This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/AO6sWsJNSjTXMKcNRY6EDXZ3xME.roa File: AO6sWsJNSjTXMKcNRY6EDXZ3xME.roa (raw, json) Hash identifier: EfPwurI2AoPqZUYbh42RmCLOoiMjh57uB5KvuqjCpDI= Subject key identifier: 00:EE:AC:5A:C2:4D:4A:34:D7:30:A7:0D:45:8E:84:0D:76:77:C4:C1 Certificate issuer: /CN=8ecc229e5699105828564b78509f3b72f3090a21 Certificate serial: 019B7E385298B94161C3ADADC549FD40F4F5 Authority key identifier: 8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/AO6sWsJNSjTXMKcNRY6EDXZ3xME.roa Signing time: Fri 02 Jan 2026 10:19:38 +0000 ROA not before: Fri 02 Jan 2026 10:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398826 IP address blocks: 2a02:7080::/48 maxlen: 48 2a02:7080:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.mft rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:52:98:b9:41:61:c3:ad:ad:c5:49:fd:40:f4:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ecc229e5699105828564b78509f3b72f3090a21 Validity Not Before: Jan 2 10:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00eeac5ac24d4a34d730a70d458e840d7677c4c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d0:d2:92:f4:89:fe:47:69:f6:4a:a7:92:78: f4:df:d2:a3:d9:11:91:ac:86:a7:ba:76:86:1a:57: 77:ee:c3:51:ec:cd:2b:aa:c5:35:2a:09:e2:5a:15: 01:4b:d4:42:ed:89:b6:60:f6:6e:97:90:4d:80:43: 99:c4:ad:b5:39:97:11:c1:c4:a0:c8:66:a7:e6:66: ca:20:eb:78:c1:16:60:e8:df:14:5d:fd:9a:9f:c6: 3c:f5:72:fa:0d:09:bf:54:a5:4b:b4:01:24:2f:19: 2f:29:e4:ec:58:08:bc:95:14:3f:a1:31:28:d6:dc: 06:15:3e:0c:2f:c4:bb:67:db:f4:b3:ac:09:9d:13: 99:65:f4:b2:8a:9b:43:ad:13:d9:e6:c6:b1:f2:85: 63:4b:15:2b:70:85:31:a9:4b:72:01:95:cf:61:4c: 23:cb:7a:ce:3c:bb:c6:1d:aa:bd:42:59:65:23:47: 2f:2b:ff:fd:89:13:42:6c:4d:94:37:8b:2e:d5:ca: 5b:12:fe:3d:88:a2:75:21:4b:15:a0:a0:e6:ac:77: 75:1e:1b:05:2e:b4:34:af:e6:97:b7:a7:34:ea:a6: 90:a5:d8:bd:31:98:92:a3:06:51:45:2e:83:43:53: eb:9e:cb:d2:c3:8d:ef:9f:f3:6f:65:cf:b7:00:be: bf:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EE:AC:5A:C2:4D:4A:34:D7:30:A7:0D:45:8E:84:0D:76:77:C4:C1 X509v3 Authority Key Identifier: keyid:8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/AO6sWsJNSjTXMKcNRY6EDXZ3xME.