This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/ayw9hP-juqBVUYhL4659BWRbagM.roa File: ayw9hP-juqBVUYhL4659BWRbagM.roa (raw, json) Hash identifier: GLutlgyBzkV4tGAVG5CwDMmdYLkbefgbgEpP3APu1Jo= Subject key identifier: 6B:2C:3D:84:FF:A3:BA:A0:55:51:88:4B:E3:AE:7D:05:64:5B:6A:03 Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019B7E389CAF73F02F94AE29F7C3868A53CE Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/ayw9hP-juqBVUYhL4659BWRbagM.roa Signing time: Fri 02 Jan 2026 10:19:57 +0000 ROA not before: Fri 02 Jan 2026 10:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200005 IP address blocks: 217.112.151.0/24 maxlen: 24 217.112.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:9c:af:73:f0:2f:94:ae:29:f7:c3:86:8a:53:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Jan 2 10:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b2c3d84ffa3baa05551884be3ae7d05645b6a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:01:a4:c8:d2:f8:bb:3b:99:d5:6d:c7:83:04: 97:55:e4:f4:35:0b:3f:d3:42:3c:9a:1a:9a:5a:33: 80:8f:84:8b:56:d3:aa:8e:cf:62:a6:fa:e2:0d:91: 21:c1:07:19:38:26:ce:8b:00:aa:79:49:de:fa:ac: 8d:99:7f:4d:56:12:ab:72:cf:32:1b:ea:bf:d5:1c: 76:a1:c8:b8:e8:c9:3e:ef:4a:02:b9:73:5f:30:4a: 0c:d9:53:df:46:6c:20:bc:f9:f2:a1:21:bd:c1:b0: 67:2a:da:7e:39:6f:51:d2:55:5f:be:3b:a5:b3:d3: 93:4f:54:dd:eb:9f:7a:ca:cf:9c:f6:33:58:fc:97: 2f:ba:6a:3c:10:03:a5:fd:eb:d9:e0:1b:33:4c:56: 3d:bc:92:ba:4e:02:79:fd:6a:94:74:c2:bd:46:dc: c6:d6:76:83:cc:90:c9:f1:25:1f:3c:1d:20:f9:1a: 0f:c7:6a:c0:8c:bf:70:51:42:66:48:2e:44:61:74: 57:0c:0b:26:9a:ac:48:83:5c:57:28:49:5f:e0:c3: bb:dc:ec:02:1e:df:14:18:eb:11:dd:1c:52:34:cd: 5f:79:4b:f2:f8:2a:47:28:a0:a2:a6:73:69:4d:c1: 8a:0a:5e:0e:9f:c9:44:c5:62:44:cc:cd:88:b0:f5: 83:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2C:3D:84:FF:A3:BA:A0:55:51:88:4B:E3:AE:7D:05:64:5B:6A:03 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/ayw9hP-juqBVUYhL4659BWRbagM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.112.151.0/24 217.112.158.0/24 Signature Algorithm: sha256WithRSAEncryption 43:a8:8e:6b:40:e1:1e:f5:82:24:5a:5f:6d:66:c6:27:f5:cf: 8c:0b:a7:ef:d9:b1:3f:1f:55:a5:30:54:e0:d9:19:3e:bc:ac: 02:86:c2:c5:04:a1:b7:f9:02:a8:6b:d9:65:9e:b2:3c:b5:aa: 56:c2:c8:4c:98:c2:3b:00:da:0a:38:34:5d:47:a6:0c:ed:10: eb:34:9b:9d:1e:0c:85:6f:67:7b:a1:de:80:7b:d5:35:90:98: 0c:5f:72:92:30:35:fb:1a:8d:6e:f9:5d:03:4b:06:92:21:00: c2:03:28:55:67:90:21:c5:46:65:0b:bf:f4:16:ae:95:4e:9a: b5:8c:a9:11:e1:86:ee:6a:13:fe:a6:61:a8:b1:a8:12:4f:d0: 6d:c5:1f:27:78:3e:a0:49:7b:18:3d:bd:8e:e7:4a:aa:33:9e: 0d:51:b8:c1:f0:e0:70:ba:e6:b7:10:e4:b0:d3:d0:0b:82:2a: bd:15:52:0e:2f:ec:65:8c:ae:54:bb:8d:8b:46:85:06:9d:7a: 6a:ad:9b:66:1e:60:59:bc:6b:dc:40:69:66:3a:a3:48:1c:11: 50:1f:d9:ce:66:2e:4d:da:9b:56:67:ec:89:68:bd:80:8d:96: ab:ea:f7:1b:3e:9e:87:2e:ff:c1:f3:36:8a:ea:7b:2a:bc:02: df:77:0d:78 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OJyvc/AvlK4p98OGilPOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwMTAyMTAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjJjM2Q4NGZmYTNiYWEwNTU1MTg4NGJlM2FlN2QwNTY0NWI2YTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQGkyNL4uzuZ1W3HgwSXVeT0NQs/ 00I8mhqaWjOAj4SLVtOqjs9ipvriDZEhwQcZOCbOiwCqeUne+qyNmX9NVhKrcs8y G+q/1Rx2oci46Mk+70oCuXNfMEoM2VPfRmwgvPnyoSG9wbBnKtp+OW9R0lVfvjul s9OTT1Td6596ys+c9jNY/Jcvumo8EAOl/evZ4BszTFY9vJK6TgJ5/WqUdMK9RtzG 1naDzJDJ8SUfPB0g+RoPx2rAjL9wUUJmSC5EYXRXDAsmmqxIg1xXKElf4MO73OwC Ht8UGOsR3RxSNM1feUvy+CpHKKCipnNpTcGKCl4On8lExWJEzM2IsPWDgwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGssPYT/o7qgVVGIS+OufQVkW2oDMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvYXl3OWhQLWp1cUJWVVloTDQ2NTlCV1JiYWdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2XCXAwQA 2XCeMA0GCSqGSIb3DQEBCwUAA4IBAQBDqI5rQOEe9YIkWl9tZsYn9c+MC6fv2bE/ H1WlMFTg2Rk+vKwChsLFBKG3+QKoa9llnrI8tapWwshMmMI7ANoKODRdR6YM7RDr NJudHgyFb2d7od6Ae9U1kJgMX3KSMDX7Go1u+V0DSwaSIQDCAyhVZ5AhxUZlC7/0 Fq6VTpq1jKkR4YbuahP+pmGosagST9BtxR8neD6gSXsYPb2O50qqM54NUbjB8OBw uua3EOSw09ALgiq9FVIOL+xljK5Uu42LRoUGnXpqrZtmHmBZvGvcQGlmOqNIHBFQ H9nOZi5N2ptWZ+yJaL2AjZar6vcbPp6HLv/B8zaK6nsqvALfdw14 -----END CERTIFICATE-----Generated at Sun Jan 25 20:01:32 2026 by rpki-client