This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/aKzncqSnNDJ04kwW1sm7wIT5Nbk.roa File: aKzncqSnNDJ04kwW1sm7wIT5Nbk.roa (raw, json) Hash identifier: 0YZIWdy8DpDNfejP3xMH84ZapJPrw+ElY6c4boXnYjM= Subject key identifier: 68:AC:E7:72:A4:A7:34:32:74:E2:4C:16:D6:C9:BB:C0:84:F9:35:B9 Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Certificate serial: 019B7CECF8B20AA1C31F7935C16A927F50B1 Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/aKzncqSnNDJ04kwW1sm7wIT5Nbk.roa Signing time: Fri 02 Jan 2026 04:17:43 +0000 ROA not before: Fri 02 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8278 IP address blocks: 2001:648:2960::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:f8:b2:0a:a1:c3:1f:79:35:c1:6a:92:7f:50:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Validity Not Before: Jan 2 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68ace772a4a7343274e24c16d6c9bbc084f935b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b3:20:1b:57:41:12:5c:32:61:f4:b7:cd:61: bf:f2:44:ea:32:e5:11:b3:36:28:b9:e7:10:c7:9a: 27:db:6d:0c:46:cd:ff:a6:bb:e8:fb:a7:e0:31:69: 34:7c:37:87:5b:74:e4:3c:9a:56:9c:b0:c4:90:5c: cd:73:49:07:b2:9f:58:3c:97:49:f8:8b:ec:f5:2d: 68:ea:52:90:d9:60:e8:2d:fc:e0:1e:6c:fc:35:28: a3:47:84:d0:d0:b9:fe:8c:a4:9c:4d:6a:69:11:1d: dc:7b:af:6a:80:c5:e0:66:3c:e6:b0:55:89:9d:c2: 32:b6:95:72:d7:c2:da:76:1d:9a:a1:c4:c8:b4:e2: 95:66:b6:93:c6:25:90:79:62:80:ee:a2:21:88:95: 01:a8:3a:38:e1:1c:5c:e9:1f:bf:14:85:8b:36:52: 45:a9:db:f8:0b:01:6a:50:80:c5:38:5f:f0:ec:ac: b3:6e:d3:46:e4:56:ec:f6:4b:ca:a9:91:47:b3:ad: 3a:36:3a:62:25:8d:70:99:3e:67:f7:86:1b:ba:70: 5d:e0:16:1d:b4:d9:5f:12:96:64:aa:93:03:c1:98: 2f:bb:b1:92:2d:56:a8:4a:d0:98:4d:62:8a:9d:22: eb:45:6e:1b:b8:65:c9:26:d0:9d:de:51:92:bd:35: f7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AC:E7:72:A4:A7:34:32:74:E2:4C:16:D6:C9:BB:C0:84:F9:35:B9 X509v3 Authority Key Identifier: keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/aKzncqSnNDJ04kwW1sm7wIT5Nbk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:648:2960::/48 Signature Algorithm: sha256WithRSAEncryption 3d:b2:21:b4:72:32:1c:7c:d2:b9:a0:8d:ce:b5:7b:00:7a:71: d1:6d:fa:97:3f:98:d0:cd:60:e5:2d:1e:80:71:61:f8:f6:99: fc:7e:e0:a4:3f:28:42:2d:1d:5f:b7:97:48:d1:1e:13:2b:f4: f9:34:6f:2a:22:b5:ef:cc:a2:0c:7d:f7:97:4b:e8:5f:09:ce: fb:a3:ad:3b:37:95:36:04:41:c3:a1:52:17:0c:2b:d0:94:f9: 1b:35:38:43:f7:29:50:ee:a3:46:48:36:da:ee:ed:f2:2b:47: 06:10:43:ec:af:8a:37:f9:30:ae:6d:1d:57:05:fd:85:7f:0f: 2b:80:59:29:37:00:c0:bd:cc:8c:5f:90:04:98:10:c9:8b:13: d9:47:6a:37:ef:d0:85:7a:0f:9e:95:b5:b2:8d:ee:4f:22:89: d8:21:44:a7:2e:8b:37:eb:c2:18:f9:09:d6:2a:40:93:5d:0a: 27:90:bd:18:6e:5a:39:e2:60:53:20:2e:db:1b:3d:21:18:38: ed:81:e1:bb:9d:c1:06:e4:a2:fc:61:6a:15:d0:4b:df:78:04: 35:22:b3:be:af:66:5b:6c:29:4f:59:cd:f0:fc:80:3d:4c:c4: 5c:27:5f:0d:71:c2:88:dc:90:b2:21:01:48:86:78:ad:a5:2e: 19:98:45:25 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87PiyCqHDH3k1wWqSf1CxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1 MjlkYzMwHhcNMjYwMTAyMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGFjZTc3MmE0YTczNDMyNzRlMjRjMTZkNmM5YmJjMDg0ZjkzNWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37MgG1dBElwyYfS3zWG/8kTqMuUR szYouecQx5on220MRs3/prvo+6fgMWk0fDeHW3TkPJpWnLDEkFzNc0kHsp9YPJdJ +Ivs9S1o6lKQ2WDoLfzgHmz8NSijR4TQ0Ln+jKScTWppER3ce69qgMXgZjzmsFWJ ncIytpVy18Ladh2aocTItOKVZraTxiWQeWKA7qIhiJUBqDo44Rxc6R+/FIWLNlJF qdv4CwFqUIDFOF/w7KyzbtNG5Fbs9kvKqZFHs606NjpiJY1wmT5n94YbunBd4BYd tNlfEpZkqpMDwZgvu7GSLVaoStCYTWKKnSLrRW4buGXJJtCd3lGSvTX30wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGis53KkpzQydOJMFtbJu8CE+TW5MB8GA1UdIwQY MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut YWFhNDU1M2QyYWJkLzEvYUt6bmNxU25OREowNGt3VzFzbTd3SVQ1TmJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGSClg MA0GCSqGSIb3DQEBCwUAA4IBAQA9siG0cjIcfNK5oI3OtXsAenHRbfqXP5jQzWDl LR6AcWH49pn8fuCkPyhCLR1ft5dI0R4TK/T5NG8qIrXvzKIMffeXS+hfCc77o607 N5U2BEHDoVIXDCvQlPkbNThD9ylQ7qNGSDba7u3yK0cGEEPsr4o3+TCubR1XBf2F fw8rgFkpNwDAvcyMX5AEmBDJixPZR2o379CFeg+elbWyje5PIonYIUSnLos368IY +QnWKkCTXQonkL0Yblo54mBTIC7bGz0hGDjtgeG7ncEG5KL8YWoV0EvfeAQ1IrO+ r2ZbbClPWc3w/IA9TMRcJ18NccKI3JCyIQFIhnitpS4ZmEUl -----END CERTIFICATE-----Generated at Mon Feb 2 09:39:28 2026 by rpki-client