This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/aJRCmul5cvMFEkfsWwNh6YKtWg0.roa File: aJRCmul5cvMFEkfsWwNh6YKtWg0.roa (raw, json) Hash identifier: scsks3FGlAv25a5TwoetFCR7muYAvHPLPp8bABvEfPI= Subject key identifier: 68:94:42:9A:E9:79:72:F3:05:12:47:EC:5B:03:61:E9:82:AD:5A:0D Certificate issuer: /CN=5cbd6cd91ad6a7286b21f6509fdd9f50fee75d87 Certificate serial: 019B7C12A6B174B959600F5C342E8C91647D Authority key identifier: 5C:BD:6C:D9:1A:D6:A7:28:6B:21:F6:50:9F:DD:9F:50:FE:E7:5D:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XL1s2RrWpyhrIfZQn92fUP7nXYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/aJRCmul5cvMFEkfsWwNh6YKtWg0.roa Signing time: Fri 02 Jan 2026 00:19:15 +0000 ROA not before: Fri 02 Jan 2026 00:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48943 IP address blocks: 195.10.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.mft rsync://rpki.ripe.net/repository/DEFAULT/XL1s2RrWpyhrIfZQn92fUP7nXYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:a6:b1:74:b9:59:60:0f:5c:34:2e:8c:91:64:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cbd6cd91ad6a7286b21f6509fdd9f50fee75d87 Validity Not Before: Jan 2 00:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6894429ae97972f3051247ec5b0361e982ad5a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ea:da:61:72:26:da:35:b0:3d:36:28:a2:5f: 39:49:37:11:05:78:2a:24:17:8c:9d:30:44:95:0c: f5:8e:0d:f9:43:d5:1a:ce:7c:7a:e8:da:d2:6d:45: 19:75:30:91:a5:88:bd:b8:3e:42:d6:95:fa:52:15: 5a:e5:19:f5:cb:fb:9d:36:cd:d2:0d:df:49:5c:ac: 82:64:a3:9c:ca:c3:e1:be:5d:14:6c:56:3d:05:d5: b3:0b:01:d0:a3:06:35:11:a9:82:f5:43:4e:2f:ca: 13:7f:5e:a2:ea:1b:69:4f:16:31:72:35:29:9d:d8: c3:40:0f:c7:ad:e4:15:ff:d4:40:a0:82:05:07:9d: 04:07:2b:db:d1:56:18:59:c5:32:a2:62:84:e6:ef: 7a:40:1e:72:bc:4a:b1:05:33:2f:21:5a:e9:93:4a: a1:24:72:26:81:a7:01:f7:ef:77:5f:35:9f:b2:b3: a6:ce:95:66:7c:bd:3c:fe:16:9c:56:5c:47:32:0e: 37:84:b5:5d:94:fb:bf:40:fa:ea:0f:bd:68:96:c9: 25:a0:19:df:d7:7f:28:59:b0:34:3b:15:de:f8:17: 93:55:53:ea:23:95:ee:94:ca:1f:83:ca:23:98:0e: 1a:cd:64:00:16:38:e9:b6:6c:7a:c2:db:00:7d:2d: 83:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:94:42:9A:E9:79:72:F3:05:12:47:EC:5B:03:61:E9:82:AD:5A:0D X509v3 Authority Key Identifier: keyid:5C:BD:6C:D9:1A:D6:A7:28:6B:21:F6:50:9F:DD:9F:50:FE:E7:5D:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL1s2RrWpyhrIfZQn92fUP7nXYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/aJRCmul5cvMFEkfsWwNh6YKtWg0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.10.206.