This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/ASvKzZxweZT7xHuni0eKcHpcjqU.roa File: ASvKzZxweZT7xHuni0eKcHpcjqU.roa (raw, json) Hash identifier: 4YMxscW7TktQGLKn19P50CYxgYAoxEYLDNh2Yo+uAZs= Subject key identifier: 01:2B:CA:CD:9C:70:79:94:FB:C4:7B:A7:8B:47:8A:70:7A:5C:8E:A5 Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506 Certificate serial: 019B77C7135097344E1F855712D58215F912 Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/ASvKzZxweZT7xHuni0eKcHpcjqU.roa Signing time: Thu 01 Jan 2026 04:18:13 +0000 ROA not before: Thu 01 Jan 2026 04:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42378 IP address blocks: 2a01:190:15fd::/48 maxlen: 48 2a01:190:15fe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:13:50:97:34:4e:1f:85:57:12:d5:82:15:f9:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506 Validity Not Before: Jan 1 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=012bcacd9c707994fbc47ba78b478a707a5c8ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1a:d8:db:06:d6:1b:79:e8:6a:5e:ec:e9:9b: 8c:ba:e0:6e:2a:d5:16:4b:8c:db:e9:08:88:29:36: 74:be:77:d3:db:5b:82:7c:d9:20:b6:d6:c5:7a:01: 73:3a:7e:29:9a:fb:9c:25:20:c8:df:cb:2c:5e:c8: b0:96:20:8c:ca:cc:4f:45:9e:be:3d:41:c6:07:bc: 26:d2:68:1c:e9:97:d0:25:de:d7:c4:59:81:cc:42: f5:e2:8b:8f:18:44:63:55:bd:15:cf:2d:b2:52:c1: c0:33:20:5b:e9:45:4d:10:d6:4b:cc:c7:9d:17:6b: 89:2e:af:01:66:d7:c8:3e:50:b5:cb:c8:c2:0b:38: 21:2c:2d:76:c5:10:5b:f4:95:14:5c:df:f7:63:73: fb:54:c2:11:62:ab:0a:f0:51:24:13:92:99:71:67: f6:0e:01:4d:dd:85:54:c1:93:10:1e:6f:51:c7:aa: f2:28:65:6f:49:b4:3b:52:c3:27:54:00:64:12:db: d3:3a:0b:13:56:5c:89:8f:02:3e:88:30:07:62:a3: 75:4c:04:8d:8d:59:2c:a2:1a:15:d2:02:24:41:24: 45:06:7d:c4:b5:46:4d:4d:7b:a0:f9:22:0d:1a:49: d5:3c:63:90:0d:3c:6c:6b:93:7f:7f:66:10:a3:36: 3e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2B:CA:CD:9C:70:79:94:FB:C4:7B:A7:8B:47:8A:70:7A:5C:8E:A5 X509v3 Authority Key Identifier: keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/ASvKzZxweZT7xHuni0eKcHpcjqU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:190:15fd::-2a01:190:15fe:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption aa:b1:69:b9:50:c5:50:71:c7:3a:92:06:87:a9:ff:4f:50:d0: f0:c0:73:d6:ea:00:18:bf:47:20:fb:76:89:d0:ed:b4:f2:2b: 6b:e2:3b:10:85:95:1d:64:34:e7:43:cb:8e:3b:a3:a1:e4:40: 98:9b:77:62:05:4a:27:00:08:37:55:13:14:92:e0:c7:f2:e9: 40:73:dd:ca:a0:26:1a:1a:ee:8c:73:0b:7f:d5:7f:e6:f2:6e: 44:8d:fc:e9:e4:41:7d:73:f9:78:2f:2d:11:8c:36:52:c4:31: ae:6a:f1:a0:f2:04:77:a7:d9:68:05:d4:3f:37:02:e9:e5:8a: 10:68:d2:6e:18:97:f3:90:d9:fa:c9:36:f4:79:bd:ef:f1:33: 59:54:4a:a6:78:3e:12:65:57:37:04:5e:73:4b:46:ce:03:5c: 79:18:f3:04:e9:ee:ab:cb:b4:4f:72:82:32:fb:b4:80:53:ad: 99:02:e3:36:84:60:fa:93:d9:b2:bd:46:b7:42:4b:cc:48:a6: 42:82:7c:18:45:5f:d6:e1:e2:99:64:f1:a0:45:61:5f:bc:86: b0:a2:e8:67:24:b0:9d:0e:72:46:01:4f:b7:86:31:f2:03:1b: be:86:ae:e3:f5:0e:b1:26:a9:a2:65:eb:13:6a:d1:51:60:57: fe:c8:c0:7b -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt3xxNQlzROH4VXEtWCFfkSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw YjQ1MDYwHhcNMjYwMTAxMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTJiY2FjZDljNzA3OTk0ZmJjNDdiYTc4YjQ3OGE3MDdhNWM4ZWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RrY2wbWG3noal7s6ZuMuuBuKtUW S4zb6QiIKTZ0vnfT21uCfNkgttbFegFzOn4pmvucJSDI38ssXsiwliCMysxPRZ6+ PUHGB7wm0mgc6ZfQJd7XxFmBzEL14ouPGERjVb0Vzy2yUsHAMyBb6UVNENZLzMed F2uJLq8BZtfIPlC1y8jCCzghLC12xRBb9JUUXN/3Y3P7VMIRYqsK8FEkE5KZcWf2 DgFN3YVUwZMQHm9Rx6ryKGVvSbQ7UsMnVABkEtvTOgsTVlyJjwI+iDAHYqN1TASN jVksohoV0gIkQSRFBn3EtUZNTXug+SINGknVPGOQDTxsa5N/f2YQozY+5QIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFAErys2ccHmU+8R7p4tHinB6XI6lMB8GA1UdIwQY MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt OGVlYjc1N2NmNTQ1LzEvQVN2S3paeHdlWlQ3eEh1bmkwZUtjSHBjanFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1 LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqAQGQ Ff0DBwAqAQGQFf4wDQYJKoZIhvcNAQELBQADggEBAKqxablQxVBxxzqSBoep/09Q 0PDAc9bqABi/RyD7donQ7bTyK2viOxCFlR1kNOdDy447o6HkQJibd2IFSicACDdV ExSS4Mfy6UBz3cqgJhoa7oxzC3/Vf+bybkSN/OnkQX1z+XgvLRGMNlLEMa5q8aDy BHen2WgF1D83AunlihBo0m4Yl/OQ2frJNvR5ve/xM1lUSqZ4PhJlVzcEXnNLRs4D XHkY8wTp7qvLtE9ygjL7tIBTrZkC4zaEYPqT2bK9RrdCS8xIpkKCfBhFX9bh4plk 8aBFYV+8hrCi6GcksJ0OckYBT7eGMfIDG76GruP1DrEmqaJl6xNq0VFgV/7IwHs= -----END CERTIFICATE-----Generated at Mon Jan 26 05:49:46 2026 by rpki-client