This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/Af11MVP6VhwPCZW4GvxhTV3l2Qw.roa File: Af11MVP6VhwPCZW4GvxhTV3l2Qw.roa (raw, json) Hash identifier: 0zTqrzFvszKEBTsjbfLGhc0G5gFEU942DbGfKhHwTtQ= Subject key identifier: 01:FD:75:31:53:FA:56:1C:0F:09:95:B8:1A:FC:61:4D:5D:E5:D9:0C Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690 Certificate serial: 019B7E3864D7713F53370773AB94653C16E4 Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/Af11MVP6VhwPCZW4GvxhTV3l2Qw.roa Signing time: Fri 02 Jan 2026 10:19:43 +0000 ROA not before: Fri 02 Jan 2026 10:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199152 IP address blocks: 2a14:e603::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:64:d7:71:3f:53:37:07:73:ab:94:65:3c:16:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690 Validity Not Before: Jan 2 10:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01fd753153fa561c0f0995b81afc614d5de5d90c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4e:0f:b0:27:bc:c4:a9:72:0f:b1:95:d8:c2: 12:55:7a:7e:28:a9:9b:38:c8:88:8e:5e:52:84:04: ee:93:70:e2:aa:e2:76:f2:14:e6:2e:e8:14:85:fa: db:b5:67:54:69:37:91:a6:50:bd:e8:2d:5c:8c:b9: 28:af:7c:2f:a4:f5:bf:8f:03:94:16:17:3f:e7:a6: 9e:40:01:c7:12:6f:19:0e:b3:84:34:91:3b:38:29: e6:09:48:f3:4e:5f:bf:f9:f3:1c:cd:a5:b5:64:c9: db:d7:06:b7:7b:04:87:0d:f8:9d:44:5a:83:96:a2: 3d:de:fa:d8:fa:17:af:8e:39:35:75:79:08:c5:6c: 1c:49:6a:7d:f2:b2:5e:08:7d:24:6e:2c:e9:41:94: 03:13:25:22:ba:bd:ef:aa:5c:69:78:cf:97:85:c6: 1d:9c:81:bb:02:df:14:2a:aa:15:17:c2:41:f4:63: 1c:11:06:ea:b8:6e:f9:eb:ea:9c:4b:d4:5f:42:c6: a4:bd:cb:7a:0c:83:59:38:3a:5c:bf:2d:ea:f0:75: ba:92:20:65:3c:1a:cd:da:ee:3d:c4:ef:d7:84:54: d2:aa:21:95:09:e3:95:13:f0:f3:82:5f:b6:f5:20: d4:72:a6:b6:9c:f5:62:57:5d:59:27:77:cf:4e:d0: e3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FD:75:31:53:FA:56:1C:0F:09:95:B8:1A:FC:61:4D:5D:E5:D9:0C X509v3 Authority Key Identifier: keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/Af11MVP6VhwPCZW4GvxhTV3l2Qw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:e603::/32 Signature Algorithm: sha256WithRSAEncryption 49:2b:cf:6b:a4:7d:26:e8:cb:41:c4:4f:eb:80:43:9a:12:43: bc:99:6c:d9:71:c8:9d:44:81:e8:e9:be:00:0d:6c:26:0b:10: 4c:0e:90:dc:3c:5a:74:85:6b:f9:27:95:9a:74:e5:70:12:05: 1c:21:62:4b:63:8a:3f:d4:1c:16:02:40:a5:25:6d:93:75:1a: a0:70:36:c1:33:00:a3:a0:f9:75:31:25:14:55:0e:ed:35:3d: e3:1a:b2:3e:df:7b:79:b6:37:02:b5:47:b0:d8:38:b1:ce:c1: ae:a7:d7:86:3f:a8:05:d0:87:00:d0:b9:6f:70:8d:75:46:56: 72:b0:79:ae:38:84:33:10:82:20:b5:9d:f4:4a:e3:2e:b9:3f: ba:65:d3:57:af:52:51:55:7a:92:4b:30:11:d4:f1:75:58:ce: 45:5a:a5:55:68:c2:63:42:a0:de:d9:31:1e:74:f0:1b:d3:88: 2b:38:f9:df:9d:a7:da:4c:f8:6b:7c:b5:d3:c4:49:07:c9:da: c6:62:2b:ce:67:e2:61:25:d5:45:66:ef:d0:fb:ab:91:1a:1e: 2f:ed:2c:a0:9d:2a:a8:2e:37:9f:fc:53:82:3f:1f:7f:ee:1e: f9:ec:fe:89:d6:22:84:9e:e0:05:f9:08:3d:1f:9a:67:99:2f: 58:64:e3:0c -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+OGTXcT9TNwdzq5RlPBbkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZDRkNDlkYTNlMTQ4NTVhN2I4ODM2MDNmZjE0OGMxYmIy MWY2OTAwHhcNMjYwMTAyMTAxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWZkNzUzMTUzZmE1NjFjMGYwOTk1YjgxYWZjNjE0ZDVkZTVkOTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk4PsCe8xKlyD7GV2MISVXp+KKmb OMiIjl5ShATuk3DiquJ28hTmLugUhfrbtWdUaTeRplC96C1cjLkor3wvpPW/jwOU Fhc/56aeQAHHEm8ZDrOENJE7OCnmCUjzTl+/+fMczaW1ZMnb1wa3ewSHDfidRFqD lqI93vrY+hevjjk1dXkIxWwcSWp98rJeCH0kbizpQZQDEyUiur3vqlxpeM+XhcYd nIG7At8UKqoVF8JB9GMcEQbquG756+qcS9RfQsakvct6DINZODpcvy3q8HW6kiBl PBrN2u49xO/XhFTSqiGVCeOVE/Dzgl+29SDUcqa2nPViV11ZJ3fPTtDjfwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFAH9dTFT+lYcDwmVuBr8YU1d5dkMMB8GA1UdIwQY MBaAFAXU1J2j4UhVp7iDYD/xSMG7IfaQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8xYTNmOTEtMTViYy00ZWI4LTk3ZGQt NThmMWNiZjNjYWMzLzEvQWYxMU1WUDZWaHdQQ1pXNEd2eGhUVjNsMlF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8xYTNmOTEtMTViYy00ZWI4LTk3ZGQtNThmMWNiZjNjYWMz LzEvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhTmAzAN BgkqhkiG9w0BAQsFAAOCAQEASSvPa6R9JujLQcRP64BDmhJDvJls2XHInUSB6Om+ AA1sJgsQTA6Q3DxadIVr+SeVmnTlcBIFHCFiS2OKP9QcFgJApSVtk3UaoHA2wTMA o6D5dTElFFUO7TU94xqyPt97ebY3ArVHsNg4sc7BrqfXhj+oBdCHANC5b3CNdUZW crB5rjiEMxCCILWd9ErjLrk/umXTV69SUVV6kkswEdTxdVjORVqlVWjCY0Kg3tkx HnTwG9OIKzj5352n2kz4a3y108RJB8naxmIrzmfiYSXVRWbv0PurkRoeL+0soJ0q qC43n/xTgj8ff+4e+ez+idYihJ7gBfkIPR+aZ5kvWGTjDA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:53 2026 by rpki-client