This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/aJv126xN13fNGfCNY8Gi022cjIw.roa File: aJv126xN13fNGfCNY8Gi022cjIw.roa (raw, json) Hash identifier: FJMObB10PsdPZr4IsKP/fK4AFR+mFzVWNkM7ouFhWtM= Subject key identifier: 68:9B:F5:DB:AC:4D:D7:77:CD:19:F0:8D:63:C1:A2:D3:6D:9C:8C:8C Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88 Certificate serial: 019B7DCAC2B2964A42B70859ECC04A3EDAD7 Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/aJv126xN13fNGfCNY8Gi022cjIw.roa Signing time: Fri 02 Jan 2026 08:19:58 +0000 ROA not before: Fri 02 Jan 2026 08:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60638 IP address blocks: 94.184.140.0/22 maxlen: 24 94.184.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:c2:b2:96:4a:42:b7:08:59:ec:c0:4a:3e:da:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88 Validity Not Before: Jan 2 08:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=689bf5dbac4dd777cd19f08d63c1a2d36d9c8c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:51:96:2c:b2:39:ce:ca:b1:96:13:2e:d2:c0: 16:e3:6b:8c:d8:b5:29:16:48:59:85:23:ee:51:e7: 86:b7:82:e1:53:44:44:28:39:0c:de:fb:34:b9:53: 39:4a:ec:3a:35:97:5d:d9:f2:71:d2:70:a7:98:e0: 7e:20:cd:62:20:d2:75:a9:9e:ba:88:f0:67:e3:df: 97:66:f4:3a:61:cf:e4:48:bb:14:36:0c:65:7f:d0: 36:d5:c7:9b:a6:cf:71:5d:a5:8e:bd:42:d5:10:9b: 24:51:11:89:d3:39:30:e2:1f:1b:cc:be:64:ba:3f: 95:4b:11:99:22:47:60:b8:02:07:e6:1b:59:0b:29: 34:c7:44:8a:2b:ae:2e:a3:37:95:7c:e1:94:f1:59: 36:c5:0a:a4:45:80:bb:9a:79:75:0e:2f:ce:93:1b: 4e:f0:e8:14:7b:9b:6f:61:48:6f:03:e6:2f:0c:f1: 45:d3:0f:d3:47:99:78:13:72:87:8b:8a:64:2f:48: b4:61:60:af:42:60:06:1a:96:77:21:2e:80:00:64: b2:e0:f2:8a:93:f0:a2:a5:83:ca:e0:e7:d9:fd:7e: 76:a7:7a:2e:a5:78:fb:42:69:fd:af:ea:86:b2:a8: 64:7f:06:ea:04:9c:22:eb:4f:29:23:25:89:94:09: 48:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9B:F5:DB:AC:4D:D7:77:CD:19:F0:8D:63:C1:A2:D3:6D:9C:8C:8C X509v3 Authority Key Identifier: keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/aJv126xN13fNGfCNY8Gi022cjIw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.184.140.0/22 Signature Algorithm: sha256WithRSAEncryption 24:4d:0b:6f:03:d8:d0:01:90:4b:e7:f3:87:2c:b8:39:58:a5: f4:d9:36:a9:f5:b4:6f:44:ee:2d:b8:62:3d:30:b7:be:26:02: 8c:23:de:f2:e4:9a:96:dd:a8:40:49:52:20:99:88:b4:2f:66: f7:24:38:75:a8:2b:d0:07:5f:63:ab:42:29:8b:cd:1a:75:e7: 76:f3:33:56:4e:f1:d3:fd:15:34:23:c3:da:0a:4f:19:6f:30: 56:66:f6:ca:73:b5:8a:18:9e:77:4b:d7:db:8a:16:b0:d3:d7: 99:f1:c7:f8:8f:02:f0:22:a7:80:5c:63:1f:e8:b1:91:a1:52: 88:48:3c:30:8d:c6:a2:91:9e:6f:4c:80:f6:0e:aa:cd:5d:86: c6:bb:52:f9:d2:12:a2:1c:d0:e8:7f:f0:d2:94:01:b6:90:3d: bb:a1:61:87:7f:f3:d9:1f:eb:f2:d4:97:ad:9c:9c:e7:5b:02: 7d:45:9f:12:84:d5:7e:28:6f:e5:4d:8c:3b:0c:9d:3a:89:68: 54:39:26:07:30:15:31:1f:87:8f:70:ed:24:79:ac:17:d6:42: 44:d6:4a:db:1e:b2:fb:81:a9:80:72:b4:06:96:c5:0b:e3:b1: 99:dd:c0:7e:e6:4d:75:38:b8:0c:65:0e:97:be:87:eb:0f:26: da:81:4a:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ysKylkpCtwhZ7MBKPtrXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3 YjBhODgwHhcNMjYwMTAyMDgxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODliZjVkYmFjNGRkNzc3Y2QxOWYwOGQ2M2MxYTJkMzZkOWM4YzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VGWLLI5zsqxlhMu0sAW42uM2LUp FkhZhSPuUeeGt4LhU0REKDkM3vs0uVM5Suw6NZdd2fJx0nCnmOB+IM1iINJ1qZ66 iPBn49+XZvQ6Yc/kSLsUNgxlf9A21cebps9xXaWOvULVEJskURGJ0zkw4h8bzL5k uj+VSxGZIkdguAIH5htZCyk0x0SKK64uozeVfOGU8Vk2xQqkRYC7mnl1Di/OkxtO 8OgUe5tvYUhvA+YvDPFF0w/TR5l4E3KHi4pkL0i0YWCvQmAGGpZ3IS6AAGSy4PKK k/CipYPK4OfZ/X52p3oupXj7Qmn9r+qGsqhkfwbqBJwi608pIyWJlAlICwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGib9dusTdd3zRnwjWPBotNtnIyMMB8GA1UdIwQY MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt ZGE2MTUzODg1ZjNiLzEvYUp2MTI2eE4xM2ZOR2ZDTlk4R2kwMjJjakl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXriMMA0G CSqGSIb3DQEBCwUAA4IBAQAkTQtvA9jQAZBL5/OHLLg5WKX02Tap9bRvRO4tuGI9 MLe+JgKMI97y5JqW3ahASVIgmYi0L2b3JDh1qCvQB19jq0Ipi80aded28zNWTvHT /RU0I8PaCk8ZbzBWZvbKc7WKGJ53S9fbihaw09eZ8cf4jwLwIqeAXGMf6LGRoVKI SDwwjcaikZ5vTID2DqrNXYbGu1L50hKiHNDof/DSlAG2kD27oWGHf/PZH+vy1Jet nJznWwJ9RZ8ShNV+KG/lTYw7DJ06iWhUOSYHMBUxH4ePcO0keawX1kJE1krbHrL7 gamAcrQGlsUL47GZ3cB+5k11OLgMZQ6XvofrDybagUoe -----END CERTIFICATE-----Generated at Mon Jan 26 04:42:43 2026 by rpki-client