This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/aT21_RL1m6rGeB-ld5KbAq-VyRY.roa File: aT21_RL1m6rGeB-ld5KbAq-VyRY.roa (raw, json) Hash identifier: igzeABuSc631EbNOWtmlhHktMnf95zdqHlwzunblRoQ= Subject key identifier: 69:3D:B5:FD:12:F5:9B:AA:C6:78:1F:A5:77:92:9B:02:AF:95:C9:16 Certificate issuer: /CN=9a5550e908a9b9688c29aac9895353dea836c45a Certificate serial: 019C247A243DF9DC7E27D0C91E2E5C0DC8E2 Authority key identifier: 9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/aT21_RL1m6rGeB-ld5KbAq-VyRY.roa Signing time: Tue 03 Feb 2026 17:08:30 +0000 ROA not before: Tue 03 Feb 2026 17:08:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14960 IP address blocks: 2a02:e980:242::/48 maxlen: 48 2a02:e980:243::/48 maxlen: 48 2a02:e980:24e::/48 maxlen: 48 2a02:e982:3::/48 maxlen: 48 2a02:e982:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:24:7a:24:3d:f9:dc:7e:27:d0:c9:1e:2e:5c:0d:c8:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a5550e908a9b9688c29aac9895353dea836c45a Validity Not Before: Feb 3 17:08:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=693db5fd12f59baac6781fa577929b02af95c916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4f:07:c3:a0:bb:0f:f3:ae:9f:69:13:88:7e: a2:c3:5c:a0:73:23:40:02:cf:f6:94:d7:03:03:a7: d7:3d:a0:df:df:8d:20:3c:4d:c3:4d:0f:66:ce:e8: e6:08:5f:d7:1a:c5:75:4b:b4:05:e4:88:9e:33:0e: 29:96:bb:00:8a:02:7f:f7:25:81:b3:21:f9:c6:3e: 47:9e:fb:8b:8a:6b:86:ef:4e:a0:50:79:88:ec:4a: 59:08:23:a2:86:fe:8d:48:6e:90:89:b3:22:70:5f: 89:ab:09:52:7a:7d:25:1f:07:85:a3:da:ea:6a:06: 43:cb:cc:ca:bc:5d:b0:5a:4c:91:ea:45:e8:4f:7b: e5:e3:77:fb:26:05:03:a9:b5:2c:10:0f:5e:67:bc: a1:ed:2e:25:8c:4d:15:da:07:fc:46:6d:7c:35:0e: f3:a4:18:86:df:e0:dd:5f:ac:c7:d2:ba:01:0c:aa: cb:f4:07:08:26:e3:20:e0:0d:c2:43:b7:8f:fb:e0: c6:d2:aa:af:08:cd:ba:20:61:11:c3:80:b5:6c:d2: 39:53:85:b1:68:ad:cf:88:d9:12:67:52:18:a7:96: 97:ae:87:a0:0c:f3:7c:33:ac:28:13:35:e7:50:2e: 30:94:f6:a4:29:43:d6:3f:67:34:60:fa:c5:7a:46: d6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:3D:B5:FD:12:F5:9B:AA:C6:78:1F:A5:77:92:9B:02:AF:95:C9:16 X509v3 Authority Key Identifier: keyid:9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/aT21_RL1m6rGeB-ld5KbAq-VyRY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:e980:242::/47 2a02:e980:24e::/48 2a02:e982:3::-2a02:e982:4:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 3d:31:db:e5:4d:af:8c:4a:9b:0d:8d:cb:8c:94:39:d2:8d:e6: 4f:b3:41:f1:7d:b9:77:6c:3e:cb:fa:18:21:1f:fe:9c:75:61: 