This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/AX1eDcHjbt_-Dpwuu3lyA8AtxsI.roa File: AX1eDcHjbt_-Dpwuu3lyA8AtxsI.roa (raw, json) Hash identifier: OZ6QBv+zxDqSDgPNFre5KHlZb7+L1tiUGuy777egw9o= Subject key identifier: 01:7D:5E:0D:C1:E3:6E:DF:FE:0E:9C:2E:BB:79:72:03:C0:2D:C6:C2 Certificate issuer: /CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1 Certificate serial: 019AB601145619D3C5D850E2055DB497D89C Authority key identifier: 8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/AX1eDcHjbt_-Dpwuu3lyA8AtxsI.roa Signing time: Mon 24 Nov 2025 13:15:15 +0000 ROA not before: Mon 24 Nov 2025 13:15:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13448 IP address blocks: 157.167.1.0/24 maxlen: 24 157.167.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:01:14:56:19:d3:c5:d8:50:e2:05:5d:b4:97:d8:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1 Validity Not Before: Nov 24 13:15:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=017d5e0dc1e36edffe0e9c2ebb797203c02dc6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:28:48:f9:59:18:c5:70:da:28:98:08:92:38: 30:28:50:00:cc:5f:b4:04:71:c1:02:8e:b6:a5:ff: 83:e6:87:b7:02:5e:62:f4:5a:67:19:fb:e5:77:dd: 5c:39:08:84:e3:2d:b9:52:ff:fc:9a:8e:e0:ff:7c: d9:86:39:2e:d4:37:22:ce:75:8b:ee:e1:f4:61:6c: 4f:c3:9a:1d:3a:35:3b:e6:a2:05:b7:9e:e3:e6:3e: f0:d3:87:56:02:b5:c0:53:cc:47:fa:63:4a:70:75: a3:91:03:4d:5c:ef:fe:ea:29:9c:7e:49:7e:ca:13: 1c:aa:39:22:15:6f:ee:a1:4c:d0:bf:77:28:55:45: 00:65:67:9e:e7:a6:fd:ac:d7:57:fc:93:78:42:dd: 82:e3:62:6e:dc:4d:2e:2e:2f:7f:67:5d:2e:78:e6: 4d:a5:59:ac:96:0d:28:df:25:a3:f8:74:ef:90:55: 10:44:16:d2:17:d5:d8:ae:66:d6:e2:80:4b:b9:40: 45:10:25:bb:5d:aa:6a:ee:fd:7e:8c:3c:21:81:1b: f6:fc:14:32:0a:1d:9f:ea:06:91:ef:8f:ba:26:3a: 26:90:77:22:7c:d1:f0:b0:0f:44:a5:ae:6c:a8:ac: 60:05:e0:ff:ba:c4:89:9d:d4:f7:98:5d:31:d0:21: 4a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7D:5E:0D:C1:E3:6E:DF:FE:0E:9C:2E:BB:79:72:03:C0:2D:C6:C2 X509v3 Authority Key Identifier: keyid:8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/AX1eDcHjbt_-Dpwuu3lyA8AtxsI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.167.1.0/24 157.167.3.0/24 Signature Algorithm: sha256WithRSAEncryption 39:aa:97:72:78:c1:59:54:f6:32:b8:80:ec:42:5c:b0:0e:12: 10:04:9e:df:6d:31:15:10:79:ae:cf:da:3d:b2:9f:a5:20:eb: 78:6a:6c:53:f5:bb:0e:92:f2:a5:be:69:4b:17:04:7e:f1:51: 