This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/Ato-xMfo1XYBrbfajVG_WC3wncE.roa File: Ato-xMfo1XYBrbfajVG_WC3wncE.roa (raw, json) Hash identifier: M3elLy9DL4aswj6r2M66n4eUlRmnKREgTFc/1aUpjLA= Subject key identifier: 02:DA:3E:C4:C7:E8:D5:76:01:AD:B7:DA:8D:51:BF:58:2D:F0:9D:C1 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019BB281912608D56A5544BEB48ECCD01068 Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/Ato-xMfo1XYBrbfajVG_WC3wncE.roa Signing time: Mon 12 Jan 2026 13:59:54 +0000 ROA not before: Mon 12 Jan 2026 13:59:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208229 IP address blocks: 89.23.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:81:91:26:08:d5:6a:55:44:be:b4:8e:cc:d0:10:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Jan 12 13:59:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02da3ec4c7e8d57601adb7da8d51bf582df09dc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f2:ef:0a:1e:b1:54:96:06:50:94:25:af:e1: 87:1e:bf:b4:9e:71:9a:2d:c5:b8:17:a5:5c:79:79: 50:ca:b4:10:8d:50:b0:9b:4f:b8:23:f9:d1:56:89: 9e:dc:11:1f:ce:c2:2e:5a:51:5f:ff:2c:b3:fd:0c: f3:ae:4c:57:cc:ae:57:a2:64:f9:fa:7f:2d:05:66: 90:18:73:86:47:49:5b:55:c8:a9:30:c5:a4:a6:63: f4:5a:83:9a:d9:1c:07:95:54:4e:94:cb:5c:6d:01: 03:74:b6:72:3a:83:16:96:66:28:06:2c:43:06:0e: f1:a7:8a:80:d5:91:38:79:37:cf:87:2f:68:76:15: 8d:c3:63:43:71:d7:76:9b:b0:cd:d5:17:25:ef:0d: 7f:41:41:fa:41:41:55:af:40:81:fc:69:e4:a9:36: 93:56:53:c0:2f:54:0c:e4:e5:e4:8b:80:7e:00:2b: 36:d5:17:8e:ff:06:ea:e5:da:7e:17:fe:fb:0b:1e: 4d:97:41:29:19:77:89:8a:4e:a5:0d:c9:1e:c0:1c: bb:f9:26:3e:dd:f5:b9:a1:8b:c6:e4:bf:ff:92:a1: 06:0b:01:d6:2a:96:ec:4e:5e:3d:dd:bf:ca:ed:7a: b8:2b:8d:3f:3b:1e:6c:f0:0a:1f:53:d9:64:14:86: a3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DA:3E:C4:C7:E8:D5:76:01:AD:B7:DA:8D:51:BF:58:2D:F0:9D:C1 X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/Ato-xMfo1XYBrbfajVG_WC3wncE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.23.91.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:c2:2a:14:ce:f8:17:39:23:aa:f3:d2:a4:1f:59:24:f6:8c: a1:27:df:45:40:71:24:61:7e:b3:69:cf:02:94:48:49:ae:19: d9:2c:88:ed:8e:59:99:a0:fe:52:36:24:52:68:30:2e:85:c2: df:7b:d0:e5:e3:d8:83:d4:ef:59:6d:40:88:7c:70:e3:e7:f5: 1d:5c:53:3b:7d:72:4c:8f:b6:6d:11:9f:aa:34:78:8d:bb:eb: 63:75:fc:25:34:a0:f6:e1:be:1f:09:3f:96:36:4a:24:b0:50: 8d:56:fb:72:f7:8c:0a:b2:f9:cc:c1:0e:bf:13:95:c9:4a:29: 07:bf:3b:9c:4c:d7:7e:d5:26:70:05:f3:69:ed:58:01:52:8c: f4:7a:f5:01:b0:bb:d1:bc:f8:df:51:68:e5:44:e3:22:75:59: 9b:57:3d:de:0c:78:bb:0c:26:b9:d4:6b:73:1b:f1:2b:28:74: ce:03:49:5e:a8:61:0a:50:19:9f:85:fc:65:52:63:75:3f:98: a5:ad:c9:11:27:2c:23:f4:b6:17:98:bc:d4:2d:e3:a4:a4:11: c4:80:e7:4c:c9:6d:2a:60:0e:42:5f:66:8f:b0:7f:42:50:66: 4d:0a:a7:7b:60:c5:48:e0:95:b6:fa:a4:c8:7d:a9:c9:80:f0: f1:93:3d:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuygZEmCNVqVUS+tI7M0BBoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjYwMTEyMTM1OTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmRhM2VjNGM3ZThkNTc2MDFhZGI3ZGE4ZDUxYmY1ODJkZjA5ZGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vLvCh6xVJYGUJQlr+GHHr+0nnGa LcW4F6VceXlQyrQQjVCwm0+4I/nRVome3BEfzsIuWlFf/yyz/QzzrkxXzK5XomT5 +n8tBWaQGHOGR0lbVcipMMWkpmP0WoOa2RwHlVROlMtcbQEDdLZyOoMWlmYoBixD Bg7xp4qA1ZE4eTfPhy9odhWNw2NDcdd2m7DN1Rcl7w1/QUH6QUFVr0CB/GnkqTaT VlPAL1QM5OXki4B+ACs21ReO/wbq5dp+F/77Cx5Nl0EpGXeJik6lDckewBy7+SY+ 3fW5oYvG5L//kqEGCwHWKpbsTl493b/K7Xq4K40/Ox5s8AofU9lkFIajfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFALaPsTH6NV2Aa232o1Rv1gt8J3BMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvQXRvLXhNZm8xWFlCcmJmYWpWR19XQzN3bmNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRdbMA0G CSqGSIb3DQEBCwUAA4IBAQAuwioUzvgXOSOq89KkH1kk9oyhJ99FQHEkYX6zac8C lEhJrhnZLIjtjlmZoP5SNiRSaDAuhcLfe9Dl49iD1O9ZbUCIfHDj5/UdXFM7fXJM j7ZtEZ+qNHiNu+tjdfwlNKD24b4fCT+WNkoksFCNVvty94wKsvnMwQ6/E5XJSikH vzucTNd+1SZwBfNp7VgBUoz0evUBsLvRvPjfUWjlROMidVmbVz3eDHi7DCa51Gtz G/ErKHTOA0leqGEKUBmfhfxlUmN1P5ilrckRJywj9LYXmLzULeOkpBHEgOdMyW0q YA5CX2aPsH9CUGZNCqd7YMVI4JW2+qTIfanJgPDxkz3Y -----END CERTIFICATE-----Generated at Sun Jan 25 10:52:12 2026 by rpki-client