12:fb:8b:e8:85:1c:14:d3:7a:36:3d:cc:e1:4d:78:e7:39:2d: 7a:54:9d:a1:99:72:c6:1f:5f:e4:86:ab:66:5c:e9:1c:a7:8f: 1b:d3:b0:9e:3a:e0:87:10:69:0c:92:90:eb:66:7b:0d:9a:3c: f1:d7:5f:38:17:69:df:ff:36:5a:46:b0:40:7e:f1:8e:c3:e0: a7:b8:93:97:32:7a:fe:f3:77:93:45:a8:9d:0c:09:25:e9:ef: b7:e2:b8:bb:f0:77:af:da:fc:b8:b7:75:45:07:b2:e7:97:a3: 22:ce:7d:17:b1:99:8f:13:68:66:02:5e:2f:f8:cf:43:09:ed: 5d:0e:46:af:19:3d:2c:77:d2:9a:e7:fc:21:ac:36:09:fc:e5: a9:fc:ba:74:7d:df:17:a9:a1:5d:b6:18:9c:4e:1c:a6:6b:a0: 1d:48:76:3e:f9:9b:1d:53:4d:38:e3:bf:24:c7:52:0e:10:c2: 07:bf:16:10:1b:0d:d1:54:0d:fe:a5:2b:1b:d9:82:c1:3a:e5: 6e:87:d2:0b:1d:47:d6:08:1d:9f:42:d5:a5:ba:79:ce:0a:77: 7e:d2:8e:ca -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZwkeiQ9+dx+J9DJHi5cDcjiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNTU1MGU5MDhhOWI5Njg4YzI5YWFjOTg5NTM1M2RlYTgz NmM0NWEwHhcNMjYwMjAzMTcwODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTNkYjVmZDEyZjU5YmFhYzY3ODFmYTU3NzkyOWIwMmFmOTVjOTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3E8Hw6C7D/Oun2kTiH6iw1ygcyNA As/2lNcDA6fXPaDf340gPE3DTQ9mzujmCF/XGsV1S7QF5IieMw4plrsAigJ/9yWB syH5xj5HnvuLimuG706gUHmI7EpZCCOihv6NSG6QibMicF+JqwlSen0lHweFo9rq agZDy8zKvF2wWkyR6kXoT3vl43f7JgUDqbUsEA9eZ7yh7S4ljE0V2gf8Rm18NQ7z pBiG3+DdX6zH0roBDKrL9AcIJuMg4A3CQ7eP++DG0qqvCM26IGERw4C1bNI5U4Wx aK3PiNkSZ1IYp5aXroegDPN8M6woEzXnUC4wlPakKUPWP2c0YPrFekbW/wIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFGk9tf0S9ZuqxngfpXeSmwKvlckWMB8GA1UdIwQY MBaAFJpVUOkIqblojCmqyYlTU96oNsRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWxWUTZRaXB1V2lNS2FySmlWTlQzcWcyeEZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iYmIzMGItMjY4OC00YTZlLWIyYTIt MTM5OWEyODIyMjdhLzEvYVQyMV9STDFtNnJHZUItbGQ1S2JBcS1WeVJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iYmIzMGItMjY4OC00YTZlLWIyYTItMTM5OWEyODIyMjdh LzEvbWxWUTZRaXB1V2lNS2FySmlWTlQzcWcyeEZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAwcBKgLpgAJC AwcAKgLpgAJOMBIDBwAqAumCAAMDBwAqAumCAAQwDQYJKoZIhvcNAQELBQADggEB AD0x2+VNr4xKmw2Ny4yUOdKN5k+zQfF9uXdsPsv6GCEf/px1YRL7i+iFHBTTejY9 zOFNeOc5LXpUnaGZcsYfX+SGq2Zc6RynjxvTsJ464IcQaQySkOtmew2aPPHXXzgX ad//NlpGsEB+8Y7D4Ke4k5cyev7zd5NFqJ0MCSXp77fiuLvwd6/a/Li3dUUHsueX oyLOfRexmY8TaGYCXi/4z0MJ7V0ORq8ZPSx30prn/CGsNgn85an8unR93xepoV22 GJxOHKZroB1Idj75mx1TTTjjvyTHUg4Qwge/FhAbDdFUDf6lKxvZgsE65W6H0gsd R9YIHZ9C1aW6ec4Kd37Sjso= -----END CERTIFICATE-----Generated at Tue Feb 10 02:25:06 2026 by rpki-client