This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/AytC0vudIRHdnmHmm39_bGSvL7A.roa File: AytC0vudIRHdnmHmm39_bGSvL7A.roa (raw, json) Hash identifier: lFZ5iFpS85yv5XfMcqIVG4iI9raM8WJTxENkSbHUOC4= Subject key identifier: 03:2B:42:D2:FB:9D:21:11:DD:9E:61:E6:9B:7F:7F:6C:64:AF:2F:B0 Certificate issuer: /CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec Certificate serial: 019B78A2ED45A02EC658B332B59F3DFD0415 Authority key identifier: D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/AytC0vudIRHdnmHmm39_bGSvL7A.roa Signing time: Thu 01 Jan 2026 08:18:22 +0000 ROA not before: Thu 01 Jan 2026 08:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211347 IP address blocks: 178.237.201.0/24 maxlen: 24 178.237.207.0/24 maxlen: 24 2a04:7e00::/48 maxlen: 48 2a04:7e00:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ed:45:a0:2e:c6:58:b3:32:b5:9f:3d:fd:04:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec Validity Not Before: Jan 1 08:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=032b42d2fb9d2111dd9e61e69b7f7f6c64af2fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:73:58:3e:3c:4d:ee:4b:31:59:ad:07:86:26: 34:50:b8:a8:a3:57:d3:0a:9f:49:28:69:62:cd:22: 41:b1:6b:04:54:89:76:95:12:19:2e:26:8a:60:e8: 3d:fa:7f:14:c1:b5:53:e8:93:2e:01:d1:e4:39:21: e1:ab:53:03:be:6f:f9:50:bc:f1:68:69:9e:69:c7: 62:fe:df:0a:63:7a:b1:f9:87:43:31:65:85:df:ee: 0f:7e:8b:cc:34:50:4c:89:ef:b2:7b:0a:ce:5f:12: 5f:4c:15:49:1e:70:f9:98:59:3d:53:fe:62:24:98: 2b:99:5f:e0:68:a8:c3:a7:b0:9a:ad:5d:cd:47:f7: f2:a5:0c:b7:4b:b5:68:a2:8b:60:90:5b:28:21:b3: a4:a1:61:20:5f:e4:25:3f:c4:3a:fd:0d:88:01:19: 5e:e4:0f:75:53:23:1e:fb:e8:7b:c4:a7:dc:a2:86: 0d:7c:51:ec:41:96:5e:80:3a:c8:89:15:ed:56:66: ff:55:76:1a:4b:73:30:f6:f8:95:f2:d6:e9:40:2f: a8:ba:8b:0c:ef:f8:5b:55:24:02:3b:b7:60:77:69: fe:a5:4f:38:0a:3f:4f:3d:cd:49:d5:88:8e:c3:81: 1b:aa:89:08:33:15:0e:15:f1:4c:c5:3d:64:4b:6b: a2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2B:42:D2:FB:9D:21:11:DD:9E:61:E6:9B:7F:7F:6C:64:AF:2F:B0 X509v3 Authority Key Identifier: keyid:D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/AytC0vudIRHdnmHmm39_bGSvL7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.237.201.0/24 178.237.207.0/24 IPv6: 2a04:7e00::/47 Signature Algorithm: sha256WithRSAEncryption 69:94:3e:01:7e:3a:f1:48:d7:a2:39:7f:76:64:80:47:7d:c0: 6f:ff:1d:86:6f:9f:2b:88:80:91:3b:60:84:44:aa:4c:3c:34: 