This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/AXw1fMN4QVwh_fCCHDmmZdyjQ0M.roa File: AXw1fMN4QVwh_fCCHDmmZdyjQ0M.roa (raw, json) Hash identifier: 2a2VYvYjD+SKO9HMwLyzgAvBrGoGV8DCs63xNBs37UA= Subject key identifier: 01:7C:35:7C:C3:78:41:5C:21:FD:F0:82:1C:39:A6:65:DC:A3:43:43 Certificate issuer: /CN=866b8e05d938e45d65ae314dc675237dec8311a1 Certificate serial: 019B7A5AF2DC71CB2B9D667F43C052501D08 Authority key identifier: 86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/AXw1fMN4QVwh_fCCHDmmZdyjQ0M.roa Signing time: Thu 01 Jan 2026 16:18:59 +0000 ROA not before: Thu 01 Jan 2026 16:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212041 IP address blocks: 31.43.186.0/23 maxlen: 23 37.153.140.0/22 maxlen: 22 193.169.104.0/24 maxlen: 24 2a10:c580::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f2:dc:71:cb:2b:9d:66:7f:43:c0:52:50:1d:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866b8e05d938e45d65ae314dc675237dec8311a1 Validity Not Before: Jan 1 16:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=017c357cc378415c21fdf0821c39a665dca34343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9e:3b:29:54:4c:81:49:74:aa:3d:f6:fd:d9: 4e:a2:0f:63:f4:a9:56:36:6f:cf:48:10:ba:7c:bc: 46:6b:7f:76:eb:6d:6d:23:b8:1e:2a:b0:52:41:98: 0b:31:06:32:30:97:96:f9:ab:1d:36:5b:f9:a0:4a: 0e:e5:6f:c9:75:7d:59:6f:e4:51:75:e8:d9:fa:4c: 38:11:16:3c:a2:fa:19:47:43:04:68:5f:04:12:11: de:08:05:ca:49:08:5d:ba:b4:14:f2:b8:c9:90:01: 42:d1:32:05:1e:8f:38:9a:6a:50:1e:65:ca:54:f5: af:67:a7:d8:24:1e:64:3f:69:12:4b:9c:b8:8e:f3: 25:8d:a9:49:79:ad:02:2a:5c:58:5a:e0:cc:ac:e2: 6e:56:f6:ec:f8:96:92:45:43:3c:bd:62:21:40:9e: c6:40:d3:22:86:89:f9:41:fb:50:85:d8:ea:a8:f9: 61:da:2e:b5:e1:75:50:59:9a:a8:5c:98:5e:9a:83: 07:72:08:c0:2a:fa:4d:0d:32:7d:6d:94:69:d2:bc: c5:eb:cb:13:b5:69:af:de:cc:09:e9:a8:a5:d3:f4: ec:7b:bc:26:b3:4d:f4:3d:7d:27:9c:b8:fb:c5:66: b2:67:66:25:1c:4b:3a:25:54:23:3c:5e:d1:8a:cd: b3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7C:35:7C:C3:78:41:5C:21:FD:F0:82:1C:39:A6:65:DC:A3:43:43 X509v3 Authority Key Identifier: keyid:86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/AXw1fMN4QVwh_fCCHDmmZdyjQ0M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.43.186.0/23 37.153.140.0/22 193.169.104.0/24 IPv6: 2a10:c580::/29 Signature Algorithm: sha256WithRSAEncryption 28:0e:2b:b2:9d:9c:bf:49:4d:f3:a0:80:60:44:d0:b8:f3:99: d8:88:18:3c:d9:ba:80:29:9f:fc:64:78:c2:72:21:2b:dd:4d: 