This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/aeQ62Rc4bE2J9qxR9Os_M5YZzmc.roa File: aeQ62Rc4bE2J9qxR9Os_M5YZzmc.roa (raw, json) Hash identifier: VN/1JPLuL+fs9pwrNwlUDXaiAfN/UOotNdIwka1uYH8= Subject key identifier: 69:E4:3A:D9:17:38:6C:4D:89:F6:AC:51:F4:EB:3F:33:96:19:CE:67 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1A7A3675121E50A7EC3CC6990079E Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/aeQ62Rc4bE2J9qxR9Os_M5YZzmc.roa Signing time: Fri 02 Jan 2026 18:21:41 +0000 ROA not before: Fri 02 Jan 2026 18:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25159 IP address blocks: 2a07:7880::/29 maxlen: 29 2a09:17c0:1312::/48 maxlen: 48 2a09:17c0:fbad::/48 maxlen: 48 2a0e:1a86::/32 maxlen: 32 2a0e:f602::/32 maxlen: 32 2a0f:1586::/32 maxlen: 32 2a0f:2d83::/32 maxlen: 32 2a0f:3d86:1::/48 maxlen: 48 2a12:5e00::/29 maxlen: 29 2a12:ecc5::/32 maxlen: 32 2a13:18c0:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:a7:a3:67:51:21:e5:0a:7e:c3:cc:69:90:07:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69e43ad917386c4d89f6ac51f4eb3f339619ce67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e4:78:8e:1a:8c:66:75:2c:65:ef:30:d0:e3: fc:f6:f2:55:91:8c:f3:b7:bf:19:cd:ff:22:f9:1b: cd:c2:fb:fa:6a:2c:6c:59:9a:48:91:4d:d3:d5:61: 0e:34:bc:5c:ae:2c:66:ac:75:be:fc:bf:48:96:d7: e3:5b:8a:d6:f0:52:3d:85:c1:51:6e:e4:af:ab:cb: ed:6c:bc:e9:49:60:e0:e7:9e:0e:26:f8:79:05:60: b0:a9:6c:5b:5a:fe:87:32:8a:9c:11:51:14:89:bc: 4d:ab:a9:93:1b:6c:c9:8e:db:4f:ed:4e:01:1b:c3: aa:29:26:23:b1:c4:25:a0:7d:63:4a:f5:5a:d9:2c: e7:96:82:fe:fc:8e:52:9f:4b:63:48:4b:91:d7:92: fc:ee:ff:26:c5:ff:28:34:92:60:3b:f5:42:36:27: 96:8f:ac:98:bf:b5:6d:1c:2d:e3:70:70:ba:a2:3a: 34:6f:78:ac:83:19:2d:0d:62:e6:70:27:0e:bf:5c: 44:33:13:47:0d:b5:4d:d2:81:36:02:e9:f6:8b:fc: 68:0c:9f:08:9c:44:7a:92:3a:e7:88:47:ab:12:34: fc:76:e9:9a:76:bb:72:c8:b5:b7:9f:4e:2f:35:62: a5:8f:7b:db:72:cf:4f:78:33:23:f8:b3:d4:4f:39: d0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E4:3A:D9:17:38:6C:4D:89:F6:AC:51:F4:EB:3F:33:96:19:CE:67 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/aeQ62Rc4bE2J9qxR9Os_M5YZzmc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:7880::/29 2a09:17c0:1312::/48 2a09:17c0:fbad::/48 2a0e:1a86::/32 2a0e:f602::/32 2a0f:1586::/32 2a0f:2d83::/32 