This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/axtr1Yfq33sGPOPOJoi8LjJUh7Q.roa File: axtr1Yfq33sGPOPOJoi8LjJUh7Q.roa (raw, json) Hash identifier: nE9lYWD+wgHpWX2b2+6stth4mhkUfCemKJyIsoT/t6A= Subject key identifier: 6B:1B:6B:D5:87:EA:DF:7B:06:3C:E3:CE:26:88:BC:2E:32:54:87:B4 Certificate issuer: /CN=67d410e707b57971b14a54309f020bacbb4d21b1 Certificate serial: 019B7E377AC97E2455B2A683B3709260F62E Authority key identifier: 67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/axtr1Yfq33sGPOPOJoi8LjJUh7Q.roa Signing time: Fri 02 Jan 2026 10:18:43 +0000 ROA not before: Fri 02 Jan 2026 10:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208930 IP address blocks: 91.215.47.0/24 maxlen: 24 2001:678:f00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:7a:c9:7e:24:55:b2:a6:83:b3:70:92:60:f6:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67d410e707b57971b14a54309f020bacbb4d21b1 Validity Not Before: Jan 2 10:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b1b6bd587eadf7b063ce3ce2688bc2e325487b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:91:b0:63:0e:54:4a:eb:ce:a1:64:7f:da:81: 8e:20:94:e2:52:06:e1:43:79:6d:4c:f2:b5:3c:33: 8e:43:96:d0:39:7b:af:75:3a:93:18:9b:33:95:eb: b6:37:af:30:dc:02:77:49:42:fb:88:31:b4:75:fa: c9:d4:c0:20:5d:86:76:4a:94:4d:2e:68:06:f7:5f: 76:d9:17:de:5d:af:ab:eb:e9:60:10:68:c7:72:6e: 19:f9:5a:98:f8:a9:51:c0:12:16:4f:63:94:d0:3d: db:a0:af:60:c9:d3:cc:55:28:b9:39:86:89:4b:82: 36:f6:cd:d9:58:92:bd:41:df:b7:14:9b:95:4e:31: e9:3d:1e:8d:6d:4f:e2:38:04:fd:c4:c5:09:07:6c: eb:de:60:7a:10:49:57:d4:1e:95:3e:45:a5:6b:d8: 2c:98:b1:46:42:42:04:d7:f8:16:c7:76:20:b3:e6: 51:67:a1:90:e4:66:c0:22:73:20:0b:d7:f8:df:d2: df:bb:fd:2c:c4:ec:98:33:46:48:eb:d5:5f:a9:e9: f0:e5:90:ef:c0:e5:08:3f:f3:69:64:4a:cb:57:cf: bb:d7:f5:ac:30:79:bf:10:65:bd:c6:48:63:47:54: 32:0e:fc:06:63:e9:eb:37:64:45:d8:bc:88:aa:1f: 25:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1B:6B:D5:87:EA:DF:7B:06:3C:E3:CE:26:88:BC:2E:32:54:87:B4 X509v3 Authority Key Identifier: keyid:67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/axtr1Yfq33sGPOPOJoi8LjJUh7Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.215.47.0/24 IPv6: 2001:678:f00::/48 Signature Algorithm: sha256WithRSAEncryption 71:c2:f3:d9:8d:cb:2b:67:ef:67:86:40:06:83:07:9e:99:49: 86:29:f2:35:e0:9f:c5:d6:cf:b8:1e:55:5d:b3:72:94:de:2e: 