6Y1k1bzE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzBFBAIAAjA/MBADBgUqAeXA IAMGByoB5cAAMBIDBwAqAeXAgAMDBwAqAeXAgAQDBwAqAeXAgAgDBgQqAeXAkAMG BCoB5cDwMA0GCSqGSIb3DQEBCwUAA4IBAQCVOJZ/ffm6apZLsaj8Km7iQtEH6C+k sUcFPZTFcpPCZftxH3gJLZ4UC+T46IC2EeQ2TeX5ddK01FoZadlJUd2xJWueLFgg Ljcl43SPI1QXLb5U1S4M7ic16ffEpd/NAZ6O32h4AEtUMeGgG8B9SCwukOGo02U/ Y9HvaTux0JE4LHENB6BuCGorm0Qv+kU03FbIv4GI4DqGL+WpvKZ8A9WdARJmwvwT GjjXmeJ54fWhR3dLH1PDuxDm692BzKfwxrV30dyT4rTrVU1SGyEr4meNS+SOul6M anQFGUEa2gZPQht2wizRLMGr3OeyLvYxh8iSTTw9Zqtm59XwlwNexSIj -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:41 2026 by rpki-client