This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/ay0zAsb-sMRwuqTNi_w0IDfhaZI.roa File: ay0zAsb-sMRwuqTNi_w0IDfhaZI.roa (raw, json) Hash identifier: 3u1jyhcVn10YQbx/gEpZqXx9qUydqj7K6pIwggoaC9c= Subject key identifier: 6B:2D:33:02:C6:FE:B0:C4:70:BA:A4:CD:8B:FC:34:20:37:E1:69:92 Certificate issuer: /CN=7c4b917dc9046a065678ae0df4d3e30369c59c69 Certificate serial: 019B7D5B1AF6E5C1DE5B1A5C82BD4BC0B664 Authority key identifier: 7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/ay0zAsb-sMRwuqTNi_w0IDfhaZI.roa Signing time: Fri 02 Jan 2026 06:18:01 +0000 ROA not before: Fri 02 Jan 2026 06:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42978 IP address blocks: 185.117.13.0/24 maxlen: 24 2a06:8280:10::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:1a:f6:e5:c1:de:5b:1a:5c:82:bd:4b:c0:b6:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4b917dc9046a065678ae0df4d3e30369c59c69 Validity Not Before: Jan 2 06:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b2d3302c6feb0c470baa4cd8bfc342037e16992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:52:ac:8d:87:76:4a:8c:69:65:91:05:ea:ab: 7a:6f:f9:88:e4:e5:9e:de:38:46:f9:3a:9b:a5:e3: 56:13:91:57:5a:a5:0e:84:63:2e:65:bc:dd:40:dc: 67:8d:27:c7:3f:0c:8e:33:1e:4c:89:9e:60:00:6a: ad:32:6a:a9:3a:2f:a6:1a:02:92:0c:95:c0:a8:36: bb:c8:e6:d4:05:7c:3d:29:d8:7b:15:5d:fd:a3:b0: e4:b9:34:43:b3:a5:6a:74:82:ef:d5:33:2a:92:b8: 02:32:cf:11:98:2e:c7:f1:f0:b4:a8:ae:ab:97:5c: 8e:6b:e9:5e:d8:5e:06:b5:ff:12:1d:46:2d:50:ad: e2:f1:33:03:bf:f3:7d:ac:b8:b1:ee:6e:eb:e8:03: 41:f4:c4:b0:67:4c:97:eb:0b:bc:01:27:29:1a:ac: 40:0c:3f:42:dd:cc:78:f1:06:dd:f5:90:fe:36:de: ed:a7:b5:5f:1f:74:53:c2:1d:4f:2b:1d:0a:f0:6a: 27:11:6a:08:97:7c:7d:55:85:f7:d3:88:59:7b:20: e5:58:1d:c1:df:98:0c:d9:70:cc:86:a1:27:d7:c6: 21:b1:7b:fb:85:d1:ac:4e:7d:29:91:7a:8a:5e:63: c5:7a:49:a8:13:7b:43:ce:72:ea:fb:d8:cb:fd:12: 1c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2D:33:02:C6:FE:B0:C4:70:BA:A4:CD:8B:FC:34:20:37:E1:69:92 X509v3 Authority Key Identifier: keyid:7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/ay0zAsb-sMRwuqTNi_w0IDfhaZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.13.0/24 IPv6: 2a06:8280:10::/44 Signature Algorithm: sha256WithRSAEncryption 91:71:82:1e:67:f2:49:da:f4:50:66:2f:4f:4d:66:2a:91:63: 6e:cb:76:7a:11:26:00:56:65:6d:d4:37:3e:94:82:58:f9:27: ce:7d:20:e4:2f:74:63:b3:86:c5:bb:ca:f7:36:62:6e:2a:aa: 