This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/ay0VUntTWjhODm52u9TFTTH4EJw.roa File: ay0VUntTWjhODm52u9TFTTH4EJw.roa (raw, json) Hash identifier: 7gFOBHTqvfcaglUxfgHe1x48kCbMp0iTpGgti6zIr4k= Subject key identifier: 6B:2D:15:52:7B:53:5A:38:4E:0E:6E:76:BB:D4:C5:4D:31:F8:10:9C Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3 Certificate serial: 019B7BA3C2E27FE0ECF417C15A7C666DA4BD Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/ay0VUntTWjhODm52u9TFTTH4EJw.roa Signing time: Thu 01 Jan 2026 22:18:08 +0000 ROA not before: Thu 01 Jan 2026 22:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44400 IP address blocks: 93.126.9.0/24 maxlen: 24 93.126.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:c2:e2:7f:e0:ec:f4:17:c1:5a:7c:66:6d:a4:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3 Validity Not Before: Jan 1 22:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b2d15527b535a384e0e6e76bbd4c54d31f8109c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:13:ad:da:92:45:d3:48:9d:22:b5:da:c1:49: 72:5d:70:bd:c1:8f:6d:e2:9e:00:d5:80:fb:f6:35: 80:78:c4:15:89:01:1b:9c:76:7e:2c:90:22:24:cd: 7f:aa:18:58:1a:45:b8:00:ae:44:89:c8:65:63:4e: f7:09:ec:8f:77:4b:9c:03:b2:7b:d7:60:c4:bf:35: 2e:44:b5:12:51:f9:4d:05:a2:32:83:84:0a:be:a7: 5f:04:f3:b4:99:b4:96:eb:f7:1b:55:50:1b:73:39: 91:53:bb:3e:b8:39:dd:90:14:d8:c8:70:62:d4:42: aa:5b:bf:05:1d:84:c4:e9:83:7e:eb:f0:76:6d:9d: 48:eb:cf:e0:71:26:b5:96:ac:2e:1b:3a:d0:44:ef: a1:5e:d5:5e:31:3b:80:e2:62:5d:14:22:ce:d6:85: 27:02:7a:8f:68:53:82:9f:02:05:71:9e:5f:4c:1e: 67:e6:79:8b:34:bd:6f:06:c6:e4:21:0a:c0:78:bc: 54:d1:52:05:ce:57:e8:a5:db:c1:38:68:1d:d9:75: 03:2e:2d:85:40:f1:1b:41:f0:cc:3b:8f:4b:27:e6: 1c:fe:dc:6f:68:3f:94:f0:54:e2:fd:79:0f:9e:e3: 03:3e:b3:62:11:61:56:7d:77:0b:12:97:9e:c5:de: ae:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2D:15:52:7B:53:5A:38:4E:0E:6E:76:BB:D4:C5:4D:31:F8:10:9C X509v3 Authority Key Identifier: keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/ay0VUntTWjhODm52u9TFTTH4EJw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.126.9.0-93.126.10.255 Signature Algorithm: sha256WithRSAEncryption 93:1e:c8:86:69:37:47:a1:d2:96:b5:90:51:2a:6e:9a:b8:6b: df:17:cc:23:36:29:ca:cb:e6:31:ea:43:6a:7f:06:fd:e8:46: e7:89:55:6c:67:7e:23:b9:cd:5f:67:89:b7:08:ea:a7:f1:95: a0:89:dd:af:63:74:16:75:dc:9d:52:bd:27:39:e2:4e:0b:e1: 42:e5:ab:85:59:7d:70:b0:10:2b:c7:bf:78:bf:b5:87:33:c8: dd:8e:35:8f:f5:45:51:b3:77:e5:2d:5c:3f:d4:33:69:52:13: 74:e9:ec:8c:ae:66:f5:aa:7c:42:12:9c:3e:74:86:96:ab:d2: 97:89:7e:20:44:78:44:64:ab:69:62:55:f6:ec:b6:d6:f4:ce: b4:7b:5e:6e:13:de:ae:1c:3e:0d:e6:2d:00:b1:05:24:21:8d: 07:38:63:59:af:7e:21:85:7d:9b:ab:a4:45:df:fd:ed:77:13: ad:e2:c7:c9:68:d6:2d:4c:d2:3a:1d:75:08:65:e9:7d:9b:33: 59:58:dd:be:b4:7a:7d:d3:38:6d:d9:1e:0c:d5:47:ba:44:c7: b9:9e:3b:24:23:8f:45:d9:75:12:3c:40:f8:90:5f:d0:2b:b4: 32:02:2a:db:fc:1e:2c:f2:ce:82:ef:41:d1:32:43:d0:33:ac: 8f:fb:7f:2e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7o8Lif+Ds9BfBWnxmbaS9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNTNhY2NiOTRlMTBjZjhjMmMyOTY3OTA2N2VlMzkwOTlm NDA0ZDMwHhcNMjYwMTAxMjIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjJkMTU1MjdiNTM1YTM4NGUwZTZlNzZiYmQ0YzU0ZDMxZjgxMDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyROt2pJF00idIrXawUlyXXC9wY9t 4p4A1YD79jWAeMQViQEbnHZ+LJAiJM1/qhhYGkW4AK5EichlY073CeyPd0ucA7J7 12DEvzUuRLUSUflNBaIyg4QKvqdfBPO0mbSW6/cbVVAbczmRU7s+uDndkBTYyHBi 1EKqW78FHYTE6YN+6/B2bZ1I68/gcSa1lqwuGzrQRO+hXtVeMTuA4mJdFCLO1oUn AnqPaFOCnwIFcZ5fTB5n5nmLNL1vBsbkIQrAeLxU0VIFzlfopdvBOGgd2XUDLi2F QPEbQfDMO49LJ+Yc/txvaD+U8FTi/XkPnuMDPrNiEWFWfXcLEpeexd6uhQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGstFVJ7U1o4Tg5udrvUxU0x+BCcMB8GA1UdIwQY MBaAFINTrMuU4Qz4wsKWeQZ+45CZ9ATTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEt NmMzOTUwMTk0MzcwLzEvYXkwVlVudFRXamhPRG01MnU5VEZUVEg0RUp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEtNmMzOTUwMTk0Mzcw LzEvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABdfgkD BABdfgowDQYJKoZIhvcNAQELBQADggEBAJMeyIZpN0eh0pa1kFEqbpq4a98XzCM2 KcrL5jHqQ2p/Bv3oRueJVWxnfiO5zV9nibcI6qfxlaCJ3a9jdBZ13J1SvSc54k4L 4ULlq4VZfXCwECvHv3i/tYczyN2ONY/1RVGzd+UtXD/UM2lSE3Tp7IyuZvWqfEIS nD50hpar0peJfiBEeERkq2liVfbsttb0zrR7Xm4T3q4cPg3mLQCxBSQhjQc4Y1mv fiGFfZurpEXf/e13E63ix8lo1i1M0joddQhl6X2bM1lY3b60en3TOG3ZHgzVR7pE x7meOyQjj0XZdRI8QPiQX9ArtDICKtv8HizyzoLvQdEyQ9AzrI/7fy4= -----END CERTIFICATE-----Generated at Mon Jan 26 01:17:23 2026 by rpki-client