This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/AsththsAdThHbEmadYWqPgF8WT4.roa File: AsththsAdThHbEmadYWqPgF8WT4.roa (raw, json) Hash identifier: 2tUBgJcRtIgmrG2NDF9CDCi8td/wW0Ee5eE9VvJb3s0= Subject key identifier: 02:CB:61:B6:1B:00:75:38:47:6C:49:9A:75:85:AA:3E:01:7C:59:3E Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019B7758EE575796823EF41FD006FFD118C1 Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/AsththsAdThHbEmadYWqPgF8WT4.roa Signing time: Thu 01 Jan 2026 02:17:55 +0000 ROA not before: Thu 01 Jan 2026 02:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211620 IP address blocks: 2a0f:5707:abb0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ee:57:57:96:82:3e:f4:1f:d0:06:ff:d1:18:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 1 02:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02cb61b61b007538476c499a7585aa3e017c593e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:97:e3:08:12:56:de:04:2e:7f:b0:e1:5c:e3: c9:80:4e:37:60:ef:6a:fe:56:c9:c6:5b:2e:32:3e: 82:a8:81:1e:3f:15:ef:76:2e:c5:2b:23:21:5e:17: 4b:73:4a:e2:17:25:49:73:10:f2:93:30:ad:c4:bf: 1f:ff:d0:55:ab:da:6e:da:71:9d:77:71:4d:1c:8b: 45:49:e7:a9:8b:fc:aa:b6:f3:1c:8e:b1:a2:de:af: 34:7d:ff:bb:d5:cf:c5:44:8a:04:ab:a7:67:34:07: 76:47:ca:00:16:b6:95:8e:54:1f:38:47:19:c9:2d: c0:fd:79:f9:79:00:03:ec:8a:70:85:61:83:79:bb: ab:3a:73:5b:b6:93:cf:57:5d:02:4a:78:1e:ff:97: 22:ef:bb:2f:fb:4b:f7:1b:f0:e7:a4:38:62:93:52: 2a:7a:05:ed:15:c5:e7:ff:ac:54:b1:2e:72:fb:c9: 6d:08:69:be:f9:71:83:b0:53:3b:0a:d2:a8:d9:05: 61:e2:f1:74:8a:ca:05:e5:b4:8c:bc:be:ea:1e:57: 27:89:8f:b2:e3:b6:25:d8:a0:6f:7e:1f:4e:e7:54: bd:07:b4:ed:c6:4b:14:b5:2f:c2:74:b0:be:dd:6f: 9b:32:88:01:1f:6b:aa:8c:89:83:0f:99:83:42:e5: 8c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CB:61:B6:1B:00:75:38:47:6C:49:9A:75:85:AA:3E:01:7C:59:3E X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/AsththsAdThHbEmadYWqPgF8WT4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5707:abb0::/44 Signature Algorithm: sha256WithRSAEncryption 52:a2:c9:a7:30:34:bb:c3:7f:97:a7:52:ef:df:37:11:76:33: 75:4f:bd:d4:29:7d:d8:27:36:01:e3:09:9f:02:0c:88:83:b0: 59:b0:91:17:f5:b1:59:f4:9f:85:e4:66:ea:96:4a:5e:7c:5f: 9d:cd:17:1f:47:07:de:f7:36:0b:e6:7b:98:51:9c:dd:af:2b: a1:8f:a0:a9:3d:76:36:ce:bb:d8:ee:34:b8:ea:d9:dc:de:32: 07:ee:9a:4d:37:75:35:d5:d9:57:f6:25:28:9a:b3:2e:e0:67: f4:d3:47:4c:c0:14:f4:f1:7b:83:7d:87:9a:d4:94:06:f8:17: 89:07:6f:2a:ef:f6:f4:e6:42:ae:31:ed:23:16:8f:df:4a:b5: 88:8e:18:25:78:2d:7d:23:f8:61:21:db:0e:95:69:ad:28:d6: 1b:8f:2e:cb:78:91:7a:8e:d1:36:81:72:60:46:5d:e8:78:26: 31:08:a7:a0:17:4f:50:2d:60:4a:33:2e:17:21:02:d2:7f:58: 96:6c:b3:5f:36:f7:d3:a2:13:29:39:59:25:59:ee:c6:9d:db: a1:18:30:ff:17:f6:77:ba:75:bb:aa:a6:f7:ca:98:88:ec:05: f7:77:96:60:3c:6e:f8:6e:76:61:d8:d1:52:80:48:e2:fd:aa: c0:6b:99:cb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WO5XV5aCPvQf0Ab/0RjBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTAxMDIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmNiNjFiNjFiMDA3NTM4NDc2YzQ5OWE3NTg1YWEzZTAxN2M1OTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5fjCBJW3gQuf7DhXOPJgE43YO9q /lbJxlsuMj6CqIEePxXvdi7FKyMhXhdLc0riFyVJcxDykzCtxL8f/9BVq9pu2nGd d3FNHItFSeepi/yqtvMcjrGi3q80ff+71c/FRIoEq6dnNAd2R8oAFraVjlQfOEcZ yS3A/Xn5eQAD7IpwhWGDeburOnNbtpPPV10CSnge/5ci77sv+0v3G/DnpDhik1Iq egXtFcXn/6xUsS5y+8ltCGm++XGDsFM7CtKo2QVh4vF0isoF5bSMvL7qHlcniY+y 47Yl2KBvfh9O51S9B7TtxksUtS/CdLC+3W+bMogBH2uqjImDD5mDQuWMKQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFALLYbYbAHU4R2xJmnWFqj4BfFk+MB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvQXN0aHRoc0FkVGhIYkVtYWRZV3FQZ0Y4V1Q0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg9XB6uw MA0GCSqGSIb3DQEBCwUAA4IBAQBSosmnMDS7w3+Xp1Lv3zcRdjN1T73UKX3YJzYB 4wmfAgyIg7BZsJEX9bFZ9J+F5GbqlkpefF+dzRcfRwfe9zYL5nuYUZzdryuhj6Cp PXY2zrvY7jS46tnc3jIH7ppNN3U11dlX9iUomrMu4Gf000dMwBT08XuDfYea1JQG +BeJB28q7/b05kKuMe0jFo/fSrWIjhgleC19I/hhIdsOlWmtKNYbjy7LeJF6jtE2 gXJgRl3oeCYxCKegF09QLWBKMy4XIQLSf1iWbLNfNvfTohMpOVklWe7GnduhGDD/ F/Z3unW7qqb3ypiI7AX3d5ZgPG74bnZh2NFSgEji/arAa5nL -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:23 2026 by rpki-client