This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/Ap94zKbjaKRD8dLJxC3vQjdIzYI.roa File: Ap94zKbjaKRD8dLJxC3vQjdIzYI.roa (raw, json) Hash identifier: JRuLWMClb6VMX6iY+2SiZAouIeUYw7rqGE6z3zbCih8= Subject key identifier: 02:9F:78:CC:A6:E3:68:A4:43:F1:D2:C9:C4:2D:EF:42:37:48:CD:82 Certificate issuer: /CN=97ea541c123faa9c0edc729f829e959fd292e37d Certificate serial: 019B7BA3329C635AE2E7AF1BCE9123A9B06A Authority key identifier: 97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/Ap94zKbjaKRD8dLJxC3vQjdIzYI.roa Signing time: Thu 01 Jan 2026 22:17:31 +0000 ROA not before: Thu 01 Jan 2026 22:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2a0d:9b84:ff00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:32:9c:63:5a:e2:e7:af:1b:ce:91:23:a9:b0:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ea541c123faa9c0edc729f829e959fd292e37d Validity Not Before: Jan 1 22:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=029f78cca6e368a443f1d2c9c42def423748cd82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:98:ca:57:2b:67:76:69:75:55:24:d7:5c:cd: 9d:e8:12:5c:6a:f8:f5:62:14:4d:ce:73:6b:52:4e: a4:31:2d:4c:7d:ad:f4:50:32:32:c6:3b:ed:75:ff: 96:1c:c0:19:71:99:bc:90:ad:b8:d2:84:66:f6:4d: e8:6e:f8:2f:8d:8e:cb:47:22:f5:85:7a:ba:95:af: 0d:17:3b:2d:50:c5:32:7d:33:7d:56:23:18:04:da: 1c:5f:03:9e:ed:4e:9b:e3:74:bf:f5:8d:3a:27:55: 71:44:6e:23:8d:98:0d:7a:42:36:ae:b4:ad:a5:4a: e5:41:5e:45:25:b5:e8:06:02:3a:d1:5e:e9:19:ef: 32:10:b3:eb:1d:1b:5e:7a:52:be:94:47:7e:c7:4a: ba:05:e1:11:f4:3a:a4:f3:13:d8:78:0d:5c:ee:0b: 7b:5a:f9:b5:25:72:c6:df:44:c4:8c:be:a3:64:5a: 40:0d:fc:d8:8e:56:c1:23:46:3d:b4:a0:6c:9d:80: c7:88:8e:fd:ae:74:9b:a8:7b:4d:e8:b4:37:8d:82: 4d:9c:ee:06:bd:79:3f:8e:fa:96:46:e5:44:d8:41: 70:ad:f8:7b:b2:d3:db:63:80:f0:2a:80:61:72:7a: 85:b9:d0:55:a8:fd:66:86:26:63:b2:74:e6:56:d6: 97:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9F:78:CC:A6:E3:68:A4:43:F1:D2:C9:C4:2D:EF:42:37:48:CD:82 X509v3 Authority Key Identifier: keyid:97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/Ap94zKbjaKRD8dLJxC3vQjdIzYI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:9b84:ff00::/48 Signature Algorithm: sha256WithRSAEncryption 74:9a:55:78:a0:de:f1:e5:00:01:0d:e3:0b:9b:db:fd:39:58: fc:25:85:fa:3a:38:7a:0d:12:43:da:97:52:21:48:8b:3d:ab: 97:25:77:82:6f:95:52:ac:bf:ac:e7:03:c7:15:fc:58:47:50: aa:89:46:fe:30:ea:64:20:b7:1c:92:ce:a9:1b:28:63:06:bf: 63:ed:9b:74:87:09:40:ff:71:88:53:40:2e:5c:58:b8:f5:83: 35:4a:4a:c5:bb:ec:e2:5e:a0:a1:29:b3:cd:4e:24:6c:28:e4: b5:9b:03:1b:e9:61:d2:1d:8f:af:25:66:1a:60:91:e7:5b:0e: a9:b4:a4:2a:28:40:74:0d:dc:25:01:85:14:5a:66:24:1b:a5: a4:0c:7f:55:60:9d:cc:73:16:be:1b:0e:96:f1:f2:20:db:d5: 29:40:90:fb:60:5c:b7:dc:87:2f:88:fc:68:fc:b7:e6:be:95: 93:fe:f2:a7:a2:7d:b5:1b:4b:a4:44:4d:c2:e5:f0:24:83:cb: e1:e5:e9:67:0d:6d:19:bc:4f:e3:49:23:da:5b:e3:2c:63:96: 30:9c:f3:2a:7d:62:95:21:43:ca:2b:e4:13:83:15:02:55:90: 9b:ce:24:70:22:19:ef:df:24:e2:04:cd:63:69:85:e0:4d:7a: 52:f3:31:db -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7ozKcY1ri568bzpEjqbBqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZWE1NDFjMTIzZmFhOWMwZWRjNzI5ZjgyOWU5NTlmZDI5 MmUzN2QwHhcNMjYwMTAxMjIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjlmNzhjY2E2ZTM2OGE0NDNmMWQyYzljNDJkZWY0MjM3NDhjZDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJjKVytndml1VSTXXM2d6BJcavj1 YhRNznNrUk6kMS1Mfa30UDIyxjvtdf+WHMAZcZm8kK240oRm9k3obvgvjY7LRyL1 hXq6la8NFzstUMUyfTN9ViMYBNocXwOe7U6b43S/9Y06J1VxRG4jjZgNekI2rrSt pUrlQV5FJbXoBgI60V7pGe8yELPrHRteelK+lEd+x0q6BeER9Dqk8xPYeA1c7gt7 Wvm1JXLG30TEjL6jZFpADfzYjlbBI0Y9tKBsnYDHiI79rnSbqHtN6LQ3jYJNnO4G vXk/jvqWRuVE2EFwrfh7stPbY4DwKoBhcnqFudBVqP1mhiZjsnTmVtaXCQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAKfeMym42ikQ/HSycQt70I3SM2CMB8GA1UdIwQY MBaAFJfqVBwSP6qcDtxyn4KelZ/SkuN9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbC1wVUhCSV9xcHdPM0hLZmdwNlZuOUtTNDMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xMjE1NWMtY2QxMy00YWE3LTg5NDkt NjM4ZGNmYTEzMDAzLzEvQXA5NHpLYmphS1JEOGRMSnhDM3ZRamRJellJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xMjE1NWMtY2QxMy00YWE3LTg5NDktNjM4ZGNmYTEzMDAz LzEvbC1wVUhCSV9xcHdPM0hLZmdwNlZuOUtTNDMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg2bhP8A MA0GCSqGSIb3DQEBCwUAA4IBAQB0mlV4oN7x5QABDeMLm9v9OVj8JYX6Ojh6DRJD 2pdSIUiLPauXJXeCb5VSrL+s5wPHFfxYR1CqiUb+MOpkILccks6pGyhjBr9j7Zt0 hwlA/3GIU0AuXFi49YM1SkrFu+ziXqChKbPNTiRsKOS1mwMb6WHSHY+vJWYaYJHn Ww6ptKQqKEB0DdwlAYUUWmYkG6WkDH9VYJ3Mcxa+Gw6W8fIg29UpQJD7YFy33Icv iPxo/LfmvpWT/vKnon21G0ukRE3C5fAkg8vh5elnDW0ZvE/jSSPaW+MsY5YwnPMq fWKVIUPKK+QTgxUCVZCbziRwIhnv3yTiBM1jaYXgTXpS8zHb -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:27 2026 by rpki-client