This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/AAL-YY9GVuWqbLX5GG1k3ImctWA.roa File: AAL-YY9GVuWqbLX5GG1k3ImctWA.roa (raw, json) Hash identifier: dOcDqpARrTucPUNtlVinnlKcwBaTZo2MLnDCrG84YIw= Subject key identifier: 00:02:FE:61:8F:46:56:E5:AA:6C:B5:F9:18:6D:64:DC:89:9C:B5:60 Certificate issuer: /CN=c54f6a1177826c5ab64bd3af0138a9b57a4b91e5 Certificate serial: 019B994B1923F193DB13840B0F16BE9AB171 Authority key identifier: C5:4F:6A:11:77:82:6C:5A:B6:4B:D3:AF:01:38:A9:B5:7A:4B:91:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/AAL-YY9GVuWqbLX5GG1k3ImctWA.roa Signing time: Wed 07 Jan 2026 16:29:54 +0000 ROA not before: Wed 07 Jan 2026 16:29:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214132 IP address blocks: 2a12:e00::/32 maxlen: 32 2a12:e00:100::/40 maxlen: 40 2a12:e00:f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:99:4b:19:23:f1:93:db:13:84:0b:0f:16:be:9a:b1:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c54f6a1177826c5ab64bd3af0138a9b57a4b91e5 Validity Not Before: Jan 7 16:29:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0002fe618f4656e5aa6cb5f9186d64dc899cb560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:86:6e:df:51:b0:40:52:7f:18:3a:95:4c:84: db:78:29:9e:81:e8:45:35:f3:11:6d:3f:22:1a:7d: 41:be:b7:21:28:06:23:37:44:65:58:42:d6:4b:16: ca:b1:79:84:90:b2:6e:78:4e:0d:d5:07:1c:0e:03: 93:31:1a:b0:7a:a1:73:5c:d3:b8:0f:7b:06:50:8a: b6:86:1c:a6:58:a3:0a:fe:e0:ff:41:b4:c1:f3:43: 54:4e:bf:65:2b:11:d8:35:9f:c3:8f:42:ca:09:c8: e2:7d:c2:93:ef:cc:ed:7c:e6:83:1f:da:73:2e:85: 4e:6f:29:27:af:9a:f8:8f:98:23:fa:82:e1:c0:5b: 60:2d:bf:57:b3:a9:d4:be:b7:51:8d:f9:dc:b9:ee: 97:36:dd:78:3c:cb:8b:e0:f1:40:ff:46:7c:21:b8: 28:e0:f5:e3:32:17:8b:4e:ce:4a:99:92:f7:2e:2c: e2:b4:97:ed:37:51:27:29:7f:02:0f:6b:ad:25:c5: 54:0e:4c:9d:41:27:05:78:00:28:19:e3:f8:a3:23: 4a:4c:3d:48:17:0f:55:e7:c7:e9:5f:dd:1a:94:9a: db:d6:24:ac:59:28:5e:d7:5b:7a:6f:ad:bb:0e:57: f6:40:ac:10:db:00:29:94:7e:b1:0d:50:36:9d:36: a7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:02:FE:61:8F:46:56:E5:AA:6C:B5:F9:18:6D:64:DC:89:9C:B5:60 X509v3 Authority Key Identifier: keyid:C5:4F:6A:11:77:82:6C:5A:B6:4B:D3:AF:01:38:A9:B5:7A:4B:91:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/AAL-YY9GVuWqbLX5GG1k3ImctWA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:e00::/32 Signature Algorithm: sha256WithRSAEncryption 16:bc:c9:88:9c:60:a9:c3:47:a8:a8:1b:b6:63:0a:eb:0a:89: