This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/p-aRXnAuitxe8o-22Bwes1ewmqY.roa File: p-aRXnAuitxe8o-22Bwes1ewmqY.roa (raw, json) Hash identifier: U9mseaIe8Qq3Xii4N/S+qJKQzkE3rG5+HAlIviFWvi8= Subject key identifier: A7:E6:91:5E:70:2E:8A:DC:5E:F2:8F:B6:D8:1C:1E:B3:57:B0:9A:A6 Certificate issuer: /CN=8f9a4670146ad880f14bada4b2762b613ddf1d18 Certificate serial: 019B77596C441CCF1D83FCC8B494FBF22370 Authority key identifier: 8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/p-aRXnAuitxe8o-22Bwes1ewmqY.roa Signing time: Thu 01 Jan 2026 02:18:27 +0000 ROA not before: Thu 01 Jan 2026 02:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60901 IP address blocks: 185.241.86.0/24 maxlen: 24 185.241.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:6c:44:1c:cf:1d:83:fc:c8:b4:94:fb:f2:23:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f9a4670146ad880f14bada4b2762b613ddf1d18 Validity Not Before: Jan 1 02:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7e6915e702e8adc5ef28fb6d81c1eb357b09aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:61:02:dc:fc:f3:de:54:7f:63:d0:27:f6:6f: 55:78:c5:4f:41:ac:81:93:4c:c1:90:fd:67:a2:4c: 17:85:7c:49:90:c7:9a:65:ce:11:93:51:10:71:bb: 2c:4f:e3:ba:46:ca:d9:fc:d1:06:0b:59:92:6f:b5: df:f8:c7:9b:ac:17:8c:6e:c2:07:89:9e:1e:b0:53: d5:97:a0:c9:28:bd:83:f5:da:a5:a9:4e:00:88:0b: d2:07:58:b2:a1:1d:e8:42:29:a6:ee:c0:31:17:fb: 80:1b:2d:01:b4:a8:2d:b0:bb:1c:3a:da:14:bc:44: 54:74:89:dd:01:48:83:1a:57:31:53:01:b8:0e:a4: 16:de:fa:98:41:e0:1b:d5:6a:3e:ac:e4:7a:86:55: 38:f2:68:4d:85:ce:8f:cd:71:d7:2c:aa:ab:54:1c: a5:84:71:a4:3d:63:db:7b:16:ba:66:f3:00:e5:bb: 78:97:a6:dd:da:ad:bc:97:ed:44:ee:b3:41:40:b2: 68:68:32:00:b3:04:5d:10:d0:71:a8:7a:d3:c8:9c: e0:78:a9:6b:6b:95:fe:82:4c:7f:65:5d:e6:47:8f: 4e:af:04:b9:1b:da:a1:d7:0d:11:8e:f5:65:ff:9c: f5:47:45:9b:26:0d:c8:b8:54:d0:a6:17:4e:4b:53: fa:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E6:91:5E:70:2E:8A:DC:5E:F2:8F:B6:D8:1C:1E:B3:57:B0:9A:A6 X509v3 Authority Key Identifier: keyid:8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/p-aRXnAuitxe8o-22Bwes1ewmqY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.241.86.0/23 Signature Algorithm: sha256WithRSAEncryption 81:9e:1b:df:6e:d4:54:c1:04:c4:59:f5:c4:4c:e3:01:35:17: ca:ec:27:aa:38:60:e3:8d:5b:6f:7d:5e:c1:13:e2:53:b8:34: 62:49:57:fd:cc:e3:f9:ca:89:a1:91:3e:6b:60:0e:a9:dc:f8: 