This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/aYQxoRoWw7UhRFpesPJdzSPKhT8.roa File: aYQxoRoWw7UhRFpesPJdzSPKhT8.roa (raw, json) Hash identifier: Zau4E8bei6V3/G4czsISvKpeXmox3o9nS8deWO7eZlo= Subject key identifier: 69:84:31:A1:1A:16:C3:B5:21:44:5A:5E:B0:F2:5D:CD:23:CA:85:3F Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84FF91ADE9D422673E4118D3007030 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/aYQxoRoWw7UhRFpesPJdzSPKhT8.roa Signing time: Fri 02 Jan 2026 16:23:01 +0000 ROA not before: Fri 02 Jan 2026 16:23:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207415 IP address blocks: 146.120.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ff:91:ad:e9:d4:22:67:3e:41:18:d3:00:70:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=698431a11a16c3b521445a5eb0f25dcd23ca853f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9a:6c:f3:36:57:bf:f0:bf:3a:19:97:f8:94: 91:1e:5d:d1:4c:36:7c:54:24:85:34:ba:87:07:4b: 57:d8:8c:ae:5c:df:39:f8:83:ee:e0:c4:d9:51:9d: c7:d4:a2:e4:b3:1d:4f:7d:7c:e8:27:8e:15:c7:51: 76:32:d2:67:83:51:3f:37:0c:6c:ee:64:4c:a2:55: 9e:d6:7c:99:0f:a5:e5:f6:fd:56:a6:1c:05:7d:af: d3:2d:56:90:91:0d:4c:3c:b6:35:19:8d:a0:4e:d9: eb:1a:79:45:e5:fc:44:7e:dd:47:ad:df:7b:ff:0c: fe:31:e3:1f:66:4a:5b:88:ce:05:c9:ad:b4:55:4c: d8:c7:44:66:a6:b4:e7:6b:0b:99:f1:15:86:6f:7b: b6:e9:28:0d:27:cb:84:a5:06:cd:52:87:f5:8d:f1: 7d:2a:99:d6:2e:d1:fd:34:97:6d:de:f6:45:29:91: 72:bd:f6:95:90:93:ed:9e:3e:2d:da:51:ca:bc:c9: 5b:37:2b:ee:3a:e5:da:60:30:38:00:7c:3c:1a:2c: ed:18:8f:6f:23:bb:1a:f6:e5:02:b6:08:f8:8b:2d: 4f:0d:ee:4f:c5:d3:bc:74:08:d6:bf:13:d7:34:b7: af:81:e7:95:37:81:bf:b3:fc:db:fd:64:ab:ff:f7: a0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:84:31:A1:1A:16:C3:B5:21:44:5A:5E:B0:F2:5D:CD:23:CA:85:3F X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/aYQxoRoWw7UhRFpesPJdzSPKhT8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.120.234.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:92:85:a5:b0:76:d8:ab:f3:12:b5:cf:46:ce:cc:bc:4c:0e: 4b:76:1d:e1:5d:7d:0e:ed:1b:8b:1d:5b:d5:65:a8:28:4f:02: 65:fa:4e:bb:8a:e5:cb:6a:6c:f0:08:22:c5:be:1b:0f:fd:e7: a3:38:99:49:81:eb:84:8c:cd:b8:ab:b2:20:5f:61:b1:12:a2: 0f:67:33:a2:bf:88:45:e7:72:11:27:47:04:d7:67:4d:af:ef: e7:4c:3e:f1:bf:62:28:5c:ae:8a:38:9f:89:c5:48:07:87:54: 9b:e7:fd:c7:07:2c:5e:3d:c9:ac:6b:d7:25:f2:18:1b:1e:cb: 92:ab:3e:5e:a9:04:23:64:27:bd:42:5e:0a:26:5d:92:a1:ff: cd:3b:aa:c3:96:6a:dd:7d:cb:d1:5b:c5:ff:48:e5:89:b8:ce: 62:98:bc:db:1f:dc:8b:54:01:8f:e3:42:e7:a6:34:0c:64:fe: c7:86:f7:b3:4b:02:da:d0:4e:8f:32:45:48:d6:be:fb:99:8f: c2:96:30:6e:43:4b:53:4b:fe:f5:e2:36:ea:1d:19:0f:6c:0b: 43:d5:7a:60:97:50:a2:e3:61:92:dc:f7:ef:c2:11:90:9f:fc: 9b:1d:8e:00:98:e5:71:2e:cd:6a:b3:b9:ac:37:f1:2f:d9:8a: b7:aa:63:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hP+RrenUImc+QRjTAHAwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTg0MzFhMTFhMTZjM2I1MjE0NDVhNWViMGYyNWRjZDIzY2E4NTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Zps8zZXv/C/OhmX+JSRHl3RTDZ8 VCSFNLqHB0tX2IyuXN85+IPu4MTZUZ3H1KLksx1PfXzoJ44Vx1F2MtJng1E/Nwxs 7mRMolWe1nyZD6Xl9v1WphwFfa/TLVaQkQ1MPLY1GY2gTtnrGnlF5fxEft1Hrd97 /wz+MeMfZkpbiM4Fya20VUzYx0RmprTnawuZ8RWGb3u26SgNJ8uEpQbNUof1jfF9 KpnWLtH9NJdt3vZFKZFyvfaVkJPtnj4t2lHKvMlbNyvuOuXaYDA4AHw8GiztGI9v I7sa9uUCtgj4iy1PDe5PxdO8dAjWvxPXNLevgeeVN4G/s/zb/WSr//egywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGmEMaEaFsO1IURaXrDyXc0jyoU/MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvYVlReG9Sb1d3N1VoUkZwZXNQSmR6U1BLaFQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBknjqMA0G CSqGSIb3DQEBCwUAA4IBAQBekoWlsHbYq/MStc9Gzsy8TA5Ldh3hXX0O7RuLHVvV ZagoTwJl+k67iuXLamzwCCLFvhsP/eejOJlJgeuEjM24q7IgX2GxEqIPZzOiv4hF 53IRJ0cE12dNr+/nTD7xv2IoXK6KOJ+JxUgHh1Sb5/3HByxePcmsa9cl8hgbHsuS qz5eqQQjZCe9Ql4KJl2Sof/NO6rDlmrdfcvRW8X/SOWJuM5imLzbH9yLVAGP40Ln pjQMZP7HhvezSwLa0E6PMkVI1r77mY/CljBuQ0tTS/714jbqHRkPbAtD1Xpgl1Ci 42GS3PfvwhGQn/ybHY4AmOVxLs1qs7msN/Ev2Yq3qmOV -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:48 2026 by rpki-client