b8:1e:80:97:02:ea:d9:3b:d2:88:24:33:2b:1a:f9:20:55:90: 69:0e:96:60:47:a3:b4:f6:0b:7a:98:66:fa:c5:14:dd:3c:fe: d9:4a:af:ad:3e:3c:49:cf:b7:82:84:15:67:b9:56:22:72:4c: d1:db:50:93:ba:11:6d:2e:fd:9f:fc:cf:0b:45:1e:9f:c0:1a: 0a:c5:23:84:ec:35:48:99:ba:4c:b2:97:d8:a1:98:3a:71:0d: ee:36:b4:fe:28:11:d3:47:e8:22:d4:fc:b4:4e:c7:9d:cc:15: 9f:5f:d3:04:1f:4a:ed:9f:e4:02:d0:c4:1e:d9:a9:8a:82:ab: 5a:5d:b4:53:ca:3a:9a:a9:e9:81:60:f6:96:ee:6f:ee:70:78: 44:a0:fe:9e:73:c1:5e:aa:e8:da:e2:e7:bc:ae:bd:7b:a3:83: ec:96:55:64:15:86:c3:bf:19:ce:cb:80:70:54:94:98:aa:f9: f7:5b:fd:d1:bb:2d:b6:45:0f:ee:9f:18:25:ef:3f:e1:82:1c: 1d:26:1f:c5:1b:6a:46:42:c6:f9:e3:b6:14:85:77:9a:13:74: 24:31:c5:2f:c8:61:dc:99:b7:82:2d:76:25:1d:70:2f:23:ea: f1:ff:b1:e4 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZuZSxkj8ZPbE4QLDxa+mrFxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NGY2YTExNzc4MjZjNWFiNjRiZDNhZjAxMzhhOWI1N2E0 YjkxZTUwHhcNMjYwMTA3MTYyOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDAyZmU2MThmNDY1NmU1YWE2Y2I1ZjkxODZkNjRkYzg5OWNiNTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoZu31GwQFJ/GDqVTITbeCmegehF NfMRbT8iGn1BvrchKAYjN0RlWELWSxbKsXmEkLJueE4N1QccDgOTMRqweqFzXNO4 D3sGUIq2hhymWKMK/uD/QbTB80NUTr9lKxHYNZ/Dj0LKCcjifcKT78ztfOaDH9pz LoVObyknr5r4j5gj+oLhwFtgLb9Xs6nUvrdRjfncue6XNt14PMuL4PFA/0Z8Ibgo 4PXjMheLTs5KmZL3LizitJftN1EnKX8CD2utJcVUDkydQScFeAAoGeP4oyNKTD1I Fw9V58fpX90alJrb1iSsWShe11t6b627Dlf2QKwQ2wAplH6xDVA2nTanDwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFAAC/mGPRlblqmy1+RhtZNyJnLVgMB8GA1UdIwQY MBaAFMVPahF3gmxatkvTrwE4qbV6S5HlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFU5cUVYZUNiRnEyUzlPdkFUaXB0WHBMa2VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNGYzNjctM2I5ZS00OWQ0LTk2ODYt MmVhOGFjZTViOTVlLzEvQUFMLVlZOUdWdVdxYkxYNUdHMWszSW1jdFdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNGYzNjctM2I5ZS00OWQ0LTk2ODYtMmVhOGFjZTViOTVl LzEveFU5cUVYZUNiRnEyUzlPdkFUaXB0WHBMa2VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhIOADAN BgkqhkiG9w0BAQsFAAOCAQEAFrzJiJxgqcNHqKgbtmMK6wqJuB6AlwLq2TvSiCQz Kxr5IFWQaQ6WYEejtPYLephm+sUU3Tz+2UqvrT48Sc+3goQVZ7lWInJM0dtQk7oR bS79n/zPC0Uen8AaCsUjhOw1SJm6TLKX2KGYOnEN7ja0/igR00foItT8tE7HncwV n1/TBB9K7Z/kAtDEHtmpioKrWl20U8o6mqnpgWD2lu5v7nB4RKD+nnPBXqro2uLn vK69e6OD7JZVZBWGw78ZzsuAcFSUmKr591v90bsttkUP7p8YJe8/4YIcHSYfxRtq RkLG+eO2FIV3mhN0JDHFL8hh3Jm3gi12JR1wLyPq8f+x5A== -----END CERTIFICATE-----Generated at Sun Jan 18 11:24:58 2026 by rpki-client