7e:fd:09:14:00:8a:e2:dc:7b:6f:17:fa:74:38:71:70:62:d0: 4a:3d:2a:56:6e:e6:78:2c:10:d2:71:05:af:d8:73:3b:b8:68: b2:f8:78:c8:46:3e:8f:dc:16:34:46:f7:58:36:da:c1:d9:c9: 25:a1:6c:6f:a2:ac:54:63:7b:53:a4:9e:ab:53:88:b0:cd:4d: e0:78:79:14:8f:4b:be:5e:4f:82:0e:34:b3:78:00:fe:54:72: 68:88:0b:92:8d:8f:73:5e:dd:42:81:b1:b6:7b:50:b1:0b:00: 76:7b:9d:17:f6:4b:42:4b:99:b6:9f:53:61:b6:d7:1d:64:53: 55:80:4d:f6:69:5f:13:6b:c7:62:1a:e3:e0:8a:30:9b:55:10: aa:24:10:c5:c7:c9:e4:86:03:f4:db:a8:29:26:b1:4f:10:d3: 4c:99:f4:9b:27:0a:80:8c:f0:c4:c4:64:4f:a6:b6:bc:77:72: 31:60:2e:d7:e7:21:73:4e:d1:b9:8a:93:be:4f:5e:a3:99:ec: 7b:3f:e7:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WWxEHM8dg/zItJT78iNwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmOWE0NjcwMTQ2YWQ4ODBmMTRiYWRhNGIyNzYyYjYxM2Rk ZjFkMTgwHhcNMjYwMTAxMDIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2U2OTE1ZTcwMmU4YWRjNWVmMjhmYjZkODFjMWViMzU3YjA5YWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmEC3Pzz3lR/Y9An9m9VeMVPQayB k0zBkP1nokwXhXxJkMeaZc4Rk1EQcbssT+O6RsrZ/NEGC1mSb7Xf+MebrBeMbsIH iZ4esFPVl6DJKL2D9dqlqU4AiAvSB1iyoR3oQimm7sAxF/uAGy0BtKgtsLscOtoU vERUdIndAUiDGlcxUwG4DqQW3vqYQeAb1Wo+rOR6hlU48mhNhc6PzXHXLKqrVByl hHGkPWPbexa6ZvMA5bt4l6bd2q28l+1E7rNBQLJoaDIAswRdENBxqHrTyJzgeKlr a5X+gkx/ZV3mR49OrwS5G9qh1w0RjvVl/5z1R0WbJg3IuFTQphdOS1P6PwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKfmkV5wLorcXvKPttgcHrNXsJqmMB8GA1UdIwQY MBaAFI+aRnAUatiA8UutpLJ2K2E93x0YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajVwR2NCUnEySUR4UzYya3NuWXJZVDNmSFJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8zNTQ0MzAtNTRiYy00NTVlLWIwZDEt N2NkNTA4ZjczMzY0LzEvcC1hUlhuQXVpdHhlOG8tMjJCd2VzMWV3bXFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8zNTQ0MzAtNTRiYy00NTVlLWIwZDEtN2NkNTA4ZjczMzY0 LzEvajVwR2NCUnEySUR4UzYya3NuWXJZVDNmSFJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufFWMA0G CSqGSIb3DQEBCwUAA4IBAQCBnhvfbtRUwQTEWfXETOMBNRfK7CeqOGDjjVtvfV7B E+JTuDRiSVf9zOP5yomhkT5rYA6p3Ph+/QkUAIri3HtvF/p0OHFwYtBKPSpWbuZ4 LBDScQWv2HM7uGiy+HjIRj6P3BY0RvdYNtrB2ckloWxvoqxUY3tTpJ6rU4iwzU3g eHkUj0u+Xk+CDjSzeAD+VHJoiAuSjY9zXt1CgbG2e1CxCwB2e50X9ktCS5m2n1Nh ttcdZFNVgE32aV8Ta8diGuPgijCbVRCqJBDFx8nkhgP026gpJrFPENNMmfSbJwqA jPDExGRPpra8d3IxYC7X5yFzTtG5ipO+T16jmex7P+d3 -----END CERTIFICATE-----Generated at Mon Jan 26 13:11:04 2026 by rpki-client