This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/axYuvA_IMKhkXuc6tRXhlKz3RRY.roa File: axYuvA_IMKhkXuc6tRXhlKz3RRY.roa (raw, json) Hash identifier: AwD9qt83+cS+6XicWrhYgc1AHug+bQVZTsrb4VEe+DQ= Subject key identifier: 6B:16:2E:BC:0F:C8:30:A8:64:5E:E7:3A:B5:15:E1:94:AC:F7:45:16 Certificate issuer: /CN=4d88eb730ab1a501ea36ea3482d764544e141111 Certificate serial: 019B797EE10963FA794D5B7F911E253331DA Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/axYuvA_IMKhkXuc6tRXhlKz3RRY.roa Signing time: Thu 01 Jan 2026 12:18:36 +0000 ROA not before: Thu 01 Jan 2026 12:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62563 IP address blocks: 185.225.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e1:09:63:fa:79:4d:5b:7f:91:1e:25:33:31:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111 Validity Not Before: Jan 1 12:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b162ebc0fc830a8645ee73ab515e194acf74516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:07:1c:1d:d5:de:37:71:d2:39:ba:4f:ae:a0: 94:86:f1:e8:70:ac:75:d9:b9:07:53:41:4d:26:aa: dc:ab:de:83:70:b8:e4:f3:0c:83:cb:ae:68:d2:c3: 11:52:2c:de:73:4a:09:81:f2:7a:d4:2c:2c:8c:61: 19:ce:52:7c:98:b4:0f:b1:47:c9:dd:f6:ee:f6:e6: 8a:5b:e4:a3:fa:9e:ac:fe:86:1f:c5:bf:fc:79:e4: 24:a8:f8:08:2e:62:1a:b8:43:7d:08:b7:a2:61:03: 68:6b:60:f8:16:f6:c0:49:03:69:5d:17:22:4b:30: b6:be:5f:6a:4f:b2:4a:3d:50:1c:87:0c:e2:6a:42: 5a:06:e4:86:e5:fc:74:5a:bd:f7:79:b0:16:40:b1: 1c:bf:63:b8:21:71:d3:59:d0:f8:09:f0:7d:a4:6c: 8d:c1:14:4a:b9:a6:a6:0e:ab:05:ab:d4:ae:f9:c5: 4a:02:32:39:f9:5c:ff:53:4a:e2:10:1c:9b:18:d9: de:67:75:68:93:e4:d0:16:5f:9e:35:67:71:ce:c9: b6:56:47:0b:76:8c:a0:72:f5:05:15:33:54:d3:ed: 1f:f2:92:cc:8d:b5:dd:b6:14:e9:01:55:31:96:5c: 27:b9:34:43:e9:c3:87:6d:fe:8e:14:b8:0f:51:4d: 60:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:16:2E:BC:0F:C8:30:A8:64:5E:E7:3A:B5:15:E1:94:AC:F7:45:16 X509v3 Authority Key Identifier: keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/axYuvA_IMKhkXuc6tRXhlKz3RRY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.236.0/24 Signature Algorithm: sha256WithRSAEncryption ab:1d:46:1d:f8:1b:a8:94:ac:4b:0d:76:7e:52:51:be:01:d8: 7b:7b:1d:2b:6d:0d:c2:f5:4e:80:71:14:78:7e:5b:9c:9d:88: ef:ab:5f:a8:b9:ea:8e:87:da:95:94:0c:3a:58:b3:fb:fe:95: ab:3b:83:85:c2:77:af:e0:98:7c:7f:e1:e3:e7:a2:e1:af:27: 69:d2:c8:3d:46:64:5e:58:5d:da:e5:83:68:21:26:d2:dc:71: ab:79:7d:20:64:f5:34:71:ac:14:b9:46:79:b7:7d:50:ce:13: b1:57:af:37:42:34:36:33:00:79:1c:a9:c6:97:69:0c:f2:d5: 11:cb:20:ed:66:3d:2a:3a:a8:28:9e:e4:8c:40:b5:32:ff:07: 54:63:6c:1c:a1:6e:1f:eb:fe:a1:51:f6:f2:9a:63:29:1d:32: a6:2d:d7:69:e4:32:82:ba:f0:f5:3b:3b:0d:f3:4a:2d:45:63: 2a:f9:15:e4:4e:29:4e:b6:55:17:4a:70:12:9c:96:ae:83:20: 9e:56:ee:4c:87:27:40:1c:7b:f7:61:b2:89:91:ab:82:f1:59: 34:15:b8:53:73:e9:8b:df:dd:4d:fb:c8:28:05:d3:bf:13:4d: 31:53:d4:37:4a:88:33:aa:8a:50:b7:77:02:dc:0e:a4:a5:7a: 1d:22:d7:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fuEJY/p5TVt/kR4lMzHaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkODhlYjczMGFiMWE1MDFlYTM2ZWEzNDgyZDc2NDU0NGUx NDExMTEwHhcNMjYwMTAxMTIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjE2MmViYzBmYzgzMGE4NjQ1ZWU3M2FiNTE1ZTE5NGFjZjc0NTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAccHdXeN3HSObpPrqCUhvHocKx1 2bkHU0FNJqrcq96DcLjk8wyDy65o0sMRUizec0oJgfJ61CwsjGEZzlJ8mLQPsUfJ 3fbu9uaKW+Sj+p6s/oYfxb/8eeQkqPgILmIauEN9CLeiYQNoa2D4FvbASQNpXRci SzC2vl9qT7JKPVAchwziakJaBuSG5fx0Wr33ebAWQLEcv2O4IXHTWdD4CfB9pGyN wRRKuaamDqsFq9Su+cVKAjI5+Vz/U0riEBybGNneZ3Vok+TQFl+eNWdxzsm2VkcL doygcvUFFTNU0+0f8pLMjbXdthTpAVUxllwnuTRD6cOHbf6OFLgPUU1gJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGsWLrwPyDCoZF7nOrUV4ZSs90UWMB8GA1UdIwQY MBaAFE2I63MKsaUB6jbqNILXZFROFBERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNDkzZWUtZjY2ZS00MjA4LWEzMWQt NzI2ZjgzZDIzODkyLzEvYXhZdXZBX0lNS2hrWHVjNnRSWGhsS3ozUlJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9jNDkzZWUtZjY2ZS00MjA4LWEzMWQtNzI2ZjgzZDIzODky LzEvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueHsMA0G CSqGSIb3DQEBCwUAA4IBAQCrHUYd+BuolKxLDXZ+UlG+Adh7ex0rbQ3C9U6AcRR4 flucnYjvq1+oueqOh9qVlAw6WLP7/pWrO4OFwnev4Jh8f+Hj56Lhrydp0sg9RmRe WF3a5YNoISbS3HGreX0gZPU0cawUuUZ5t31QzhOxV683QjQ2MwB5HKnGl2kM8tUR yyDtZj0qOqgonuSMQLUy/wdUY2wcoW4f6/6hUfbymmMpHTKmLddp5DKCuvD1OzsN 80otRWMq+RXkTilOtlUXSnASnJaugyCeVu5MhydAHHv3YbKJkauC8Vk0FbhTc+mL 391N+8goBdO/E00xU9Q3SogzqopQt3cC3A6kpXodItfX -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:15 2026 by rpki-client