63:ed:b8:ab:eb:3e:93:c2:7a:a9:dd:15:88:e5:43:fb:75:e8: cb:2a:45:a6:e6:ad:f1:d1:2d:4a:54:64:2e:64:d8:c3:60:b5: 29:82:1f:d7:ce:3f:0f:41:a0:7a:b1:93:be:56:e3:9c:5f:ff: 42:80:bd:46:7f:b6:a9:57:4e:c6:eb:d4:ce:9f:d1:29:c9:06: 3a:ac:4d:be:7d:7f:67:0e:9c:f1:f5:75:d8:ec:a9:25:5a:54: 12:b0:66:01:3e:04:b2:80:7c:7c:18:43:fe:8f:2c:f5:00:fb: cc:58:25:06:39:66:44:3d:4c:c6:3b:6d:f4:89:e9:29:60:1e: a0:fa:09:41:be:43:52:2d:7d:c0:d9:8a:58:3b:bd:26:22:b0: 7a:bf:2c:3a:de:29:de:6b:76:68:cf:ce:bb:76:5d:51:99:91: 78:41:12:63:d9:5e:57:6a:6b:5c:9b:36:e6:3d:49:b3:52:2a: f7:c4:46:cf:ca:dd:50:c3:d3:de:e5:bb:22:79:4c:72:03:98: d5:97:eb:0b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZq2ARRWGdPF2FDiBV20l9icMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNTFhYWQwZTQxNDhhYmUzZjJhOGI4ZDQzMThmMzRiNDU2 YjY1ZjEwHhcNMjUxMTI0MTMxNTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTdkNWUwZGMxZTM2ZWRmZmUwZTljMmViYjc5NzIwM2MwMmRjNmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ChI+VkYxXDaKJgIkjgwKFAAzF+0 BHHBAo62pf+D5oe3Al5i9FpnGfvld91cOQiE4y25Uv/8mo7g/3zZhjku1DciznWL 7uH0YWxPw5odOjU75qIFt57j5j7w04dWArXAU8xH+mNKcHWjkQNNXO/+6imcfkl+ yhMcqjkiFW/uoUzQv3coVUUAZWee56b9rNdX/JN4Qt2C42Ju3E0uLi9/Z10ueOZN pVmslg0o3yWj+HTvkFUQRBbSF9XYrmbW4oBLuUBFECW7Xapq7v1+jDwhgRv2/BQy Ch2f6gaR74+6JjomkHcifNHwsA9Epa5sqKxgBeD/usSJndT3mF0x0CFKfQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAF9Xg3B427f/g6cLrt5cgPALcbCMB8GA1UdIwQY MBaAFI9RqtDkFIq+PyqLjUMY80tFa2XxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajFHcTBPUVVpcjRfS291TlF4anpTMFZyWmZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8zZTYxZDAtZjZjZS00YWFkLTk3NjQt NzYyZDI3Mjc3NTkxLzEvQVgxZURjSGpidF8tRHB3dXUzbHlBOEF0eHNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8zZTYxZDAtZjZjZS00YWFkLTk3NjQtNzYyZDI3Mjc3NTkx LzEvajFHcTBPUVVpcjRfS291TlF4anpTMFZyWmZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnacBAwQA nacDMA0GCSqGSIb3DQEBCwUAA4IBAQA5qpdyeMFZVPYyuIDsQlywDhIQBJ7fbTEV EHmuz9o9sp+lIOt4amxT9bsOkvKlvmlLFwR+8VFj7bir6z6Twnqp3RWI5UP7dejL KkWm5q3x0S1KVGQuZNjDYLUpgh/Xzj8PQaB6sZO+VuOcX/9CgL1Gf7apV07G69TO n9EpyQY6rE2+fX9nDpzx9XXY7KklWlQSsGYBPgSygHx8GEP+jyz1APvMWCUGOWZE PUzGO230iekpYB6g+glBvkNSLX3A2YpYO70mIrB6vyw63inea3Zoz867dl1RmZF4 QRJj2V5XamtcmzbmPUmzUir3xEbPyt1Qw9Pe5bsieUxyA5jVl+sL -----END CERTIFICATE-----Generated at Sat Dec 6 21:11:47 2025 by rpki-client