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:7080::/48 2a02:7080:1000::/48 Signature Algorithm: sha256WithRSAEncryption c7:de:cf:9b:36:d5:74:af:a6:ea:5d:89:3f:06:4d:34:e4:b9: 4a:64:14:f8:92:7c:f4:61:11:27:a6:f7:4b:f1:e6:70:2a:da: f2:a5:7c:90:08:7d:7c:34:46:df:a8:b4:ea:dd:73:4b:29:89: b3:a0:61:44:42:41:e6:e2:a9:3a:ea:3e:be:a1:bb:5c:99:c7: 74:fd:ee:5e:6b:2a:ba:56:9a:b7:e2:c9:92:e5:c6:38:c8:b7: ab:2c:d9:ef:44:a3:d8:27:3d:b5:54:f0:2b:ed:84:86:b7:ef: f7:24:31:06:7a:fb:88:d7:bc:34:f4:df:79:1a:d3:16:c4:5d: 90:49:8e:12:01:bf:3b:d0:11:2e:d3:4f:ba:01:5f:d6:eb:7b: b6:31:4e:65:a4:f3:cf:b2:8c:2d:f4:08:5d:0b:3f:ce:76:41: 78:af:60:5a:11:8c:e3:ab:cc:55:99:66:54:d7:55:70:33:99: 4a:70:df:99:3e:80:98:fd:c4:57:b2:e7:1d:2a:a8:87:6f:d9: a3:45:e2:58:22:40:b0:ec:00:c8:d9:00:ac:ef:42:d9:34:dd: e2:e1:d5:84:b0:e6:d3:c6:7e:32:10:a0:00:15:5b:b6:ce:a1: 99:86:09:c4:1b:b9:fd:fc:a6:1b:c6:f9:b1:f8:e8:17:03:86: b2:30:36:6f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OFKYuUFhw62txUn9QPT1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlY2MyMjllNTY5OTEwNTgyODU2NGI3ODUwOWYzYjcyZjMw OTBhMjEwHhcNMjYwMTAyMTAxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGVlYWM1YWMyNGQ0YTM0ZDczMGE3MGQ0NThlODQwZDc2NzdjNGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NDSkvSJ/kdp9kqnknj039Kj2RGR rIanunaGGld37sNR7M0rqsU1KgniWhUBS9RC7Ym2YPZul5BNgEOZxK21OZcRwcSg yGan5mbKIOt4wRZg6N8UXf2an8Y89XL6DQm/VKVLtAEkLxkvKeTsWAi8lRQ/oTEo 1twGFT4ML8S7Z9v0s6wJnROZZfSyiptDrRPZ5sax8oVjSxUrcIUxqUtyAZXPYUwj y3rOPLvGHaq9QlllI0cvK//9iRNCbE2UN4su1cpbEv49iKJ1IUsVoKDmrHd1HhsF LrQ0r+aXt6c06qaQpdi9MZiSowZRRS6DQ1PrnsvSw43vn/NvZc+3AL6/2wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFADurFrCTUo01zCnDUWOhA12d8TBMB8GA1UdIwQY MBaAFI7MIp5WmRBYKFZLeFCfO3LzCQohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanN3aW5sYVpFRmdvVmt0NFVKODdjdk1KQ2lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zMDYwYmQtZmViMi00OTg2LWI5ZTMt M2M5ZWJjNDU2NjIzLzEvQU82c1dzSk5TalRYTUtjTlJZNkVEWFozeE1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8zMDYwYmQtZmViMi00OTg2LWI5ZTMtM2M5ZWJjNDU2NjIz LzEvanN3aW5sYVpFRmdvVmt0NFVKODdjdk1KQ2lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgJwgAAA AwcAKgJwgBAAMA0GCSqGSIb3DQEBCwUAA4IBAQDH3s+bNtV0r6bqXYk/Bk005LlK ZBT4knz0YREnpvdL8eZwKtrypXyQCH18NEbfqLTq3XNLKYmzoGFEQkHm4qk66j6+ obtcmcd0/e5eayq6Vpq34smS5cY4yLerLNnvRKPYJz21VPAr7YSGt+/3JDEGevuI 17w09N95GtMWxF2QSY4SAb870BEu00+6AV/W63u2MU5lpPPPsowt9AhdCz/OdkF4 r2BaEYzjq8xVmWZU11VwM5lKcN+ZPoCY/cRXsucdKqiHb9mjReJYIkCw7ADI2QCs 70LZNN3i4dWEsObTxn4yEKAAFVu2zqGZhgnEG7n9/KYbxvmx+OgXA4ayMDZv -----END CERTIFICATE-----Generated at Sun Jan 25 20:31:27 2026 by rpki-client