This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/AXJwwgLV20qOfdiRkcLp7cuyLa8.roa File: AXJwwgLV20qOfdiRkcLp7cuyLa8.roa (raw, json) Hash identifier: TJd1vyVMSaddwqO1mLObhJwRHoC09A1cxMdzGIXMVxA= Subject key identifier: 01:72:70:C2:02:D5:DB:4A:8E:7D:D8:91:91:C2:E9:ED:CB:B2:2D:AF Certificate issuer: /CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f Certificate serial: 019B783511906F613E797E3D079A67D0A568 Authority key identifier: B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/AXJwwgLV20qOfdiRkcLp7cuyLa8.roa Signing time: Thu 01 Jan 2026 06:18:22 +0000 ROA not before: Thu 01 Jan 2026 06:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202552 IP address blocks: 81.200.128.0/23 maxlen: 23 185.156.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:11:90:6f:61:3e:79:7e:3d:07:9a:67:d0:a5:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f Validity Not Before: Jan 1 06:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=017270c202d5db4a8e7dd89191c2e9edcbb22daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:30:86:5c:6c:8d:cb:67:e0:85:fa:4c:9d:bc: d3:6b:7a:67:97:67:4f:d3:97:4d:f1:62:c8:4b:a6: f8:f9:83:a2:40:67:d4:19:a0:42:07:fa:f6:1f:e6: 5a:b9:27:39:05:67:b3:b3:5a:12:4d:37:ed:0a:73: 45:63:34:aa:17:08:df:79:fa:db:bb:24:66:50:12: 34:98:3c:9f:fb:10:af:fd:54:20:0f:bd:37:88:6f: 08:e9:10:b3:bf:88:ec:17:ed:62:9e:55:4f:03:39: 40:7f:43:5f:9a:5b:8c:7a:2c:ba:66:ea:30:20:95: ee:22:92:a3:58:f9:67:7c:45:a3:81:c4:6e:8e:b9: 42:d2:34:78:6e:20:8d:93:80:a0:8d:9f:f5:7e:8f: 76:3c:c8:08:be:3e:66:01:88:cb:24:7d:1c:2c:75: 05:8f:a2:36:45:fb:62:1c:f8:8c:65:52:c9:84:a9: 4d:bf:e0:68:ec:2a:d5:c5:6b:7d:58:be:6e:d1:10: 56:54:c5:11:9e:e0:e9:0e:a9:f4:7f:5d:8e:5b:3c: 53:0b:5f:4d:37:be:70:fd:fa:ed:5f:58:6a:50:64: cc:db:81:db:8e:4d:c4:5a:0d:3c:a9:c1:53:bf:b6: 1d:28:f3:90:37:42:d5:ea:5f:58:76:58:2d:d2:e8: eb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:72:70:C2:02:D5:DB:4A:8E:7D:D8:91:91:C2:E9:ED:CB:B2:2D:AF X509v3 Authority Key Identifier: keyid:B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/AXJwwgLV20qOfdiRkcLp7cuyLa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.200.128.0/23 185.156.150.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:24:64:ce:c5:34:38:9e:09:6c:68:2f:c4:88:3f:5b:b5:10: 35:04:78:02:15:e0:be:ed:07:7c:48:74:4e:51:6e:5b:02:7c: db:18:49:36:7c:c4:e9:fa:25:d6:97:12:75:0a:85:0d:63:5f: cc:f6:03:2a:63:b8:33:06:83:58:e8:9d:11:9e:ea:bb:73:a9: c5:7f:37:ef:21:e0:8f:3a:de:06:79:fd:02:df:d3:6e:26:45: 1e:08:a1:83:5f:c4:22:2e:ac:0f:57:2d:49:09:ca:47:b9:48: d5:24:c2:aa:38:fc:56:67:22:96:f2:9a:a4:e5:70:ae:58:12: fc:6c:1f:ca:62:54:87:d1:10:74:72:99:78:57:5f:14:96:70: fb:7e:d0:36:bd:12:12:2d:89:c7:97:2e:37:0f:1c:eb:21:27: 39:b8:dc:4e:ea:3e:c0:27:aa:e5:f7:f6:16:c8:72:7c:a8:58: 7a:da:cb:b3:11:41:ca:0b:1a:73:6c:43:60:01:21:1a:aa:1a: 6c:00:88:34:21:bb:f4:30:e1:88:3d:59:79:6b:22:43:cd:79: 6f:ed:70:1e:03:ce:b8:63:84:48:f1:a8:08:25:11:4d:aa:52: 9e:e8:84:a6:f2:49:73:98:bd:75:b7:d5:f6:b1:45:10:73:c8: a0:be:37:b6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NRGQb2E+eX49B5pn0KVoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZTBmNzk4NDFjMDIxMGQ5NWI0ZWY1NmZmNjg0NDFjMmFh OWZjMGYwHhcNMjYwMTAxMDYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTcyNzBjMjAyZDVkYjRhOGU3ZGQ4OTE5MWMyZTllZGNiYjIyZGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTCGXGyNy2fghfpMnbzTa3pnl2dP 05dN8WLIS6b4+YOiQGfUGaBCB/r2H+ZauSc5BWezs1oSTTftCnNFYzSqFwjfefrb uyRmUBI0mDyf+xCv/VQgD703iG8I6RCzv4jsF+1inlVPAzlAf0NfmluMeiy6Zuow IJXuIpKjWPlnfEWjgcRujrlC0jR4biCNk4CgjZ/1fo92PMgIvj5mAYjLJH0cLHUF j6I2RftiHPiMZVLJhKlNv+Bo7CrVxWt9WL5u0RBWVMURnuDpDqn0f12OWzxTC19N N75w/frtX1hqUGTM24Hbjk3EWg08qcFTv7YdKPOQN0LV6l9Ydlgt0ujrXQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAFycMIC1dtKjn3YkZHC6e3Lsi2vMB8GA1UdIwQY MBaAFLjg95hBwCENlbTvVv9oRBwqqfwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU9EM21FSEFJUTJWdE85V18yaEVIQ3FwX0E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jOWU3MDQtOTU4ZC00MTNmLThhY2Mt NmVhM2NiZmQzYTg0LzEvQVhKd3dnTFYyMHFPZmRpUmtjTHA3Y3V5TGE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9jOWU3MDQtOTU4ZC00MTNmLThhY2MtNmVhM2NiZmQzYTg0 LzEvdU9EM21FSEFJUTJWdE85V18yaEVIQ3FwX0E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUciAAwQA uZyWMA0GCSqGSIb3DQEBCwUAA4IBAQAPJGTOxTQ4nglsaC/EiD9btRA1BHgCFeC+ 7Qd8SHROUW5bAnzbGEk2fMTp+iXWlxJ1CoUNY1/M9gMqY7gzBoNY6J0Rnuq7c6nF fzfvIeCPOt4Gef0C39NuJkUeCKGDX8QiLqwPVy1JCcpHuUjVJMKqOPxWZyKW8pqk 5XCuWBL8bB/KYlSH0RB0cpl4V18UlnD7ftA2vRISLYnHly43DxzrISc5uNxO6j7A J6rl9/YWyHJ8qFh62suzEUHKCxpzbENgASEaqhpsAIg0Ibv0MOGIPVl5ayJDzXlv 7XAeA864Y4RI8agIJRFNqlKe6ISm8klzmL11t9X2sUUQc8igvje2 -----END CERTIFICATE-----Generated at Mon Jan 26 10:52:51 2026 by rpki-client