This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/MAbKsaJixjU16-YxviDdUW3E9O0.roa File: MAbKsaJixjU16-YxviDdUW3E9O0.roa (raw, json) Hash identifier: G7uQcrymoMNiTSNS0GkaRs7zRkNHWrcTl4RG77CdYN0= Subject key identifier: 30:06:CA:B1:A2:62:C6:35:35:EB:E6:31:BE:20:DD:51:6D:C4:F4:ED Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Certificate serial: 019B775896A1AE0E9B111E9E452D9EEA8C91 Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/MAbKsaJixjU16-YxviDdUW3E9O0.roa Signing time: Thu 01 Jan 2026 02:17:33 +0000 ROA not before: Thu 01 Jan 2026 02:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49981 IP address blocks: 2a0f:ca80:617::/48 maxlen: 48 2a0f:ca80:618::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:96:a1:ae:0e:9b:11:1e:9e:45:2d:9e:ea:8c:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Validity Not Before: Jan 1 02:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3006cab1a262c63535ebe631be20dd516dc4f4ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2b:89:40:64:75:78:3e:6e:e2:11:55:18:b5: 46:43:09:79:5e:5f:85:d1:c2:e1:d2:20:2d:cd:c1: 50:d4:b1:12:45:11:1b:47:b9:ec:99:a7:a8:2a:07: e8:f5:da:19:75:fb:ac:cc:96:17:1c:f9:2b:58:f2: 55:0c:28:b7:cb:66:e4:72:0e:54:9c:6f:5b:3f:f6: 48:03:01:88:b4:12:b8:7d:61:09:67:d9:b9:82:cb: c7:a3:a0:bf:27:ce:44:28:3f:5d:0a:43:5b:44:3f: 85:81:29:7d:cd:f3:ed:39:86:8f:0b:0a:31:a8:2e: 96:ba:d4:c0:c6:eb:bb:15:34:77:af:b7:fe:62:24: f4:03:6a:0e:3d:49:7f:b0:18:ec:66:54:00:44:0f: 76:6b:a6:6f:01:85:f3:72:35:30:a0:cb:eb:bd:47: 48:15:10:17:b4:c6:d3:df:7c:5f:db:be:63:b6:4f: 12:30:74:03:f5:b7:23:c1:cb:45:e9:f2:8c:3b:4e: 28:9b:b0:3c:96:a2:fc:a8:fd:28:3e:47:ca:5a:97: 1d:2a:ee:34:b6:60:9b:76:42:48:ed:ec:c8:d9:19: 80:55:3d:a8:57:86:e5:1a:aa:d0:1c:eb:10:b7:9d: 3d:35:37:c3:6d:c7:b9:0f:a7:61:02:e2:64:1e:98: 1e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:06:CA:B1:A2:62:C6:35:35:EB:E6:31:BE:20:DD:51:6D:C4:F4:ED X509v3 Authority Key Identifier: keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/MAbKsaJixjU16-YxviDdUW3E9O0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:ca80:617::-2a0f:ca80:618:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 36:6e:bd:3e:e8:8a:9d:b9:53:69:11:28:58:03:3f:48:62:31: e3:42:f5:36:28:2c:68:9b:de:1b:d4:0a:34:a2:64:c1:90:75: 0f:d7:02:e2:72:89:20:23:6d:f3:96:5c:f9:ff:8c:86:24:16: 12:31:4a:16:db:e7:3f:77:f3:4f:58:26:14:4f:df:d9:45:1c: 5c:7d:cc:b2:5b:93:d0:b2:3c:64:88:37:4f:8c:f1:5a:55:5d: f9:e1:52:61:1b:ff:a3:95:88:ed:12:e6:f4:ec:c6:fc:74:a7: 6e:a7:97:88:cc:6c:ea:ae:75:15:4a:90:0f:1b:28:ac:81:6d: 1d:b8:d4:da:50:16:5a:8b:8f:ed:ba:61:18:60:67:1d:34:e3: 90:9b:d0:e3:cc:74:6c:07:a3:6d:16:f9:66:4b:6e:82:75:41: 4a:47:34:60:3e:1d:3c:80:31:a7:d3:3b:54:7e:4f:3e:c4:23: e3:89:91:60:8f:af:01:49:5d:3a:08:e3:21:44:13:52:dc:64: bd:b0:f6:c6:b4:f6:2a:94:4d:72:04:b8:12:76:ec:de:b6:04: f6:6e:d2:70:ce:c7:22:cd:0d:ec:04:c8:53:be:cf:44:43:9b: b0:c2:9e:18:89:4c:e6:e6:18:fa:9b:87:5a:57:2c:65:29:13: e1:bb:53:da -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt3WJahrg6bER6eRS2e6oyRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2 MjFkYjEwHhcNMjYwMTAxMDIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDA2Y2FiMWEyNjJjNjM1MzVlYmU2MzFiZTIwZGQ1MTZkYzRmNGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCuJQGR1eD5u4hFVGLVGQwl5Xl+F 0cLh0iAtzcFQ1LESRREbR7nsmaeoKgfo9doZdfuszJYXHPkrWPJVDCi3y2bkcg5U nG9bP/ZIAwGItBK4fWEJZ9m5gsvHo6C/J85EKD9dCkNbRD+FgSl9zfPtOYaPCwox qC6WutTAxuu7FTR3r7f+YiT0A2oOPUl/sBjsZlQARA92a6ZvAYXzcjUwoMvrvUdI FRAXtMbT33xf275jtk8SMHQD9bcjwctF6fKMO04om7A8lqL8qP0oPkfKWpcdKu40 tmCbdkJI7ezI2RmAVT2oV4blGqrQHOsQt509NTfDbce5D6dhAuJkHpgeLwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFDAGyrGiYsY1NevmMb4g3VFtxPTtMB8GA1UdIwQY MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt ZmIxMDMwNjUxMDY3LzEvTUFiS3NhSml4alUxNi1ZeHZpRGRVVzNFOU8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3 LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqD8qA BhcDBwAqD8qABhgwDQYJKoZIhvcNAQELBQADggEBADZuvT7oip25U2kRKFgDP0hi MeNC9TYoLGib3hvUCjSiZMGQdQ/XAuJyiSAjbfOWXPn/jIYkFhIxShbb5z93809Y JhRP39lFHFx9zLJbk9CyPGSIN0+M8VpVXfnhUmEb/6OViO0S5vTsxvx0p26nl4jM bOqudRVKkA8bKKyBbR241NpQFlqLj+26YRhgZx0045Cb0OPMdGwHo20W+WZLboJ1 QUpHNGA+HTyAMafTO1R+Tz7EI+OJkWCPrwFJXToI4yFEE1LcZL2w9sa09iqUTXIE uBJ27N62BPZu0nDOxyLNDewEyFO+z0RDm7DCnhiJTObmGPqbh1pXLGUpE+G7U9o= -----END CERTIFICATE-----Generated at Mon Jan 19 17:34:09 2026 by rpki-client