This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/aUl8lpeM_cK5FLKbeF7Bav-pQik.roa File: aUl8lpeM_cK5FLKbeF7Bav-pQik.roa (raw, json) Hash identifier: VJooy4RdmsLaFuxZcWrZ5R9B5jb/JnWIuGjdSyDjKws= Subject key identifier: 69:49:7C:96:97:8C:FD:C2:B9:14:B2:9B:78:5E:C1:6A:FF:A9:42:29 Certificate issuer: /CN=7a938a935f8baf9cd933906416590d782e7287c7 Certificate serial: 019B7BA35D01AF7B10205B9233713B5F57E8 Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/aUl8lpeM_cK5FLKbeF7Bav-pQik.roa Signing time: Thu 01 Jan 2026 22:17:42 +0000 ROA not before: Thu 01 Jan 2026 22:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8792 IP address blocks: 2001:67c:1170::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 10:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:5d:01:af:7b:10:20:5b:92:33:71:3b:5f:57:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7 Validity Not Before: Jan 1 22:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69497c96978cfdc2b914b29b785ec16affa94229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:37:39:32:9b:d3:e3:b8:59:3b:bf:0a:2a:b7: 50:a8:42:25:5f:27:3c:b6:8b:bd:1d:21:a8:e7:95: 4b:00:3b:a0:fa:09:10:fb:3b:ec:cf:7a:5f:03:77: 50:f5:0d:bc:0b:ce:0c:dd:c4:df:7d:48:00:b8:f1: 56:00:13:3d:12:32:da:ba:6e:c8:41:2f:8c:9a:c1: 3f:56:1b:9d:2f:63:cd:07:76:96:db:3a:54:e7:9f: 7a:c7:f7:59:99:96:3c:6b:c3:09:7f:97:d6:90:a0: a2:01:08:f5:f0:10:81:f1:92:8c:5d:91:ac:47:72: a8:8d:20:67:be:d0:bf:da:f3:09:e5:bf:3e:e2:17: 31:6f:42:66:86:45:e7:41:1f:91:d9:f0:d0:89:53: 86:5a:6f:56:66:fa:34:68:d3:b3:71:27:56:a9:d6: 7b:0c:55:80:b7:ab:09:a1:b3:da:70:eb:4d:01:9a: dc:36:6b:d6:60:0a:fe:e1:64:13:c6:ef:8e:e6:ca: d0:98:b9:2e:41:d0:0a:57:9e:ac:ac:e3:df:1a:a3: c6:7f:fa:42:b8:02:35:62:b0:06:5e:8c:60:49:dd: f4:b6:e3:9c:dc:12:bf:51:ac:fe:83:0c:31:b9:09: 82:bc:99:02:79:ce:9d:49:df:ea:8c:17:6a:20:16: d6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:49:7C:96:97:8C:FD:C2:B9:14:B2:9B:78:5E:C1:6A:FF:A9:42:29 X509v3 Authority Key Identifier: keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/aUl8lpeM_cK5FLKbeF7Bav-pQik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1170::/48 Signature Algorithm: sha256WithRSAEncryption 4d:3a:2c:e9:20:86:03:93:b3:82:1e:ca:42:e4:ad:eb:bb:c0: 04:8e:1a:41:0c:b3:53:c7:bb:76:ba:94:3a:87:bf:09:14:89: 8c:56:8c:ae:28:df:f4:cb:3e:69:44:6c:61:f8:49:ed:3b:f0: b6:0a:0c:9e:6b:d9:43:8c:3a:07:c1:f2:c0:bd:f0:01:55:cf: ca:f4:73:e9:a0:69:bc:82:8c:4f:c2:6c:8d:ff:da:db:90:e6: ab:cb:f7:5d:d9:8a:27:2c:ad:47:24:34:57:77:5f:51:91:4f: 59:a4:3d:b3:36:8f:54:90:a5:1f:cd:ae:c5:53:4f:47:d2:2e: 17:9c:7e:2e:ab:87:5d:b6:5a:eb:a8:a1:f0:31:4f:35:6f:89: 42:1f:68:b4:ed:c2:8b:4c:d2:2e:0b:01:be:76:89:02:5c:90: 0e:61:f2:f1:8f:5e:56:a4:63:63:26:cf:90:12:30:91:54:84: 4e:48:88:ea:f1:50:22:e3:52:b5:e5:c9:53:13:50:6c:06:08: 97:00:5a:37:a5:69:50:21:21:ce:d7:1e:01:09:ce:fb:58:fc: fe:48:47:91:25:ad:5e:cb:24:5c:c3:09:81:da:af:da:02:f3: bb:23:38:5f:10:2c:5f:c0:72:a8:19:33:22:b3:98:f4:fc:16: fa:ac:16:db -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7o10Br3sQIFuSM3E7X1foMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhOTM4YTkzNWY4YmFmOWNkOTMzOTA2NDE2NTkwZDc4MmU3 Mjg3YzcwHhcNMjYwMTAxMjIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTQ5N2M5Njk3OGNmZGMyYjkxNGIyOWI3ODVlYzE2YWZmYTk0MjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDc5MpvT47hZO78KKrdQqEIlXyc8 tou9HSGo55VLADug+gkQ+zvsz3pfA3dQ9Q28C84M3cTffUgAuPFWABM9EjLaum7I QS+MmsE/VhudL2PNB3aW2zpU5596x/dZmZY8a8MJf5fWkKCiAQj18BCB8ZKMXZGs R3KojSBnvtC/2vMJ5b8+4hcxb0JmhkXnQR+R2fDQiVOGWm9WZvo0aNOzcSdWqdZ7 DFWAt6sJobPacOtNAZrcNmvWYAr+4WQTxu+O5srQmLkuQdAKV56srOPfGqPGf/pC uAI1YrAGXoxgSd30tuOc3BK/Uaz+gwwxuQmCvJkCec6dSd/qjBdqIBbWXwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGlJfJaXjP3CuRSym3hewWr/qUIpMB8GA1UdIwQY MBaAFHqTipNfi6+c2TOQZBZZDXgucofHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXBPS2sxLUxyNXpaTTVCa0Zsa05lQzV5aDhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9mZjBiZmMtMjZmZS00NDEyLWEyMzIt MzE5OTlmM2FkZDM2LzEvYVVsOGxwZU1fY0s1RkxLYmVGN0Jhdi1wUWlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9mZjBiZmMtMjZmZS00NDEyLWEyMzItMzE5OTlmM2FkZDM2 LzEvZXBPS2sxLUxyNXpaTTVCa0Zsa05lQzV5aDhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBFw MA0GCSqGSIb3DQEBCwUAA4IBAQBNOizpIIYDk7OCHspC5K3ru8AEjhpBDLNTx7t2 upQ6h78JFImMVoyuKN/0yz5pRGxh+EntO/C2Cgyea9lDjDoHwfLAvfABVc/K9HPp oGm8goxPwmyN/9rbkOary/dd2YonLK1HJDRXd19RkU9ZpD2zNo9UkKUfza7FU09H 0i4XnH4uq4ddtlrrqKHwMU81b4lCH2i07cKLTNIuCwG+dokCXJAOYfLxj15WpGNj Js+QEjCRVIROSIjq8VAi41K15clTE1BsBgiXAFo3pWlQISHO1x4BCc77WPz+SEeR Ja1eyyRcwwmB2q/aAvO7IzhfECxfwHKoGTMis5j0/Bb6rBbb -----END CERTIFICATE-----Generated at Sun Jan 18 19:22:24 2026 by rpki-client