This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/aXaCU83J-_jJ_EnlqZRgN5SQBBk.roa File: aXaCU83J-_jJ_EnlqZRgN5SQBBk.roa (raw, json) Hash identifier: Vz1lenxM6E43wZsZKYeL1SXodzdNb6RvRRHtozOm9sQ= Subject key identifier: 69:76:82:53:CD:C9:FB:F8:C9:FC:49:E5:A9:94:60:37:94:90:04:19 Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984 Certificate serial: 019B7B366D2349409B52C2A2486A4D30A314 Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/aXaCU83J-_jJ_EnlqZRgN5SQBBk.roa Signing time: Thu 01 Jan 2026 20:18:43 +0000 ROA not before: Thu 01 Jan 2026 20:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209485 IP address blocks: 2a00:8860:900::/40 maxlen: 64 2a00:8861:900::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:6d:23:49:40:9b:52:c2:a2:48:6a:4d:30:a3:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984 Validity Not Before: Jan 1 20:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69768253cdc9fbf8c9fc49e5a994603794900419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:aa:f2:dd:f5:4f:dd:11:e8:1a:af:43:8d:ec: 66:63:6d:74:3a:ee:4c:c1:57:ba:d1:86:20:56:aa: 81:b7:b1:38:5d:33:b8:a9:d2:98:d4:38:0c:7f:a1: ee:c6:b9:f7:62:7a:ed:4d:49:d9:4d:09:0d:5c:2c: 25:f1:f9:86:0c:3d:cd:86:e5:6c:32:a0:38:99:a2: fb:f7:af:c4:22:b2:86:ea:9d:18:77:c1:11:16:ef: 7e:30:df:1d:94:2c:1e:ed:5e:72:d6:a5:b5:24:3d: 91:c6:e1:2b:09:4a:42:6b:46:fa:04:95:b3:e9:a8: dd:8a:95:0e:a6:83:c3:4a:e9:30:0f:3c:39:64:08: 97:db:e3:10:b9:90:7f:f2:44:56:ec:8a:5f:22:6a: 45:b9:9f:b0:42:84:be:96:dc:38:01:d0:4f:00:2f: 3a:04:ff:b8:1e:88:da:8b:55:03:eb:59:b8:41:a4: a2:9e:b2:54:09:5d:0c:9a:06:3f:cd:97:be:b1:6f: 2e:eb:97:90:d9:ca:67:62:1f:54:15:ea:e3:67:a8: 0f:41:27:cf:d1:6f:a3:db:08:d4:08:ea:b7:f6:c7: 4a:e9:10:72:13:a2:fd:4d:8b:f3:0b:bc:be:f0:ac: 86:f7:29:30:61:9c:83:c1:a5:04:8b:48:39:a6:4b: 68:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:76:82:53:CD:C9:FB:F8:C9:FC:49:E5:A9:94:60:37:94:90:04:19 X509v3 Authority Key Identifier: keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/aXaCU83J-_jJ_EnlqZRgN5SQBBk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:8860:900::/40 2a00:8861:900::/40 Signature Algorithm: sha256WithRSAEncryption 69:91:05:ff:42:f7:7e:22:07:71:d2:24:09:48:ed:c2:d8:d1: 42:02:5f:a7:f2:e3:aa:ef:ca:da:b3:4b:df:5a:49:2f:61:35: cc:e2:f5:8c:4e:95:29:07:c2:62:4a:68:5d:0a:1d:66:49:d0: 8e:21:51:67:2c:15:f2:22:72:03:fe:5c:81:87:20:75:f4:6b: 84:59:ce:33:53:64:b7:eb:e0:a9:ad:0f:f8:ef:98:20:dc:53: 95:c5:ed:44:d3:16:b6:c6:2b:f7:44:06:84:37:0f:41:d3:86: da:b6:18:c1:9d:e7:0e:32:a8:b7:2e:d5:42:bb:00:6e:56:59: 92:fb:e1:15:d3:49:76:85:60:a3:19:6a:f6:f0:bd:6a:bc:a5: 92:71:dc:a4:d8:7b:2a:ee:18:23:5f:a9:18:d8:28:4e:81:68: 5a:2c:9a:05:03:7f:5d:e6:a3:0b:19:9d:b2:9a:2c:79:2a:92: 81:8c:af:cb:7b:4d:67:86:38:91:48:b9:5c:a2:5e:88:69:47: 1e:2f:1a:af:37:14:d2:00:79:96:57:d3:ef:ea:77:0d:c3:57: da:8c:dd:02:3c:a3:ae:21:7b:bc:c4:a5:b4:74:9d:11:68:bf: 33:8e:ee:49:c0:79:0c:b9:d8:05:c9:92:3e:6d:0d:d3:23:2e: 05:90:71:3e -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt7Nm0jSUCbUsKiSGpNMKMUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjAzNDYzZWI5NDRiMjVjNjUxMzVjYTQ3YmRiZGFiNjQ2 ZjM5ODQwHhcNMjYwMTAxMjAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTc2ODI1M2NkYzlmYmY4YzlmYzQ5ZTVhOTk0NjAzNzk0OTAwNDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwary3fVP3RHoGq9DjexmY210Ou5M wVe60YYgVqqBt7E4XTO4qdKY1DgMf6Huxrn3YnrtTUnZTQkNXCwl8fmGDD3NhuVs MqA4maL796/EIrKG6p0Yd8ERFu9+MN8dlCwe7V5y1qW1JD2RxuErCUpCa0b6BJWz 6ajdipUOpoPDSukwDzw5ZAiX2+MQuZB/8kRW7IpfImpFuZ+wQoS+ltw4AdBPAC86 BP+4Hojai1UD61m4QaSinrJUCV0MmgY/zZe+sW8u65eQ2cpnYh9UFerjZ6gPQSfP 0W+j2wjUCOq39sdK6RByE6L9TYvzC7y+8KyG9ykwYZyDwaUEi0g5pkto7wIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFGl2glPNyfv4yfxJ5amUYDeUkAQZMB8GA1UdIwQY MBaAFDggNGPrlEslxlE1yke9vatkbzmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1Nzgt NTg5MzUxNzliOTg1LzEvYVhhQ1U4M0otX2pKX0VubHFaUmdONVNRQkJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1NzgtNTg5MzUxNzliOTg1 LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYAKgCIYAkD BgAqAIhhCTANBgkqhkiG9w0BAQsFAAOCAQEAaZEF/0L3fiIHcdIkCUjtwtjRQgJf p/Ljqu/K2rNL31pJL2E1zOL1jE6VKQfCYkpoXQodZknQjiFRZywV8iJyA/5cgYcg dfRrhFnOM1Nkt+vgqa0P+O+YINxTlcXtRNMWtsYr90QGhDcPQdOG2rYYwZ3nDjKo ty7VQrsAblZZkvvhFdNJdoVgoxlq9vC9arylknHcpNh7Ku4YI1+pGNgoToFoWiya BQN/XeajCxmdsposeSqSgYyvy3tNZ4Y4kUi5XKJeiGlHHi8arzcU0gB5llfT7+p3 DcNX2ozdAjyjriF7vMSltHSdEWi/M47uScB5DLnYBcmSPm0N0yMuBZBxPg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:24 2026 by rpki-client