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:3a:f0:d8:a6:e1:e4:2f:71:5d:20:7e:58:25:2e:e0:3e:6f: 65:a7:99:97:03:2a:94:9d:cd:6f:03:44:9d:b0:f6:89:f2:ec: 4b:30:be:7a:16:65:b1:85:61:98:d7:57:b7:ec:07:e2:16:e5: ef:3c:e7:63:8e:ae:6c:9c:85:2f:c1:8a:0e:fa:ec:7f:77:27: 7a:45:f2:3d:69:1d:93:7f:69:6c:fe:81:ea:39:39:b5:36:86: 65:68:86:90:3a:c2:c1:ad:b3:1d:62:a0:ae:9d:e7:45:40:39: fc:23:21:9f:03:63:cf:bc:6e:9a:9a:a2:c1:66:09:1f:ed:42: 04:1d:ea:80:32:c8:fc:af:2a:af:2a:7b:ec:6e:31:3e:fe:67: 3c:20:1c:14:3a:84:2a:68:a8:12:c2:83:c2:1b:e6:7c:b4:be: e2:68:2a:be:a9:8c:71:6e:cb:82:f3:63:e4:3d:7a:27:a4:82: 14:e4:f6:27:6b:de:69:46:01:77:f0:89:37:fc:d0:c7:78:4d: ef:60:a5:c7:42:56:61:c7:fc:18:7e:07:1f:5d:2f:d1:56:b4: 5c:30:1e:02:fa:f9:ac:6d:bd:cb:c9:0c:17:1d:28:64:33:38: 04:d0:0a:0f:6e:2f:09:2e:2c:4a:6e:d5:bb:ea:35:05:02:7b: 5d:14:80:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EqaxdLlZYA9cNC6MkWR9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjYmQ2Y2Q5MWFkNmE3Mjg2YjIxZjY1MDlmZGQ5ZjUwZmVl NzVkODcwHhcNMjYwMTAyMDAxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODk0NDI5YWU5Nzk3MmYzMDUxMjQ3ZWM1YjAzNjFlOTgyYWQ1YTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuraYXIm2jWwPTYool85STcRBXgq JBeMnTBElQz1jg35Q9Uaznx66NrSbUUZdTCRpYi9uD5C1pX6UhVa5Rn1y/udNs3S Dd9JXKyCZKOcysPhvl0UbFY9BdWzCwHQowY1EamC9UNOL8oTf16i6htpTxYxcjUp ndjDQA/HreQV/9RAoIIFB50EByvb0VYYWcUyomKE5u96QB5yvEqxBTMvIVrpk0qh JHImgacB9+93XzWfsrOmzpVmfL08/hacVlxHMg43hLVdlPu/QPrqD71olskloBnf 138oWbA0OxXe+BeTVVPqI5XulMofg8ojmA4azWQAFjjptmx6wtsAfS2DhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGiUQprpeXLzBRJH7FsDYemCrVoNMB8GA1UdIwQY MBaAFFy9bNka1qcoayH2UJ/dn1D+512HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEwxczJScldweWhySWZaUW45MmZVUDduWFljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lMDIyM2EtMzFmZC00Y2FjLTgxNjQt ZmJhMDc0YmExYjkwLzEvYUpSQ211bDVjdk1GRWtmc1d3Tmg2WUt0V2cwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9lMDIyM2EtMzFmZC00Y2FjLTgxNjQtZmJhMDc0YmExYjkw LzEvWEwxczJScldweWhySWZaUW45MmZVUDduWFljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwrOMA0G CSqGSIb3DQEBCwUAA4IBAQAKOvDYpuHkL3FdIH5YJS7gPm9lp5mXAyqUnc1vA0Sd sPaJ8uxLML56FmWxhWGY11e37AfiFuXvPOdjjq5snIUvwYoO+ux/dyd6RfI9aR2T f2ls/oHqOTm1NoZlaIaQOsLBrbMdYqCunedFQDn8IyGfA2PPvG6amqLBZgkf7UIE HeqAMsj8ryqvKnvsbjE+/mc8IBwUOoQqaKgSwoPCG+Z8tL7iaCq+qYxxbsuC82Pk PXonpIIU5PYna95pRgF38Ik3/NDHeE3vYKXHQlZhx/wYfgcfXS/RVrRcMB4C+vms bb3LyQwXHShkMzgE0AoPbi8JLixKbtW76jUFAntdFIDW -----END CERTIFICATE-----Generated at Mon Jan 26 02:07:19 2026 by rpki-client