This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/A0srGWZl2UQ2DHzU59NTspJpWEg.roa
File: A0srGWZl2UQ2DHzU59NTspJpWEg.roa (raw, json)
Hash identifier: 0qmFl61ly9Yd+1vALFGtJIGWFR5pm8mWDsm69bfTCtQ=
Subject key identifier: 03:4B:2B:19:66:65:D9:44:36:0C:7C:D4:E7:D3:53:B2:92:69:58:48
Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial: 019B79113477C47E42CBBC4C56BD0B0A3EC7
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/A0srGWZl2UQ2DHzU59NTspJpWEg.roa
Signing time: Thu 01 Jan 2026 10:18:49 +0000
ROA not before: Thu 01 Jan 2026 10:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213109
IP address blocks: 2a07:22c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:34:77:c4:7e:42:cb:bc:4c:56:bd:0b:0a:3e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
Validity
Not Before: Jan 1 10:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=034b2b196665d944360c7cd4e7d353b292695848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:99:cf:75:df:c4:ee:41:8a:b7:96:89:b5:
6f:7e:1b:d8:1f:9a:8b:b2:2b:8b:6b:99:c3:0a:2c:
77:50:0f:7e:86:0d:f6:7c:e4:0c:de:a4:0b:e8:71:
72:d5:45:14:38:23:ac:6e:5c:70:e9:f3:3b:e5:f3:
42:fe:43:cd:e7:98:77:7e:14:f8:da:79:18:59:30:
ae:57:36:6b:33:45:2f:ea:0f:df:0e:86:7f:b5:bf:
fb:21:d4:62:e7:f5:99:d3:69:77:21:1f:db:71:12:
cb:50:3c:18:f5:37:1e:f3:d4:56:a8:16:f7:de:5b:
ac:96:5e:e5:f9:b4:03:fd:6b:a8:35:61:6f:f7:0a:
8c:d6:bd:9c:7a:18:41:2b:4c:16:b9:15:50:1f:7c:
3d:33:f8:fe:53:54:b5:a1:88:d2:b6:0e:5d:55:fa:
1e:d7:37:65:59:6d:16:39:0f:a9:20:94:43:2d:a7:
3a:a8:19:5e:19:58:c1:74:cb:f5:58:42:de:43:a0:
b7:37:a0:56:dd:f9:fa:f8:37:1c:53:38:84:78:cc:
53:91:5f:a1:ba:19:cb:c7:b2:ba:26:a1:cf:b1:3b:
15:27:fc:58:5b:ac:71:89:08:5c:41:68:e9:3d:c7:
a6:81:51:5b:3e:7e:63:5f:94:a6:42:7a:31:24:20:
ae:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4B:2B:19:66:65:D9:44:36:0C:7C:D4:E7:D3:53:B2:92:69:58:48
X509v3 Authority Key Identifier:
keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/A0srGWZl2UQ2DHzU59NTspJpWEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:22c1::/48
Signature Algorithm: sha256WithRSAEncryption
13:64:b6:6a:0f:93:b4:84:f4:55:35:b5:af:50:ea:b6:1a:95:
5a:f5:ec:a2:e8:f2:b5:0c:d5:00:7a:30:fe:ee:bd:e4:43:ce:
0b:1a:9e:55:c9:92:d5:6b:04:9c:30:51:82:a6:65:08:56:1e:
82:64:60:91:fc:3e:a8:14:7f:51:38:e0:60:cb:2c:20:19:cb:
a8:4d:a6:94:e8:fb:9c:f6:c8:c5:8e:1f:62:39:b5:7f:b5:17:
9a:f6:56:52:ec:af:4e:50:d7:a2:ac:7d:e5:08:50:05:8b:dc:
45:e2:c3:9c:7a:36:03:69:4b:f7:01:17:96:44:d8:9c:31:5f:
5a:8c:ae:7c:38:30:0f:3b:85:ec:3c:2c:99:9d:bd:07:89:55:
ab:6b:58:5b:60:46:dd:54:78:38:50:c5:ef:27:e3:80:71:0b:
5f:28:38:7a:90:f4:8f:04:cd:95:c7:bb:b1:b5:c0:c0:9a:af:
1b:4f:19:36:71:5a:60:2f:15:8f:d3:80:2a:49:72:03:d6:e0:
63:88:a6:9d:9f:74:61:dc:88:56:c6:24:32:4c:3b:84:17:96:
e3:53:06:5e:8c:23:c6:ea:e6:5d:8f:ce:33:a4:bd:63:62:79:
ad:99:77:15:03:c2:6f:4b:8b:93:1c:f8:b3:6f:8a:ac:be:98:
5d:93:8f:e0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZt5ETR3xH5Cy7xMVr0LCj7HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYWI2YzExZDQxMTYyZGIwMzA2ODU4ZjgzZTVlNjUxMjEx
MzJhNmIwHhcNMjYwMTAxMTAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzRiMmIxOTY2NjVkOTQ0MzYwYzdjZDRlN2QzNTNiMjkyNjk1ODQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvKZz3XfxO5BireWibVvfhvYH5qL
siuLa5nDCix3UA9+hg32fOQM3qQL6HFy1UUUOCOsblxw6fM75fNC/kPN55h3fhT4
2nkYWTCuVzZrM0Uv6g/fDoZ/tb/7IdRi5/WZ02l3IR/bcRLLUDwY9Tce89RWqBb3
3lusll7l+bQD/WuoNWFv9wqM1r2cehhBK0wWuRVQH3w9M/j+U1S1oYjStg5dVfoe
1zdlWW0WOQ+pIJRDLac6qBleGVjBdMv1WELeQ6C3N6BW3fn6+DccUziEeMxTkV+h
uhnLx7K6JqHPsTsVJ/xYW6xxiQhcQWjpPcemgVFbPn5jX5SmQnoxJCCu/wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFANLKxlmZdlENgx81OfTU7KSaVhIMB8GA1UdIwQY
MBaAFHurbBHUEWLbAwaFj4Pl5lEhEyprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAt
OWY1YmY3MzY3MjBlLzEvQTBzckdXWmwyVVEyREh6VTU5TlRzcEpwV0VnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAtOWY1YmY3MzY3MjBl
LzEvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgciwQAA
MA0GCSqGSIb3DQEBCwUAA4IBAQATZLZqD5O0hPRVNbWvUOq2GpVa9eyi6PK1DNUA
ejD+7r3kQ84LGp5VyZLVawScMFGCpmUIVh6CZGCR/D6oFH9ROOBgyywgGcuoTaaU
6Puc9sjFjh9iObV/tRea9lZS7K9OUNeirH3lCFAFi9xF4sOcejYDaUv3AReWRNic
MV9ajK58ODAPO4XsPCyZnb0HiVWra1hbYEbdVHg4UMXvJ+OAcQtfKDh6kPSPBM2V
x7uxtcDAmq8bTxk2cVpgLxWP04AqSXID1uBjiKadn3Rh3IhWxiQyTDuEF5bjUwZe
jCPG6uZdj84zpL1jYnmtmXcVA8JvS4uTHPizb4qsvphdk4/g
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:29:08 2026 by rpki-client