This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/ajQLDkbaiYjg9Ewq8A-W74AJY3o.roa File: ajQLDkbaiYjg9Ewq8A-W74AJY3o.roa (raw, json) Hash identifier: vwPS5qwXBcM3Cg51hjkpOyz2MNXBUsFRFNEN5LMCq6I= Subject key identifier: 6A:34:0B:0E:46:DA:89:88:E0:F4:4C:2A:F0:0F:96:EF:80:09:63:7A Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e Certificate serial: 019B7C7F96BD7E07F91C4BD59358D0E4B121 Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/ajQLDkbaiYjg9Ewq8A-W74AJY3o.roa Signing time: Fri 02 Jan 2026 02:18:14 +0000 ROA not before: Fri 02 Jan 2026 02:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21317 IP address blocks: 94.176.190.0/24 maxlen: 24 109.205.92.0/24 maxlen: 24 109.205.93.0/24 maxlen: 24 109.205.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:96:bd:7e:07:f9:1c:4b:d5:93:58:d0:e4:b1:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e Validity Not Before: Jan 2 02:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a340b0e46da8988e0f44c2af00f96ef8009637a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b2:ba:5a:83:29:b4:be:ad:c6:46:13:55:f6: da:93:60:76:35:73:9a:53:39:b8:9e:d6:8e:c2:57: 90:99:59:8b:cc:ee:fa:67:1d:92:c9:28:2e:5a:94: a6:35:34:79:0a:9c:1b:17:c9:1c:26:cd:38:aa:0b: bc:80:35:a9:0e:0d:80:fb:f9:bd:fc:42:b6:0c:73: d2:22:19:e8:52:37:fb:ce:f5:b9:a6:c8:c8:d8:7a: 6d:c9:f9:23:31:9c:cb:44:d8:37:5f:8e:e0:e2:3e: 1f:0b:df:05:23:35:84:87:07:e0:83:b7:c8:d6:18: 74:b2:7c:27:34:70:22:2d:ba:fe:10:3f:8d:6b:04: f0:d7:d9:bb:45:a6:8e:55:b7:dd:59:09:62:0f:6f: 32:ea:bc:5a:a7:ef:1d:d1:09:2b:b5:74:0c:6b:9d: be:fa:6d:2f:60:c7:f9:c6:cd:7f:fc:4d:9a:93:d6: 8c:7b:5e:94:b2:fe:9a:a1:70:b9:c2:41:df:f6:cb: 42:e1:7c:20:27:fc:a3:8a:08:7e:54:d8:87:cc:ac: 0a:77:df:46:b9:20:2e:96:5e:b6:cc:a8:c4:4c:b8: 4e:5b:c4:c3:49:d6:85:ea:40:b2:74:e2:2c:31:bb: fe:a1:ba:a7:09:21:83:cd:f9:97:1a:82:c4:6d:ce: e5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:34:0B:0E:46:DA:89:88:E0:F4:4C:2A:F0:0F:96:EF:80:09:63:7A X509v3 Authority Key Identifier: keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/ajQLDkbaiYjg9Ewq8A-W74AJY3o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.176.190.0/24 109.205.92.0-109.205.94.255 Signature Algorithm: sha256WithRSAEncryption 29:b2:51:f5:69:9b:50:60:fc:28:cc:0f:82:8e:47:30:27:de: b2:6b:68:92:dc:b1:9a:58:29:c2:3b:e2:ac:e3:14:dc:07:57: e0:af:20:f2:2d:f4:13:c7:6b:c7:05:ba:84:3e:76:1c:68:03: 38:d1:78:59:06:5b:b0:8d:25:e1:63:35:18:90:39:6a:75:19: b0:90:6c:bb:f6:4e:29:08:ef:b1:7f:0a:e5:fa:0a:67:78:69: 56:0d:c6:cc:6c:42:8e:3f:48:0f:f9:d4:93:77:3c:3c:7b:09: 34:c6:f9:3b:83:17:aa:6e:ef:01:55:ac:05:b3:36:1a:10:97: ca:13:79:ba:3e:98:5e:6c:39:51:63:c6:44:e2:99:c3:f7:71: 48:65:48:02:d8:ed:70:ca:f7:04:95:14:45:40:89:6a:2b:e6: 54:ea:e0:72:1c:36:84:cd:ec:ba:89:42:99:58:de:21:50:bc: 6a:3c:50:fd:26:01:1f:6f:16:4d:70:10:2f:d0:a0:d6:c9:39: f5:9f:79:b4:83:b6:f2:4f:5a:80:8f:57:1e:26:36:c5:2c:3e: 8c:02:f3:7e:b7:e1:b0:15:03:31:0d:0f:df:3a:22:be:e8:c7: ce:b8:0b:25:a2:d6:9a:0d:48:d0:bf:26:8c:46:2d:67:9a:77: 68:6f:8e:62 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt8f5a9fgf5HEvVk1jQ5LEhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZjYxNzk4ZGQxODk2NWMwMjdhZmE3ZjkzYWUwMzBmZjVl MWQ3NmUwHhcNMjYwMTAyMDIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTM0MGIwZTQ2ZGE4OTg4ZTBmNDRjMmFmMDBmOTZlZjgwMDk2MzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubK6WoMptL6txkYTVfbak2B2NXOa Uzm4ntaOwleQmVmLzO76Zx2SySguWpSmNTR5CpwbF8kcJs04qgu8gDWpDg2A+/m9 /EK2DHPSIhnoUjf7zvW5psjI2HptyfkjMZzLRNg3X47g4j4fC98FIzWEhwfgg7fI 1hh0snwnNHAiLbr+ED+NawTw19m7RaaOVbfdWQliD28y6rxap+8d0QkrtXQMa52+ +m0vYMf5xs1//E2ak9aMe16Usv6aoXC5wkHf9stC4XwgJ/yjigh+VNiHzKwKd99G uSAull62zKjETLhOW8TDSdaF6kCydOIsMbv+obqnCSGDzfmXGoLEbc7lfQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFGo0Cw5G2omI4PRMKvAPlu+ACWN6MB8GA1UdIwQY MBaAFAr2F5jdGJZcAnr6f5OuAw/14dduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82MTUxNjQtNmQ5Ni00ODhhLTk2YmEt ZDZlMWUzNDdmOWM3LzEvYWpRTERrYmFpWWpnOUV3cThBLVc3NEFKWTNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC82MTUxNjQtNmQ5Ni00ODhhLTk2YmEtZDZlMWUzNDdmOWM3 LzEvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAXrC+MAwD BAJtzVwDBABtzV4wDQYJKoZIhvcNAQELBQADggEBACmyUfVpm1Bg/CjMD4KORzAn 3rJraJLcsZpYKcI74qzjFNwHV+CvIPIt9BPHa8cFuoQ+dhxoAzjReFkGW7CNJeFj NRiQOWp1GbCQbLv2TikI77F/CuX6Cmd4aVYNxsxsQo4/SA/51JN3PDx7CTTG+TuD F6pu7wFVrAWzNhoQl8oTebo+mF5sOVFjxkTimcP3cUhlSALY7XDK9wSVFEVAiWor 5lTq4HIcNoTN7LqJQplY3iFQvGo8UP0mAR9vFk1wEC/QoNbJOfWfebSDtvJPWoCP Vx4mNsUsPowC83634bAVAzEND986Ir7ox864CyWi1poNSNC/JoxGLWead2hvjmI= -----END CERTIFICATE-----Generated at Mon Jan 26 05:32:26 2026 by rpki-client