This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/aZei7dPraMpoyMe9a8A85iz9U9k.roa File: aZei7dPraMpoyMe9a8A85iz9U9k.roa (raw, json) Hash identifier: KtkMVG0TF4vgfuc7Eg25bY2/F+3g8sFzTM72NzjE2qo= Subject key identifier: 69:97:A2:ED:D3:EB:68:CA:68:C8:C7:BD:6B:C0:3C:E6:2C:FD:53:D9 Certificate issuer: /CN=27029a36fc0cca2e0a8d045f022dfc831a517308 Certificate serial: 019B7C80A87EE723AB436C84318B99AAA3AA Authority key identifier: 27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/aZei7dPraMpoyMe9a8A85iz9U9k.roa Signing time: Fri 02 Jan 2026 02:19:25 +0000 ROA not before: Fri 02 Jan 2026 02:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8544 IP address blocks: 66.205.95.0/24 maxlen: 24 185.42.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a8:7e:e7:23:ab:43:6c:84:31:8b:99:aa:a3:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27029a36fc0cca2e0a8d045f022dfc831a517308 Validity Not Before: Jan 2 02:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6997a2edd3eb68ca68c8c7bd6bc03ce62cfd53d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f8:63:7e:5f:c1:79:24:3f:b2:2c:2c:83:f4: 20:16:c3:7d:e1:e6:07:b0:12:4f:cf:3c:a2:ce:24: 29:72:5e:c3:ef:eb:38:35:ae:9a:e0:43:6d:b9:b7: 73:11:14:46:55:4f:01:35:b5:f6:40:b3:1f:11:6a: ec:03:0f:07:b0:a8:cc:fe:6a:9c:d0:c4:cc:ee:91: 8d:1d:d3:8d:a3:3f:d6:dd:45:c1:10:ed:d2:21:77: 48:30:a4:e2:1a:3d:04:7e:17:78:e7:e2:67:37:96: 4b:82:34:56:0f:ee:b3:5a:e1:6e:3a:08:98:9e:35: 10:b4:6c:2d:d2:94:26:8e:1d:05:6b:74:91:88:4e: 17:b1:8e:68:1d:0a:aa:5f:3c:f4:cd:55:5b:5f:12: 4e:bb:32:ea:97:46:8d:93:e2:bb:fa:98:1b:26:5d: 80:09:c9:71:10:e5:ec:65:16:a5:bd:55:6b:95:86: 41:20:cb:28:4b:42:38:89:bb:81:3e:79:f8:72:71: 63:f1:3d:e0:84:ba:90:5c:fc:0b:98:83:bd:f4:42: 4b:29:ac:21:d4:e4:bb:e1:8d:4e:91:2f:a4:e2:77: 21:7b:04:b5:3d:4a:dc:00:d0:00:15:0a:29:64:1b: 1f:03:d6:84:e3:12:c7:4f:da:fc:37:ac:f3:52:91: fa:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:97:A2:ED:D3:EB:68:CA:68:C8:C7:BD:6B:C0:3C:E6:2C:FD:53:D9 X509v3 Authority Key Identifier: keyid:27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/aZei7dPraMpoyMe9a8A85iz9U9k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.205.95.0/24 185.42.32.0/24 Signature Algorithm: sha256WithRSAEncryption 61:fa:3c:79:05:11:eb:4c:e2:76:21:73:dd:0e:9f:d6:77:af: 37:28:53:de:35:14:bf:9a:d9:a6:e5:c7:f5:f8:86:30:49:b1: 9e:4e:0e:5e:74:15:55:7e:4a:bb:e2:a5:06:10:03:2d:31:a0: 8b:6c:a4:57:d0:9e:27:82:83:de:ff:76:e7:53:c2:53:02:ad: 32:cb:a0:0b:12:86:a8:19:86:b9:56:0d:43:6a:5c:92:68:ab: d2:47:34:a1:b6:27:fc:c1:14:ac:cb:8b:4c:94:72:30:15:10: 01:28:9c:75:73:2e:85:d7:17:04:9f:ba:a7:b7:4e:95:68:ee: 97:74:11:b3:4f:c6:61:c4:a9:c5:cd:1a:51:dc:fe:da:db:4b: d2:1d:eb:88:00:0a:34:ff:46:63:c0:36:4b:06:87:52:9f:74: cd:fe:7a:72:e9:1c:e6:4c:95:c8:e3:f3:75:34:42:bd:b3:a5: e5:d3:48:be:17:d9:4d:f1:7d:e1:64:76:a3:f5:d2:92:60:6f: 72:18:fb:10:3e:17:74:93:57:09:25:3e:9b:3b:9e:a5:ab:39: 39:cb:97:8d:da:a4:bd:10:87:8b:e0:19:bd:ed:fa:cd:a6:0e: 6a:6e:4d:1d:7b:61:65:d5:07:bf:c0:d7:fe:11:e9:ca:31:22: f7:3f:a1:ff -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gKh+5yOrQ2yEMYuZqqOqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MDI5YTM2ZmMwY2NhMmUwYThkMDQ1ZjAyMmRmYzgzMWE1 MTczMDgwHhcNMjYwMTAyMDIxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTk3YTJlZGQzZWI2OGNhNjhjOGM3YmQ2YmMwM2NlNjJjZmQ1M2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/hjfl/BeSQ/siwsg/QgFsN94eYH sBJPzzyiziQpcl7D7+s4Na6a4ENtubdzERRGVU8BNbX2QLMfEWrsAw8HsKjM/mqc 0MTM7pGNHdONoz/W3UXBEO3SIXdIMKTiGj0Efhd45+JnN5ZLgjRWD+6zWuFuOgiY njUQtGwt0pQmjh0Fa3SRiE4XsY5oHQqqXzz0zVVbXxJOuzLql0aNk+K7+pgbJl2A CclxEOXsZRalvVVrlYZBIMsoS0I4ibuBPnn4cnFj8T3ghLqQXPwLmIO99EJLKawh 1OS74Y1OkS+k4nchewS1PUrcANAAFQopZBsfA9aE4xLHT9r8N6zzUpH6+wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGmXou3T62jKaMjHvWvAPOYs/VPZMB8GA1UdIwQY MBaAFCcCmjb8DMouCo0EXwIt/IMaUXMIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81M2JiMjMtZGZhOC00NzkyLWIzMTct NTBkMGE1MzIzNjQxLzEvYVplaTdkUHJhTXBveU1lOWE4QTg1aXo5VTlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS81M2JiMjMtZGZhOC00NzkyLWIzMTctNTBkMGE1MzIzNjQx LzEvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQs1fAwQA uSogMA0GCSqGSIb3DQEBCwUAA4IBAQBh+jx5BRHrTOJ2IXPdDp/Wd683KFPeNRS/ mtmm5cf1+IYwSbGeTg5edBVVfkq74qUGEAMtMaCLbKRX0J4ngoPe/3bnU8JTAq0y y6ALEoaoGYa5Vg1DalySaKvSRzShtif8wRSsy4tMlHIwFRABKJx1cy6F1xcEn7qn t06VaO6XdBGzT8ZhxKnFzRpR3P7a20vSHeuIAAo0/0ZjwDZLBodSn3TN/npy6Rzm TJXI4/N1NEK9s6Xl00i+F9lN8X3hZHaj9dKSYG9yGPsQPhd0k1cJJT6bO56lqzk5 y5eN2qS9EIeL4Bm97frNpg5qbk0de2Fl1Qe/wNf+EenKMSL3P6H/ -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:16 2026 by rpki-client