This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/AOyeHe1cl8A3oMzjwjByWA_NmhM.roa File: AOyeHe1cl8A3oMzjwjByWA_NmhM.roa (raw, json) Hash identifier: ET4GUGJd6TvOsuKm693+ChDRw8esK62A96jyVSn0yok= Subject key identifier: 00:EC:9E:1D:ED:5C:97:C0:37:A0:CC:E3:C2:30:72:58:0F:CD:9A:13 Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019B7758DA8FB7AC230B618E7A85BFA09D5D Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/AOyeHe1cl8A3oMzjwjByWA_NmhM.roa Signing time: Thu 01 Jan 2026 02:17:50 +0000 ROA not before: Thu 01 Jan 2026 02:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43959 IP address blocks: 2a0f:5701:fe11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:da:8f:b7:ac:23:0b:61:8e:7a:85:bf:a0:9d:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 1 02:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00ec9e1ded5c97c037a0cce3c23072580fcd9a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:30:d1:6c:05:ec:ac:df:b4:1b:80:f7:4c:a9: 03:ee:0e:92:d4:ec:d9:f5:0e:11:1f:31:98:21:1f: 7f:43:4f:27:bd:3b:32:3e:cc:ce:28:cd:f2:e7:15: 74:db:0d:a0:28:1d:57:b5:ce:26:9d:8c:2b:5c:8e: 45:06:36:62:c3:a2:fc:a8:e4:fa:dc:f4:1c:70:27: 16:11:9f:20:43:a2:d1:fa:ff:e7:4a:ed:ab:95:b0: 2f:fa:ba:7d:2f:e5:3d:d2:d0:a6:f5:6a:d0:b4:29: 35:1f:82:a2:7b:8c:fe:39:0b:b4:83:c1:ae:a4:d2: 39:f5:99:c6:eb:be:c6:8c:f2:70:4f:26:1e:46:19: a1:89:0a:ac:cf:d3:3f:2a:e6:bf:69:ba:46:60:66: 31:33:24:02:80:86:d6:ec:b8:42:d5:1d:f0:64:b4: e0:6e:e3:4c:fe:dd:08:90:03:b9:d4:fd:f5:db:52: 95:d2:06:52:91:60:a1:5d:9b:2a:19:33:19:65:c3: f7:de:fa:f2:04:43:63:97:3b:99:21:10:03:ef:99: b9:91:38:b5:c9:f7:b4:f7:09:08:ba:89:7b:af:e1: fb:4b:00:c9:76:36:57:ee:d0:64:1b:4a:92:a8:0d: 0d:ab:3d:65:12:05:50:f4:b3:a5:eb:78:80:ac:a1: ee:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EC:9E:1D:ED:5C:97:C0:37:A0:CC:E3:C2:30:72:58:0F:CD:9A:13 X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/AOyeHe1cl8A3oMzjwjByWA_NmhM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5701:fe11::/48 Signature Algorithm: sha256WithRSAEncryption 28:cc:8a:21:f2:6f:16:92:4e:4f:cd:b0:a1:28:aa:e0:86:b2: 5c:41:c6:27:91:42:28:17:46:06:88:ae:01:9f:4b:ee:b0:63: 89:ed:34:6e:68:8e:86:2e:28:cb:39:e1:37:b4:63:af:71:43: cb:7d:d5:9d:13:ac:0b:e1:6a:c5:e6:19:63:6a:78:44:a2:d6: 90:0a:81:af:6a:ee:7d:e3:11:d2:af:e8:75:3a:b8:c1:91:a1: b7:bb:89:f4:3e:09:37:1b:b9:f2:a2:38:a0:bb:ba:f1:06:20: d9:da:2e:9f:e1:86:a3:f7:c4:37:95:16:10:82:67:ad:77:4c: 24:5d:b3:d2:08:f8:6e:63:08:08:eb:4e:2b:49:2b:40:a9:8a: 80:b3:01:f7:52:ea:2e:ab:be:1d:ef:30:50:e0:dd:94:e8:9f: 1f:14:c5:2a:24:8b:fb:5b:8c:d5:38:54:db:83:2d:47:50:7c: 69:85:31:73:50:0a:fc:1e:81:d3:37:08:27:e2:01:b4:c8:49: 1d:08:68:c3:77:ca:d6:db:28:ae:cf:5d:f6:eb:8c:04:52:67: 03:c4:b5:c5:1c:bf:39:17:12:39:0f:00:05:0b:79:45:ec:54: 44:ac:1c:84:b8:06:90:c0:9c:53:f1:8c:96:2a:3d:a7:9b:00: dc:12:8f:88 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WNqPt6wjC2GOeoW/oJ1dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTAxMDIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGVjOWUxZGVkNWM5N2MwMzdhMGNjZTNjMjMwNzI1ODBmY2Q5YTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zDRbAXsrN+0G4D3TKkD7g6S1OzZ 9Q4RHzGYIR9/Q08nvTsyPszOKM3y5xV02w2gKB1Xtc4mnYwrXI5FBjZiw6L8qOT6 3PQccCcWEZ8gQ6LR+v/nSu2rlbAv+rp9L+U90tCm9WrQtCk1H4Kie4z+OQu0g8Gu pNI59ZnG677GjPJwTyYeRhmhiQqsz9M/Kua/abpGYGYxMyQCgIbW7LhC1R3wZLTg buNM/t0IkAO51P3121KV0gZSkWChXZsqGTMZZcP33vryBENjlzuZIRAD75m5kTi1 yfe09wkIuol7r+H7SwDJdjZX7tBkG0qSqA0Nqz1lEgVQ9LOl63iArKHu7wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFADsnh3tXJfAN6DM48IwclgPzZoTMB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvQU95ZUhlMWNsOEEzb016andqQnlXQV9ObWhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9XAf4R MA0GCSqGSIb3DQEBCwUAA4IBAQAozIoh8m8Wkk5PzbChKKrghrJcQcYnkUIoF0YG iK4Bn0vusGOJ7TRuaI6GLijLOeE3tGOvcUPLfdWdE6wL4WrF5hljanhEotaQCoGv au594xHSr+h1OrjBkaG3u4n0Pgk3G7nyojigu7rxBiDZ2i6f4Yaj98Q3lRYQgmet d0wkXbPSCPhuYwgI604rSStAqYqAswH3Uuouq74d7zBQ4N2U6J8fFMUqJIv7W4zV OFTbgy1HUHxphTFzUAr8HoHTNwgn4gG0yEkdCGjDd8rW2yiuz13264wEUmcDxLXF HL85FxI5DwAFC3lF7FRErByEuAaQwJxT8YyWKj2nmwDcEo+I -----END CERTIFICATE-----Generated at Sun Jan 25 15:02:09 2026 by rpki-client