This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/_ATH2LaUcsFsbm3ZfMvMi0XWcbY.roa File: _ATH2LaUcsFsbm3ZfMvMi0XWcbY.roa (raw, json) Hash identifier: Ot7Mpd5Sngu+BgXvflikN22yePv0fhYUQRspiY3WG70= Subject key identifier: FC:04:C7:D8:B6:94:72:C1:6C:6E:6D:D9:7C:CB:CC:8B:45:D6:71:B6 Certificate issuer: /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3 Certificate serial: 019B7CED94A0152D9AD4CE6EB87CA01D67A5 Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/_ATH2LaUcsFsbm3ZfMvMi0XWcbY.roa Signing time: Fri 02 Jan 2026 04:18:23 +0000 ROA not before: Fri 02 Jan 2026 04:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20773 IP address blocks: 134.97.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:94:a0:15:2d:9a:d4:ce:6e:b8:7c:a0:1d:67:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3 Validity Not Before: Jan 2 04:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc04c7d8b69472c16c6e6dd97ccbcc8b45d671b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e7:fb:3f:d2:e3:0e:c0:30:0c:3f:99:a0:50: e4:4c:53:ed:d9:fc:c5:62:a6:38:fc:71:01:20:06: 97:b8:f9:47:75:83:d2:aa:96:59:4e:fa:c3:1c:f3: b1:7b:d2:9b:4e:f6:ed:6b:c4:3d:e0:c0:84:00:4a: 34:39:ce:6c:71:b2:3e:8f:b5:c6:56:33:e6:1b:1b: 70:18:92:6a:7b:25:6c:d9:63:75:bf:db:60:45:98: 3b:76:b6:e9:69:38:58:35:d9:04:ea:e7:7c:4a:73: 1a:68:b0:0e:7b:12:d8:be:11:56:be:ab:47:1b:0d: fd:bf:53:c7:c9:2d:41:7c:c5:b1:c9:dd:40:2e:14: eb:7d:af:d9:32:d1:fe:9a:b4:11:d5:7e:da:5d:13: 72:36:1b:59:84:1d:60:e1:80:0b:5a:95:33:ef:fb: 85:66:09:d8:4e:30:43:6e:22:27:d4:89:bf:95:6d: 0d:fb:46:f0:f5:56:2d:20:c9:21:55:9a:e7:f6:d7: 3e:28:3a:1a:4d:74:72:f5:60:67:e3:89:34:30:5a: eb:07:af:3e:71:df:57:2a:da:41:8d:34:cf:58:bd: 11:79:2c:25:23:35:99:5f:f9:73:ee:33:6d:ca:16: 26:04:46:c5:9c:2a:71:09:11:df:c1:6f:24:77:8c: 0e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:04:C7:D8:B6:94:72:C1:6C:6E:6D:D9:7C:CB:CC:8B:45:D6:71:B6 X509v3 Authority Key Identifier: keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/_ATH2LaUcsFsbm3ZfMvMi0XWcbY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.97.4.0/24 Signature Algorithm: sha256WithRSAEncryption a3:c1:af:fb:4f:00:53:09:7a:0b:df:69:3a:5b:5d:85:20:47: d3:46:28:8d:72:a4:59:76:09:94:bb:f6:0e:f2:74:0c:b4:87: f9:37:27:5a:13:92:20:97:7c:e7:09:b9:78:33:78:a7:ff:4e: ee:ee:d6:e0:c2:a3:de:19:fc:8c:91:c7:f1:5b:f1:b4:86:7f: 64:7c:9f:51:da:a5:17:b2:45:f2:49:31:9b:d1:7d:b7:5f:1e: d3:11:0a:ae:9d:01:c2:77:c5:34:76:df:9d:9e:20:92:5e:fd: c4:89:38:52:6d:9e:18:a6:72:3c:84:9a:e0:eb:50:1e:6d:d4: 41:10:73:16:02:57:bd:f7:2f:3e:e9:89:1e:d5:6d:11:fd:94: 9f:8e:91:e7:93:bd:51:61:c6:e8:09:1d:b8:66:7b:4e:40:38: 5d:58:5a:43:16:fb:9a:11:8e:0f:85:c6:40:ee:6b:80:bd:e2: 2d:06:29:b3:e0:c3:ca:d6:40:25:99:44:9e:7d:ec:5b:f1:fd: ad:88:d4:be:b0:be:a4:51:02:7c:32:9d:42:3e:cb:e5:3e:a7: cc:9a:76:81:d7:24:b7:5b:55:ca:e3:0d:10:2b:8d:bb:79:87: 9b:93:aa:d7:33:a8:68:c5:51:62:df:11:79:0d:d1:a7:04:f7: a5:6d:24:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87ZSgFS2a1M5uuHygHWelMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2OTk0OGQwZmU0ZDdmOTlkNTRiYThiZmZjZDk5YTFhNjA4 YWUwZDMwHhcNMjYwMTAyMDQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzA0YzdkOGI2OTQ3MmMxNmM2ZTZkZDk3Y2NiY2M4YjQ1ZDY3MWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtef7P9LjDsAwDD+ZoFDkTFPt2fzF YqY4/HEBIAaXuPlHdYPSqpZZTvrDHPOxe9KbTvbta8Q94MCEAEo0Oc5scbI+j7XG VjPmGxtwGJJqeyVs2WN1v9tgRZg7drbpaThYNdkE6ud8SnMaaLAOexLYvhFWvqtH Gw39v1PHyS1BfMWxyd1ALhTrfa/ZMtH+mrQR1X7aXRNyNhtZhB1g4YALWpUz7/uF ZgnYTjBDbiIn1Im/lW0N+0bw9VYtIMkhVZrn9tc+KDoaTXRy9WBn44k0MFrrB68+ cd9XKtpBjTTPWL0ReSwlIzWZX/lz7jNtyhYmBEbFnCpxCRHfwW8kd4wOSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPwEx9i2lHLBbG5t2XzLzItF1nG2MB8GA1UdIwQY MBaAFJaZSND+TX+Z1Uuov/zZmhpgiuDTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHBsSTBQNU5mNW5WUzZpX19ObWFHbUNLNE5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xYTJmYTItZWViMy00MzEyLTkxMzAt NTNjYzVkYWY1MmNmLzEvX0FUSDJMYVVjc0ZzYm0zWmZNdk1pMFhXY2JZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8xYTJmYTItZWViMy00MzEyLTkxMzAtNTNjYzVkYWY1MmNm LzEvbHBsSTBQNU5mNW5WUzZpX19ObWFHbUNLNE5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhmEEMA0G CSqGSIb3DQEBCwUAA4IBAQCjwa/7TwBTCXoL32k6W12FIEfTRiiNcqRZdgmUu/YO 8nQMtIf5NydaE5Igl3znCbl4M3in/07u7tbgwqPeGfyMkcfxW/G0hn9kfJ9R2qUX skXySTGb0X23Xx7TEQqunQHCd8U0dt+dniCSXv3EiThSbZ4YpnI8hJrg61AebdRB EHMWAle99y8+6Yke1W0R/ZSfjpHnk71RYcboCR24ZntOQDhdWFpDFvuaEY4PhcZA 7muAveItBimz4MPK1kAlmUSefexb8f2tiNS+sL6kUQJ8Mp1CPsvlPqfMmnaB1yS3 W1XK4w0QK427eYebk6rXM6hoxVFi3xF5DdGnBPelbSSh -----END CERTIFICATE-----Generated at Sun Jan 25 18:21:03 2026 by rpki-client