This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/aEPMVp6ZG-lfJdg7BUkYshYQ4L4.roa File: aEPMVp6ZG-lfJdg7BUkYshYQ4L4.roa (raw, json) Hash identifier: RQFlhaq+IvmsXYe3H4USUsgGJ+1VpvdgyBNJxMdfSfg= Subject key identifier: 68:43:CC:56:9E:99:1B:E9:5F:25:D8:3B:05:49:18:B2:16:10:E0:BE Certificate issuer: /CN=d23708099f7a205564b5f8e05d217bd2fae4de88 Certificate serial: 019B7A5B71A539E4032930AD95476A921180 Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/aEPMVp6ZG-lfJdg7BUkYshYQ4L4.roa Signing time: Thu 01 Jan 2026 16:19:31 +0000 ROA not before: Thu 01 Jan 2026 16:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44973 IP address blocks: 2001:678:594::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:71:a5:39:e4:03:29:30:ad:95:47:6a:92:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88 Validity Not Before: Jan 1 16:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6843cc569e991be95f25d83b054918b21610e0be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:94:41:7a:8b:2c:04:fa:aa:af:bb:fe:b3:ad: e9:42:e1:00:41:0d:10:61:4f:31:02:b3:8c:e8:85: 2e:a9:83:ab:dc:c6:4e:85:c7:29:38:8d:e5:bd:0d: 0a:90:59:e1:d0:7f:a1:a8:5a:41:18:c3:be:af:a4: 31:c5:64:f0:e4:2a:f3:f0:df:79:c8:0a:16:2f:4e: 55:d2:9b:e3:2b:88:42:dc:1e:b4:ab:08:71:ac:a2: 6c:f4:85:df:ec:a9:e5:e5:c8:86:b9:31:08:30:e3: 10:6e:06:b8:a9:4c:c7:26:09:3f:12:67:ab:6a:bd: 14:3f:6e:08:a7:3a:84:ab:d3:eb:ae:f7:9d:fe:b1: 44:8d:b1:c7:97:02:57:c0:ab:b6:0a:87:c3:29:2f: 43:c2:a8:74:66:76:76:08:08:46:29:44:8c:79:c4: 43:62:ef:a9:b3:7e:3d:27:89:0f:09:39:18:ee:0b: 04:e7:c1:26:61:40:3e:fe:f7:fb:cb:ea:dd:42:3e: 7a:f1:db:4e:48:18:a2:16:29:58:1e:ad:ef:fa:94: 9e:10:47:1c:f3:e5:46:c9:89:0d:69:23:0c:44:23: 7e:81:15:eb:5d:b7:5a:ab:44:90:c9:ae:90:5a:b6: 38:d7:25:df:6c:73:45:0d:37:b9:7d:fc:95:ba:81: 6b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:43:CC:56:9E:99:1B:E9:5F:25:D8:3B:05:49:18:B2:16:10:E0:BE X509v3 Authority Key Identifier: keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/aEPMVp6ZG-lfJdg7BUkYshYQ4L4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:594::/48 Signature Algorithm: sha256WithRSAEncryption 5a:44:96:b8:a4:65:ae:90:be:a4:17:f8:b8:3e:bd:db:a7:4b: aa:6a:8c:c0:f8:4d:79:ae:aa:d3:61:3d:ca:30:bf:23:0a:78: 9d:43:a4:44:b5:38:96:05:00:61:b1:e9:0f:83:f2:88:aa:8b: 24:83:39:f1:0b:8a:e1:7f:f4:78:e5:fd:1a:55:6d:34:f8:aa: e3:b0:f3:32:ed:9c:ab:d0:c7:20:ce:21:ca:8a:3c:4d:fa:0d: 15:43:3b:49:39:30:0e:d8:1b:65:da:70:e8:d9:13:20:9a:2c: fc:cb:98:73:a0:06:2f:8f:89:e8:05:2c:dc:24:1a:ea:2e:e8: 16:73:a8:22:6c:30:6c:ce:41:85:fa:9f:27:94:79:a9:b1:e8: 10:12:13:98:a7:83:9d:a3:f3:12:44:a0:52:46:12:58:ec:b1: 9e:51:b4:48:cf:01:e9:68:aa:47:e1:38:ca:87:82:73:c0:10: 7e:7f:43:fd:de:1e:1e:ba:11:9b:dd:62:f6:fb:97:b1:5d:35: 51:2a:8f:bd:ed:54:74:8f:fa:93:c6:19:a4:7e:ff:1f:14:5f: c4:77:1c:ae:ca:15:4b:57:b4:21:af:8b:a9:5b:24:88:06:72: fb:37:92:63:a9:17:3d:aa:67:59:c4:97:2c:4a:00:8e:93:4b: c6:9e:53:72 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6W3GlOeQDKTCtlUdqkhGAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMzcwODA5OWY3YTIwNTU2NGI1ZjhlMDVkMjE3YmQyZmFl NGRlODgwHhcNMjYwMTAxMTYxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODQzY2M1NjllOTkxYmU5NWYyNWQ4M2IwNTQ5MThiMjE2MTBlMGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZRBeossBPqqr7v+s63pQuEAQQ0Q YU8xArOM6IUuqYOr3MZOhccpOI3lvQ0KkFnh0H+hqFpBGMO+r6QxxWTw5Crz8N95 yAoWL05V0pvjK4hC3B60qwhxrKJs9IXf7Knl5ciGuTEIMOMQbga4qUzHJgk/Emer ar0UP24IpzqEq9Prrved/rFEjbHHlwJXwKu2CofDKS9Dwqh0ZnZ2CAhGKUSMecRD Yu+ps349J4kPCTkY7gsE58EmYUA+/vf7y+rdQj568dtOSBiiFilYHq3v+pSeEEcc 8+VGyYkNaSMMRCN+gRXrXbdaq0SQya6QWrY41yXfbHNFDTe5ffyVuoFr5QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGhDzFaemRvpXyXYOwVJGLIWEOC+MB8GA1UdIwQY MBaAFNI3CAmfeiBVZLX44F0he9L65N6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGpjSUNaOTZJRlZrdGZqZ1hTRjcwdnJrM29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8wMWI1YWYtYjc3Ny00YjU5LWE1YjIt NWU5N2Y0YTUxMmU1LzEvYUVQTVZwNlpHLWxmSmRnN0JVa1lzaFlRNEw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8wMWI1YWYtYjc3Ny00YjU5LWE1YjItNWU5N2Y0YTUxMmU1 LzEvMGpjSUNaOTZJRlZrdGZqZ1hTRjcwdnJrM29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAWU MA0GCSqGSIb3DQEBCwUAA4IBAQBaRJa4pGWukL6kF/i4Pr3bp0uqaozA+E15rqrT YT3KML8jCnidQ6REtTiWBQBhsekPg/KIqoskgznxC4rhf/R45f0aVW00+KrjsPMy 7Zyr0McgziHKijxN+g0VQztJOTAO2Btl2nDo2RMgmiz8y5hzoAYvj4noBSzcJBrq LugWc6gibDBszkGF+p8nlHmpsegQEhOYp4Odo/MSRKBSRhJY7LGeUbRIzwHpaKpH 4TjKh4JzwBB+f0P93h4euhGb3WL2+5exXTVRKo+97VR0j/qTxhmkfv8fFF/Edxyu yhVLV7Qhr4upWySIBnL7N5JjqRc9qmdZxJcsSgCOk0vGnlNy -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:10 2026 by rpki-client