This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/AjNaf0XOBf9riDrcOuPKw561NDY.roa File: AjNaf0XOBf9riDrcOuPKw561NDY.roa (raw, json) Hash identifier: 9pTroZDCDfvNGpo8ht2rx0lIgrrP6ysux19y/1KOqeE= Subject key identifier: 02:33:5A:7F:45:CE:05:FF:6B:88:3A:DC:3A:E3:CA:C3:9E:B5:34:36 Certificate issuer: /CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2 Certificate serial: 019B7AC81C00557BDA8022C6BDC4E39C4C08 Authority key identifier: 6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/AjNaf0XOBf9riDrcOuPKw561NDY.roa Signing time: Thu 01 Jan 2026 18:18:13 +0000 ROA not before: Thu 01 Jan 2026 18:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 37002 IP address blocks: 185.161.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:1c:00:55:7b:da:80:22:c6:bd:c4:e3:9c:4c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2 Validity Not Before: Jan 1 18:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02335a7f45ce05ff6b883adc3ae3cac39eb53436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f2:b8:59:b6:f3:9d:96:b9:d4:71:63:69:2d: 40:26:61:cd:00:9f:fe:54:35:e9:98:38:4d:db:81: 21:4f:15:4e:ec:fd:86:a7:12:e1:34:46:e6:33:39: b7:c9:74:68:07:86:29:22:0f:de:07:ff:91:38:99: 73:d8:bd:df:a8:48:04:8a:33:46:71:ee:d4:e5:17: 79:8b:5c:27:0f:8f:e3:23:1c:36:ce:ef:dd:1c:9d: fb:88:bb:60:c5:eb:71:9b:ed:6a:86:3d:18:70:82: 8d:1b:51:af:dd:7c:97:4a:dc:fd:25:d4:7d:42:ea: 39:dd:d0:87:49:00:4a:8a:94:56:da:a2:26:f2:e5: 3f:d7:84:1b:aa:1c:64:3c:0e:54:44:95:f2:1b:32: fd:3d:56:fc:a8:fd:11:26:ec:bb:e4:94:11:40:0b: 22:b1:f7:79:6f:be:57:a5:b1:ca:b5:e6:c6:e9:79: 4f:30:c2:c6:ac:0c:74:0c:9f:be:b2:57:9a:52:1e: a9:83:df:3c:f1:79:52:c5:48:c4:97:88:29:3f:98: db:8e:6e:09:f4:c6:eb:b4:da:a9:21:9b:fd:d1:6e: 2d:db:5a:91:89:d6:dc:90:c4:dc:c8:15:fb:b9:61: d8:d7:fd:bc:9f:23:dc:0f:17:6f:d8:a1:8d:04:bf: 03:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:33:5A:7F:45:CE:05:FF:6B:88:3A:DC:3A:E3:CA:C3:9E:B5:34:36 X509v3 Authority Key Identifier: keyid:6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/AjNaf0XOBf9riDrcOuPKw561NDY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.10.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:34:49:3e:71:8d:81:6f:ba:73:09:df:a7:a8:4a:34:3f:e4: ca:cb:48:f5:bf:c9:ef:7e:b1:ef:92:1d:f4:b2:68:bf:58:e7: 40:9f:b7:70:31:93:c8:b8:84:da:d1:74:34:b7:81:7c:b2:40: d5:b1:86:ea:86:4f:2d:10:35:bd:9f:94:d2:f1:a5:26:84:25: f1:72:3b:49:e3:19:f3:ec:6d:2c:cc:67:92:ce:a8:a7:b7:23: 43:26:d1:e5:0b:27:f8:7f:32:4b:1c:22:7b:29:17:c6:50:48: 10:37:34:c6:74:3b:50:c9:ae:86:76:58:2c:b1:4b:4a:8f:5b: 09:1b:9b:58:8f:4e:50:95:81:6c:a4:a4:43:5c:f3:3b:97:d0: 17:4a:95:d0:0e:3b:fe:7c:1e:0f:26:28:51:44:64:6c:bd:cf: f3:6f:ea:a4:4a:0d:f1:59:56:25:c3:62:2b:f4:71:56:42:3d: 0d:99:71:73:1d:ed:41:c7:70:1f:ba:46:e1:ec:85:c6:d5:29: c9:cc:c0:52:63:70:5f:01:20:ac:9c:e3:97:76:b1:93:d5:42: f8:61:49:cf:d5:1e:3d:68:62:ba:88:da:f5:24:69:15:76:3b: c7:96:36:06:d5:dc:f4:d9:72:fa:eb:03:15:6e:4b:14:96:2f: 12:d4:da:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yBwAVXvagCLGvcTjnEwIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMWJlYzNmOTM1ODY2OGE4N2QxYTE2YzQ3MjJmNDFlM2My MzgxZTIwHhcNMjYwMTAxMTgxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjMzNWE3ZjQ1Y2UwNWZmNmI4ODNhZGMzYWUzY2FjMzllYjUzNDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovK4WbbznZa51HFjaS1AJmHNAJ/+ VDXpmDhN24EhTxVO7P2GpxLhNEbmMzm3yXRoB4YpIg/eB/+ROJlz2L3fqEgEijNG ce7U5Rd5i1wnD4/jIxw2zu/dHJ37iLtgxetxm+1qhj0YcIKNG1Gv3XyXStz9JdR9 Quo53dCHSQBKipRW2qIm8uU/14QbqhxkPA5URJXyGzL9PVb8qP0RJuy75JQRQAsi sfd5b75XpbHKtebG6XlPMMLGrAx0DJ++sleaUh6pg9888XlSxUjEl4gpP5jbjm4J 9MbrtNqpIZv90W4t21qRidbckMTcyBX7uWHY1/28nyPcDxdv2KGNBL8DlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAIzWn9FzgX/a4g63DrjysOetTQ2MB8GA1UdIwQY MBaAFGwb7D+TWGaKh9GhbEci9B48I4HiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkJ2c1A1Tllab3FIMGFGc1J5TDBIandqZ2VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84YzA0NzMtZTdkMC00ZTQzLWE3Zjkt Nzk3ZjRjYzRiNTAwLzEvQWpOYWYwWE9CZjlyaURyY091UEt3NTYxTkRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS84YzA0NzMtZTdkMC00ZTQzLWE3ZjktNzk3ZjRjYzRiNTAw LzEvYkJ2c1A1Tllab3FIMGFGc1J5TDBIandqZ2VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaEKMA0G CSqGSIb3DQEBCwUAA4IBAQCNNEk+cY2Bb7pzCd+nqEo0P+TKy0j1v8nvfrHvkh30 smi/WOdAn7dwMZPIuITa0XQ0t4F8skDVsYbqhk8tEDW9n5TS8aUmhCXxcjtJ4xnz 7G0szGeSzqintyNDJtHlCyf4fzJLHCJ7KRfGUEgQNzTGdDtQya6GdlgssUtKj1sJ G5tYj05QlYFspKRDXPM7l9AXSpXQDjv+fB4PJihRRGRsvc/zb+qkSg3xWVYlw2Ir 9HFWQj0NmXFzHe1Bx3Afukbh7IXG1SnJzMBSY3BfASCsnOOXdrGT1UL4YUnP1R49 aGK6iNr1JGkVdjvHljYG1dz02XL66wMVbksUli8S1NoU -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:42 2026 by rpki-client