This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/ab_dcmnUNV-XBfTtK_tKTbZqwjI.roa File: ab_dcmnUNV-XBfTtK_tKTbZqwjI.roa (raw, json) Hash identifier: xavsN1HJdLi+aPkdFObLI236THGttyRtSD4R0FVRKWY= Subject key identifier: 69:BF:DD:72:69:D4:35:5F:97:05:F4:ED:2B:FB:4A:4D:B6:6A:C2:32 Certificate issuer: /CN=13edfb910fffe47d51ad9d0f883b1b649669e135 Certificate serial: 019B7D5B4F97CB7114DB90C28162AFB19BA5 Authority key identifier: 13:ED:FB:91:0F:FF:E4:7D:51:AD:9D:0F:88:3B:1B:64:96:69:E1:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-37kQ__5H1RrZ0PiDsbZJZp4TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/ab_dcmnUNV-XBfTtK_tKTbZqwjI.roa Signing time: Fri 02 Jan 2026 06:18:14 +0000 ROA not before: Fri 02 Jan 2026 06:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29119 IP address blocks: 2a07:5d00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft rsync://rpki.ripe.net/repository/DEFAULT/E-37kQ__5H1RrZ0PiDsbZJZp4TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:4f:97:cb:71:14:db:90:c2:81:62:af:b1:9b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13edfb910fffe47d51ad9d0f883b1b649669e135 Validity Not Before: Jan 2 06:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69bfdd7269d4355f9705f4ed2bfb4a4db66ac232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:02:d3:3a:5e:96:e6:41:80:48:12:03:23:af: 92:e8:9c:d2:3f:4e:57:9f:7e:3b:c0:6c:a0:b9:3a: 2b:82:ca:3a:17:97:ca:b2:29:88:02:a0:17:73:53: b8:1a:b0:11:9b:87:51:bc:88:09:2b:fa:6f:cc:10: cd:84:a3:07:9e:ee:39:43:19:56:93:89:05:19:c3: 9c:9a:b4:85:40:41:7a:23:67:de:8f:d8:2b:7f:de: 7d:5d:4a:f9:c9:21:07:90:24:bc:51:55:77:b5:64: d8:9a:d1:a6:6b:15:70:b4:49:c2:fc:50:9c:cd:6a: 2a:67:a0:72:25:dd:89:24:28:e0:26:e0:c1:8e:58: 69:f1:c1:ef:8c:7e:49:99:57:b8:a2:c4:87:45:7a: 6a:08:8c:2a:b5:1a:29:18:71:c5:27:7c:51:93:28: b6:cc:bc:f7:ac:d7:d5:ec:41:1f:f4:4d:5f:38:96: b3:3b:43:4e:73:fd:47:24:d7:4f:1e:cf:a4:2d:77: c7:14:58:62:52:10:4e:4b:bf:88:9d:6b:cf:98:62: 1d:75:86:63:dd:ec:a6:1a:87:f7:27:35:01:10:b1: 3f:3e:aa:78:7f:a5:87:f9:27:a3:ec:2c:96:32:c9: 02:0a:d8:31:5a:f8:f9:06:e6:e0:c6:00:27:e8:0d: 8e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:BF:DD:72:69:D4:35:5F:97:05:F4:ED:2B:FB:4A:4D:B6:6A:C2:32 X509v3 Authority Key Identifier: keyid:13:ED:FB:91:0F:FF:E4:7D:51:AD:9D:0F:88:3B:1B:64:96:69:E1:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-37kQ__5H1RrZ0PiDsbZJZp4TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/ab_dcmnUNV-XBfTtK_tKTbZqwjI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:5d00::/29 