This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/ajDcPSaNkVwxb7R46AaZC5rNaL0.roa File: ajDcPSaNkVwxb7R46AaZC5rNaL0.roa (raw, json) Hash identifier: ztTrd7SfULy2SlrLbJNT3KaJG4YDePjF1rkSt93Y3sk= Subject key identifier: 6A:30:DC:3D:26:8D:91:5C:31:6F:B4:78:E8:06:99:0B:9A:CD:68:BD Certificate issuer: /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839 Certificate serial: 019B77589F30A2ADE30E67A4A8648C6F0821 Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/ajDcPSaNkVwxb7R46AaZC5rNaL0.roa Signing time: Thu 01 Jan 2026 02:17:35 +0000 ROA not before: Thu 01 Jan 2026 02:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50128 IP address blocks: 194.1.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:9f:30:a2:ad:e3:0e:67:a4:a8:64:8c:6f:08:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839 Validity Not Before: Jan 1 02:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a30dc3d268d915c316fb478e806990b9acd68bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:dc:52:da:d4:ad:61:7d:80:a1:2a:ac:05:0d: 58:d4:54:27:fc:0a:63:f2:09:18:9e:9a:27:f9:46: 06:90:af:28:a0:9f:f5:d3:2a:fb:10:c1:fb:b2:c6: 0d:ce:77:fa:40:40:ad:c4:9a:81:33:63:b7:03:34: 31:ce:dd:a3:8a:94:da:d1:ff:6c:41:3b:f1:03:c7: e9:f4:64:1e:e8:cf:3b:40:61:fe:05:ed:f6:e2:37: 73:fe:e7:c7:b5:f1:9c:91:17:90:3d:b1:fa:37:13: 61:f8:89:28:59:d3:0c:69:08:5f:dc:1a:61:aa:ce: 71:75:0c:32:41:66:22:62:47:ae:81:82:7d:4c:24: fb:27:42:85:fe:05:2c:a0:c4:2e:29:d8:b0:c7:9c: f5:8b:5c:aa:71:6c:a7:b1:ce:c0:15:b1:dc:4f:a6: b0:0a:f1:14:be:66:db:e0:9e:4f:52:8d:44:a4:d4: 70:56:de:98:7d:f2:d0:a1:25:61:ff:25:b5:18:29: 3b:f8:9b:44:06:25:32:a6:e6:81:b5:14:5b:1d:65: cd:8a:51:34:9c:8d:ef:dc:f2:01:c5:65:75:03:5f: 5f:4f:41:ba:02:b7:cc:7a:71:08:df:77:95:49:8f: 2b:9f:cc:c3:2f:7d:ef:6e:f4:7b:fe:39:19:b0:f4: e1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:30:DC:3D:26:8D:91:5C:31:6F:B4:78:E8:06:99:0B:9A:CD:68:BD X509v3 Authority Key Identifier: keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/ajDcPSaNkVwxb7R46AaZC5rNaL0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.1.130.0/24 Signature Algorithm: sha256WithRSAEncryption 87:a6:7d:80:03:9f:77:1b:07:73:ed:ae:70:0b:16:d5:e6:49: 99:77:8d:b3:6c:ea:e5:3c:e8:de:ef:b5:81:9d:c1:fc:90:72: 9d:7a:83:bf:e8:8c:e0:b3:c8:5a:7f:5a:a8:02:da:db:5c:52: 02:54:52:38:c9:20:25:a5:f2:97:83:d0:64:af:a6:b5:24:8f: dc:91:a9:8c:3a:b1:40:51:5c:8c:eb:10:9d:8a:c2:3b:3d:2a: 51:ed:ae:0b:d7:34:d0:ed:0f:88:95:6f:9c:09:c5:68:c7:dc: c0:e0:27:ac:4b:84:6c:77:64:4c:b3:63:67:fb:e2:f8:c9:f7: 62:89:f0:63:4e:a5:b6:6e:a1:67:0d:93:4d:bb:47:9c:07:12: 7b:e4:2b:cf:c5:b6:bb:0f:0b:4f:b0:3b:22:1e:0a:02:ab:59: 35:b3:2b:65:45:72:de:63:97:a6:35:56:57:ae:64:21:40:e8: 56:2c:ba:2c:e6:72:14:4f:03:e7:e3:81:89:ef:90:ca:28:fa: 90:18:27:25:0a:b4:02:08:88:f6:e8:96:e5:78:ab:d1:75:7c: 32:49:fc:f0:9a:cc:94:28:1c:71:94:1a:dc:b1:5d:ff:aa:7f: 79:3c:bc:9f:0c:a7:1a:ac:3a:71:86:ce:23:25:ac:4d:f6:94: 02:71:78:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WJ8woq3jDmekqGSMbwghMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NjJkNWE2N2I3YTIwZjg2NWU3NTMxNjNhNmVkMGU1ZjM0 N2U4MzkwHhcNMjYwMTAxMDIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTMwZGMzZDI2OGQ5MTVjMzE2ZmI0NzhlODA2OTkwYjlhY2Q2OGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttxS2tStYX2AoSqsBQ1Y1FQn/Apj 8gkYnpon+UYGkK8ooJ/10yr7EMH7ssYNznf6QECtxJqBM2O3AzQxzt2jipTa0f9s QTvxA8fp9GQe6M87QGH+Be324jdz/ufHtfGckReQPbH6NxNh+IkoWdMMaQhf3Bph qs5xdQwyQWYiYkeugYJ9TCT7J0KF/gUsoMQuKdiwx5z1i1yqcWynsc7AFbHcT6aw CvEUvmbb4J5PUo1EpNRwVt6YffLQoSVh/yW1GCk7+JtEBiUypuaBtRRbHWXNilE0 nI3v3PIBxWV1A19fT0G6ArfMenEI33eVSY8rn8zDL33vbvR7/jkZsPThiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGow3D0mjZFcMW+0eOgGmQuazWi9MB8GA1UdIwQY MBaAFAVi1aZ7eiD4ZedTFjpu0OXzR+g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi84YjAxYzItZWNiZS00Zjg4LWFlMzct NTA0YzhmYzIyMGVhLzEvYWpEY1BTYU5rVnd4YjdSNDZBYVpDNXJOYUwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi84YjAxYzItZWNiZS00Zjg4LWFlMzctNTA0YzhmYzIyMGVh LzEvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgGCMA0G CSqGSIb3DQEBCwUAA4IBAQCHpn2AA593Gwdz7a5wCxbV5kmZd42zbOrlPOje77WB ncH8kHKdeoO/6Izgs8haf1qoAtrbXFICVFI4ySAlpfKXg9Bkr6a1JI/ckamMOrFA UVyM6xCdisI7PSpR7a4L1zTQ7Q+IlW+cCcVox9zA4CesS4Rsd2RMs2Nn++L4yfdi ifBjTqW2bqFnDZNNu0ecBxJ75CvPxba7DwtPsDsiHgoCq1k1sytlRXLeY5emNVZX rmQhQOhWLLos5nIUTwPn44GJ75DKKPqQGCclCrQCCIj26JbleKvRdXwySfzwmsyU KBxxlBrcsV3/qn95PLyfDKcarDpxhs4jJaxN9pQCcXjj -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:42 2026 by rpki-client