This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/AFOIxUpYh_Q-uzbnSGlrV0_PNRg.roa File: AFOIxUpYh_Q-uzbnSGlrV0_PNRg.roa (raw, json) Hash identifier: 9TWTjByJcZOyWpXeC0+/dCxoa8gWYVHVu+bJhn9WUwU= Subject key identifier: 00:53:88:C5:4A:58:87:F4:3E:BB:36:E7:48:69:6B:57:4F:CF:35:18 Certificate issuer: /CN=eb3d6fe787c50553b07317112e19e65b4f675931 Certificate serial: 019B7DC96E8DF75F5C3350FDEF206D8C5A2C Authority key identifier: EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/AFOIxUpYh_Q-uzbnSGlrV0_PNRg.roa Signing time: Fri 02 Jan 2026 08:18:31 +0000 ROA not before: Fri 02 Jan 2026 08:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38974 IP address blocks: 2001:678:cf8::/48 maxlen: 48 2001:67c:1708::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:6e:8d:f7:5f:5c:33:50:fd:ef:20:6d:8c:5a:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb3d6fe787c50553b07317112e19e65b4f675931 Validity Not Before: Jan 2 08:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=005388c54a5887f43ebb36e748696b574fcf3518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cf:f4:0e:40:44:d2:2b:15:ba:78:54:94:a6: e9:f7:27:60:85:81:0e:01:f1:3c:dd:07:50:55:3e: 01:9e:37:63:01:ae:44:c7:3b:74:d6:80:2c:0e:cb: c4:1c:8d:a0:b6:2f:25:aa:62:98:02:8a:1b:8f:17: ff:06:2c:a1:11:b8:ff:d1:09:15:12:8b:a8:32:f0: 81:74:57:d0:c8:30:42:f7:6c:9a:63:79:1e:f4:bf: c0:d9:61:a2:4e:50:cb:94:d7:6b:09:3f:81:6d:ae: 46:b5:a1:8f:22:68:25:88:ab:e5:ca:50:7f:bc:93: ea:e0:7a:9b:6f:d1:92:02:65:af:e2:84:e5:fc:4f: 9d:5e:7a:cc:d3:47:b4:6a:4f:19:7d:08:29:3b:a4: 28:89:8b:67:7d:ab:c8:d7:84:24:0a:36:70:48:d6: b9:1c:74:4e:0a:1c:88:8c:6b:7d:67:89:6e:ad:8d: 16:68:f5:d3:1a:73:09:a4:d8:42:80:14:7c:eb:4b: 06:71:88:e6:ab:fd:8d:c2:cc:c7:bf:9e:ec:b4:6c: 8a:25:5f:6f:02:17:33:42:dd:0c:56:da:a1:b3:d1: 0e:df:b8:d1:ce:77:b8:9c:5a:c8:35:57:4f:70:02: 96:92:a3:e2:fe:f6:e3:5e:33:7b:62:f5:92:f4:a1: 1d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:53:88:C5:4A:58:87:F4:3E:BB:36:E7:48:69:6B:57:4F:CF:35:18 X509v3 Authority Key Identifier: keyid:EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/AFOIxUpYh_Q-uzbnSGlrV0_PNRg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:cf8::/48 2001:67c:1708::/48 Signature Algorithm: sha256WithRSAEncryption 7f:47:49:f4:1c:46:06:98:71:2d:e0:a7:2d:45:a2:f7:47:51: 6f:1c:33:68:61:82:a5:ca:7e:8b:02:99:9e:00:40:69:79:3e: