This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/AYCqf3M0d0U2_qjOq3RaqTQK8lo.roa File: AYCqf3M0d0U2_qjOq3RaqTQK8lo.roa (raw, json) Hash identifier: 0umZskah+CEr8ip186+RE27wIFvtLRl5c7E3qXa1bJA= Subject key identifier: 01:80:AA:7F:73:34:77:45:36:FE:A8:CE:AB:74:5A:A9:34:0A:F2:5A Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439 Certificate serial: 019B7C7F76980B87169C23F5F961C7494A66 Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/AYCqf3M0d0U2_qjOq3RaqTQK8lo.roa Signing time: Fri 02 Jan 2026 02:18:06 +0000 ROA not before: Fri 02 Jan 2026 02:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30722 IP address blocks: 193.207.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:76:98:0b:87:16:9c:23:f5:f9:61:c7:49:4a:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439 Validity Not Before: Jan 2 02:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0180aa7f7334774536fea8ceab745aa9340af25a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:34:6c:5c:e8:35:ef:16:7c:06:8c:82:b2:0d: ff:3e:c9:18:6e:91:6a:48:7c:04:6e:ac:90:1f:40: ab:f8:59:c9:ed:df:e7:8a:59:46:17:92:2a:00:96: 0e:ab:cc:12:fe:8d:2a:86:23:62:01:a7:c2:c2:8d: 6c:d0:ea:eb:97:98:07:ce:36:92:fa:84:13:0a:2a: 8b:31:cd:49:7d:81:3b:a6:6b:fb:e5:bc:55:ff:c5: 2b:09:37:ea:10:bb:82:4b:7b:65:3a:42:c5:46:a5: f8:81:f4:b4:22:cc:6e:77:9a:95:c2:d6:c9:98:5e: 37:79:3a:ce:1f:ac:78:c3:d7:ed:73:81:7b:5f:87: 5b:f3:f9:6b:96:3f:18:5b:b9:d8:cc:f3:d1:73:42: 65:74:e3:88:9c:a8:78:cb:13:25:6d:b8:c0:7b:6c: bb:16:0e:b2:6d:9e:f2:92:fa:24:23:b7:a1:af:3e: e0:53:78:b5:4e:d8:80:45:e2:bd:b7:44:21:21:eb: 31:d3:2f:be:a9:64:89:f7:ea:46:af:ad:ad:4a:d5: e1:0e:c8:fb:76:b7:64:79:55:30:e6:2d:3f:cc:b8: fa:6c:05:a5:e3:31:21:9f:11:81:60:c2:59:fe:9d: 01:22:a4:ed:00:45:0d:0f:a1:45:c5:34:9b:80:21: da:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:80:AA:7F:73:34:77:45:36:FE:A8:CE:AB:74:5A:A9:34:0A:F2:5A X509v3 Authority Key Identifier: keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/AYCqf3M0d0U2_qjOq3RaqTQK8lo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.207.27.0/24 Signature Algorithm: sha256WithRSAEncryption 53:69:e2:73:29:78:22:49:23:14:e9:50:40:28:e0:01:c4:6e: 7e:4b:09:c7:dc:ea:75:0e:cd:be:ab:bb:52:39:1d:a3:dd:38: 58:57:8d:cd:c9:54:5f:cd:71:20:6e:b3:46:01:ff:ed:46:4e: a5:9a:67:6d:55:16:19:d8:0c:d5:8b:0e:98:42:8f:57:70:99: 0e:58:17:9f:79:77:85:2b:3c:58:fb:5c:0f:1c:17:98:ef:b6: 30:f2:53:f0:30:92:98:58:d6:84:e2:8d:f9:dc:ed:cf:ba:5d: c8:d7:7d:e7:7f:9c:e8:84:b7:01:c2:7a:49:1b:0e:ce:6e:1b: 52:fe:7c:6f:5d:88:d0:3e:14:4b:f2:0f:00:0c:5f:eb:ea:99: 24:9e:6f:69:8a:f2:3e:23:da:f7:4c:92:14:55:37:3d:25:a7: 53:3d:80:29:11:53:42:cc:85:ec:3d:90:03:73:66:16:ec:07: a0:9e:18:a1:06:06:cb:77:9a:d1:32:47:02:5f:66:d0:c2:c5: 46:5c:62:49:51:56:de:5d:3f:6f:6c:3d:9b:f2:ac:64:bf:71: 85:59:d3:e2:b0:d9:00:ae:16:9d:0d:0d:94:6a:fe:67:c9:b8: 63:40:09:01:5d:b2:c9:68:e7:48:42:52:5e:88:25:12:8e:de: 7f:d8:e8:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f3aYC4cWnCP1+WHHSUpmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYjg2OTgzNTQ3MTEzMzU5YmFkZTFmM2YzODEwNDA5MWUz YTY0MzkwHhcNMjYwMTAyMDIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTgwYWE3ZjczMzQ3NzQ1MzZmZWE4Y2VhYjc0NWFhOTM0MGFmMjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDRsXOg17xZ8BoyCsg3/PskYbpFq SHwEbqyQH0Cr+FnJ7d/nillGF5IqAJYOq8wS/o0qhiNiAafCwo1s0Orrl5gHzjaS +oQTCiqLMc1JfYE7pmv75bxV/8UrCTfqELuCS3tlOkLFRqX4gfS0Isxud5qVwtbJ mF43eTrOH6x4w9ftc4F7X4db8/lrlj8YW7nYzPPRc0JldOOInKh4yxMlbbjAe2y7 Fg6ybZ7ykvokI7ehrz7gU3i1TtiAReK9t0QhIesx0y++qWSJ9+pGr62tStXhDsj7 drdkeVUw5i0/zLj6bAWl4zEhnxGBYMJZ/p0BIqTtAEUND6FFxTSbgCHa2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAGAqn9zNHdFNv6ozqt0Wqk0CvJaMB8GA1UdIwQY MBaAFM64aYNUcRM1m63h8/OBBAkeOmQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenJocGcxUnhFeldicmVIejg0RUVDUjQ2WkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMzUzOWQtMzhjZC00NjVlLWE1N2Qt ZGVlMmY2NTBkZDg2LzEvQVlDcWYzTTBkMFUyX3FqT3EzUmFxVFFLOGxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9mMzUzOWQtMzhjZC00NjVlLWE1N2QtZGVlMmY2NTBkZDg2 LzEvenJocGcxUnhFeldicmVIejg0RUVDUjQ2WkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwc8bMA0G CSqGSIb3DQEBCwUAA4IBAQBTaeJzKXgiSSMU6VBAKOABxG5+SwnH3Op1Ds2+q7tS OR2j3ThYV43NyVRfzXEgbrNGAf/tRk6lmmdtVRYZ2AzViw6YQo9XcJkOWBefeXeF KzxY+1wPHBeY77Yw8lPwMJKYWNaE4o353O3Pul3I133nf5zohLcBwnpJGw7ObhtS /nxvXYjQPhRL8g8ADF/r6pkknm9pivI+I9r3TJIUVTc9JadTPYApEVNCzIXsPZAD c2YW7AegnhihBgbLd5rRMkcCX2bQwsVGXGJJUVbeXT9vbD2b8qxkv3GFWdPisNkA rhadDQ2Uav5nybhjQAkBXbLJaOdIQlJeiCUSjt5/2Ojw -----END CERTIFICATE-----Generated at Sun Jan 25 16:37:55 2026 by rpki-client