This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/aYejruvsZPgwyn80sIGOkEJKzcA.roa File: aYejruvsZPgwyn80sIGOkEJKzcA.roa (raw, json) Hash identifier: BIrNJKeuqHsObhCXMAP4TWBlzTChJDJOhCvUFNLdbug= Subject key identifier: 69:87:A3:AE:EB:EC:64:F8:30:CA:7F:34:B0:81:8E:90:42:4A:CD:C0 Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Certificate serial: 019B7F150C5970EB21D215ED5FAF8ADC0C4C Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/aYejruvsZPgwyn80sIGOkEJKzcA.roa Signing time: Fri 02 Jan 2026 14:20:44 +0000 ROA not before: Fri 02 Jan 2026 14:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41457 IP address blocks: 2a14:c380:120::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:0c:59:70:eb:21:d2:15:ed:5f:af:8a:dc:0c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Validity Not Before: Jan 2 14:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6987a3aeebec64f830ca7f34b0818e90424acdc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4b:c8:c1:c7:1c:b9:2f:25:8a:14:fe:9b:ac: dd:f6:fa:77:bd:b2:f1:53:c9:01:d0:48:0e:33:92: a2:16:60:77:51:64:d5:13:db:58:55:d9:2a:63:32: e5:a4:42:0a:0e:51:6e:69:ec:94:bc:f6:f2:3b:88: 10:70:f1:55:dd:2b:37:c3:5d:a1:79:2f:59:8b:70: fc:4e:d2:70:92:77:2f:b3:61:a1:c5:89:d7:26:7c: a5:4a:99:ee:3c:9b:9d:ae:b1:25:2c:fb:0c:d7:12: 1e:54:cc:6f:dc:b1:03:28:f3:f7:21:85:6a:5a:50: ce:87:d6:10:30:77:c6:97:04:9e:a6:67:ca:c7:ba: 84:6b:59:ea:c2:eb:2b:15:4f:e4:f4:7e:9b:4e:fc: a5:22:a6:ae:a9:95:3c:bb:9e:34:ad:96:0b:12:10: 7c:58:7b:25:74:0f:68:80:d7:06:f0:0c:24:98:65: 63:dc:74:98:cf:8c:97:c8:1a:33:e3:1e:5f:8e:cf: db:75:fb:7e:df:43:bd:8e:22:f5:68:5c:64:c1:ff: fb:86:aa:69:68:fc:62:19:a8:93:28:c6:c6:e1:31: b5:b3:9f:22:ba:ce:d3:38:d2:1f:17:fb:07:3b:5b: 5a:b7:ac:0f:8c:8b:cf:2d:0b:4a:bf:bd:a1:ce:8f: 6c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:87:A3:AE:EB:EC:64:F8:30:CA:7F:34:B0:81:8E:90:42:4A:CD:C0 X509v3 Authority Key Identifier: keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/aYejruvsZPgwyn80sIGOkEJKzcA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c380:120::/44 Signature Algorithm: sha256WithRSAEncryption 7f:fa:6a:7a:06:55:32:78:f0:e3:31:a8:c1:a4:be:03:d6:01: 24:df:3c:22:96:4f:f1:a3:86:86:cb:01:fd:dd:c7:07:56:0c: f0:9d:93:d4:f3:fb:aa:3c:4b:5c:19:92:ca:9c:cf:69:a0:e8: fb:67:01:ea:b9:3b:00:cd:ce:74:e6:c0:34:29:d9:04:29:ad: 38:02:d0:c8:26:26:cc:95:25:41:18:8b:cb:4a:4d:6b:b8:10: ce:d2:56:a6:ff:06:3c:5b:9c:ab:e4:1e:8b:ea:3c:43:f4:92: 46:0b:a0:d1:cb:3e:26:02:b8:35:11:1b:07:76:5c:41:84:bf: 43:13:2c:b7:10:36:23:d3:37:34:05:d6:ba:ef:da:b9:3f:75: 88:95:f5:a0:f4:e2:3d:2b:56:72:59:54:90:21:21:7a:ad:9b: 0f:c8:08:ff:1c:fb:69:da:16:62:0b:90:18:87:50:1e:a9:3f: 27:9e:fc:c3:36:27:99:1d:8b:7d:b2:40:07:01:9d:12:9f:b5: 11:c4:d2:24:11:81:32:90:ad:3a:62:fb:48:7b:c0:50:5e:b2: 26:9e:45:eb:ea:c4:43:ac:f6:f6:1f:8c:ba:1f:d2:ef:f5:a7: cb:52:a9:ec:40:97:e5:74:18:d4:8a:f7:25:7f:9b:5f:79:6a: 0a:a3:8c:78 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FQxZcOsh0hXtX6+K3AxMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2 ZDI1MTIwHhcNMjYwMTAyMTQyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTg3YTNhZWViZWM2NGY4MzBjYTdmMzRiMDgxOGU5MDQyNGFjZGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UvIwcccuS8lihT+m6zd9vp3vbLx U8kB0EgOM5KiFmB3UWTVE9tYVdkqYzLlpEIKDlFuaeyUvPbyO4gQcPFV3Ss3w12h eS9Zi3D8TtJwkncvs2GhxYnXJnylSpnuPJudrrElLPsM1xIeVMxv3LEDKPP3IYVq WlDOh9YQMHfGlwSepmfKx7qEa1nqwusrFU/k9H6bTvylIqauqZU8u540rZYLEhB8 WHsldA9ogNcG8AwkmGVj3HSYz4yXyBoz4x5fjs/bdft+30O9jiL1aFxkwf/7hqpp aPxiGaiTKMbG4TG1s58ius7TONIfF/sHO1tat6wPjIvPLQtKv72hzo9sJwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGmHo67r7GT4MMp/NLCBjpBCSs3AMB8GA1UdIwQY MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt NTMyMWQ2OWQ5NzlkLzEvYVllanJ1dnNaUGd3eW44MHNJR09rRUpLemNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhTDgAEg MA0GCSqGSIb3DQEBCwUAA4IBAQB/+mp6BlUyePDjMajBpL4D1gEk3zwilk/xo4aG ywH93ccHVgzwnZPU8/uqPEtcGZLKnM9poOj7ZwHquTsAzc505sA0KdkEKa04AtDI JibMlSVBGIvLSk1ruBDO0lam/wY8W5yr5B6L6jxD9JJGC6DRyz4mArg1ERsHdlxB hL9DEyy3EDYj0zc0Bda679q5P3WIlfWg9OI9K1ZyWVSQISF6rZsPyAj/HPtp2hZi C5AYh1AeqT8nnvzDNieZHYt9skAHAZ0Sn7URxNIkEYEykK06YvtIe8BQXrImnkXr 6sRDrPb2H4y6H9Lv9afLUqnsQJfldBjUivclf5tfeWoKo4x4 -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:48 2026 by rpki-client