2a0f:3d86:1::/48 2a12:5e00::/29 2a12:ecc5::/32 2a13:18c0:100::/48 Signature Algorithm: sha256WithRSAEncryption 73:b0:96:e8:9d:ac:2d:68:7a:b0:f0:c5:e3:38:53:5f:08:75: 3c:cc:3a:01:51:12:db:ad:97:f0:f2:88:08:eb:a8:65:88:1a: c6:d8:81:6b:9b:a8:c5:54:67:fb:45:1a:84:ba:53:b7:95:e4: 7f:76:c4:5b:ba:38:da:c8:e8:d9:02:7a:de:3e:65:3c:15:85: e2:5f:4e:d6:ff:1b:0f:a7:e2:3d:10:b1:a7:bd:c5:61:34:8a: 8f:42:f8:8e:a1:07:49:5f:b3:e6:31:91:3b:70:ff:e7:bd:25: 26:61:f2:42:4d:36:e0:d7:27:c1:6f:2c:55:cb:cf:66:aa:37: 4a:c0:42:c3:f1:87:21:b5:8b:77:89:fc:47:f6:d3:e3:86:94: d1:be:b7:09:fa:07:9c:76:28:ca:47:60:42:d7:48:eb:e9:c2: c6:39:12:9e:5b:15:ff:e8:69:06:2a:96:f7:17:2d:67:d5:95: 22:42:b1:a2:19:d0:92:74:af:3b:4e:6d:82:94:fe:fc:ab:19: 34:a3:a6:83:d8:d4:a3:67:45:7b:e6:d9:b2:fc:fe:90:c5:09: 58:67:e6:7e:aa:61:3b:cc:6f:0d:d5:e4:c1:11:c8:d1:45:f4: b6:97:51:f6:6a:4b:3a:19:20:8b:5e:a2:16:0b:49:35:02:f6: 7a:b3:32:ca -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgISAZt/8aejZ1Eh5Qp+w8xpkAeeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWU0M2FkOTE3Mzg2YzRkODlmNmFjNTFmNGViM2YzMzk2MTljZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuR4jhqMZnUsZe8w0OP89vJVkYzz t78Zzf8i+RvNwvv6aixsWZpIkU3T1WEONLxcrixmrHW+/L9IltfjW4rW8FI9hcFR buSvq8vtbLzpSWDg554OJvh5BWCwqWxbWv6HMoqcEVEUibxNq6mTG2zJjttP7U4B G8OqKSYjscQloH1jSvVa2SznloL+/I5Sn0tjSEuR15L87v8mxf8oNJJgO/VCNieW j6yYv7VtHC3jcHC6ojo0b3isgxktDWLmcCcOv1xEMxNHDbVN0oE2Aun2i/xoDJ8I nER6kjrniEerEjT8dumadrtyyLW3n04vNWKlj3vbcs9PeDMj+LPUTznQ5QIDAQAB o4ICWDCCAlQwHQYDVR0OBBYEFGnkOtkXOGxNifasUfTrPzOWGc5nMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvYWVRNjJSYzRiRTJKOXF4UjlPc19NNVlaem1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG4GCCsGAQUFBwEHAQH/BF8wXTBbBAIAAjBVAwUDKgd4gAMH ACoJF8ATEgMHACoJF8D7rQMFACoOGoYDBQAqDvYCAwUAKg8VhgMFACoPLYMDBwAq Dz2GAAEDBQMqEl4AAwUAKhLsxQMHACoTGMABADANBgkqhkiG9w0BAQsFAAOCAQEA c7CW6J2sLWh6sPDF4zhTXwh1PMw6AVES262X8PKICOuoZYgaxtiBa5uoxVRn+0Ua hLpTt5Xkf3bEW7o42sjo2QJ63j5lPBWF4l9O1v8bD6fiPRCxp73FYTSKj0L4jqEH SV+z5jGRO3D/570lJmHyQk024NcnwW8sVcvPZqo3SsBCw/GHIbWLd4n8R/bT44aU 0b63CfoHnHYoykdgQtdI6+nCxjkSnlsV/+hpBiqW9xctZ9WVIkKxohnQknSvO05t gpT+/KsZNKOmg9jUo2dFe+bZsvz+kMUJWGfmfqphO8xvDdXkwRHI0UX0tpdR9mpL Ohkgi16iFgtJNQL2erMyyg== -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:53 2026 by rpki-client