65:53:f9:71:e4:27:81:6b:c5:98:0c:6d:98:d4:95:22:bd:40: db:c3:6a:4d:ed:40:3c:76:bd:01:45:28:16:13:e6:60:cf:b5: ad:71:b3:99:d5:2f:da:83:4a:8c:a8:e6:f0:70:3d:03:2e:07: dc:f0:e8:80:38:47:c1:85:4d:5a:2b:63:3d:d9:17:5a:78:f4: 4f:e8:34:55:e8:13:7e:76:ac:75:e2:4c:cc:47:54:e5:97:00: 02:b6:6b:42:3b:74:50:93:ab:63:fc:00:b5:4b:fb:1d:c1:3b: 52:61:81:69:32:7c:76:f3:f8:8c:a1:99:41:25:ab:14:72:5a: de:df:a1:fb:48:60:b5:14:29:5c:8b:2d:5f:80:57:ff:c3:8c: f1:42:17:64:7d:a8:a9:81:b4:e6:3d:41:d4:13:d2:65:24:fe: d9:89:12:c9:81:3b:52:de:83:d0:2f:e2:de:25:a9:81:a2:6e: 42:b4:a0:f1:3e:be:36:ca:5f:e1:1e:57:82:c7:58:88:c7:84: 72:7c:8f:4d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9Wxr25cHeWxpcgr1LwLZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNGI5MTdkYzkwNDZhMDY1Njc4YWUwZGY0ZDNlMzAzNjlj NTljNjkwHhcNMjYwMTAyMDYxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjJkMzMwMmM2ZmViMGM0NzBiYWE0Y2Q4YmZjMzQyMDM3ZTE2OTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFKsjYd2SoxpZZEF6qt6b/mI5OWe 3jhG+TqbpeNWE5FXWqUOhGMuZbzdQNxnjSfHPwyOMx5MiZ5gAGqtMmqpOi+mGgKS DJXAqDa7yObUBXw9Kdh7FV39o7DkuTRDs6VqdILv1TMqkrgCMs8RmC7H8fC0qK6r l1yOa+le2F4Gtf8SHUYtUK3i8TMDv/N9rLix7m7r6ANB9MSwZ0yX6wu8AScpGqxA DD9C3cx48Qbd9ZD+Nt7tp7VfH3RTwh1PKx0K8GonEWoIl3x9VYX304hZeyDlWB3B 35gM2XDMhqEn18YhsXv7hdGsTn0pkXqKXmPFekmoE3tDznLq+9jL/RIc7QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGstMwLG/rDEcLqkzYv8NCA34WmSMB8GA1UdIwQY MBaAFHxLkX3JBGoGVniuDfTT4wNpxZxpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkV1UmZja0VhZ1pXZUs0TjlOUGpBMm5GbkdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84ZDg1ZDctNDA0OS00YjVhLTliZjct OTFjNzBmNjFhMDY3LzEvYXkwekFzYi1zTVJ3dXFUTmlfdzBJRGZoYVpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi84ZDg1ZDctNDA0OS00YjVhLTliZjctOTFjNzBmNjFhMDY3 LzEvZkV1UmZja0VhZ1pXZUs0TjlOUGpBMm5GbkdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuXUNMA8E AgACMAkDBwQqBoKAABAwDQYJKoZIhvcNAQELBQADggEBAJFxgh5n8kna9FBmL09N ZiqRY27LdnoRJgBWZW3UNz6Uglj5J859IOQvdGOzhsW7yvc2Ym4qqmVT+XHkJ4Fr xZgMbZjUlSK9QNvDak3tQDx2vQFFKBYT5mDPta1xs5nVL9qDSoyo5vBwPQMuB9zw 6IA4R8GFTVorYz3ZF1p49E/oNFXoE352rHXiTMxHVOWXAAK2a0I7dFCTq2P8ALVL +x3BO1JhgWkyfHbz+IyhmUElqxRyWt7foftIYLUUKVyLLV+AV//DjPFCF2R9qKmB tOY9QdQT0mUk/tmJEsmBO1Leg9Av4t4lqYGibkK0oPE+vjbKX+EeV4LHWIjHhHJ8 j00= -----END CERTIFICATE-----Generated at Mon Jan 26 07:08:23 2026 by rpki-client