67:ee:93:c4:28:02:7d:f4:ed:50:ed:3f:49:a0:7d:54:a6:df: 37:7c:f6:0e:f4:1e:f6:2f:ac:86:8f:f6:a9:9a:ac:1f:40:32: 77:2c:eb:85:82:9b:e2:dd:f8:91:4a:74:83:da:f6:11:f4:54: 74:b5:61:67:76:62:32:12:69:51:e8:bb:35:d7:74:b7:4f:cf: 85:07:56:5c:fb:87:00:11:b7:d6:b1:ac:5a:e7:1a:f4:ff:fc: 15:0b:ce:b6:c2:39:ec:fc:8a:47:a7:9a:df:d0:cf:38:3b:70: 9b:9f:ae:60:94:37:81:ee:b4:58:ce:09:9c:01:78:84:45:ff: 7e:cf:b2:db:4a:b2:93:b8:b8:cd:9d:3d:76:fe:07:20:26:1a: ef:c1:9d:7b:9f:3c:e6:7b:67:1c:61:01:8b:44:03:c0:8b:92: a4:b7:a0:9d:dc:ef:89:75:16:7d:55:f6:91:57:e0:35:39:30: 03:ba:c2:00:9c:ae:35:79:4f:e6:54:29:31:41:fa:e7:dd:80: 90:cf:e8:ce:90:ce:bc:58:30:f9:86:03:00:e4:0c:82:3c:43: 62:17:5b:9c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+N3rJfiRVsqaDs3CSYPYuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZDQxMGU3MDdiNTc5NzFiMTRhNTQzMDlmMDIwYmFjYmI0 ZDIxYjEwHhcNMjYwMTAyMTAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjFiNmJkNTg3ZWFkZjdiMDYzY2UzY2UyNjg4YmMyZTMyNTQ4N2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pGwYw5USuvOoWR/2oGOIJTiUgbh Q3ltTPK1PDOOQ5bQOXuvdTqTGJszleu2N68w3AJ3SUL7iDG0dfrJ1MAgXYZ2SpRN LmgG91922RfeXa+r6+lgEGjHcm4Z+VqY+KlRwBIWT2OU0D3boK9gydPMVSi5OYaJ S4I29s3ZWJK9Qd+3FJuVTjHpPR6NbU/iOAT9xMUJB2zr3mB6EElX1B6VPkWla9gs mLFGQkIE1/gWx3Ygs+ZRZ6GQ5GbAInMgC9f439Lfu/0sxOyYM0ZI69Vfqenw5ZDv wOUIP/NpZErLV8+71/WsMHm/EGW9xkhjR1QyDvwGY+nrN2RF2LyIqh8lmwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGsba9WH6t97BjzjziaIvC4yVIe0MB8GA1UdIwQY MBaAFGfUEOcHtXlxsUpUMJ8CC6y7TSGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjlRUTV3ZTFlWEd4U2xRd253SUxyTHROSWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny80ODZlN2EtMTg4ZC00NGFkLWI3Mzct YjA5ZTc2NTUzODUyLzEvYXh0cjFZZnEzM3NHUE9QT0pvaThMakpVaDdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny80ODZlN2EtMTg4ZC00NGFkLWI3MzctYjA5ZTc2NTUzODUy LzEvWjlRUTV3ZTFlWEd4U2xRd253SUxyTHROSWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9cvMA8E AgACMAkDBwAgAQZ4DwAwDQYJKoZIhvcNAQELBQADggEBAHHC89mNyytn72eGQAaD B56ZSYYp8jXgn8XWz7geVV2zcpTeLmfuk8QoAn307VDtP0mgfVSm3zd89g70HvYv rIaP9qmarB9AMncs64WCm+Ld+JFKdIPa9hH0VHS1YWd2YjISaVHouzXXdLdPz4UH Vlz7hwARt9axrFrnGvT//BULzrbCOez8ikenmt/Qzzg7cJufrmCUN4HutFjOCZwB eIRF/37PsttKspO4uM2dPXb+ByAmGu/BnXufPOZ7ZxxhAYtEA8CLkqS3oJ3c74l1 Fn1V9pFX4DU5MAO6wgCcrjV5T+ZUKTFB+ufdgJDP6M6QzrxYMPmGAwDkDII8Q2IX W5w= -----END CERTIFICATE-----Generated at Mon Jan 26 18:47:06 2026 by rpki-client