This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/AJc1n1WlM_uViiz8P-Q_ZGlrmkI.roa File: AJc1n1WlM_uViiz8P-Q_ZGlrmkI.roa (raw, json) Hash identifier: 5BjqoTSt8ivKeTgUMxzWvODvEYATsy/sKY0BmzBKn2k= Subject key identifier: 00:97:35:9F:55:A5:33:FB:95:8A:2C:FC:3F:E4:3F:64:69:6B:9A:42 Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 019B78354371690DFF28277F91EAA39B9316 Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/AJc1n1WlM_uViiz8P-Q_ZGlrmkI.roa Signing time: Thu 01 Jan 2026 06:18:35 +0000 ROA not before: Thu 01 Jan 2026 06:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50716 IP address blocks: 2a00:d8c0:100::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:43:71:69:0d:ff:28:27:7f:91:ea:a3:9b:93:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: Jan 1 06:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0097359f55a533fb958a2cfc3fe43f64696b9a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c7:aa:0d:d0:c7:16:51:4b:7b:b9:58:4c:06: d4:71:c6:a6:39:f9:36:80:4c:6d:ee:6e:d5:f6:4a: 16:71:8d:e8:e0:c7:10:88:df:23:5b:c1:eb:ff:27: 40:6b:ac:04:02:55:d9:4c:f2:c4:29:cc:50:b8:41: 7c:8f:83:1b:f8:5f:b6:bd:ff:4c:0d:fb:70:e7:85: f6:bf:c6:c2:96:01:c5:74:96:67:8e:bc:fd:41:2f: 57:31:8d:c8:65:65:cf:5e:f3:dc:7b:12:fb:97:c6: 72:1b:1c:4d:5d:14:37:83:69:a2:7b:e9:c8:50:df: 1e:38:6e:92:34:27:89:78:2c:e5:5e:34:e3:bc:8b: e6:6e:b9:1f:28:ab:5f:fe:28:b2:0f:ee:7d:44:cd: 90:f7:ca:69:13:f0:7f:22:65:67:99:8f:15:01:21: 2a:da:05:b5:f5:a7:24:cd:42:3b:7e:1c:f7:54:6c: e7:57:11:e2:f7:1c:fd:a4:d2:4f:ed:bd:30:56:ed: c2:ae:4b:9e:74:ba:57:65:c8:6c:cb:bd:50:df:be: 8e:84:f8:b9:ec:1d:bc:cc:79:23:6d:a9:33:7f:37: af:d0:68:8c:ca:9c:6b:40:32:ae:5f:73:60:00:08: 73:07:15:9f:1e:db:17:d4:ae:b4:35:85:0b:f9:f9: d9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:97:35:9F:55:A5:33:FB:95:8A:2C:FC:3F:E4:3F:64:69:6B:9A:42 X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/AJc1n1WlM_uViiz8P-Q_ZGlrmkI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:d8c0:100::/48 Signature Algorithm: sha256WithRSAEncryption 26:96:dd:72:ae:db:54:6e:26:fc:37:d4:c3:e4:bc:0a:b7:7f: 5f:5f:a3:1b:f3:a0:f3:a7:a9:a8:6d:e0:79:44:d7:d4:92:10: bc:0b:c4:d5:04:4d:db:37:8d:49:63:41:3c:1e:fa:ed:74:2a: b9:fa:a7:80:41:95:0d:2b:a9:4f:61:e6:27:7e:d5:17:6b:e1: 43:e1:2d:77:f3:df:74:9f:1c:12:a4:1d:49:0d:5e:87:e7:64: 43:30:19:ab:59:9f:9b:a5:0d:a5:4b:76:41:9e:55:f2:df:8f: 5f:56:1c:ea:aa:81:2e:f0:d0:ef:f6:90:0a:6d:64:6d:31:40: 48:d2:e5:20:c7:f9:bb:db:bf:d5:0f:d0:a7:75:61:09:4e:66: 70:e5:69:2f:d0:3b:67:65:ef:48:7a:96:ce:24:f0:82:29:46: ab:38:10:1e:e4:13:56:ca:dd:6f:f4:10:85:58:22:e0:25:86: 95:01:71:64:a8:66:f3:34:61:ae:f0:91:e7:dc:21:4a:1a:1d: 9f:1f:f1:3d:80:87:9e:7a:ec:01:79:34:32:ec:63:48:c1:54: 60:79:b9:2d:b2:9c:7a:f0:96:af:b9:76:1d:22:d3:55:fe:b0: 8d:ae:36:40:65:4f:c4:ac:3c:8d:42:d7:39:56:8e:4f:fb:33: 40:39:6a:ec -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4NUNxaQ3/KCd/keqjm5MWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjYwMTAxMDYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDk3MzU5ZjU1YTUzM2ZiOTU4YTJjZmMzZmU0M2Y2NDY5NmI5YTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMeqDdDHFlFLe7lYTAbUccamOfk2 gExt7m7V9koWcY3o4McQiN8jW8Hr/ydAa6wEAlXZTPLEKcxQuEF8j4Mb+F+2vf9M Dftw54X2v8bClgHFdJZnjrz9QS9XMY3IZWXPXvPcexL7l8ZyGxxNXRQ3g2mie+nI UN8eOG6SNCeJeCzlXjTjvIvmbrkfKKtf/iiyD+59RM2Q98ppE/B/ImVnmY8VASEq 2gW19ackzUI7fhz3VGznVxHi9xz9pNJP7b0wVu3CrkuedLpXZchsy71Q376OhPi5 7B28zHkjbakzfzev0GiMypxrQDKuX3NgAAhzBxWfHtsX1K60NYUL+fnZ7QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFACXNZ9VpTP7lYos/D/kP2Rpa5pCMB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvQUpjMW4xV2xNX3VWaWl6OFAtUV9aR2xybWtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgDYwAEA MA0GCSqGSIb3DQEBCwUAA4IBAQAmlt1yrttUbib8N9TD5LwKt39fX6Mb86Dzp6mo beB5RNfUkhC8C8TVBE3bN41JY0E8HvrtdCq5+qeAQZUNK6lPYeYnftUXa+FD4S13 8990nxwSpB1JDV6H52RDMBmrWZ+bpQ2lS3ZBnlXy349fVhzqqoEu8NDv9pAKbWRt MUBI0uUgx/m727/VD9CndWEJTmZw5Wkv0DtnZe9IepbOJPCCKUarOBAe5BNWyt1v 9BCFWCLgJYaVAXFkqGbzNGGu8JHn3CFKGh2fH/E9gIeeeuwBeTQy7GNIwVRgebkt spx68JavuXYdItNV/rCNrjZAZU/ErDyNQtc5Vo5P+zNAOWrs -----END CERTIFICATE-----Generated at Sun Jan 25 18:09:39 2026 by rpki-client