73:49:0e:b4:3a:b1:14:b5:f2:00:d1:a3:99:60:39:d7:ba:2d: 95:39:0d:44:88:bf:a2:81:1c:50:a1:af:e7:5b:a0:0e:66:d0: 7e:4e:8b:71:0c:bc:8e:9f:94:75:1b:08:3e:36:5e:58:e0:e5: 1f:cc:5d:ae:b7:1d:46:46:15:1f:ad:c9:87:64:ab:95:87:1e: 56:a4:5a:12:99:01:77:f5:27:3a:f2:be:53:4e:56:3f:66:72: a8:82:c8:87:7c:37:14:b7:04:8a:cc:0a:19:3f:1e:d2:70:b8: c7:12:b0:57:90:05:53:2f:93:a3:1a:94:73:7f:c1:8a:98:6a: fa:9d:72:39:ac:84:ee:f0:7e:a6:98:a4:9a:4a:09:36:56:2a: 02:93:41:a0:cf:4a:70:33:ec:bc:24:56:53:39:ad:1c:a8:25: bb:7d:57:a4:51:77:35:ec:dd:16:89:6f:41:e0:94:cf:85:35: ef:4b:fc:95:da:7c:05:1b:f4:e3:23:9c:99:74:b8:70:1e:5b: fc:bd:c7:aa:cf:54:99:06:99:73:37:77:c1:0b:d0:4f:64:21: 1f:34:22:7f -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6WvLcccsrnWZ/Q8BSUB0IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NmI4ZTA1ZDkzOGU0NWQ2NWFlMzE0ZGM2NzUyMzdkZWM4 MzExYTEwHhcNMjYwMTAxMTYxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTdjMzU3Y2MzNzg0MTVjMjFmZGYwODIxYzM5YTY2NWRjYTM0MzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ47KVRMgUl0qj32/dlOog9j9KlW Nm/PSBC6fLxGa392621tI7geKrBSQZgLMQYyMJeW+asdNlv5oEoO5W/JdX1Zb+RR dejZ+kw4ERY8ovoZR0MEaF8EEhHeCAXKSQhdurQU8rjJkAFC0TIFHo84mmpQHmXK VPWvZ6fYJB5kP2kSS5y4jvMljalJea0CKlxYWuDMrOJuVvbs+JaSRUM8vWIhQJ7G QNMihon5QftQhdjqqPlh2i614XVQWZqoXJhemoMHcgjAKvpNDTJ9bZRp0rzF68sT tWmv3swJ6ail0/Tse7wms030PX0nnLj7xWayZ2YlHEs6JVQjPF7Ris2zVwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFAF8NXzDeEFcIf3wghw5pmXco0NDMB8GA1UdIwQY MBaAFIZrjgXZOORdZa4xTcZ1I33sgxGhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaG11T0JkazQ1RjFscmpGTnhuVWpmZXlERWFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kNWJjZTItYTkyZi00NDJhLWEyMzUt YWE4OGE0YmE1OGVmLzEvQVh3MWZNTjRRVndoX2ZDQ0hEbW1aZHlqUTBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9kNWJjZTItYTkyZi00NDJhLWEyMzUtYWE4OGE0YmE1OGVm LzEvaG11T0JkazQ1RjFscmpGTnhuVWpmZXlERWFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBHyu6AwQC JZmMAwQAwaloMA0EAgACMAcDBQMqEMWAMA0GCSqGSIb3DQEBCwUAA4IBAQAoDiuy nZy/SU3zoIBgRNC485nYiBg82bqAKZ/8ZHjCciEr3U1zSQ60OrEUtfIA0aOZYDnX ui2VOQ1EiL+igRxQoa/nW6AOZtB+TotxDLyOn5R1Gwg+Nl5Y4OUfzF2utx1GRhUf rcmHZKuVhx5WpFoSmQF39Sc68r5TTlY/ZnKogsiHfDcUtwSKzAoZPx7ScLjHErBX kAVTL5OjGpRzf8GKmGr6nXI5rITu8H6mmKSaSgk2VioCk0Ggz0pwM+y8JFZTOa0c qCW7fVekUXc17N0WiW9B4JTPhTXvS/yV2nwFG/TjI5yZdLhwHlv8vceqz1SZBplz N3fBC9BPZCEfNCJ/ -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:41 2026 by rpki-client