This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/AJeVrZCLxAoT2hk1jNnC-Wu8ic0.roa File: AJeVrZCLxAoT2hk1jNnC-Wu8ic0.roa (raw, json) Hash identifier: frjC5Gbfb/b6ellH82d+qc/ADaLtRdBgOt68RftUF/k= Subject key identifier: 00:97:95:AD:90:8B:C4:0A:13:DA:19:35:8C:D9:C2:F9:6B:BC:89:CD Certificate issuer: /CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2 Certificate serial: 019B7F14ECF85831795AEFAC4DFA6ADE5B5C Authority key identifier: 84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/AJeVrZCLxAoT2hk1jNnC-Wu8ic0.roa Signing time: Fri 02 Jan 2026 14:20:36 +0000 ROA not before: Fri 02 Jan 2026 14:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35334 IP address blocks: 176.57.80.0/21 maxlen: 24 185.218.172.0/22 maxlen: 24 2a00:ef80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.crl rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:ec:f8:58:31:79:5a:ef:ac:4d:fa:6a:de:5b:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2 Validity Not Before: Jan 2 14:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=009795ad908bc40a13da19358cd9c2f96bbc89cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:66:db:b3:df:30:ba:39:39:60:b2:57:dc:5f: 57:a7:4a:61:9b:89:0f:f9:3f:70:63:9f:bc:fb:3f: 2f:7d:a4:58:ca:e1:0f:90:2b:c7:61:d6:2f:c3:b1: 9a:81:db:2f:55:58:14:97:e5:a8:1a:14:a8:0c:a4: db:54:87:00:68:58:9e:1a:c1:32:25:c9:92:93:23: 93:9d:fb:5a:31:9a:df:43:d1:09:43:70:f3:6d:28: 26:43:41:e3:fa:a2:c3:41:9b:e6:88:d8:1f:64:fe: f9:f1:b4:02:73:ac:f0:6c:23:ef:82:32:bd:9c:a6: 5f:c6:a4:fe:b1:75:f6:2e:9a:63:3b:da:e7:da:ba: ce:0b:c5:a1:6b:6f:c5:ba:4a:6c:9a:47:43:5e:12: 5d:49:14:21:ec:65:67:98:b7:80:f2:5d:c2:06:39: 6c:2d:9e:3f:30:cf:f8:c4:a1:fd:88:4a:c3:dc:03: d8:39:7d:b3:eb:3e:ca:0a:16:1f:2f:24:fe:a3:34: 84:90:b2:50:3e:96:25:15:4a:5c:b2:98:6f:31:61: 38:c8:71:ef:fa:86:aa:db:de:75:37:68:ed:b4:4f: 1d:84:6a:86:4d:14:44:d8:8a:cf:e5:f4:d6:e9:70: 8a:8e:8a:9c:71:00:17:c7:9a:94:c6:ed:ba:f8:f5: bc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:97:95:AD:90:8B:C4:0A:13:DA:19:35:8C:D9:C2:F9:6B:BC:89:CD X509v3 Authority Key Identifier: keyid:84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/AJeVrZCLxAoT2hk1jNnC-Wu8ic0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.57.80.0/21 185.218.172.0/22 IPv6: 2a00:ef80::/32 Signature Algorithm: sha256WithRSAEncryption 1d:3a:38:0c:2c:ec:c5:24:6d:3f:9b:97:8f:fa:f6:2b:c4:c1: 05:fb:6e:8f:7c:64:71:31:08:de:b4:d5:2b:6b:2b:1f:3e:de: 