This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/ATx_EPHk5Vz1v-SpkJd7Yp6y99I.roa File: ATx_EPHk5Vz1v-SpkJd7Yp6y99I.roa (raw, json) Hash identifier: wd0rlsu9n+czEzHQALtAg7xmPAM6xOroSrrnXWF3Lfo= Subject key identifier: 01:3C:7F:10:F1:E4:E5:5C:F5:BF:E4:A9:90:97:7B:62:9E:B2:F7:D2 Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318 Certificate serial: 019B7EA745D7079E415E6746B709D13BE622 Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/ATx_EPHk5Vz1v-SpkJd7Yp6y99I.roa Signing time: Fri 02 Jan 2026 12:20:49 +0000 ROA not before: Fri 02 Jan 2026 12:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9053 IP address blocks: 185.115.0.0/24 maxlen: 24 2a02:5420:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:45:d7:07:9e:41:5e:67:46:b7:09:d1:3b:e6:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318 Validity Not Before: Jan 2 12:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=013c7f10f1e4e55cf5bfe4a990977b629eb2f7d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:80:08:4d:2e:fc:73:c3:bc:1b:25:20:57:83: f2:4f:31:aa:26:6e:88:7c:42:99:cd:51:26:99:d0: 1c:16:e5:d1:dc:6d:c0:9f:d5:3a:ff:0e:95:b6:ff: f7:a0:f8:7c:53:1d:b1:b4:0c:fe:3c:71:5b:06:3c: 95:90:1d:47:1e:ce:82:d7:ae:93:e9:fb:c9:88:44: e0:fe:fd:4e:b2:73:b3:af:24:c4:07:e1:ad:70:6e: dd:f2:e8:a3:56:48:c3:2b:04:24:7c:bd:f2:b5:fe: ce:c3:af:3d:4b:bf:a4:59:ec:00:b3:6d:bf:c7:cc: a8:85:f6:01:9c:45:4b:ca:cb:e5:01:a8:ef:36:33: d1:82:9f:d7:08:2f:bb:fd:c4:99:ff:44:b9:2c:3f: c2:80:73:d1:f9:b9:49:15:5d:16:4e:63:93:8d:6d: 07:01:75:1e:7f:55:be:14:ac:a8:f2:7c:3c:50:5b: 2e:b2:db:5c:e3:54:1e:5e:5b:72:4c:3b:5a:19:81: 1a:9c:9d:c1:c8:c5:67:dc:16:af:27:8c:9e:fa:b1: f9:2a:4e:86:a4:cf:7b:d8:a5:2e:a1:c7:5a:70:3c: 09:9d:6d:43:46:da:5b:d1:97:cf:d4:ad:cb:a2:a4: 8f:d1:2a:57:40:96:35:eb:7d:d9:78:74:f4:13:2d: f5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:3C:7F:10:F1:E4:E5:5C:F5:BF:E4:A9:90:97:7B:62:9E:B2:F7:D2 X509v3 Authority Key Identifier: keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/ATx_EPHk5Vz1v-SpkJd7Yp6y99I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.115.0.0/24 IPv6: 2a02:5420:1::/48 Signature Algorithm: sha256WithRSAEncryption 03:7f:1d:95:80:6e:26:10:0a:4d:be:73:13:9f:82:1f:19:52: 36:b4:54:25:e3:1d:b4:8f:dd:5a:a7:d0:98:56:75:29:a7:ab: bc:da:e6:db:b9:26:98:34:28:f4:65:e6:e8:e9:c0:8c:84:54: 54:aa:70:a5:f8:d2:8b:c3:a4:bb:96:2c:50:63:a2:19:b1:ae: b4:26:d7:67:f6:ac:2a:05:a9:19:2f:74:57:be:da:0f:fe:cb: c8:75:71:29:37:f8:61:56:be:80:f1:ff:94:ab:dd:7f:30:4a: 1e:b6:25:1c:7f:00:71:9e:46:6b:52:41:d2:16:77:0c:27:69: 29:3d:3e:dd:43:b5:49:fa:78:8d:79:16:36:3c:d1:4d:96:8d: 52:f3:8c:53:e4:cd:75:ea:56:bd:a3:a8:b2:93:64:a0:90:37: af:40:d0:7e:18:34:fc:66:76:f6:10:34:51:b4:a5:36:4e:76: 7d:8e:b5:f9:8d:6d:66:7f:ce:f3:f9:d7:37:70:a4:37:c8:1f: 36:f0:b0:db:ce:7e:6f:51:13:92:b0:3d:6d:80:1f:2a:d4:47: ee:51:74:b6:45:79:5c:57:4f:5d:a4:22:82:d4:20:9d:01:ab: 3c:f2:d1:d9:0d:4c:36:7b:8d:24:53:99:bd:64:ef:20:4f:70: 2a:9b:e3:7a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+p0XXB55BXmdGtwnRO+YiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNjVkYWIyMzk0MGNiMzk0ZjlhYWE2NjRmZWE0ZDZmOGY0 MmUzMTgwHhcNMjYwMTAyMTIyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTNjN2YxMGYxZTRlNTVjZjViZmU0YTk5MDk3N2I2MjllYjJmN2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIAITS78c8O8GyUgV4PyTzGqJm6I fEKZzVEmmdAcFuXR3G3An9U6/w6Vtv/3oPh8Ux2xtAz+PHFbBjyVkB1HHs6C166T 6fvJiETg/v1OsnOzryTEB+GtcG7d8uijVkjDKwQkfL3ytf7Ow689S7+kWewAs22/ x8yohfYBnEVLysvlAajvNjPRgp/XCC+7/cSZ/0S5LD/CgHPR+blJFV0WTmOTjW0H AXUef1W+FKyo8nw8UFsusttc41QeXltyTDtaGYEanJ3ByMVn3BavJ4ye+rH5Kk6G pM972KUuocdacDwJnW1DRtpb0ZfP1K3LoqSP0SpXQJY1633ZeHT0Ey316wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAE8fxDx5OVc9b/kqZCXe2KesvfSMB8GA1UdIwQY MBaAFH5l2rI5QMs5T5qqZk/qTW+PQuMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYt ODQ5Y2ZjYWJiNjU3LzEvQVR4X0VQSGs1Vnoxdi1TcGtKZDdZcDZ5OTlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYtODQ5Y2ZjYWJiNjU3 LzEvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuXMAMA8E AgACMAkDBwAqAlQgAAEwDQYJKoZIhvcNAQELBQADggEBAAN/HZWAbiYQCk2+cxOf gh8ZUja0VCXjHbSP3Vqn0JhWdSmnq7za5tu5Jpg0KPRl5ujpwIyEVFSqcKX40ovD pLuWLFBjohmxrrQm12f2rCoFqRkvdFe+2g/+y8h1cSk3+GFWvoDx/5Sr3X8wSh62 JRx/AHGeRmtSQdIWdwwnaSk9Pt1DtUn6eI15FjY80U2WjVLzjFPkzXXqVr2jqLKT ZKCQN69A0H4YNPxmdvYQNFG0pTZOdn2OtfmNbWZ/zvP51zdwpDfIHzbwsNvOfm9R E5KwPW2AHyrUR+5RdLZFeVxXT12kIoLUIJ0Bqzzy0dkNTDZ7jSRTmb1k7yBPcCqb 43o= -----END CERTIFICATE-----Generated at Mon Jan 26 05:48:56 2026 by rpki-client