This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/ax-_Txj0CX184s7yaQUE1z5JmL0.roa File: ax-_Txj0CX184s7yaQUE1z5JmL0.roa (raw, json) Hash identifier: SkAHqlZ+jgnUZoHQzNhptAmXxqgxJ8UA0ILHaB/nBhU= Subject key identifier: 6B:1F:BF:4F:18:F4:09:7D:7C:E2:CE:F2:69:05:04:D7:3E:49:98:BD Certificate issuer: /CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc Certificate serial: 019B7F835038F723BE9C8AC95DC2E0665073 Authority key identifier: 9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/ax-_Txj0CX184s7yaQUE1z5JmL0.roa Signing time: Fri 02 Jan 2026 16:21:10 +0000 ROA not before: Fri 02 Jan 2026 16:21:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20546 IP address blocks: 212.29.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:50:38:f7:23:be:9c:8a:c9:5d:c2:e0:66:50:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc Validity Not Before: Jan 2 16:21:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b1fbf4f18f4097d7ce2cef2690504d73e4998bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:11:84:36:5c:24:57:c8:85:1b:49:4a:28:70: 9e:93:96:c1:02:b2:70:c0:42:c3:56:73:85:ed:9a: c7:cb:f2:4d:3d:38:64:74:6a:20:a1:d3:dd:b2:bf: 90:e3:15:5a:a6:60:29:ae:de:09:df:94:d4:77:86: b5:02:76:79:6c:83:6e:c3:76:9d:01:27:b9:23:a1: be:f4:55:2d:23:57:98:bf:87:aa:4e:8f:a7:ad:28: 05:c9:48:1a:35:8c:76:86:d0:59:7b:15:d8:2b:70: 2b:6f:80:29:77:b1:d4:03:c2:ef:33:31:f8:a7:d6: bc:e6:42:d0:29:09:c8:d9:f1:b8:f3:6f:d3:c8:45: f5:d0:44:e7:0c:58:ca:ac:60:e9:c1:7b:81:92:69: 24:15:bc:6c:83:22:d7:cd:f8:b0:41:36:24:96:fa: 4a:df:5a:d6:67:60:78:6a:17:9f:f8:70:d6:c3:e3: ea:6e:e0:65:1a:d6:cb:65:4c:89:98:e1:04:2a:27: 63:ac:82:dc:dd:fe:de:fa:a7:23:b9:fc:65:16:2b: eb:5d:64:9c:1a:fa:bb:ee:47:bf:c2:d8:cd:25:67: 7e:bd:dc:d1:6a:28:3c:28:1c:ca:db:4a:25:50:5d: 05:e8:0b:04:80:ef:16:5a:6b:d6:6e:94:89:67:26: 0b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1F:BF:4F:18:F4:09:7D:7C:E2:CE:F2:69:05:04:D7:3E:49:98:BD X509v3 Authority Key Identifier: keyid:9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/ax-_Txj0CX184s7yaQUE1z5JmL0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.29.30.0/24 Signature Algorithm: sha256WithRSAEncryption 39:b6:bf:bd:58:2f:ec:b7:49:bd:cf:1c:40:ed:e2:98:6e:53: d8:2c:55:ce:58:0f:a6:e2:43:38:e6:43:0f:8b:4e:27:9f:c0: 63:64:8d:cd:81:18:3c:e9:6d:7d:2f:7f:d3:23:db:4f:49:b8: 9f:9a:66:5a:29:3f:a1:a6:3e:15:6f:cc:c5:1e:22:ac:3d:68: f7:e3:54:e2:9a:c1:57:bb:c5:fc:cd:f2:3c:87:63:7c:cd:06: 7e:3a:e5:e8:1f:cc:12:4a:3c:58:b8:04:3f:2c:af:ad:e1:50: e6:df:63:c7:34:e3:ee:52:22:14:a5:74:92:1e:46:50:12:e5: a5:17:e9:1a:6e:9b:4f:1f:06:00:61:f0:64:8d:2c:ea:ec:9e: 91:56:b6:7e:4a:5c:e5:0f:61:66:f5:b9:49:5d:7d:9b:ab:4c: cd:6e:51:78:9f:91:18:b0:e9:22:fd:00:bf:a1:23:48:91:a8: 80:bd:a8:bb:59:31:25:bc:50:e0:4e:d0:00:2c:a2:69:90:9b: bf:d1:c6:8f:45:87:42:5d:97:89:c7:14:01:ca:0a:ff:05:c2: ae:07:36:f3:3c:a8:ad:e1:c6:2d:e8:a2:aa:f2:1d:c6:84:9d: 23:32:94:ab:15:12:a8:4b:c4:2f:0c:da:f6:f0:87:09:35:5a: 00:04:5e:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g1A49yO+nIrJXcLgZlBzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNjliZGY5YmJkMmE0NTk3ZTI2Y2UyMGJmZTEzODYyNGNh ZDMzZGMwHhcNMjYwMTAyMTYyMTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjFmYmY0ZjE4ZjQwOTdkN2NlMmNlZjI2OTA1MDRkNzNlNDk5OGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hGENlwkV8iFG0lKKHCek5bBArJw wELDVnOF7ZrHy/JNPThkdGogodPdsr+Q4xVapmAprt4J35TUd4a1AnZ5bINuw3ad ASe5I6G+9FUtI1eYv4eqTo+nrSgFyUgaNYx2htBZexXYK3Arb4Apd7HUA8LvMzH4 p9a85kLQKQnI2fG482/TyEX10ETnDFjKrGDpwXuBkmkkFbxsgyLXzfiwQTYklvpK 31rWZ2B4ahef+HDWw+PqbuBlGtbLZUyJmOEEKidjrILc3f7e+qcjufxlFivrXWSc Gvq77ke/wtjNJWd+vdzRaig8KBzK20olUF0F6AsEgO8WWmvWbpSJZyYLgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGsfv08Y9Al9fOLO8mkFBNc+SZi9MB8GA1UdIwQY MBaAFJ9pvfm70qRZfibOIL/hOGJMrTPcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjJtOS1idlNwRmwtSnM0Z3YtRTRZa3l0TTl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jZGJkMGEtNjhlYy00ODdkLThmZWEt NjE5MjgxMzgwYmMyLzEvYXgtX1R4ajBDWDE4NHM3eWFRVUUxejVKbUwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9jZGJkMGEtNjhlYy00ODdkLThmZWEtNjE5MjgxMzgwYmMy LzEvbjJtOS1idlNwRmwtSnM0Z3YtRTRZa3l0TTl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1B0eMA0G CSqGSIb3DQEBCwUAA4IBAQA5tr+9WC/st0m9zxxA7eKYblPYLFXOWA+m4kM45kMP i04nn8BjZI3NgRg86W19L3/TI9tPSbifmmZaKT+hpj4Vb8zFHiKsPWj341TimsFX u8X8zfI8h2N8zQZ+OuXoH8wSSjxYuAQ/LK+t4VDm32PHNOPuUiIUpXSSHkZQEuWl F+kabptPHwYAYfBkjSzq7J6RVrZ+SlzlD2Fm9blJXX2bq0zNblF4n5EYsOki/QC/ oSNIkaiAvai7WTElvFDgTtAALKJpkJu/0caPRYdCXZeJxxQBygr/BcKuBzbzPKit 4cYt6KKq8h3GhJ0jMpSrFRKoS8QvDNr28IcJNVoABF5N -----END CERTIFICATE-----Generated at Sun Jan 25 16:33:14 2026 by rpki-client