Signature Algorithm: sha256WithRSAEncryption 29:7e:3e:d7:12:f5:e7:3e:48:9d:6f:f4:ec:79:fd:71:2b:15: 39:37:d9:89:47:46:60:76:a4:97:17:9e:eb:63:04:33:87:f6: 05:81:b1:c0:c8:3d:5c:f4:cc:56:8e:33:2d:e1:ff:9b:4f:04: b2:24:51:53:12:31:f2:d9:83:c1:a5:7b:d3:e4:de:09:fa:28: 9b:e3:17:ee:1d:31:3e:c6:43:ff:b4:3f:9e:e6:d8:18:d4:9d: f0:82:4f:9a:52:86:56:03:16:99:0e:a8:cf:03:14:f9:8b:a4: 9e:b3:70:62:2b:3e:37:25:ba:39:65:bc:7f:a3:ca:03:ef:1b: d0:1f:48:13:7e:96:38:ac:8a:24:c8:8e:fc:37:aa:2b:54:4f: c7:18:54:f2:1e:50:de:66:bb:b6:5d:3b:89:b7:5f:18:13:4f: c4:eb:f8:9f:da:c2:4a:74:92:20:d9:c9:47:6a:50:8e:70:1b: bb:8f:49:90:8b:0d:54:a8:20:04:ba:bd:6d:bb:ff:a7:12:6d: 1d:b3:68:b4:c6:b4:a5:92:4d:6a:cd:c2:82:a5:f7:ee:0c:ab: 66:1c:46:13:60:06:2f:42:39:0c:f6:26:1c:c3:26:f1:e5:b0: 3c:90:ab:fd:42:46:48:09:83:a7:b2:4c:5d:75:b0:75:90:5a: 06:9c:47:1b -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9W0+Xy3EU25DCgWKvsZulMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZWRmYjkxMGZmZmU0N2Q1MWFkOWQwZjg4M2IxYjY0OTY2 OWUxMzUwHhcNMjYwMTAyMDYxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWJmZGQ3MjY5ZDQzNTVmOTcwNWY0ZWQyYmZiNGE0ZGI2NmFjMjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwLTOl6W5kGASBIDI6+S6JzSP05X n347wGyguTorgso6F5fKsimIAqAXc1O4GrARm4dRvIgJK/pvzBDNhKMHnu45QxlW k4kFGcOcmrSFQEF6I2fej9grf959XUr5ySEHkCS8UVV3tWTYmtGmaxVwtEnC/FCc zWoqZ6ByJd2JJCjgJuDBjlhp8cHvjH5JmVe4osSHRXpqCIwqtRopGHHFJ3xRkyi2 zLz3rNfV7EEf9E1fOJazO0NOc/1HJNdPHs+kLXfHFFhiUhBOS7+InWvPmGIddYZj 3eymGof3JzUBELE/Pqp4f6WH+Sej7CyWMskCCtgxWvj5BubgxgAn6A2OywIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFGm/3XJp1DVflwX07Sv7Sk22asIyMB8GA1UdIwQY MBaAFBPt+5EP/+R9Ua2dD4g7G2SWaeE1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRS0zN2tRX181SDFSclowUGlEc2JaSlpwNFRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xNDNiNWMtYzVhYi00ZDk4LWFlNGIt ZDE0MWE4NjkyMDM5LzEvYWJfZGNtblVOVi1YQmZUdEtfdEtUYlpxd2pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xNDNiNWMtYzVhYi00ZDk4LWFlNGItZDE0MWE4NjkyMDM5 LzEvRS0zN2tRX181SDFSclowUGlEc2JaSlpwNFRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgddADAN BgkqhkiG9w0BAQsFAAOCAQEAKX4+1xL15z5InW/07Hn9cSsVOTfZiUdGYHaklxee 62MEM4f2BYGxwMg9XPTMVo4zLeH/m08EsiRRUxIx8tmDwaV70+TeCfoom+MX7h0x PsZD/7Q/nubYGNSd8IJPmlKGVgMWmQ6ozwMU+YuknrNwYis+NyW6OWW8f6PKA+8b 0B9IE36WOKyKJMiO/DeqK1RPxxhU8h5Q3ma7tl07ibdfGBNPxOv4n9rCSnSSINnJ R2pQjnAbu49JkIsNVKggBLq9bbv/pxJtHbNotMa0pZJNas3CgqX37gyrZhxGE2AG L0I5DPYmHMMm8eWwPJCr/UJGSAmDp7JMXXWwdZBaBpxHGw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:20 2026 by rpki-client