This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/asyZDaQ-XW7-4t0bK9m3pWvFWkQ.roa File: asyZDaQ-XW7-4t0bK9m3pWvFWkQ.roa (raw, json) Hash identifier: MJ3PLYemtybhNz0UiINpuNk3w+GLF2ZOrUhy5GVte4o= Subject key identifier: 6A:CC:99:0D:A4:3E:5D:6E:FE:E2:DD:1B:2B:D9:B7:A5:6B:C5:5A:44 Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624 Certificate serial: 019B7C803E8388D9102E5B95000272C8959B Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/asyZDaQ-XW7-4t0bK9m3pWvFWkQ.roa Signing time: Fri 02 Jan 2026 02:18:57 +0000 ROA not before: Fri 02 Jan 2026 02:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58192 IP address blocks: 2a13:6340::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:3e:83:88:d9:10:2e:5b:95:00:02:72:c8:95:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624 Validity Not Before: Jan 2 02:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6acc990da43e5d6efee2dd1b2bd9b7a56bc55a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ea:ff:2c:20:b2:d2:a9:22:28:b6:a3:1a:4b: 0a:53:43:c0:b8:5a:ad:d0:e5:bd:37:62:16:82:b3: 7f:6a:94:04:f8:fd:df:70:c8:40:52:45:ee:36:ff: d6:e4:0a:59:03:56:ec:23:19:b6:e3:c8:10:b0:04: 17:3b:31:35:73:64:34:ea:d4:bd:34:d6:13:96:12: 7c:0e:6e:27:40:49:35:fe:90:50:3d:a0:b8:83:9d: 18:f6:71:d6:e1:a6:19:f6:cf:60:48:0a:6e:fa:8a: 9c:8a:ac:5c:87:f7:fe:78:20:59:d8:96:f5:4a:84: 10:8c:58:fd:c9:72:27:cc:26:38:42:51:d3:64:2b: 11:a1:8d:d3:0f:1a:c7:df:cf:76:ba:46:4f:23:b7: 16:a1:9a:b9:55:87:af:1c:c9:a7:b5:a7:d4:96:91: 26:f2:31:bf:ea:2e:ad:72:1c:e6:f0:85:54:fe:10: bb:8c:3f:cb:5d:32:8b:8e:34:08:09:60:1c:9b:26: 2f:48:61:d8:1a:5a:8e:71:56:fc:39:04:94:37:9e: e6:76:c5:d1:fc:9b:61:39:83:a2:03:7c:1d:5f:9f: c1:e0:ba:63:09:d7:69:19:7b:81:d1:33:05:6a:c3: fc:db:a5:d2:36:42:75:51:63:1d:44:5c:ed:42:ca: 92:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:CC:99:0D:A4:3E:5D:6E:FE:E2:DD:1B:2B:D9:B7:A5:6B:C5:5A:44 X509v3 Authority Key Identifier: keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/asyZDaQ-XW7-4t0bK9m3pWvFWkQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:6340::/29 Signature Algorithm: sha256WithRSAEncryption 2b:03:13:78:e7:65:6c:2c:e8:51:59:c8:73:c0:f0:37:48:a9: fa:06:4c:e1:0b:df:60:8c:23:f1:47:90:9d:45:aa:32:18:46: ce:a9:55:cb:d8:5b:42:50:57:fe:2c:89:63:b6:18:e0:d0:e2: 59:f9:04:59:ab:50:c6:49:91:bb:bf:bc:c9:c2:3f:73:8e:d5: 09:ff:bd:0e:ee:56:24:81:4c:95:99:5e:3b:06:7d:c3:99:e7: 04:cd:34:01:ab:0e:ee:9c:46:d8:3e:71:87:b4:81:61:37:df: fb:a1:46:3a:81:51:00:25:9c:f0:70:79:9a:b2:7a:52:a2:cd: 13:c9:34:05:d4:45:74:be:0a:58:cb:77:c9:6e:e4:86:c5:81: b1:05:2b:15:2c:74:d3:7f:64:95:7a:09:ea:16:40:b3:0b:df: a6:95:f6:5d:8b:9c:18:b5:3a:c3:51:fc:d3:17:bf:c9:f8:24: b7:bb:b7:b3:11:80:bb:76:15:01:1d:3e:fc:33:b5:03:16:63: a0:ec:fb:68:6a:bb:03:5f:e7:78:bb:3e:a4:34:18:40:0f:68: ee:b6:d0:1c:11:bc:6f:2b:b9:40:d5:a9:21:09:57:9f:8a:69: f4:38:59:9a:9f:d1:4a:d0:60:b8:8a:de:5a:75:1f:65:77:7e: 6c:b1:88:ee -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8gD6DiNkQLluVAAJyyJWbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMmI2MThiNTA4ZWMxMzY1MzcyYzJhYTY3NWYzNjAxMjkz Y2M2MjQwHhcNMjYwMTAyMDIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWNjOTkwZGE0M2U1ZDZlZmVlMmRkMWIyYmQ5YjdhNTZiYzU1YTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Or/LCCy0qkiKLajGksKU0PAuFqt 0OW9N2IWgrN/apQE+P3fcMhAUkXuNv/W5ApZA1bsIxm248gQsAQXOzE1c2Q06tS9 NNYTlhJ8Dm4nQEk1/pBQPaC4g50Y9nHW4aYZ9s9gSApu+oqciqxch/f+eCBZ2Jb1 SoQQjFj9yXInzCY4QlHTZCsRoY3TDxrH3892ukZPI7cWoZq5VYevHMmntafUlpEm 8jG/6i6tchzm8IVU/hC7jD/LXTKLjjQICWAcmyYvSGHYGlqOcVb8OQSUN57mdsXR /JthOYOiA3wdX5/B4LpjCddpGXuB0TMFasP826XSNkJ1UWMdRFztQsqSvwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFGrMmQ2kPl1u/uLdGyvZt6VrxVpEMB8GA1UdIwQY MBaAFKMrYYtQjsE2U3LCqmdfNgEpPMYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3l0aGkxQ093VFpUY3NLcVoxODJBU2s4eGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jZmVkMGQtMGZiMC00NTk4LWIzNjUt NjUwOTZkYmNhYzMwLzEvYXN5WkRhUS1YVzctNHQwYks5bTNwV3ZGV2tRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jZmVkMGQtMGZiMC00NTk4LWIzNjUtNjUwOTZkYmNhYzMw LzEvb3l0aGkxQ093VFpUY3NLcVoxODJBU2s4eGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhNjQDAN BgkqhkiG9w0BAQsFAAOCAQEAKwMTeOdlbCzoUVnIc8DwN0ip+gZM4QvfYIwj8UeQ nUWqMhhGzqlVy9hbQlBX/iyJY7YY4NDiWfkEWatQxkmRu7+8ycI/c47VCf+9Du5W JIFMlZleOwZ9w5nnBM00AasO7pxG2D5xh7SBYTff+6FGOoFRACWc8HB5mrJ6UqLN E8k0BdRFdL4KWMt3yW7khsWBsQUrFSx0039klXoJ6hZAswvfppX2XYucGLU6w1H8 0xe/yfgkt7u3sxGAu3YVAR0+/DO1AxZjoOz7aGq7A1/neLs+pDQYQA9o7rbQHBG8 byu5QNWpIQlXn4pp9DhZmp/RStBguIreWnUfZXd+bLGI7g== -----END CERTIFICATE-----Generated at Mon Jan 26 02:07:54 2026 by rpki-client