This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/AXnGtKIz8ndYCw4vdN9Brsn1miU.roa File: AXnGtKIz8ndYCw4vdN9Brsn1miU.roa (raw, json) Hash identifier: F7Z7gTG2PHyoh9qnR5qpUk04cyhY9vDWZ6dgJez+3Tg= Subject key identifier: 01:79:C6:B4:A2:33:F2:77:58:0B:0E:2F:74:DF:41:AE:C9:F5:9A:25 Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Certificate serial: 019B7E37F4F449EF637B178E804C51E1809B Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/AXnGtKIz8ndYCw4vdN9Brsn1miU.roa Signing time: Fri 02 Jan 2026 10:19:14 +0000 ROA not before: Fri 02 Jan 2026 10:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199812 IP address blocks: 195.87.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:f4:f4:49:ef:63:7b:17:8e:80:4c:51:e1:80:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Validity Not Before: Jan 2 10:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0179c6b4a233f277580b0e2f74df41aec9f59a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:41:2b:e6:1d:7d:8d:1e:3b:35:1a:6c:ee:e9: d0:93:77:c7:3e:e9:ce:57:fc:93:8a:17:1e:d1:65: de:9f:ce:f2:9e:0b:c4:22:69:58:43:c9:0c:11:95: 7f:37:9c:ee:c2:41:6b:db:c8:ed:ae:e4:f3:6c:f1: 33:96:b8:d8:80:8a:6e:e8:d2:39:b8:57:3b:43:2f: 94:0f:b5:24:ce:a1:c3:80:73:79:32:cf:9d:96:37: 5f:5d:da:fb:2b:bb:d6:a7:a9:43:6b:c0:99:58:b7: 3b:8a:c4:19:ea:ce:c3:b9:4a:22:95:f8:87:30:ff: 93:a6:67:df:49:3b:0c:d9:1c:b7:78:8d:27:a2:63: e3:68:f4:87:bb:bd:6a:58:e0:31:30:a8:e2:28:06: f9:99:67:4e:8c:f5:a1:b1:da:57:b1:9d:da:6f:41: 77:eb:a9:be:95:eb:ac:fa:62:70:c9:ae:ba:5e:7f: 0b:0b:11:7d:61:b9:42:77:22:8a:9f:80:a7:2f:e4: 72:08:22:2a:7f:cd:ac:81:2f:aa:31:70:19:63:7b: 07:ae:50:40:88:64:42:d3:96:ad:6e:4d:b6:98:34: 0a:35:1a:e7:ba:2d:7d:53:f4:e1:03:92:ef:21:14: 45:aa:82:3a:7a:f7:d2:a4:08:58:34:04:b6:96:f3: 93:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:79:C6:B4:A2:33:F2:77:58:0B:0E:2F:74:DF:41:AE:C9:F5:9A:25 X509v3 Authority Key Identifier: keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/AXnGtKIz8ndYCw4vdN9Brsn1miU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.87.92.0/24 Signature Algorithm: sha256WithRSAEncryption 43:9b:79:7b:6a:cc:cb:3e:d4:0a:79:a5:c5:de:ee:03:90:15: 9b:10:eb:ed:4a:fd:1f:98:62:31:11:92:bc:8d:ad:3d:50:fc: 39:44:56:70:34:7e:dc:c9:79:95:fb:f0:bc:3f:53:93:a0:86: ad:aa:90:9b:ec:48:22:d0:8c:02:70:18:ca:cd:7b:45:03:06: ab:b4:4f:74:f7:64:e9:7a:2a:7e:12:87:48:5d:d3:d6:9c:7e: a8:1c:5d:09:63:67:fd:68:b3:66:3f:5f:f5:58:49:40:ac:d3: 14:87:4c:b4:de:12:64:cc:a8:52:c3:6a:37:2d:f2:84:c2:98: d0:91:e2:80:1d:4b:43:5c:80:7c:0a:2a:1d:e7:b6:1b:3c:54: 1f:d1:5c:37:f8:a6:58:72:aa:fd:bf:99:9e:52:ef:ad:43:25: bf:66:06:59:70:e6:90:c2:31:af:9f:36:ce:d5:64:b0:ff:74: 00:f1:71:7b:67:a1:7d:fe:58:d5:99:99:d5:0d:a3:db:c6:88: 50:ca:5c:02:c9:ed:bd:a6:6c:3b:e8:89:ee:9f:71:d6:48:57: a2:a6:b0:6a:cf:63:0c:0b:d0:93:d5:e4:95:2b:96:02:36:bc: 01:d5:ee:59:17:59:e0:66:20:52:cd:ef:2f:ce:ae:c0:b0:2f: 16:79:d0:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N/T0Se9jexeOgExR4YCbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw MWY0YzkwHhcNMjYwMTAyMTAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTc5YzZiNGEyMzNmMjc3NTgwYjBlMmY3NGRmNDFhZWM5ZjU5YTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUEr5h19jR47NRps7unQk3fHPunO V/yTihce0WXen87yngvEImlYQ8kMEZV/N5zuwkFr28jtruTzbPEzlrjYgIpu6NI5 uFc7Qy+UD7UkzqHDgHN5Ms+dljdfXdr7K7vWp6lDa8CZWLc7isQZ6s7DuUoilfiH MP+TpmffSTsM2Ry3eI0nomPjaPSHu71qWOAxMKjiKAb5mWdOjPWhsdpXsZ3ab0F3 66m+leus+mJwya66Xn8LCxF9YblCdyKKn4CnL+RyCCIqf82sgS+qMXAZY3sHrlBA iGRC05atbk22mDQKNRrnui19U/ThA5LvIRRFqoI6evfSpAhYNAS2lvOTKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAF5xrSiM/J3WAsOL3TfQa7J9ZolMB8GA1UdIwQY MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt ODNkNjQ4Zjc5NzQ2LzEvQVhuR3RLSXo4bmRZQ3c0dmROOUJyc24xbWlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2 LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1dcMA0G CSqGSIb3DQEBCwUAA4IBAQBDm3l7aszLPtQKeaXF3u4DkBWbEOvtSv0fmGIxEZK8 ja09UPw5RFZwNH7cyXmV+/C8P1OToIatqpCb7Egi0IwCcBjKzXtFAwartE9092Tp eip+EodIXdPWnH6oHF0JY2f9aLNmP1/1WElArNMUh0y03hJkzKhSw2o3LfKEwpjQ keKAHUtDXIB8Ciod57YbPFQf0Vw3+KZYcqr9v5meUu+tQyW/ZgZZcOaQwjGvnzbO 1WSw/3QA8XF7Z6F9/ljVmZnVDaPbxohQylwCye29pmw76Inun3HWSFeiprBqz2MM C9CT1eSVK5YCNrwB1e5ZF1ngZiBSze8vzq7AsC8WedA7 -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:06 2026 by rpki-client