7c:f5:5e:ca:00:41:a8:13:cb:bb:1e:84:d0:3c:ab:92:f3:db: 74:14:7b:f1:1c:4f:cb:1f:c1:ae:b5:67:15:72:6c:63:e7:b4: 48:02:14:84:6c:3e:07:71:d2:56:a1:ad:b4:17:cd:fd:cc:d0: 52:15:8d:d8:9c:b9:ed:38:a1:4a:16:d9:21:e9:d7:ea:0d:82: cd:2d:55:13:f6:48:83:de:9f:47:7c:55:f3:a3:01:98:5d:56: 23:43:e4:84:94:84:4b:7d:e4:6f:cb:3e:b6:b2:6a:a2:55:b6: 7e:e3:4e:4c:27:49:49:88:ba:b2:c3:c8:45:2e:7d:89:04:05: 83:dc:3b:25:56:c1:12:88:32:cb:ac:45:f8:8b:9c:32:53:8a: 53:43:6e:37:79:2b:05:07:91:09:9c:67:a4:86:4f:dc:c5:ef: 46:95:ab:ed:cb:f5:a4:63:8b:08:0a:ee:ce:ee:d4:13:3a:cd: 7d:81:14:73:69:91:2c:16:aa:24:fe:23:14:8a:2d:fe:ae:0e: be:a0:5f:70:79:82:a4:c3:5a:99:ed:25:a0:96:ba:ab:d9:eb: b0:2b:8e:86 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/FOz4WDF5Wu+sTfpq3ltcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MWYzNmZjYmY3MzM0ZWZmNmI5MWU4MDI5N2VhNWIyNWM0 ZWNmZDIwHhcNMjYwMTAyMTQyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDk3OTVhZDkwOGJjNDBhMTNkYTE5MzU4Y2Q5YzJmOTZiYmM4OWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWbbs98wujk5YLJX3F9Xp0phm4kP +T9wY5+8+z8vfaRYyuEPkCvHYdYvw7GagdsvVVgUl+WoGhSoDKTbVIcAaFieGsEy JcmSkyOTnftaMZrfQ9EJQ3DzbSgmQ0Hj+qLDQZvmiNgfZP758bQCc6zwbCPvgjK9 nKZfxqT+sXX2LppjO9rn2rrOC8Wha2/FukpsmkdDXhJdSRQh7GVnmLeA8l3CBjls LZ4/MM/4xKH9iErD3APYOX2z6z7KChYfLyT+ozSEkLJQPpYlFUpcsphvMWE4yHHv +oaq2951N2jttE8dhGqGTRRE2IrP5fTW6XCKjoqccQAXx5qUxu26+PW8MwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFACXla2Qi8QKE9oZNYzZwvlrvInNMB8GA1UdIwQY MBaAFIQfNvy/czTv9rkegCl+pbJcTs/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEI4Ml9MOXpOT18ydVI2QUtYNmxzbHhPejlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9jMzdjMTYtMDYwMy00ODQ1LWI0ZDQt OTVkZGIwOTc0ZTRiLzEvQUplVnJaQ0x4QW9UMmhrMWpObkMtV3U4aWMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9jMzdjMTYtMDYwMy00ODQ1LWI0ZDQtOTVkZGIwOTc0ZTRi LzEvaEI4Ml9MOXpOT18ydVI2QUtYNmxzbHhPejlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDsDlQAwQC udqsMA0EAgACMAcDBQAqAO+AMA0GCSqGSIb3DQEBCwUAA4IBAQAdOjgMLOzFJG0/ m5eP+vYrxMEF+26PfGRxMQjetNUraysfPt589V7KAEGoE8u7HoTQPKuS89t0FHvx HE/LH8GutWcVcmxj57RIAhSEbD4HcdJWoa20F839zNBSFY3YnLntOKFKFtkh6dfq DYLNLVUT9kiD3p9HfFXzowGYXVYjQ+SElIRLfeRvyz62smqiVbZ+405MJ0lJiLqy w8hFLn2JBAWD3DslVsESiDLLrEX4i5wyU4pTQ243eSsFB5EJnGekhk/cxe9Glavt y/WkY4sICu7O7tQTOs19gRRzaZEsFqok/iMUii3+rg6+oF9weYKkw1qZ7SWglrqr 2euwK46G -----END CERTIFICATE-----Generated at Mon Jan 26 04:42:46 2026 by rpki-client