This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/ACaX6w3ymJccvXanlDaDKMOtpm8.roa File: ACaX6w3ymJccvXanlDaDKMOtpm8.roa (raw, json) Hash identifier: rxt58ZfZIffkntY04x8LDdPZCwFWWCpGs1EcVhf6HWU= Subject key identifier: 00:26:97:EB:0D:F2:98:97:1C:BD:76:A7:94:36:83:28:C3:AD:A6:6F Certificate issuer: /CN=dc1089c942b68033683b4dd506c0c36f74be0ea3 Certificate serial: 019B7D5B0F6E7F29D7528DBFC8D1E986515E Authority key identifier: DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/ACaX6w3ymJccvXanlDaDKMOtpm8.roa Signing time: Fri 02 Jan 2026 06:17:58 +0000 ROA not before: Fri 02 Jan 2026 06:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26073 IP address blocks: 2a09:a446:1337::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:0f:6e:7f:29:d7:52:8d:bf:c8:d1:e9:86:51:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc1089c942b68033683b4dd506c0c36f74be0ea3 Validity Not Before: Jan 2 06:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=002697eb0df298971cbd76a794368328c3ada66f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:72:46:c5:ff:6d:ee:b7:3e:f7:92:d2:0e:ff: 9b:4b:a1:62:89:31:cc:d4:55:36:4a:f2:8c:0c:f4: 1a:7c:af:ec:3c:24:05:a2:69:e4:03:7b:c2:5c:0d: 54:32:58:49:a9:62:ca:ea:26:ae:46:28:50:59:36: 48:f4:26:73:9c:df:8b:36:72:bf:47:4e:a3:8a:b9: 3d:09:e3:00:06:e0:6a:1a:95:fc:00:a8:24:d8:37: 56:a3:06:4e:be:51:cb:cb:a6:22:5a:1d:17:1f:1d: 53:a6:82:b0:5f:25:28:08:30:df:99:b1:50:a6:3d: 79:57:db:85:d9:53:5d:5f:a8:64:5c:1c:ca:ad:eb: 37:67:7a:4e:2d:ac:95:6c:30:a9:38:39:76:55:dd: a0:0f:58:c7:ab:c7:52:d5:b2:ef:5e:d7:e5:c2:df: e7:ca:4e:66:07:17:0f:e0:87:82:03:b2:2e:7a:35: da:60:30:ac:54:f5:60:03:b6:64:22:15:b5:54:26: 05:08:a2:eb:ec:0f:37:41:b5:8e:25:94:2d:4f:0c: b5:b3:f3:94:10:c0:0b:f9:2e:4d:04:2d:05:47:a8: ba:d2:0e:63:28:ee:48:77:19:c0:66:6a:1c:0e:dc: 04:ce:51:7b:d3:7f:f8:fd:ee:5e:24:68:15:87:8b: 7e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:26:97:EB:0D:F2:98:97:1C:BD:76:A7:94:36:83:28:C3:AD:A6:6F X509v3 Authority Key Identifier: keyid:DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/ACaX6w3ymJccvXanlDaDKMOtpm8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:a446:1337::/48 Signature Algorithm: sha256WithRSAEncryption a1:42:78:c6:64:a3:c3:cf:8d:6b:d1:09:20:64:53:95:c4:bb: 4d:39:a7:07:9f:a0:36:99:1d:ef:46:ef:a9:40:fe:6e:71:8f: 7d:f7:9f:b0:1a:af:aa:e0:54:dd:f9:83:93:31:f5:89:02:80: 5c:fc:4b:b1:31:c1:81:f3:1b:d1:83:60:06:5d:e6:16:9e:fb: 04:3c:9f:9e:6a:04:4b:9f:72:3e:15:60:cd:89:89:96:a8:c8: 99:b3:6e:12:70:72:ca:0e:3c:91:17:81:16:b0:d4:13:af:3f: 2d:87:1d:67:33:32:15:01:ac:41:4f:28:43:c8:5b:d8:6a:33: f3:8e:17:d4:95:47:92:e7:d1:37:a0:a5:99:aa:fe:22:e8:fe: 8d:57:3c:da:44:9f:cd:cf:48:ef:42:2e:a4:bc:ee:e2:69:ad: 88:ad:73:4a:83:58:7d:54:0a:17:26:85:0f:d5:85:c7:94:71: b2:e0:f9:08:49:a4:02:34:36:d3:cc:89:7d:a0:1d:92:15:41: 49:48:eb:5a:b6:88:79:9b:82:57:9d:63:d3:2c:c5:a7:c7:fb: c6:2c:3c:97:b2:61:b8:73:b2:c9:fb:19:de:b9:ac:78:92:1e: 17:c6:cd:c6:20:0e:f1:7a:6e:db:90:8e:2d:b1:af:81:2e:d3: 39:48:01:04 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9Ww9ufynXUo2/yNHphlFeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMTA4OWM5NDJiNjgwMzM2ODNiNGRkNTA2YzBjMzZmNzRi ZTBlYTMwHhcNMjYwMTAyMDYxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDI2OTdlYjBkZjI5ODk3MWNiZDc2YTc5NDM2ODMyOGMzYWRhNjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3JGxf9t7rc+95LSDv+bS6FiiTHM 1FU2SvKMDPQafK/sPCQFomnkA3vCXA1UMlhJqWLK6iauRihQWTZI9CZznN+LNnK/ R06jirk9CeMABuBqGpX8AKgk2DdWowZOvlHLy6YiWh0XHx1TpoKwXyUoCDDfmbFQ pj15V9uF2VNdX6hkXBzKres3Z3pOLayVbDCpODl2Vd2gD1jHq8dS1bLvXtflwt/n yk5mBxcP4IeCA7IuejXaYDCsVPVgA7ZkIhW1VCYFCKLr7A83QbWOJZQtTwy1s/OU EMAL+S5NBC0FR6i60g5jKO5IdxnAZmocDtwEzlF703/4/e5eJGgVh4t+VwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAAml+sN8piXHL12p5Q2gyjDraZvMB8GA1UdIwQY MBaAFNwQiclCtoAzaDtN1QbAw290vg6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JDSnlVSzJnRE5vTzAzVkJzRERiM1MtRHFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8yNDE0OWQtZDExNS00MzMwLWJkNDkt Y2I1NmVkM2VhN2ZhLzEvQUNhWDZ3M3ltSmNjdlhhbmxEYURLTU90cG04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8yNDE0OWQtZDExNS00MzMwLWJkNDktY2I1NmVkM2VhN2Zh LzEvM0JDSnlVSzJnRE5vTzAzVkJzRERiM1MtRHFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgmkRhM3 MA0GCSqGSIb3DQEBCwUAA4IBAQChQnjGZKPDz41r0QkgZFOVxLtNOacHn6A2mR3v Ru+pQP5ucY9995+wGq+q4FTd+YOTMfWJAoBc/EuxMcGB8xvRg2AGXeYWnvsEPJ+e agRLn3I+FWDNiYmWqMiZs24ScHLKDjyRF4EWsNQTrz8thx1nMzIVAaxBTyhDyFvY ajPzjhfUlUeS59E3oKWZqv4i6P6NVzzaRJ/Nz0jvQi6kvO7iaa2IrXNKg1h9VAoX JoUP1YXHlHGy4PkISaQCNDbTzIl9oB2SFUFJSOtatoh5m4JXnWPTLMWnx/vGLDyX smG4c7LJ+xneuax4kh4Xxs3GIA7xem7bkI4tsa+BLtM5SAEE -----END CERTIFICATE-----Generated at Sun Jan 25 15:29:06 2026 by rpki-client