This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/ajIXahG1h02mHzUr71Bdt_pBNcY.roa File: ajIXahG1h02mHzUr71Bdt_pBNcY.roa (raw, json) Hash identifier: kb65zR8ztUqoEmCVoclsV9qtFS56zcMpxTgwfbOjC74= Subject key identifier: 6A:32:17:6A:11:B5:87:4D:A6:1F:35:2B:EF:50:5D:B7:FA:41:35:C6 Certificate issuer: /CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f Certificate serial: 019B77C723755ADE9D56DADFEAA41CC3578A Authority key identifier: 37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/ajIXahG1h02mHzUr71Bdt_pBNcY.roa Signing time: Thu 01 Jan 2026 04:18:17 +0000 ROA not before: Thu 01 Jan 2026 04:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204378 IP address blocks: 2a0c:3800:300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:23:75:5a:de:9d:56:da:df:ea:a4:1c:c3:57:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f Validity Not Before: Jan 1 04:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a32176a11b5874da61f352bef505db7fa4135c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:58:be:1a:2d:d7:28:6d:b3:52:64:65:ac:70: ae:d1:db:41:2c:04:f3:bd:79:c2:62:6f:47:ae:3d: aa:54:24:a7:ee:f9:b3:e9:d2:53:52:6e:e1:8a:14: 11:fc:62:9a:f1:ca:fa:f4:09:18:85:0e:05:03:9c: 88:1d:bb:d9:31:d7:b3:2f:b8:77:7a:73:66:76:51: d8:05:87:d1:6a:fa:b0:2b:5a:73:ae:27:2a:76:a5: 67:43:05:8f:b9:24:27:ff:2d:e6:8b:e4:3d:c1:03: c0:e5:a8:58:27:ba:9b:c8:cf:9a:51:16:17:e7:f8: 78:d3:41:c5:91:f5:4a:2f:6e:9d:fe:6e:db:3d:e2: 75:67:8e:b7:44:dc:4e:3a:34:c2:e1:67:a0:8c:9d: 20:29:9b:1d:f0:be:7d:e9:71:43:b4:71:c2:83:bc: fb:fc:8b:66:5a:8e:22:ea:5a:84:6e:03:71:70:7c: d7:23:30:fd:e8:2d:28:85:bb:8e:13:3d:46:42:3d: 88:9b:86:32:22:c2:b2:60:23:78:ba:11:fa:ad:d3: b9:1a:1c:43:0d:a2:9d:0f:6a:13:34:47:45:23:b7: 68:06:62:29:32:1b:d9:ba:1b:bf:67:d0:a7:3c:bc: 9f:f4:7f:dd:70:3d:89:37:5e:d8:39:04:92:98:ea: 28:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:32:17:6A:11:B5:87:4D:A6:1F:35:2B:EF:50:5D:B7:FA:41:35:C6 X509v3 Authority Key Identifier: keyid:37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/ajIXahG1h02mHzUr71Bdt_pBNcY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:3800:300::/48 Signature Algorithm: sha256WithRSAEncryption b3:c3:8d:74:83:b9:75:03:be:4e:be:43:ff:80:a6:c7:e5:da: be:19:ec:db:61:32:5d:cd:09:26:4d:34:d3:57:f2:d3:f1:23: 23:40:ed:2d:b7:da:f8:6a:9d:96:30:68:bf:94:97:96:97:c1: 21:6a:a2:b2:db:e8:30:df:8e:7c:4a:a0:b4:6b:1d:f7:d1:16: 0c:8b:c9:57:fd:01:53:32:6c:e6:f9:e7:59:68:7e:b5:f2:09: 98:ce:6f:3d:8d:2d:9e:b4:cb:4f:82:60:cb:58:6b:f9:09:13: 2e:06:52:04:79:42:36:a3:86:c9:73:44:fc:aa:68:37:e6:e1: f6:c6:26:1e:6d:cd:82:86:dd:f4:d8:66:30:b2:ec:38:dd:ef: 77:23:d7:c4:8e:23:83:e4:8f:61:ea:71:dd:1e:35:cb:db:1f: d5:fb:0c:aa:92:c5:c5:0f:38:43:1a:14:d9:70:32:90:b7:70: fa:0b:cb:3f:f6:63:03:24:04:bc:8d:c1:87:3a:5d:55:42:1c: 41:79:5c:a1:21:61:09:5f:cb:0e:8a:97:58:11:38:2b:08:f8: de:6b:61:b2:3f:0f:8e:78:91:8b:f3:9f:dc:45:af:e8:0e:dd: e3:f0:4b:42:58:f8:06:62:d8:93:75:df:35:0a:a8:ec:e4:81: ee:02:c7:99 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3xyN1Wt6dVtrf6qQcw1eKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ODdiMzI0YjBkMzJmYjFhMzY3OGIwMmM0ODIyODZkNGMy NmJhMGYwHhcNMjYwMTAxMDQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTMyMTc2YTExYjU4NzRkYTYxZjM1MmJlZjUwNWRiN2ZhNDEzNWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVi+Gi3XKG2zUmRlrHCu0dtBLATz vXnCYm9Hrj2qVCSn7vmz6dJTUm7hihQR/GKa8cr69AkYhQ4FA5yIHbvZMdezL7h3 enNmdlHYBYfRavqwK1pzricqdqVnQwWPuSQn/y3mi+Q9wQPA5ahYJ7qbyM+aURYX 5/h400HFkfVKL26d/m7bPeJ1Z463RNxOOjTC4WegjJ0gKZsd8L596XFDtHHCg7z7 /ItmWo4i6lqEbgNxcHzXIzD96C0ohbuOEz1GQj2Im4YyIsKyYCN4uhH6rdO5GhxD DaKdD2oTNEdFI7doBmIpMhvZuhu/Z9CnPLyf9H/dcD2JN17YOQSSmOoodwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGoyF2oRtYdNph81K+9QXbf6QTXGMB8GA1UdIwQY MBaAFDeHsySw0y+xo2eLAsSCKG1MJroPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjRlekpMRFRMN0dqWjRzQ3hJSW9iVXdtdWc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS82MDIyNDQtNzY5OS00MTAzLWJjN2Ut YzQ3MTE0ODIzODBlLzEvYWpJWGFoRzFoMDJtSHpVcjcxQmR0X3BCTmNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS82MDIyNDQtNzY5OS00MTAzLWJjN2UtYzQ3MTE0ODIzODBl LzEvTjRlekpMRFRMN0dqWjRzQ3hJSW9iVXdtdWc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgw4AAMA MA0GCSqGSIb3DQEBCwUAA4IBAQCzw410g7l1A75OvkP/gKbH5dq+GezbYTJdzQkm TTTTV/LT8SMjQO0tt9r4ap2WMGi/lJeWl8EhaqKy2+gw3458SqC0ax330RYMi8lX /QFTMmzm+edZaH618gmYzm89jS2etMtPgmDLWGv5CRMuBlIEeUI2o4bJc0T8qmg3 5uH2xiYebc2Cht302GYwsuw43e93I9fEjiOD5I9h6nHdHjXL2x/V+wyqksXFDzhD GhTZcDKQt3D6C8s/9mMDJAS8jcGHOl1VQhxBeVyhIWEJX8sOipdYETgrCPjea2Gy Pw+OeJGL85/cRa/oDt3j8EtCWPgGYtiTdd81Cqjs5IHuAseZ -----END CERTIFICATE-----Generated at Fri Jan 9 18:11:24 2026 by rpki-client