This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/RRAu4Kf3uusLM_s-L7i8xC-lax8.roa File: RRAu4Kf3uusLM_s-L7i8xC-lax8.roa (raw, json) Hash identifier: /s6Jj47WwdoBoOMK3IGd2te/xhi4Nj/NKSQB5UNNjnE= Subject key identifier: 45:10:2E:E0:A7:F7:BA:EB:0B:33:FB:3E:2F:B8:BC:C4:2F:A5:6B:1F Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E389DCDA532DBECD249AB440D4859FD Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/RRAu4Kf3uusLM_s-L7i8xC-lax8.roa Signing time: Fri 02 Jan 2026 10:19:58 +0000 ROA not before: Fri 02 Jan 2026 10:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39686 IP address blocks: 2a07:3500:11e0::/48 maxlen: 48 2a07:3501:1031::/48 maxlen: 48 2a07:3501:1032::/47 maxlen: 47 2a07:3501:1050::/48 maxlen: 48 2a07:3501:1060::/48 maxlen: 48 2a07:3502:10e0::/48 maxlen: 48 2a07:3502:11c0::/48 maxlen: 48 2a07:3502:1210::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:9d:cd:a5:32:db:ec:d2:49:ab:44:0d:48:59:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45102ee0a7f7baeb0b33fb3e2fb8bcc42fa56b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f5:e3:57:66:d0:4c:09:69:a7:24:18:8f:19: 19:df:78:a0:b0:95:cc:76:d9:ee:04:83:0a:f3:65: 91:3a:d1:13:74:59:5f:3b:c5:e5:37:93:36:a5:ca: ed:ee:51:2a:07:4c:46:3b:41:6b:7e:db:88:fb:1e: 78:70:f7:c7:6f:f1:e4:5e:bb:06:24:41:a6:af:ca: 07:72:e6:8b:b0:c3:ac:80:a4:eb:45:d2:84:e8:35: 54:6e:21:96:e5:88:5a:4a:16:45:0d:ba:3a:41:f3: d6:de:d7:94:56:d6:f4:7a:62:08:ae:e4:d5:02:2a: a2:ba:8f:32:2a:60:15:32:21:e7:ac:3c:a3:16:76: 94:48:9e:51:4d:ea:9c:79:f0:b6:eb:e5:17:c9:5e: 54:00:92:0d:34:63:b8:4a:49:20:8c:58:9c:d1:ea: 95:e7:33:f7:d9:f2:7f:0c:54:a7:f4:98:75:14:04: d2:3d:67:df:a0:dc:a0:76:98:aa:49:66:d0:11:c6: 18:21:9a:ff:4d:39:82:38:6f:1d:ac:c3:1f:db:ff: b4:10:64:47:57:7b:2a:53:a9:ce:17:ed:ac:70:5e: 24:09:11:09:e3:67:bc:9b:8c:1d:44:e1:9f:83:d1: d7:eb:b9:12:2c:a8:53:86:29:01:1d:fa:2c:0a:62: 3c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:10:2E:E0:A7:F7:BA:EB:0B:33:FB:3E:2F:B8:BC:C4:2F:A5:6B:1F X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/RRAu4Kf3uusLM_s-L7i8xC-lax8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:3500:11e0::/48 2a07:3501:1031::-2a07:3501:1033:ffff:ffff:ffff:ffff:ffff 2a07:3501:1050::/48 2a07:3501:1060::/48 2a07:3502:10e0::/48 2a07:3502:11c0::/48 2a07:3502:1210::/46 Signature Algorithm: sha256WithRSAEncryption 5d:12:82:57:b8:74:bf:2b:52:eb:78:0f:b2:72:26:c3:18:73: 1e:f6:6e:4c:47:77:77:2f:1d:f2:0a:2b:92:b0:2a:84:18:f3: c8:0e:76:38:63:6d:4d:23:32:ad:e6:35:77:66:2e:43:ff:17: 2c:5e:7e:37:4f:99:de:a7:48:d5:3c:88:8d:9a:65:d1:50:48: 73:22:7e:66:05:d5:9d:f6:d5:9a:cd:f3:a4:ed:72:6b:6e:49: de:50:a8:82:b4:41:98:be:62:8f:15:90:3d:b7:76:74:45:b4: 2e:79:c8:ff:14:30:5f:e2:d1:fe:4d:a4:60:d9:f3:af:1f:07: 7c:32:0f:e2:fa:3b:55:b2:64:9c:7e:8d:7c:7c:50:51:24:28: 06:36:b8:5a:2d:e2:b1:de:80:fb:b1:70:e5:68:7d:7d:45:ac: 24:fe:c7:fa:52:85:49:69:e1:3f:0b:9f:3a:a4:8f:66:c3:b0: 46:b1:8c:d7:28:ef:77:7f:5e:31:fa:49:ea:7f:f2:dd:4c:f3: db:80:23:bb:48:40:08:fc:5e:22:ab:de:a2:a1:63:1a:df:94: b7:97:4f:38:c7:ca:d7:aa:33:13:64:44:d9:a9:49:df:8a:41: 92:8d:ed:2a:4a:05:6c:6a:b2:09:62:01:a7:d4:ff:c3:a1:cc: bd:2a:c6:29 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgISAZt+OJ3NpTLb7NJJq0QNSFn9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTEwMmVlMGE3ZjdiYWViMGIzM2ZiM2UyZmI4YmNjNDJmYTU2YjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfXjV2bQTAlppyQYjxkZ33igsJXM dtnuBIMK82WROtETdFlfO8XlN5M2pcrt7lEqB0xGO0FrftuI+x54cPfHb/HkXrsG JEGmr8oHcuaLsMOsgKTrRdKE6DVUbiGW5YhaShZFDbo6QfPW3teUVtb0emIIruTV Aiqiuo8yKmAVMiHnrDyjFnaUSJ5RTeqcefC26+UXyV5UAJINNGO4SkkgjFic0eqV 5zP32fJ/DFSn9Jh1FATSPWffoNygdpiqSWbQEcYYIZr/TTmCOG8drMMf2/+0EGRH V3sqU6nOF+2scF4kCREJ42e8m4wdROGfg9HX67kSLKhThikBHfosCmI8CQIDAQAB o4ICTTCCAkkwHQYDVR0OBBYEFEUQLuCn97rrCzP7Pi+4vMQvpWsfMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvUlJBdTRLZjN1dXNMTV9zLUw3aTh4Qy1sYXg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAAjBKAwcAKgc1ABHg MBIDBwAqBzUBEDEDBwIqBzUBEDADBwAqBzUBEFADBwAqBzUBEGADBwAqBzUCEOAD BwAqBzUCEcADBwIqBzUCEhAwDQYJKoZIhvcNAQELBQADggEBAF0Sgle4dL8rUut4 D7JyJsMYcx72bkxHd3cvHfIKK5KwKoQY88gOdjhjbU0jMq3mNXdmLkP/FyxefjdP md6nSNU8iI2aZdFQSHMifmYF1Z321ZrN86TtcmtuSd5QqIK0QZi+Yo8VkD23dnRF tC55yP8UMF/i0f5NpGDZ868fB3wyD+L6O1WyZJx+jXx8UFEkKAY2uFot4rHegPux cOVofX1FrCT+x/pShUlp4T8Lnzqkj2bDsEaxjNco73d/XjH6Sep/8t1M89uAI7tI QAj8XiKr3qKhYxrflLeXTzjHyteqMxNkRNmpSd+KQZKN7SpKBWxqsgliAafU/8Oh zL0qxik= -----END CERTIFICATE-----Generated at Tue Jan 20 04:48:49 2026 by rpki-client