This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/aKvQ03F1bR1q6-Woc8m1q6jONu8.roa File: aKvQ03F1bR1q6-Woc8m1q6jONu8.roa (raw, json) Hash identifier: LcJqfZb4sulh5jvt0J4ioSYZjOzoPCpUud+7/IHHoW8= Subject key identifier: 68:AB:D0:D3:71:75:6D:1D:6A:EB:E5:A8:73:C9:B5:AB:A8:CE:36:EF Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Certificate serial: 019B7758B9FBB52F69A29718F85C1772D09F Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/aKvQ03F1bR1q6-Woc8m1q6jONu8.roa Signing time: Thu 01 Jan 2026 02:17:41 +0000 ROA not before: Thu 01 Jan 2026 02:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42167 IP address blocks: 2a0b:b840:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b9:fb:b5:2f:69:a2:97:18:f8:5c:17:72:d0:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Validity Not Before: Jan 1 02:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68abd0d371756d1d6aebe5a873c9b5aba8ce36ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:25:e5:52:0e:e5:2f:b7:b1:1c:ce:59:6d:fb: e6:1d:a8:cb:5e:1c:03:64:c7:c5:a6:82:8c:ae:8d: 57:ef:b8:e9:9a:70:e8:36:a7:44:f9:ee:31:e4:0c: 92:30:46:57:24:c4:29:17:23:49:4c:c0:60:ec:66: c9:08:4b:8d:c0:e8:2e:1a:bf:1e:ed:3e:f7:0a:e1: a2:67:94:e9:d4:44:0e:11:99:e7:0b:b2:c4:b6:ce: ba:21:56:db:25:04:4a:49:9c:5f:b4:6d:9b:79:94: 0c:43:86:ee:c2:34:5b:f3:15:34:e6:2a:7a:6b:0e: 52:77:e0:b2:37:a6:72:22:a5:e9:3a:88:c1:ab:5b: eb:e9:6a:b9:05:d1:b8:92:7f:bc:af:26:29:e7:77: 3f:07:27:af:7e:8a:3d:6a:f7:44:15:89:0b:e9:be: e5:7c:5d:d2:e8:3d:a8:fe:04:7b:e6:61:a2:01:4d: e2:1b:94:05:9a:d5:bd:af:f5:40:00:b2:c0:cb:5d: b6:0f:ae:0e:6f:fa:77:31:d9:cd:39:48:57:71:03: c2:b4:9b:45:97:0d:fe:4c:23:7e:55:60:72:bc:61: 46:87:4b:90:71:e5:c9:c7:be:f7:54:5f:db:d4:ab: 90:ee:9e:ff:f2:5a:9b:3a:1f:17:64:d3:3f:8c:9d: 27:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AB:D0:D3:71:75:6D:1D:6A:EB:E5:A8:73:C9:B5:AB:A8:CE:36:EF X509v3 Authority Key Identifier: keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/aKvQ03F1bR1q6-Woc8m1q6jONu8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:b840:1::/48 Signature Algorithm: sha256WithRSAEncryption 74:6d:b4:35:b2:fc:8d:05:08:13:ec:e6:be:b6:fb:62:49:bb: bf:ad:9f:25:42:0f:f7:80:de:d6:ed:39:91:a8:50:b8:90:48: 9f:93:c0:e1:f2:7a:2f:6c:30:b2:90:8e:0c:04:97:45:78:8e: bc:68:55:22:71:7a:e9:0d:3b:c9:23:98:aa:bf:be:fd:cb:f2: bb:a4:05:2f:ae:74:f6:6d:04:ee:2f:8e:d8:74:f8:87:8e:40: fc:c8:9b:53:45:7e:d7:c2:cf:71:62:78:ed:31:46:63:0d:f8: a5:d2:af:0a:37:64:7a:33:26:63:7f:45:ff:0e:d9:f3:e9:ad: 98:cb:f7:e4:44:84:e5:e9:1b:65:68:5c:68:15:bd:b7:3e:2b: f7:31:c1:b2:f2:62:9e:58:ed:70:d1:22:9a:cd:87:9a:3e:9f: 43:20:4b:54:94:61:bf:f0:a4:75:59:24:b3:29:84:9d:a9:7f: 32:94:ae:4e:19:8b:45:80:75:39:2c:2e:e3:b4:0c:a9:21:14: 2c:cf:9f:ee:7d:75:1d:6a:53:88:69:16:6c:85:4d:5d:f4:dc: d4:4c:2a:06:de:41:98:d4:3f:53:4d:2d:6f:08:71:a2:b1:84: 98:55:67:db:6b:51:b0:86:8c:a3:38:2a:a9:51:46:9a:01:97: 70:36:d2:cd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WLn7tS9popcY+FwXctCfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4 M2FjOTcwHhcNMjYwMTAxMDIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGFiZDBkMzcxNzU2ZDFkNmFlYmU1YTg3M2M5YjVhYmE4Y2UzNmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyXlUg7lL7exHM5ZbfvmHajLXhwD ZMfFpoKMro1X77jpmnDoNqdE+e4x5AySMEZXJMQpFyNJTMBg7GbJCEuNwOguGr8e 7T73CuGiZ5Tp1EQOEZnnC7LEts66IVbbJQRKSZxftG2beZQMQ4buwjRb8xU05ip6 aw5Sd+CyN6ZyIqXpOojBq1vr6Wq5BdG4kn+8ryYp53c/Byevfoo9avdEFYkL6b7l fF3S6D2o/gR75mGiAU3iG5QFmtW9r/VAALLAy122D64Ob/p3MdnNOUhXcQPCtJtF lw3+TCN+VWByvGFGh0uQceXJx773VF/b1KuQ7p7/8lqbOh8XZNM/jJ0n4QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGir0NNxdW0dauvlqHPJtauozjbvMB8GA1UdIwQY MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt N2UwNWFiNDFiNmU0LzEvYUt2UTAzRjFiUjFxNi1Xb2M4bTFxNmpPTnU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0 LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgu4QAAB MA0GCSqGSIb3DQEBCwUAA4IBAQB0bbQ1svyNBQgT7Oa+tvtiSbu/rZ8lQg/3gN7W 7TmRqFC4kEifk8Dh8novbDCykI4MBJdFeI68aFUicXrpDTvJI5iqv779y/K7pAUv rnT2bQTuL47YdPiHjkD8yJtTRX7Xws9xYnjtMUZjDfil0q8KN2R6MyZjf0X/Dtnz 6a2Yy/fkRITl6RtlaFxoFb23Piv3McGy8mKeWO1w0SKazYeaPp9DIEtUlGG/8KR1 WSSzKYSdqX8ylK5OGYtFgHU5LC7jtAypIRQsz5/ufXUdalOIaRZshU1d9NzUTCoG 3kGY1D9TTS1vCHGisYSYVWfba1GwhoyjOCqpUUaaAZdwNtLN -----END CERTIFICATE-----Generated at Sun Jan 25 15:29:08 2026 by rpki-client