This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/AjeR0O3ITsCO65xWw0QykqgxNA4.roa File: AjeR0O3ITsCO65xWw0QykqgxNA4.roa (raw, json) Hash identifier: DgIKpLNUmEsPkrau/sY/HOWPCo1ggWtDwl6wxDzmrWM= Subject key identifier: 02:37:91:D0:ED:C8:4E:C0:8E:EB:9C:56:C3:44:32:92:A8:31:34:0E Certificate issuer: /CN=c441738baab988b1d68693bb05e29bfbb4f0f671 Certificate serial: 019B79EBCC2DE709418C52DD71BB5B170479 Authority key identifier: C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/AjeR0O3ITsCO65xWw0QykqgxNA4.roa Signing time: Thu 01 Jan 2026 14:17:34 +0000 ROA not before: Thu 01 Jan 2026 14:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62155 IP address blocks: 2a04:a680::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:cc:2d:e7:09:41:8c:52:dd:71:bb:5b:17:04:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c441738baab988b1d68693bb05e29bfbb4f0f671 Validity Not Before: Jan 1 14:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=023791d0edc84ec08eeb9c56c3443292a831340e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c3:01:16:2e:9b:38:f9:5c:34:7e:18:85:66: 11:28:f4:77:5f:7f:96:ee:7a:b2:32:2f:09:c8:83: 29:0e:6e:66:ec:43:84:61:c6:05:58:f5:28:44:34: bd:b5:42:3e:05:69:da:34:ed:9e:99:04:4c:4b:47: 4c:c6:ec:80:2e:d6:59:c9:a5:b1:85:ed:0b:85:1b: 4e:04:28:8b:f6:aa:b2:15:13:3d:b2:45:a5:60:bd: ac:10:06:d4:21:39:95:05:8d:bd:b4:54:b8:ed:33: b3:6f:a4:bc:6f:23:7a:c9:71:4e:a2:7a:55:25:aa: fa:d9:d5:5c:38:dc:85:f5:db:cf:a4:f4:93:ac:51: 8e:e5:35:ef:09:ef:46:f7:08:d0:47:40:42:ca:c5: 15:e1:1f:ce:a4:72:47:67:6b:5f:36:65:9a:43:14: c4:ee:05:52:86:fe:7a:9a:b0:aa:16:3a:2c:0e:47: 3b:83:a1:01:dd:76:4a:1d:b8:82:76:77:76:ec:8c: b7:83:52:cd:f9:c0:ef:0e:c0:35:57:0e:f5:0e:6c: 5b:ed:4e:55:dd:a7:11:b9:d7:e0:b5:37:5f:07:29: 3c:70:cb:0b:99:39:df:69:30:64:0a:6e:1a:5a:91: 88:6f:4c:7b:e4:6e:c3:79:01:94:c9:3d:2c:77:57: d9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:37:91:D0:ED:C8:4E:C0:8E:EB:9C:56:C3:44:32:92:A8:31:34:0E X509v3 Authority Key Identifier: keyid:C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/AjeR0O3ITsCO65xWw0QykqgxNA4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:a680::/30 Signature Algorithm: sha256WithRSAEncryption 78:27:1d:83:32:be:60:cf:d9:c4:75:80:03:36:3e:f0:6c:1d: ba:1c:de:41:89:63:d4:d3:d7:d8:fc:e0:e0:f0:75:12:d5:6c: 10:ad:48:9c:c7:77:46:fe:92:0f:cc:ec:fc:af:f3:13:d3:c9: 9a:71:0b:66:00:c4:79:f3:0e:e8:ce:2f:37:fd:3f:f1:f7:7b: 49:74:cb:89:75:e3:49:80:82:28:da:53:89:db:0c:0c:30:ef: 8e:58:55:8b:02:7f:37:93:db:42:83:64:33:66:69:aa:63:b2: c7:2a:fc:c9:66:a2:5b:99:b3:eb:27:a9:8c:2b:46:f5:fd:41: 98:1a:87:f9:1f:5e:65:85:1f:57:01:56:f4:a6:8c:ef:e2:30: f9:c6:0d:30:e1:c2:33:5d:bf:63:ce:f2:c0:44:1d:5e:b5:4a: 65:04:53:e6:cb:3a:00:fb:04:7c:e2:9d:7b:47:28:13:fd:89: ae:21:03:82:07:c3:0b:df:2c:45:3c:b9:a5:f0:91:ff:6f:b7: e3:eb:c9:26:21:3c:d7:d9:7d:7a:dd:e9:46:13:12:3a:4c:5b: 93:e9:fc:8e:2e:31:54:6d:db:fb:f1:08:a9:59:d3:8b:47:53: 27:3a:4f:4e:57:30:66:b4:f1:72:07:c4:35:a9:98:98:b7:1b: a0:98:36:bd -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt568wt5wlBjFLdcbtbFwR5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NDE3MzhiYWFiOTg4YjFkNjg2OTNiYjA1ZTI5YmZiYjRm MGY2NzEwHhcNMjYwMTAxMTQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjM3OTFkMGVkYzg0ZWMwOGVlYjljNTZjMzQ0MzI5MmE4MzEzNDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsMBFi6bOPlcNH4YhWYRKPR3X3+W 7nqyMi8JyIMpDm5m7EOEYcYFWPUoRDS9tUI+BWnaNO2emQRMS0dMxuyALtZZyaWx he0LhRtOBCiL9qqyFRM9skWlYL2sEAbUITmVBY29tFS47TOzb6S8byN6yXFOonpV Jar62dVcONyF9dvPpPSTrFGO5TXvCe9G9wjQR0BCysUV4R/OpHJHZ2tfNmWaQxTE 7gVShv56mrCqFjosDkc7g6EB3XZKHbiCdnd27Iy3g1LN+cDvDsA1Vw71Dmxb7U5V 3acRudfgtTdfByk8cMsLmTnfaTBkCm4aWpGIb0x75G7DeQGUyT0sd1fZEwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFAI3kdDtyE7AjuucVsNEMpKoMTQOMB8GA1UdIwQY MBaAFMRBc4uquYix1oaTuwXim/u08PZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUt NGM5OGQ5YTUxNDA1LzEvQWplUjBPM0lUc0NPNjV4V3cwUXlrcWd4TkE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUtNGM5OGQ5YTUxNDA1 LzEveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCKgSmgDAN BgkqhkiG9w0BAQsFAAOCAQEAeCcdgzK+YM/ZxHWAAzY+8GwduhzeQYlj1NPX2Pzg 4PB1EtVsEK1InMd3Rv6SD8zs/K/zE9PJmnELZgDEefMO6M4vN/0/8fd7SXTLiXXj SYCCKNpTidsMDDDvjlhViwJ/N5PbQoNkM2ZpqmOyxyr8yWaiW5mz6yepjCtG9f1B mBqH+R9eZYUfVwFW9KaM7+Iw+cYNMOHCM12/Y87ywEQdXrVKZQRT5ss6APsEfOKd e0coE/2JriEDggfDC98sRTy5pfCR/2+34+vJJiE819l9et3pRhMSOkxbk+n8ji4x VG3b+/EIqVnTi0dTJzpPTlcwZrTxcgfENamYmLcboJg2vQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:24:33 2026 by rpki-client