This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/aZ8AkYbZDzLWgutOqU36IbLeq9I.roa File: aZ8AkYbZDzLWgutOqU36IbLeq9I.roa (raw, json) Hash identifier: cnNNZQp5lYYOI91A8raXO1cOrkw9J8G5tTC55Sx7Npk= Subject key identifier: 69:9F:00:91:86:D9:0F:32:D6:82:EB:4E:A9:4D:FA:21:B2:DE:AB:D2 Certificate issuer: /CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6 Certificate serial: 019B79EC1F08812EEEA47A4DF0B044747CD2 Authority key identifier: 96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/aZ8AkYbZDzLWgutOqU36IbLeq9I.roa Signing time: Thu 01 Jan 2026 14:17:56 +0000 ROA not before: Thu 01 Jan 2026 14:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42337 IP address blocks: 2a06:ef06::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:1f:08:81:2e:ee:a4:7a:4d:f0:b0:44:74:7c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6 Validity Not Before: Jan 1 14:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=699f009186d90f32d682eb4ea94dfa21b2deabd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a2:ec:e0:86:92:eb:97:7e:da:f0:9d:07:04: 8a:f2:39:e0:dc:0a:71:78:c2:56:b5:23:23:d4:c5: d9:8e:9f:c9:bc:34:68:aa:d0:24:7e:21:65:3a:9e: 8f:fa:3c:4c:04:40:19:d8:30:d5:fd:66:0d:28:2e: 15:95:6c:83:74:29:a8:c4:37:be:86:9e:b0:09:f7: dd:e0:35:ef:45:d3:cd:f1:22:4f:8d:d7:c9:00:95: d6:7d:3f:be:11:a0:35:35:c1:b9:fa:35:51:24:2c: a7:3b:e6:b0:4f:b2:c6:a6:ec:9c:f1:23:12:e6:a9: 38:01:eb:e6:22:ea:4d:ba:d9:29:26:3d:f4:41:7b: f8:36:0a:83:36:09:ad:17:09:09:93:b3:11:f3:13: 6c:ed:48:a9:a5:04:82:1f:ed:e4:c0:34:21:6c:ff: 1a:af:ce:f4:6c:a4:d0:04:43:5f:a0:d8:ac:1e:8c: 26:ae:c5:f6:ff:e7:f8:42:86:16:cf:ef:b1:13:7d: 1c:ed:2e:09:65:92:2d:62:ae:23:2f:cb:d5:56:91: af:08:d7:79:62:7c:15:05:e4:9a:af:9d:e7:87:82: a5:da:66:73:a5:34:27:49:45:6c:a9:95:1b:4e:fa: 83:91:a0:66:01:c4:46:5e:b3:2c:6e:f6:72:a6:c7: fc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9F:00:91:86:D9:0F:32:D6:82:EB:4E:A9:4D:FA:21:B2:DE:AB:D2 X509v3 Authority Key Identifier: keyid:96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/aZ8AkYbZDzLWgutOqU36IbLeq9I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:ef06::/32 Signature Algorithm: sha256WithRSAEncryption 80:03:f1:2d:3f:8e:2e:9e:51:78:9b:b7:cc:25:90:f6:88:c4: 91:5d:45:a5:de:c0:5b:06:b5:6a:e9:48:45:e8:c1:af:11:92: 04:94:88:5b:ed:8e:57:9c:05:36:56:01:30:42:7e:7f:15:ad: 56:36:4d:40:b4:fd:9a:14:78:f6:2e:6c:03:15:bc:d3:9a:9a: 2c:d2:a7:c1:22:84:e5:d2:e7:c9:4f:8f:61:9a:06:0a:06:23: ea:64:e5:8b:49:fe:87:bd:b0:8b:58:c7:89:03:44:59:6d:8f: 7e:be:71:05:46:f2:de:50:20:88:2d:00:69:d2:8a:8d:3c:5c: 98:64:16:b0:cc:ab:4f:d1:95:79:d4:66:a6:b3:2d:cb:a0:74: e5:78:4a:d6:30:43:fa:63:0c:02:27:5b:12:45:3a:8a:f4:d3: 84:27:b1:39:c7:c5:8f:ee:d4:3b:9b:a6:e9:60:85:69:48:a6: 30:af:0b:6b:80:7b:ad:53:3e:52:15:f8:7a:a8:41:b7:6b:7e: e7:53:72:73:6e:28:1a:bb:07:a6:f1:ae:c0:2b:d4:cb:e1:2e: de:9f:8e:f5:58:4f:5d:d3:6b:a4:aa:97:f0:93:84:6b:88:f8: c0:e0:97:f7:01:13:eb:5c:69:56:fd:9e:73:07:bc:3e:0b:06: 01:8f:18:0f -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt57B8IgS7upHpN8LBEdHzSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MjcxYjYyZDE4ZTRhYzc3YzYxMDk2OTBlYWFlNGNjMzRk MGU5YjYwHhcNMjYwMTAxMTQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTlmMDA5MTg2ZDkwZjMyZDY4MmViNGVhOTRkZmEyMWIyZGVhYmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KLs4IaS65d+2vCdBwSK8jng3Apx eMJWtSMj1MXZjp/JvDRoqtAkfiFlOp6P+jxMBEAZ2DDV/WYNKC4VlWyDdCmoxDe+ hp6wCffd4DXvRdPN8SJPjdfJAJXWfT++EaA1NcG5+jVRJCynO+awT7LGpuyc8SMS 5qk4AevmIupNutkpJj30QXv4NgqDNgmtFwkJk7MR8xNs7UippQSCH+3kwDQhbP8a r870bKTQBENfoNisHowmrsX2/+f4QoYWz++xE30c7S4JZZItYq4jL8vVVpGvCNd5 YnwVBeSar53nh4Kl2mZzpTQnSUVsqZUbTvqDkaBmAcRGXrMsbvZypsf8cQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFGmfAJGG2Q8y1oLrTqlN+iGy3qvSMB8GA1UdIwQY MBaAFJYnG2LRjkrHfGEJaQ6q5Mw00Om2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGljYll0R09Tc2Q4WVFscERxcmt6RFRRNmJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mNmI2MGItNTgwOC00OGEyLTgyMDMt MWNhM2ZiYmZiYTNmLzEvYVo4QWtZYlpEekxXZ3V0T3FVMzZJYkxlcTlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mNmI2MGItNTgwOC00OGEyLTgyMDMtMWNhM2ZiYmZiYTNm LzEvbGljYll0R09Tc2Q4WVFscERxcmt6RFRRNmJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgbvBjAN BgkqhkiG9w0BAQsFAAOCAQEAgAPxLT+OLp5ReJu3zCWQ9ojEkV1Fpd7AWwa1aulI RejBrxGSBJSIW+2OV5wFNlYBMEJ+fxWtVjZNQLT9mhR49i5sAxW805qaLNKnwSKE 5dLnyU+PYZoGCgYj6mTli0n+h72wi1jHiQNEWW2Pfr5xBUby3lAgiC0AadKKjTxc mGQWsMyrT9GVedRmprMty6B05XhK1jBD+mMMAidbEkU6ivTThCexOcfFj+7UO5um 6WCFaUimMK8La4B7rVM+UhX4eqhBt2t+51Nyc24oGrsHpvGuwCvUy+Eu3p+O9VhP XdNrpKqX8JOEa4j4wOCX9wET61xpVv2ecwe8PgsGAY8YDw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:32 2026 by rpki-client