22:3e:c5:a9:5b:60:b2:7f:fc:ef:52:92:a0:71:18:49:4b:6f: 31:8b:5c:f6:9f:ad:75:59:d7:97:b1:c6:b3:3c:bb:3a:2f:92: 97:38:67:7b:6f:33:7a:be:99:99:42:c6:63:d8:48:10:e6:22: b9:e9:ee:a1:1c:1d:a9:31:06:60:91:24:ab:de:5a:f5:18:3d: d1:d4:84:b5:9e:5c:6e:91:cc:74:4b:dc:82:2b:42:25:eb:51: 15:59:99:c5:2e:d2:a0:3b:7a:ae:ea:5d:c7:b8:ae:0d:1f:e2: ab:93:ee:c3:73:49:33:59:dc:9f:f4:1b:72:0a:8d:d9:bf:f4: df:2b:3e:c4:21:64:ca:3f:ac:0a:2e:96:72:82:82:a7:85:93: 9a:84:31:3a:13:65:42:50:29:0b:f7:bd:50:73:73:36:01:77: 88:b9:c3:e8:25:2b:22:e7:20:23:08:f4:fa:e0:72:09:51:56: 02:51:39:3e:10:29:ec:89:1c:45:39:fd:8f:fe:94:a3:0a:8f: 64:15:ef:65:6a:fa:17:46:49:21:9d:e2:d0:da:80:ed:fa:08: a1:fb:2d:95 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt4ou1FoC7GWLMytZ89/QQVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OTkyMmNhOGQxMzlhNGQwM2Q2ZDU3Y2JjODE3N2RjMDVm ZWI5ZWMwHhcNMjYwMTAxMDgxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzJiNDJkMmZiOWQyMTExZGQ5ZTYxZTY5YjdmN2Y2YzY0YWYyZmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXNYPjxN7ksxWa0HhiY0ULioo1fT Cp9JKGlizSJBsWsEVIl2lRIZLiaKYOg9+n8UwbVT6JMuAdHkOSHhq1MDvm/5ULzx aGmeacdi/t8KY3qx+YdDMWWF3+4PfovMNFBMie+yewrOXxJfTBVJHnD5mFk9U/5i JJgrmV/gaKjDp7CarV3NR/fypQy3S7VoootgkFsoIbOkoWEgX+QlP8Q6/Q2IARle 5A91UyMe++h7xKfcooYNfFHsQZZegDrIiRXtVmb/VXYaS3Mw9viV8tbpQC+ouosM 7/hbVSQCO7dgd2n+pU84Cj9PPc1J1YiOw4EbqokIMxUOFfFMxT1kS2uiPwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFAMrQtL7nSER3Z5h5pt/f2xkry+wMB8GA1UdIwQY MBaAFNSZIsqNE5pNA9bVfLyBd9wF/rnsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUpraXlvMFRtazBEMXRWOHZJRjMzQVgtdWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81Y2VjYzAtMmE1My00NTAwLTg1YWUt ZThiNjBhMmRkNmI0LzEvQXl0QzB2dWRJUkhkbm1IbW0zOV9iR1N2TDdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC81Y2VjYzAtMmE1My00NTAwLTg1YWUtZThiNjBhMmRkNmI0 LzEvMUpraXlvMFRtazBEMXRWOHZJRjMzQVgtdWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAsu3JAwQA su3PMA8EAgACMAkDBwEqBH4AAAAwDQYJKoZIhvcNAQELBQADggEBAGmUPgF+OvFI 16I5f3ZkgEd9wG//HYZvnyuIgJE7YIREqkw8NCI+xalbYLJ//O9SkqBxGElLbzGL XPafrXVZ15exxrM8uzovkpc4Z3tvM3q+mZlCxmPYSBDmIrnp7qEcHakxBmCRJKve WvUYPdHUhLWeXG6RzHRL3IIrQiXrURVZmcUu0qA7eq7qXce4rg0f4quT7sNzSTNZ 3J/0G3IKjdm/9N8rPsQhZMo/rAoulnKCgqeFk5qEMToTZUJQKQv3vVBzczYBd4i5 w+glKyLnICMI9PrgcglRVgJROT4QKeyJHEU5/Y/+lKMKj2QV72Vq+hdGSSGd4tDa gO36CKH7LZU= -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:00 2026 by rpki-client