This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/ay1S9nDP-gUk_iCNjDRcgR-qlSY.roa File: ay1S9nDP-gUk_iCNjDRcgR-qlSY.roa (raw, json) Hash identifier: O8wzX8WiyNcmJ02MBgZjso+QgUJi8QCtxurGC8c5bic= Subject key identifier: 6B:2D:52:F6:70:CF:FA:05:24:FE:20:8D:8C:34:5C:81:1F:AA:95:26 Certificate issuer: /CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db Certificate serial: 019B77C75A244D2439577E809B9E66558B51 Authority key identifier: 57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/ay1S9nDP-gUk_iCNjDRcgR-qlSY.roa Signing time: Thu 01 Jan 2026 04:18:31 +0000 ROA not before: Thu 01 Jan 2026 04:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15557 IP address blocks: 2a00:a080::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.mft rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5a:24:4d:24:39:57:7e:80:9b:9e:66:55:8b:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db Validity Not Before: Jan 1 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b2d52f670cffa0524fe208d8c345c811faa9526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:19:17:be:59:97:ae:a3:8d:04:bd:07:4b:8e: 66:52:fa:30:95:cb:ec:62:1d:7f:0d:b1:bd:73:8e: 99:d6:9d:50:b2:60:d5:b6:03:86:c3:60:61:b0:37: c9:a8:e8:e2:e5:e3:e3:43:7a:c5:99:59:fe:90:7a: f0:03:68:d8:0f:3a:d3:d5:f5:41:33:a2:15:52:b6: 7d:8f:7e:a9:8d:20:c3:3a:2b:d3:dd:5d:7b:a8:66: 4b:e8:d7:41:1d:fa:df:32:f6:28:1c:f8:5a:71:b6: 13:5b:36:8e:47:0d:c5:8b:90:2a:69:6a:8c:c1:09: 8d:34:7b:85:ef:ab:29:18:00:aa:5a:cd:6e:22:42: 26:08:76:e6:19:a2:3d:a0:fc:04:2c:88:61:d6:90: c5:13:7b:7e:70:09:fe:9d:3b:b1:da:90:17:df:9f: e0:2c:cd:ae:0f:01:5c:15:bd:c3:14:b7:1f:e6:d4: f0:e7:76:42:ac:f5:d2:85:99:b8:0d:42:44:be:89: cd:b2:ed:58:44:98:b8:29:b8:f2:35:4c:cb:7a:1b: bc:99:92:c5:51:f8:5c:5d:71:25:f1:96:09:58:ff: 13:bd:b2:5e:c5:57:28:dd:2a:b2:03:3b:ec:5e:5e: 9b:74:6c:f5:01:8b:ca:73:a7:33:f0:b4:b1:94:6c: 91:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2D:52:F6:70:CF:FA:05:24:FE:20:8D:8C:34:5C:81:1F:AA:95:26 X509v3 Authority Key Identifier: keyid:57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/ay1S9nDP-gUk_iCNjDRcgR-qlSY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:a080::/32 Signature Algorithm: sha256WithRSAEncryption 38:a5:48:58:bb:ac:80:4f:e7:ef:3e:f8:a5:67:f9:04:ef:20: 60:55:e3:5c:8f:6c:a3:d8:25:38:48:41:24:5e:b1:b0:91:8c: 74:15:e3:e7:70:6a:68:ed:36:df:c1:ed:a8:c3:88:f0:5b:7a: b2:77:b6:fe:5a:0f:8a:20:64:53:55:68:2b:63:20:cc:a3:a9: 8f:7f:a8:ef:b3:0a:79:68:8a:19:3e:7e:5e:00:b3:fe:fa:94: ec:67:14:17:3b:9e:d9:fb:57:11:a6:c1:5e:45:57:d6:37:65: 71:e5:c5:4b:5d:3b:05:27:87:4a:87:f2:a6:4e:8c:c7:d5:05: 6a:56:77:e0:68:e4:64:12:1a:f7:71:f6:97:fa:24:9a:3a:e7: 65:69:66:9f:8b:94:3f:a0:41:d4:d3:18:d8:db:78:5b:74:3a: 7f:a2:f8:a3:79:2e:90:1c:9d:d1:2e:49:19:be:92:f3:1a:b7: fc:e5:cf:9a:e0:2f:66:69:64:a0:5f:f1:fd:43:06:42:88:1c: 67:53:c7:00:b1:87:93:fc:68:1f:6c:42:cb:56:f5:59:dd:bf: 7c:ea:fd:26:d6:d3:6d:20:22:c1:c9:73:4b:6c:80:d6:9c:27: 4c:19:ba:d5:99:6d:3a:be:79:cd:13:8a:7d:72:bf:31:28:44: ec:24:f4:79 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3x1okTSQ5V36Am55mVYtRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YjgwZTYwYjVhZGY0NWFlYmE1YzBjOGFiY2NjNjM5OTdh MGYxZGIwHhcNMjYwMTAxMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjJkNTJmNjcwY2ZmYTA1MjRmZTIwOGQ4YzM0NWM4MTFmYWE5NTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBkXvlmXrqONBL0HS45mUvowlcvs Yh1/DbG9c46Z1p1QsmDVtgOGw2BhsDfJqOji5ePjQ3rFmVn+kHrwA2jYDzrT1fVB M6IVUrZ9j36pjSDDOivT3V17qGZL6NdBHfrfMvYoHPhacbYTWzaORw3Fi5AqaWqM wQmNNHuF76spGACqWs1uIkImCHbmGaI9oPwELIhh1pDFE3t+cAn+nTux2pAX35/g LM2uDwFcFb3DFLcf5tTw53ZCrPXShZm4DUJEvonNsu1YRJi4KbjyNUzLehu8mZLF UfhcXXEl8ZYJWP8TvbJexVco3SqyAzvsXl6bdGz1AYvKc6cz8LSxlGyRpQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFGstUvZwz/oFJP4gjYw0XIEfqpUmMB8GA1UdIwQY MBaAFFe4DmC1rfRa66XAyKvMxjmXoPHbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjdnT1lMV3Q5RnJycGNESXE4ekdPWmVnOGRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi83OWRkOWMtY2U2NC00YjI1LThmMjMt ZTZlOGFhZTM0ODI2LzEvYXkxUzluRFAtZ1VrX2lDTmpEUmNnUi1xbFNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi83OWRkOWMtY2U2NC00YjI1LThmMjMtZTZlOGFhZTM0ODI2 LzEvVjdnT1lMV3Q5RnJycGNESXE4ekdPWmVnOGRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgCggDAN BgkqhkiG9w0BAQsFAAOCAQEAOKVIWLusgE/n7z74pWf5BO8gYFXjXI9so9glOEhB JF6xsJGMdBXj53BqaO0238HtqMOI8Ft6sne2/loPiiBkU1VoK2MgzKOpj3+o77MK eWiKGT5+XgCz/vqU7GcUFzue2ftXEabBXkVX1jdlceXFS107BSeHSofypk6Mx9UF alZ34GjkZBIa93H2l/okmjrnZWlmn4uUP6BB1NMY2Nt4W3Q6f6L4o3kukByd0S5J Gb6S8xq3/OXPmuAvZmlkoF/x/UMGQogcZ1PHALGHk/xoH2xCy1b1Wd2/fOr9JtbT bSAiwclzS2yA1pwnTBm61ZltOr55zROKfXK/MShE7CT0eQ== -----END CERTIFICATE-----Generated at Wed Jan 21 06:05:50 2026 by rpki-client