This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/AQd6696DS58WSqKOJB3_PgGA6ww.roa File: AQd6696DS58WSqKOJB3_PgGA6ww.roa (raw, json) Hash identifier: LGXodTKuNu4kXpvG5ujn8tNfaAjmgD5yZwsMvUZmhpE= Subject key identifier: 01:07:7A:EB:DE:83:4B:9F:16:4A:A2:8E:24:1D:FF:3E:01:80:EB:0C Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Certificate serial: 019B7F15CB9C319B2B85FFAEBE6A7FAC289F Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/AQd6696DS58WSqKOJB3_PgGA6ww.roa Signing time: Fri 02 Jan 2026 14:21:33 +0000 ROA not before: Fri 02 Jan 2026 14:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51714 IP address blocks: 2a09:ff00:103::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:cb:9c:31:9b:2b:85:ff:ae:be:6a:7f:ac:28:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Validity Not Before: Jan 2 14:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01077aebde834b9f164aa28e241dff3e0180eb0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2e:4b:4b:cf:5f:bc:c3:c3:80:a2:ba:c3:d5: ae:e3:dc:00:cd:40:d3:7c:2e:97:a4:fd:6a:cf:d7: bd:9c:e9:34:8b:c9:16:21:e1:45:fd:36:c3:61:f4: bd:1b:ad:ad:0e:71:e4:6c:11:59:e9:23:b6:37:d3: d9:78:70:77:31:c6:00:fa:36:02:45:a2:81:23:9c: 56:51:c5:98:94:d2:25:4c:c0:eb:4d:64:14:22:fd: ee:6b:de:c6:7f:98:8c:86:6c:3b:b4:4c:99:d7:28: 23:ac:7e:14:d1:0c:b5:0a:b4:f0:49:1f:80:cc:38: 4a:52:3d:e5:65:5d:b9:a3:9f:0b:b5:2d:79:fb:eb: db:26:ed:a9:d6:40:17:3a:c9:21:2a:3d:d0:f1:59: 49:03:74:80:08:d9:8e:a0:ce:b8:79:54:b0:0b:0b: b8:6d:65:d9:d4:bf:40:65:02:48:2e:e7:52:45:3a: 4f:64:4a:81:be:87:9d:9f:26:9e:5f:d4:2b:a6:ef: a6:84:f7:59:38:a7:55:43:2b:de:95:c4:42:8f:50: cf:ad:65:38:f9:11:09:44:d2:a3:a4:67:96:fd:1d: c0:0a:56:22:b8:74:36:26:47:ad:11:6b:82:bc:88: 12:f2:a7:ff:d7:dd:43:0a:3a:06:58:3f:de:70:c1: e7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:07:7A:EB:DE:83:4B:9F:16:4A:A2:8E:24:1D:FF:3E:01:80:EB:0C X509v3 Authority Key Identifier: keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/AQd6696DS58WSqKOJB3_PgGA6ww.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:ff00:103::/48 Signature Algorithm: sha256WithRSAEncryption 1b:75:53:69:17:a0:77:f2:7c:93:82:a8:21:e8:71:94:84:94: bd:5d:58:de:d1:c6:b1:53:bd:cb:21:bd:07:c7:5a:52:d5:e7: 95:de:f0:29:d7:a4:aa:4b:b6:48:00:1a:2f:09:03:55:9c:58: 9d:74:44:61:21:12:11:75:c6:04:aa:4a:8e:41:d2:c0:00:58: f4:a9:15:3c:41:f4:2c:3c:c3:8e:28:e0:05:14:e0:6c:4e:e6: 78:17:be:78:c0:32:ba:ea:8a:cb:75:70:73:53:4e:a1:c4:da: 88:3b:83:06:0e:91:ea:de:61:fb:76:ee:4d:10:46:5a:a0:1c: 9c:cd:5b:14:ee:2e:e6:19:da:b6:39:00:32:bf:f4:a9:64:8f: 40:f4:a8:33:5e:23:bf:78:58:c6:be:69:df:1e:67:bc:2e:4e: 28:89:93:59:c5:df:2f:6d:15:06:0e:50:8a:d1:12:07:0a:a5: 85:2e:c2:0d:be:9a:b2:60:99:28:1d:0e:d5:db:3c:03:5c:3b: 76:20:21:f7:0f:02:56:7f:6a:81:9f:13:44:bf:cd:bd:60:81: f1:83:fe:8c:da:91:34:f3:6f:bd:7c:85:7f:38:be:43:54:cd: 00:86:8d:1b:1f:81:ba:9e:08:07:32:dc:9f:f8:8e:b4:0d:e5: c4:26:97:11 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FcucMZsrhf+uvmp/rCifMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk YTEzNzAwHhcNMjYwMTAyMTQyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTA3N2FlYmRlODM0YjlmMTY0YWEyOGUyNDFkZmYzZTAxODBlYjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC5LS89fvMPDgKK6w9Wu49wAzUDT fC6XpP1qz9e9nOk0i8kWIeFF/TbDYfS9G62tDnHkbBFZ6SO2N9PZeHB3McYA+jYC RaKBI5xWUcWYlNIlTMDrTWQUIv3ua97Gf5iMhmw7tEyZ1ygjrH4U0Qy1CrTwSR+A zDhKUj3lZV25o58LtS15++vbJu2p1kAXOskhKj3Q8VlJA3SACNmOoM64eVSwCwu4 bWXZ1L9AZQJILudSRTpPZEqBvoednyaeX9Qrpu+mhPdZOKdVQyvelcRCj1DPrWU4 +REJRNKjpGeW/R3AClYiuHQ2JketEWuCvIgS8qf/191DCjoGWD/ecMHnAwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAEHeuveg0ufFkqijiQd/z4BgOsMMB8GA1UdIwQY MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt NjA4MDk1MmYwZTA0LzEvQVFkNjY5NkRTNThXU3FLT0pCM19QZ0dBNnd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0 LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgn/AAED MA0GCSqGSIb3DQEBCwUAA4IBAQAbdVNpF6B38nyTgqgh6HGUhJS9XVje0caxU73L Ib0Hx1pS1eeV3vAp16SqS7ZIABovCQNVnFiddERhIRIRdcYEqkqOQdLAAFj0qRU8 QfQsPMOOKOAFFOBsTuZ4F754wDK66orLdXBzU06hxNqIO4MGDpHq3mH7du5NEEZa oByczVsU7i7mGdq2OQAyv/SpZI9A9KgzXiO/eFjGvmnfHme8Lk4oiZNZxd8vbRUG DlCK0RIHCqWFLsINvpqyYJkoHQ7V2zwDXDt2ICH3DwJWf2qBnxNEv829YIHxg/6M 2pE082+9fIV/OL5DVM0Aho0bH4G6nggHMtyf+I60DeXEJpcR -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:56 2026 by rpki-client