This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/AtTsCBxocJYnVAs43sOHtjGuox8.roa File: AtTsCBxocJYnVAs43sOHtjGuox8.roa (raw, json) Hash identifier: 6rodAK3l9JGAkmSOq2mMluQTtVgP8JgwhuN5k6JfBmE= Subject key identifier: 02:D4:EC:08:1C:68:70:96:27:54:0B:38:DE:C3:87:B6:31:AE:A3:1F Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Certificate serial: 019B7F84CD80489BF371411639C799D36CF6 Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/AtTsCBxocJYnVAs43sOHtjGuox8.roa Signing time: Fri 02 Jan 2026 16:22:48 +0000 ROA not before: Fri 02 Jan 2026 16:22:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209874 IP address blocks: 2a11:3b40::/32 maxlen: 32 2a12:6640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:cd:80:48:9b:f3:71:41:16:39:c7:99:d3:6c:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Validity Not Before: Jan 2 16:22:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02d4ec081c68709627540b38dec387b631aea31f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7d:e3:cc:64:13:51:d6:d3:2f:73:16:f9:3e: 78:51:37:d7:5e:75:f4:87:94:80:5e:03:d7:a8:cd: c7:34:fe:9e:cd:23:d5:f5:76:49:61:98:05:ad:8e: 0e:2d:3a:7f:fc:fa:19:76:42:5a:49:90:53:ca:2d: 16:1f:3f:39:0a:b7:21:e7:3d:eb:25:9f:e3:cd:78: bd:ff:97:58:ca:1c:3f:2a:ef:4c:13:29:82:b4:9a: 37:51:d2:9d:f9:48:e5:20:12:cc:cb:c7:ad:f5:ff: a6:30:0e:4a:82:2e:a3:ec:0b:27:dc:3b:49:ed:39: 2e:10:9e:b8:ef:28:be:ab:1b:b5:70:b3:34:c7:de: 25:20:6f:28:de:22:f4:12:93:7a:a8:58:ed:1f:de: ff:a0:06:31:ef:ea:fc:a7:df:d2:6f:e7:cf:d0:13: a2:b1:3c:d4:cf:a7:00:62:4e:62:e4:54:bf:51:ac: da:2e:35:1b:09:81:94:cd:77:3d:7c:71:77:54:f8: 35:97:3e:89:23:ef:d9:87:76:c1:f5:ee:6d:b3:bc: f1:47:8d:ba:fd:d1:ea:0d:77:77:b9:51:9f:84:a2: db:81:51:05:24:be:8e:4d:81:9a:54:0e:96:c9:75: 8a:84:9c:50:85:6b:6f:e7:ad:8d:de:44:1c:c9:bd: 9d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D4:EC:08:1C:68:70:96:27:54:0B:38:DE:C3:87:B6:31:AE:A3:1F X509v3 Authority Key Identifier: keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/AtTsCBxocJYnVAs43sOHtjGuox8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:3b40::/32 2a12:6640::/32 Signature Algorithm: sha256WithRSAEncryption 8b:b0:ae:4f:db:03:51:ce:66:4f:9a:a7:ef:c8:58:fc:99:c1: 9f:9f:df:df:5f:85:c7:63:3d:8e:a3:3f:c1:b8:78:fd:4d:94: 27:d3:c8:ec:da:e9:c7:40:64:a6:fd:46:a3:d9:16:5a:13:4a: b8:1c:65:45:b5:62:6c:c4:95:ee:77:b7:18:c5:c5:db:da:79: 0f:33:84:37:88:68:73:6e:93:69:c8:0c:2e:64:56:dc:f4:50: a5:40:be:0f:f3:f8:44:36:9f:c1:30:59:51:30:84:bc:0a:b5: c1:a2:df:84:f4:fe:b6:5b:73:ca:2f:14:5a:63:d2:f0:70:c8: 0c:d2:b9:2a:de:0d:01:f3:4b:a1:5f:06:5f:e9:01:53:a2:54: 81:4c:8f:32:ee:3f:f2:ca:44:6f:9a:78:34:75:f2:4a:21:a0: 6b:6a:39:1c:a4:12:15:de:c1:df:ee:67:27:90:a6:d0:b6:ed: fe:04:ee:48:73:ec:50:b9:f9:8e:b0:e1:d8:6a:4d:02:0c:8e: 0a:19:a7:63:c2:77:67:47:47:a3:13:04:bd:09:c1:36:8b:02: 66:d2:80:a9:0a:fd:a0:5c:a0:be:59:98:6a:70:47:1e:1a:5c: d2:29:f2:4d:e8:58:c4:fe:9d:94:5c:e2:9e:06:2e:d6:a9:7d: 04:08:f1:18 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/hM2ASJvzcUEWOceZ02z2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz Mjc2ZTMwHhcNMjYwMTAyMTYyMjQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmQ0ZWMwODFjNjg3MDk2Mjc1NDBiMzhkZWMzODdiNjMxYWVhMzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH3jzGQTUdbTL3MW+T54UTfXXnX0 h5SAXgPXqM3HNP6ezSPV9XZJYZgFrY4OLTp//PoZdkJaSZBTyi0WHz85Crch5z3r JZ/jzXi9/5dYyhw/Ku9MEymCtJo3UdKd+UjlIBLMy8et9f+mMA5Kgi6j7Asn3DtJ 7TkuEJ647yi+qxu1cLM0x94lIG8o3iL0EpN6qFjtH97/oAYx7+r8p9/Sb+fP0BOi sTzUz6cAYk5i5FS/UazaLjUbCYGUzXc9fHF3VPg1lz6JI+/Zh3bB9e5ts7zxR426 /dHqDXd3uVGfhKLbgVEFJL6OTYGaVA6WyXWKhJxQhWtv562N3kQcyb2dbwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFALU7AgcaHCWJ1QLON7Dh7YxrqMfMB8GA1UdIwQY MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt YTJhNGM2YTYyMWNkLzEvQXRUc0NCeG9jSlluVkFzNDNzT0h0akd1b3g4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKhE7QAMF ACoSZkAwDQYJKoZIhvcNAQELBQADggEBAIuwrk/bA1HOZk+ap+/IWPyZwZ+f399f hcdjPY6jP8G4eP1NlCfTyOza6cdAZKb9RqPZFloTSrgcZUW1YmzEle53txjFxdva eQ8zhDeIaHNuk2nIDC5kVtz0UKVAvg/z+EQ2n8EwWVEwhLwKtcGi34T0/rZbc8ov FFpj0vBwyAzSuSreDQHzS6FfBl/pAVOiVIFMjzLuP/LKRG+aeDR18kohoGtqORyk EhXewd/uZyeQptC27f4E7khz7FC5+Y6w4dhqTQIMjgoZp2PCd2dHR6MTBL0JwTaL AmbSgKkK/aBcoL5ZmGpwRx4aXNIp8k3oWMT+nZRc4p4GLtapfQQI8Rg= -----END CERTIFICATE-----Generated at Sun Jan 25 16:13:18 2026 by rpki-client