This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/r113hOesw4Xd_yEaqFZzRYfSE7Y.roa File: r113hOesw4Xd_yEaqFZzRYfSE7Y.roa (raw, json) Hash identifier: tedMkLnP1L9n55ZYcISog8S1/Qbay3SL1Z2VckbCsdI= Subject key identifier: AF:5D:77:84:E7:AC:C3:85:DD:FF:21:1A:A8:56:73:45:87:D2:13:B6 Certificate issuer: /CN=bd063d944bb81fc31cba11499dd006eb4ece9624 Certificate serial: 019B76EABF0879A4EA454A723B93C94922A8 Authority key identifier: BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/r113hOesw4Xd_yEaqFZzRYfSE7Y.roa Signing time: Thu 01 Jan 2026 00:17:34 +0000 ROA not before: Thu 01 Jan 2026 00:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58299 IP address blocks: 2001:678:1c4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:bf:08:79:a4:ea:45:4a:72:3b:93:c9:49:22:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd063d944bb81fc31cba11499dd006eb4ece9624 Validity Not Before: Jan 1 00:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af5d7784e7acc385ddff211aa856734587d213b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:35:e0:a7:6a:c9:a1:8b:f9:0f:89:0e:6a:7c: 06:18:aa:83:77:86:dd:dd:69:0a:11:68:dd:fb:e5: b0:2b:a9:38:b3:65:1f:ba:dc:e2:a7:45:04:36:fa: 02:c4:da:25:25:39:ee:e9:59:1f:0c:cd:17:83:93: 20:a3:d2:40:f1:95:72:ed:0f:e0:c0:28:b0:1e:e2: 91:26:34:81:00:6f:53:b3:3d:44:2e:51:d6:6d:d2: 74:db:44:ba:13:85:97:78:a7:22:9c:84:11:04:a3: 73:22:b3:be:77:cc:9c:0d:ca:bc:9f:6c:b4:dc:7b: 7e:88:eb:50:93:e4:f9:4a:bf:2b:fe:82:0a:9c:aa: 0a:d4:62:fe:aa:bd:15:6f:57:f3:46:6d:4d:11:43: 96:46:ef:27:df:df:c8:a2:27:94:9d:0e:0b:c3:9a: 33:09:12:03:71:2c:ad:1a:2c:4e:77:b0:e0:cb:ee: 70:88:07:3d:63:b9:7c:8d:eb:ca:4d:31:20:9f:d3: f1:2f:af:78:aa:87:f4:5a:88:55:05:23:09:17:af: b5:80:3c:a7:d9:73:53:f0:34:3a:b6:c4:41:0b:55: 6d:c3:62:88:ee:c6:0c:88:ad:c3:6f:04:5f:58:2d: 90:34:34:c9:d4:f1:52:a2:5b:fb:56:fd:d2:16:f1: ab:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5D:77:84:E7:AC:C3:85:DD:FF:21:1A:A8:56:73:45:87:D2:13:B6 X509v3 Authority Key Identifier: keyid:BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/r113hOesw4Xd_yEaqFZzRYfSE7Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:1c4::/48 Signature Algorithm: sha256WithRSAEncryption 7b:9d:b1:c5:4b:42:84:bc:3f:0c:99:79:ed:60:d5:b4:c1:9c: ad:1c:df:76:b3:9d:fa:12:75:f2:4f:c3:04:de:d7:f6:67:25: dc:dc:37:bb:1e:35:09:ff:38:b1:76:5d:fe:3e:2e:3e:ab:f2: 59:f9:ed:78:68:2d:a7:58:26:0c:a3:de:ce:84:41:5b:14:82: 21:d6:5c:bb:3a:97:6e:c1:83:01:ce:ed:27:a9:96:03:7d:ee: 20:d0:32:2d:50:26:2c:de:2f:d0:aa:2f:69:ef:8f:7a:0f:08: 14:e4:a7:b6:0d:fb:be:f0:2a:a6:d1:e2:72:59:f3:53:83:cc: c7:17:2e:eb:be:d4:00:1f:04:39:41:15:28:ef:72:cc:95:23: 3f:e9:84:3c:7c:53:65:ab:d0:17:e1:0f:b4:62:0d:a4:eb:6f: aa:3d:4a:ac:05:16:ab:3f:16:bc:fb:91:f7:05:b9:d4:78:e4: 1f:c8:3c:8f:b6:bb:46:4e:e6:42:62:89:6f:6c:6e:d1:ca:ec: 37:4a:60:ce:40:95:35:2e:29:c6:91:7e:4e:a5:cd:28:f9:29: d7:08:cf:55:68:da:73:8f:a1:67:47:01:41:a4:eb:c9:07:09: a7:ba:da:fe:2c:2d:33:83:93:8f:a9:c8:f6:1d:52:31:a6:93: 6d:42:75:8d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt26r8IeaTqRUpyO5PJSSKoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMDYzZDk0NGJiODFmYzMxY2JhMTE0OTlkZDAwNmViNGVj ZTk2MjQwHhcNMjYwMTAxMDAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjVkNzc4NGU3YWNjMzg1ZGRmZjIxMWFhODU2NzM0NTg3ZDIxM2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTXgp2rJoYv5D4kOanwGGKqDd4bd 3WkKEWjd++WwK6k4s2Ufutzip0UENvoCxNolJTnu6VkfDM0Xg5Mgo9JA8ZVy7Q/g wCiwHuKRJjSBAG9Tsz1ELlHWbdJ020S6E4WXeKcinIQRBKNzIrO+d8ycDcq8n2y0 3Ht+iOtQk+T5Sr8r/oIKnKoK1GL+qr0Vb1fzRm1NEUOWRu8n39/IoieUnQ4Lw5oz CRIDcSytGixOd7Dgy+5wiAc9Y7l8jevKTTEgn9PxL694qof0WohVBSMJF6+1gDyn 2XNT8DQ6tsRBC1Vtw2KI7sYMiK3DbwRfWC2QNDTJ1PFSolv7Vv3SFvGryQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFK9dd4TnrMOF3f8hGqhWc0WH0hO2MB8GA1UdIwQY MBaAFL0GPZRLuB/DHLoRSZ3QButOzpYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlFZOWxFdTRIOE1jdWhGSm5kQUc2MDdPbGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9lYmZjM2QtNTRmYy00NjQzLWJlNTYt ZWE3MGEyOWM3NmYwLzEvcjExM2hPZXN3NFhkX3lFYXFGWnpSWWZTRTdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9lYmZjM2QtNTRmYy00NjQzLWJlNTYtZWE3MGEyOWM3NmYw LzEvdlFZOWxFdTRIOE1jdWhGSm5kQUc2MDdPbGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAHE MA0GCSqGSIb3DQEBCwUAA4IBAQB7nbHFS0KEvD8MmXntYNW0wZytHN92s536EnXy T8ME3tf2ZyXc3De7HjUJ/zixdl3+Pi4+q/JZ+e14aC2nWCYMo97OhEFbFIIh1ly7 OpduwYMBzu0nqZYDfe4g0DItUCYs3i/Qqi9p7496DwgU5Ke2Dfu+8Cqm0eJyWfNT g8zHFy7rvtQAHwQ5QRUo73LMlSM/6YQ8fFNlq9AX4Q+0Yg2k62+qPUqsBRarPxa8 +5H3BbnUeOQfyDyPtrtGTuZCYolvbG7Ryuw3SmDOQJU1LinGkX5Opc0o+SnXCM9V aNpzj6FnRwFBpOvJBwmnutr+LC0zg5OPqcj2HVIxppNtQnWN -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:00 2026 by rpki-client