This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/aj3l0yv9XLpdil7kCp_8ryv10IE.roa File: aj3l0yv9XLpdil7kCp_8ryv10IE.roa (raw, json) Hash identifier: PrL6FnkTyQ9oBvc6R+GpyIsFkpSpBE166q8B3+Lb9OA= Subject key identifier: 6A:3D:E5:D3:2B:FD:5C:BA:5D:8A:5E:E4:0A:9F:FC:AF:2B:F5:D0:81 Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41 Certificate serial: 019B7E3889FE48703586EDD769A2052DE666 Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/aj3l0yv9XLpdil7kCp_8ryv10IE.roa Signing time: Fri 02 Jan 2026 10:19:53 +0000 ROA not before: Fri 02 Jan 2026 10:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200361 IP address blocks: 94.155.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:89:fe:48:70:35:86:ed:d7:69:a2:05:2d:e6:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41 Validity Not Before: Jan 2 10:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a3de5d32bfd5cba5d8a5ee40a9ffcaf2bf5d081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:15:6e:86:9c:93:cb:d9:a3:39:6e:97:d7:f1: 63:87:95:4d:7e:70:73:9b:79:f5:23:9f:be:d2:bc: e4:e8:0f:b9:aa:af:2e:11:80:15:59:fe:70:c7:70: 21:aa:e8:de:7f:71:16:b6:61:dd:e9:5a:7c:32:ff: a2:1c:1a:cd:e4:b5:8f:f1:1b:c8:31:b7:96:91:bd: 48:b9:ad:cd:52:c7:1e:ff:f9:58:36:cf:59:9a:7a: 38:77:c4:e1:72:d3:a9:f1:ce:31:d9:18:d6:f9:ee: 6b:99:94:da:77:96:19:99:ac:58:7c:21:65:29:ae: f9:ff:d4:63:3b:6e:8b:0f:c2:bf:d7:63:38:77:ed: fa:0e:c0:41:55:df:bf:b9:39:ec:65:c3:96:87:03: 40:88:07:c0:33:82:57:c8:b6:9a:e3:e9:9f:db:99: ef:87:e7:af:da:cf:d7:60:47:62:97:2a:db:65:95: 88:80:2a:d9:c1:75:0b:c6:84:60:46:b6:66:f7:d3: 60:91:77:9f:9f:4f:8c:8a:8f:e8:b9:5a:d5:1f:10: 54:00:f5:b8:65:1a:a0:c3:f3:f8:c7:43:06:8a:1a: 59:f9:1e:b7:81:b5:52:55:63:2b:c5:a9:25:c0:a4: 91:30:be:15:aa:25:1e:e9:1c:97:7b:e4:9b:49:4a: ea:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:3D:E5:D3:2B:FD:5C:BA:5D:8A:5E:E4:0A:9F:FC:AF:2B:F5:D0:81 X509v3 Authority Key Identifier: keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/aj3l0yv9XLpdil7kCp_8ryv10IE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.155.148.0/24 Signature Algorithm: sha256WithRSAEncryption 18:eb:ff:3c:42:18:e8:2d:30:13:ed:94:58:a0:ac:07:ef:58: ec:86:41:00:7e:d1:2e:f8:75:b7:85:c1:f0:27:f8:b1:a0:d0: 0a:ea:d7:f6:9c:ff:fb:e0:87:ba:2f:2e:ae:50:6a:63:bc:e8: f1:f0:60:a2:d9:56:dc:d2:8f:39:c8:3e:ec:4a:e2:f0:0d:40: 70:61:9c:e3:42:20:1f:2c:8d:29:a9:08:0b:32:47:31:eb:1c: cd:81:25:97:1a:a1:2c:17:a7:8d:c7:06:f8:d7:66:aa:a3:be: 28:6d:22:55:9d:ec:93:fb:43:11:5b:59:3b:02:1c:05:7f:d1: 43:69:c1:5f:17:5a:a9:91:e0:c1:05:88:d5:31:47:59:41:50: ac:79:8d:c6:f5:3b:56:74:73:6e:c7:8c:82:2b:75:b0:49:12: ff:94:59:78:05:3e:f3:d1:ea:86:4a:34:c7:7e:73:e4:7d:73: 28:f3:78:b2:28:1e:4b:32:1e:1a:6a:28:5a:ef:af:24:c0:b3: 23:4d:78:47:9e:46:d4:31:68:29:81:e4:97:9a:e3:3a:58:20: 92:ac:c8:dc:9e:92:63:99:27:3e:ad:44:84:10:fe:23:99:53: e6:f6:83:5c:4a:9d:19:a6:39:d9:cd:ef:01:a0:04:e7:44:ac: 03:66:8a:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OIn+SHA1hu3XaaIFLeZmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwN2Q3NTczYWFjYWU4MjFjODdkNmQzNjQzMWNmZTRiMjgw MWFiNDEwHhcNMjYwMTAyMTAxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTNkZTVkMzJiZmQ1Y2JhNWQ4YTVlZTQwYTlmZmNhZjJiZjVkMDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxVuhpyTy9mjOW6X1/Fjh5VNfnBz m3n1I5++0rzk6A+5qq8uEYAVWf5wx3Ahqujef3EWtmHd6Vp8Mv+iHBrN5LWP8RvI MbeWkb1Iua3NUsce//lYNs9Zmno4d8ThctOp8c4x2RjW+e5rmZTad5YZmaxYfCFl Ka75/9RjO26LD8K/12M4d+36DsBBVd+/uTnsZcOWhwNAiAfAM4JXyLaa4+mf25nv h+ev2s/XYEdilyrbZZWIgCrZwXULxoRgRrZm99NgkXefn0+Mio/ouVrVHxBUAPW4 ZRqgw/P4x0MGihpZ+R63gbVSVWMrxaklwKSRML4VqiUe6RyXe+SbSUrqiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGo95dMr/Vy6XYpe5Aqf/K8r9dCBMB8GA1UdIwQY MBaAFNB9dXOqyughyH1tNkMc/ksoAatBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjIt Y2Y5ZGM1YmFhYTc5LzEvYWozbDB5djlYTHBkaWw3a0NwXzhyeXYxMElFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjItY2Y5ZGM1YmFhYTc5 LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpuUMA0G CSqGSIb3DQEBCwUAA4IBAQAY6/88QhjoLTAT7ZRYoKwH71jshkEAftEu+HW3hcHw J/ixoNAK6tf2nP/74Ie6Ly6uUGpjvOjx8GCi2Vbc0o85yD7sSuLwDUBwYZzjQiAf LI0pqQgLMkcx6xzNgSWXGqEsF6eNxwb412aqo74obSJVneyT+0MRW1k7AhwFf9FD acFfF1qpkeDBBYjVMUdZQVCseY3G9TtWdHNux4yCK3WwSRL/lFl4BT7z0eqGSjTH fnPkfXMo83iyKB5LMh4aaiha768kwLMjTXhHnkbUMWgpgeSXmuM6WCCSrMjcnpJj mSc+rUSEEP4jmVPm9oNcSp0ZpjnZze8BoATnRKwDZooX -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:21 2026 by rpki-client