This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/amLES0luVq3iLHPQKyufyNQwgaI.roa File: amLES0luVq3iLHPQKyufyNQwgaI.roa (raw, json) Hash identifier: UsdGqDJsnylUEzlDTC7n05/NMnzeFnVJjS3/bK29FXs= Subject key identifier: 6A:62:C4:4B:49:6E:56:AD:E2:2C:73:D0:2B:2B:9F:C8:D4:30:81:A2 Certificate issuer: /CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d Certificate serial: 019B7B36A90C9B32E4027DB7AA2357E90F69 Authority key identifier: CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/amLES0luVq3iLHPQKyufyNQwgaI.roa Signing time: Thu 01 Jan 2026 20:18:58 +0000 ROA not before: Thu 01 Jan 2026 20:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2001:67c:fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a9:0c:9b:32:e4:02:7d:b7:aa:23:57:e9:0f:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d Validity Not Before: Jan 1 20:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a62c44b496e56ade22c73d02b2b9fc8d43081a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:65:42:57:d0:3b:19:5a:d2:ac:97:e2:e7:21: 23:cf:5d:ed:7e:9b:df:f1:aa:63:9b:52:2b:5f:e4: 5d:1d:37:a1:3d:f3:fe:6a:ad:95:ae:6f:39:d5:cd: 21:f2:55:48:64:d7:31:c8:17:16:7e:e4:69:23:9c: 67:e7:7c:bc:55:1e:4d:ee:c1:f8:a7:e4:51:5b:21: 58:7e:d9:62:55:e3:01:55:c5:71:59:a1:3b:d7:75: df:77:68:aa:52:37:aa:aa:cc:a9:88:d2:6e:c2:41: 42:81:9d:48:86:98:48:2a:ec:47:f2:c5:d6:b3:55: c6:0b:a7:be:80:f7:e6:e4:dc:9b:e5:0f:ac:1d:c9: 93:01:1b:d5:26:ab:af:6e:7a:4c:54:c2:2b:06:43: a8:b7:2a:6d:79:97:7e:cf:58:da:48:f9:d6:ed:ee: df:c1:1e:06:bc:dd:f1:d9:66:f1:38:f1:55:9d:04: 70:45:b8:4c:32:30:4d:23:32:e6:a5:68:53:e3:bb: d7:5a:a7:5d:05:53:cc:ff:59:d8:12:43:1a:e3:0d: 55:e1:01:d7:df:89:cb:a8:71:df:e8:cc:e1:e6:54: 05:fd:d7:ca:88:f8:50:61:32:1f:1b:a4:ce:0c:1e: d2:f1:e3:db:d2:c1:38:d2:ac:86:78:a8:07:c4:5a: 9e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:62:C4:4B:49:6E:56:AD:E2:2C:73:D0:2B:2B:9F:C8:D4:30:81:A2 X509v3 Authority Key Identifier: keyid:CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/amLES0luVq3iLHPQKyufyNQwgaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:fc0::/48 Signature Algorithm: sha256WithRSAEncryption b2:24:8b:b1:16:5d:64:d7:c9:56:94:90:7d:80:3f:60:ff:56: d5:84:fd:d4:ce:e6:0c:e8:52:bf:f9:8f:e8:7d:d6:c8:db:20: 79:bb:69:71:13:b0:ed:fe:a8:ff:67:9c:fa:36:95:ad:e4:56: 3b:1f:ee:c6:e4:a1:fe:a9:26:23:9f:ee:d1:4a:a1:ab:e5:e5: a8:ec:86:64:33:07:4e:1c:a7:6c:2c:d5:8e:15:0f:87:ac:21: 7a:fc:7f:4f:5c:96:0d:67:b7:f7:7e:f9:2b:8f:de:73:67:a8: 78:0e:92:c5:54:24:41:df:1a:8f:0d:ea:10:e5:0e:50:27:c5: e3:8f:b0:42:ef:b0:a8:ef:f2:74:38:69:43:1c:88:4c:74:11: c0:4a:d6:a5:50:25:ac:e0:3a:bd:59:25:f7:f7:b0:83:42:b2: 41:ab:c7:11:5c:18:67:08:1d:23:ed:f5:50:f7:87:8a:52:1f: da:2f:31:29:9b:3b:73:1a:b7:8c:63:9b:eb:ec:60:1c:ed:7b: 46:6c:6e:3a:ae:71:25:9c:71:7b:12:7d:1e:5b:fa:af:3f:77: 5d:26:2a:4f:20:02:5d:49:54:a2:99:3c:90:35:9f:90:a1:e2: 2c:bd:46:6e:06:d9:82:f3:a2:d7:f4:38:86:04:16:32:ca:3f: 7e:85:22:6e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7NqkMmzLkAn23qiNX6Q9pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzVmNTRhM2IwZTJlNDhkZDVlZmIzNjI0YzFmZTBlODVm ZTI2MWQwHhcNMjYwMTAxMjAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTYyYzQ0YjQ5NmU1NmFkZTIyYzczZDAyYjJiOWZjOGQ0MzA4MWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmVCV9A7GVrSrJfi5yEjz13tfpvf 8apjm1IrX+RdHTehPfP+aq2Vrm851c0h8lVIZNcxyBcWfuRpI5xn53y8VR5N7sH4 p+RRWyFYftliVeMBVcVxWaE713Xfd2iqUjeqqsypiNJuwkFCgZ1IhphIKuxH8sXW s1XGC6e+gPfm5Nyb5Q+sHcmTARvVJquvbnpMVMIrBkOotypteZd+z1jaSPnW7e7f wR4GvN3x2WbxOPFVnQRwRbhMMjBNIzLmpWhT47vXWqddBVPM/1nYEkMa4w1V4QHX 34nLqHHf6Mzh5lQF/dfKiPhQYTIfG6TODB7S8ePb0sE40qyGeKgHxFqetQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGpixEtJblat4ixz0Csrn8jUMIGiMB8GA1UdIwQY MBaAFMo19Uo7Di5I3V77NiTB/g6F/iYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC85YTA0OTctY2QwZC00OGRjLTg2YWUt NTFjOTliYzhlOGQwLzEvYW1MRVMwbHVWcTNpTEhQUUt5dWZ5TlF3Z2FJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC85YTA0OTctY2QwZC00OGRjLTg2YWUtNTFjOTliYzhlOGQw LzEveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA/A MA0GCSqGSIb3DQEBCwUAA4IBAQCyJIuxFl1k18lWlJB9gD9g/1bVhP3UzuYM6FK/ +Y/ofdbI2yB5u2lxE7Dt/qj/Z5z6NpWt5FY7H+7G5KH+qSYjn+7RSqGr5eWo7IZk MwdOHKdsLNWOFQ+HrCF6/H9PXJYNZ7f3fvkrj95zZ6h4DpLFVCRB3xqPDeoQ5Q5Q J8Xjj7BC77Co7/J0OGlDHIhMdBHAStalUCWs4Dq9WSX397CDQrJBq8cRXBhnCB0j 7fVQ94eKUh/aLzEpmztzGreMY5vr7GAc7XtGbG46rnElnHF7En0eW/qvP3ddJipP IAJdSVSimTyQNZ+QoeIsvUZuBtmC86LX9DiGBBYyyj9+hSJu -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:54 2026 by rpki-client