a1:cc:a8:83:a1:4b:f5:bf:e6:ac:3b:0b:9f:0e:26:42:25:f3: 62:3d:b2:c6:93:07:c7:20:43:3d:9d:45:68:78:87:84:a2:28: 1f:25:48:1f:ec:b6:01:52:f5:aa:78:6e:ed:8b:db:9c:90:ec: fe:a2:8d:6f:45:dd:0b:83:35:24:8f:81:5c:9c:c9:1c:15:80: fc:92:7e:84:24:78:4a:4f:74:62:03:37:9f:a3:1d:d6:80:36: 6e:5d:a7:8a:6a:29:cd:cc:82:bd:d3:20:fe:26:1f:ba:ab:26: 86:95:ee:b0:2b:09:63:eb:10:09:88:ab:36:40:35:c3:5b:43: 51:0c:9b:68:42:77:1c:94:4e:7c:b1:3f:52:b5:c2:1a:c7:4d: 82:be:0e:1c:95:21:d2:de:1a:93:a6:7c:3a:4c:e0:46:36:88: 28:3b:04:8e:eb:01:b4:41:1a:53:42:2c:ab:e0:e7:00:bb:f5: 35:db:23:37:c1:dd:65:ed:ba:6a:e7:e2:a5:bd:79:82:0c:df: 3e:7e:3f:e1:12:e8:dc:02:98:9a:20:9d:e3:cb:27:be:f4:c0: 41:6e:fa:23 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9yW6N919cM1D97yBtjFosMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViM2Q2ZmU3ODdjNTA1NTNiMDczMTcxMTJlMTllNjViNGY2 NzU5MzEwHhcNMjYwMTAyMDgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDUzODhjNTRhNTg4N2Y0M2ViYjM2ZTc0ODY5NmI1NzRmY2YzNTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos/0DkBE0isVunhUlKbp9ydghYEO AfE83QdQVT4BnjdjAa5Exzt01oAsDsvEHI2gti8lqmKYAoobjxf/BiyhEbj/0QkV EouoMvCBdFfQyDBC92yaY3ke9L/A2WGiTlDLlNdrCT+Bba5GtaGPImgliKvlylB/ vJPq4Hqbb9GSAmWv4oTl/E+dXnrM00e0ak8ZfQgpO6QoiYtnfavI14QkCjZwSNa5 HHROChyIjGt9Z4lurY0WaPXTGnMJpNhCgBR860sGcYjmq/2NwszHv57stGyKJV9v AhczQt0MVtqhs9EO37jRzne4nFrINVdPcAKWkqPi/vbjXjN7YvWS9KEdrQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFABTiMVKWIf0Prs250hpa1dPzzUYMB8GA1UdIwQY MBaAFOs9b+eHxQVTsHMXES4Z5ltPZ1kxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnoxdjU0ZkZCVk93Y3hjUkxobm1XMDluV1RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wN2NlN2UtNDY0MS00OTg1LTk4NDUt MWEwMDcxNTdkNTlhLzEvQUZPSXhVcFloX1EtdXpiblNHbHJWMF9QTlJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wN2NlN2UtNDY0MS00OTg1LTk4NDUtMWEwMDcxNTdkNTlh LzEvNnoxdjU0ZkZCVk93Y3hjUkxobm1XMDluV1RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGeAz4 AwcAIAEGfBcIMA0GCSqGSIb3DQEBCwUAA4IBAQB/R0n0HEYGmHEt4KctRaL3R1Fv HDNoYYKlyn6LApmeAEBpeT6hzKiDoUv1v+asOwufDiZCJfNiPbLGkwfHIEM9nUVo eIeEoigfJUgf7LYBUvWqeG7ti9uckOz+oo1vRd0LgzUkj4FcnMkcFYD8kn6EJHhK T3RiAzefox3WgDZuXaeKainNzIK90yD+Jh+6qyaGle6wKwlj6xAJiKs2QDXDW0NR DJtoQncclE58sT9StcIax02Cvg4clSHS3hqTpnw6TOBGNogoOwSO6wG0QRpTQiyr 4OcAu/U12yM3wd1l7bpq5+KlvXmCDN8+fj/hEujcApiaIJ3jyye+9MBBbvoj -----END CERTIFICATE-----Generated at Sun Jan 25 19:01:10 2026 by rpki-client