This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/avB3BJTEosYtGqAqX_I_e46zMIo.roa File: avB3BJTEosYtGqAqX_I_e46zMIo.roa (raw, json) Hash identifier: tQdZzTA0pjh0uRVc3g5OMEZULnG07QAexhOO4lWbwiM= Subject key identifier: 6A:F0:77:04:94:C4:A2:C6:2D:1A:A0:2A:5F:F2:3F:7B:8E:B3:30:8A Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 019B79ED2375032F35DAEBBF80F0AED4A0E0 Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/avB3BJTEosYtGqAqX_I_e46zMIo.roa Signing time: Thu 01 Jan 2026 14:19:02 +0000 ROA not before: Thu 01 Jan 2026 14:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212383 IP address blocks: 94.188.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:23:75:03:2f:35:da:eb:bf:80:f0:ae:d4:a0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Jan 1 14:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6af0770494c4a2c62d1aa02a5ff23f7b8eb3308a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:05:83:6c:7d:76:ea:07:20:7c:51:9e:c4:d1: 24:2a:04:87:24:d6:b0:74:7c:b6:f5:50:38:b0:75: 2f:4c:f0:9e:bc:41:f7:6b:5f:dc:32:7f:ef:ee:df: c4:28:55:27:da:43:67:c6:05:88:5c:b3:e3:03:0b: 5f:eb:e9:4e:3b:24:54:a0:46:b8:87:7c:9a:7f:8a: 6a:52:c6:23:90:06:6c:58:a8:78:09:f5:f6:c4:3b: 9e:11:e2:2c:7e:da:f6:4c:6f:b2:bf:d5:c8:48:6d: 78:30:b4:4d:c3:96:f6:0c:c1:be:83:d0:99:89:4a: 33:97:b8:52:fb:83:26:c4:86:e3:9e:86:75:80:6f: 2e:97:76:9a:54:8a:f4:67:0d:df:6e:6c:ec:60:86: 42:cd:5f:ef:8d:f5:cf:a0:21:58:bd:df:ac:be:79: 52:c9:33:88:77:23:ab:82:84:a8:13:7d:ff:68:de: 5b:ff:ca:a7:35:dc:17:89:c4:e4:33:75:9e:72:26: bb:bd:03:04:c5:83:39:e8:36:84:2d:12:76:24:44: 55:31:cd:db:db:f0:ad:c4:bb:0a:2a:0d:cc:38:ec: 66:4f:c7:aa:68:83:13:e9:73:ba:f0:39:af:22:27: 47:a0:47:91:03:39:6c:dd:d3:8e:ef:64:12:2e:25: 23:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F0:77:04:94:C4:A2:C6:2D:1A:A0:2A:5F:F2:3F:7B:8E:B3:30:8A X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/avB3BJTEosYtGqAqX_I_e46zMIo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.188.249.0/24 Signature Algorithm: sha256WithRSAEncryption 87:84:70:c9:d4:45:2a:2d:83:3a:24:27:47:79:95:72:21:e8: ee:86:6a:a3:27:99:94:7f:19:1e:c0:73:85:09:3c:da:96:5c: f2:4c:fd:c7:89:ae:99:80:94:53:e5:e5:bc:97:ef:b3:82:1d: c0:4a:b2:68:37:75:c8:93:de:2b:17:35:0d:5d:8e:00:be:e4: 74:c1:f6:86:e2:10:da:23:01:55:b5:13:25:5b:b2:11:6f:cd: 9c:fd:72:82:9f:f7:2f:f1:84:cb:dd:28:66:dd:9b:bc:c9:56: 59:83:e7:4d:39:9d:9e:e7:67:3c:20:fd:15:3c:20:4b:85:29: 4f:eb:a0:0b:01:ac:da:24:86:19:b8:fc:ea:4f:0d:f3:ab:9e: 68:8e:8e:f1:79:67:e4:21:9e:e1:e1:20:73:09:2a:4e:a7:54: 41:5e:94:78:5e:05:15:8e:98:3c:93:90:db:9a:da:03:50:43: 40:ad:49:4c:17:63:ad:6c:13:1d:0f:ea:36:a6:6b:e1:55:9f: c6:81:73:13:8b:f5:99:df:9d:9f:43:e5:7e:b5:f7:7c:4d:12: f4:a4:46:b3:93:ce:f4:d0:1f:8c:00:48:55:15:0e:67:4e:b8: a3:03:0e:00:3d:c5:83:21:cd:7a:66:58:5a:3a:84:20:36:a9: a0:d3:6c:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57SN1Ay812uu/gPCu1KDgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjYwMTAxMTQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWYwNzcwNDk0YzRhMmM2MmQxYWEwMmE1ZmYyM2Y3YjhlYjMzMDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AWDbH126gcgfFGexNEkKgSHJNaw dHy29VA4sHUvTPCevEH3a1/cMn/v7t/EKFUn2kNnxgWIXLPjAwtf6+lOOyRUoEa4 h3yaf4pqUsYjkAZsWKh4CfX2xDueEeIsftr2TG+yv9XISG14MLRNw5b2DMG+g9CZ iUozl7hS+4MmxIbjnoZ1gG8ul3aaVIr0Zw3fbmzsYIZCzV/vjfXPoCFYvd+svnlS yTOIdyOrgoSoE33/aN5b/8qnNdwXicTkM3Wecia7vQMExYM56DaELRJ2JERVMc3b 2/CtxLsKKg3MOOxmT8eqaIMT6XO68DmvIidHoEeRAzls3dOO72QSLiUjHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGrwdwSUxKLGLRqgKl/yP3uOszCKMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvYXZCM0JKVEVvc1l0R3FBcVhfSV9lNDZ6TUlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrz5MA0G CSqGSIb3DQEBCwUAA4IBAQCHhHDJ1EUqLYM6JCdHeZVyIejuhmqjJ5mUfxkewHOF CTzallzyTP3Hia6ZgJRT5eW8l++zgh3ASrJoN3XIk94rFzUNXY4AvuR0wfaG4hDa IwFVtRMlW7IRb82c/XKCn/cv8YTL3Shm3Zu8yVZZg+dNOZ2e52c8IP0VPCBLhSlP 66ALAazaJIYZuPzqTw3zq55ojo7xeWfkIZ7h4SBzCSpOp1RBXpR4XgUVjpg8k5Db mtoDUENArUlMF2OtbBMdD+o2pmvhVZ/GgXMTi/WZ352fQ+V+tfd8TRL0pEazk870 0B+MAEhVFQ5nTrijAw4APcWDIc16ZlhaOoQgNqmg02zL -----END CERTIFICATE-----Generated at Sun Jan 25 08:51:37 2026 by rpki-client