This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/AJpV8hpcC9NXykoo9-dL6aH0A9g.roa File: AJpV8hpcC9NXykoo9-dL6aH0A9g.roa (raw, json) Hash identifier: k7moU7Gr/UvmzLxveWCv2AfmeEfD1dJ7zogQAYvX1ZU= Subject key identifier: 00:9A:55:F2:1A:5C:0B:D3:57:CA:4A:28:F7:E7:4B:E9:A1:F4:03:D8 Certificate issuer: /CN=2a4472336c9d02a488cdd77534d65fb1465ec09a Certificate serial: 019B7834DFB94B543252B40C0AA63B692470 Authority key identifier: 2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/AJpV8hpcC9NXykoo9-dL6aH0A9g.roa Signing time: Thu 01 Jan 2026 06:18:09 +0000 ROA not before: Thu 01 Jan 2026 06:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51048 IP address blocks: 45.88.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:df:b9:4b:54:32:52:b4:0c:0a:a6:3b:69:24:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a4472336c9d02a488cdd77534d65fb1465ec09a Validity Not Before: Jan 1 06:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=009a55f21a5c0bd357ca4a28f7e74be9a1f403d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ce:a5:88:b0:33:7f:32:e8:57:c1:3e:1c:57: 0a:81:f1:59:43:20:4e:e6:a9:1d:99:b6:7b:fc:65: 5b:86:5c:fe:a7:95:0e:0a:63:20:84:b0:be:e8:b9: 64:6f:7f:e8:76:6c:7c:56:1b:d4:c1:e7:62:aa:00: 62:c8:80:a6:2f:47:42:99:7e:03:e5:ce:83:46:4d: 63:8c:41:7c:26:2f:ac:55:ad:29:8b:94:61:6b:39: b3:71:51:12:92:57:bc:22:50:56:da:0a:a8:cb:aa: 83:74:9e:ed:d9:2f:79:4f:62:9e:29:07:46:79:f9: af:74:bf:97:2a:5c:cd:09:d1:9d:42:f4:39:36:43: af:83:e4:1e:e0:11:0d:ab:52:67:74:92:6b:74:1a: ea:e5:67:f0:9e:71:f5:9a:c9:a3:1d:4c:18:b9:87: b9:1c:ae:a2:f2:57:c2:cc:d4:70:a4:33:31:10:6c: 43:26:0e:6f:c2:ef:43:bf:33:da:5c:60:b0:96:76: 8e:1b:12:eb:9b:e7:1a:35:90:10:7f:96:0b:d0:d1: 0f:9c:4e:e2:4c:84:4c:3e:96:82:79:18:29:e6:1c: 17:b2:e4:7d:b4:44:7f:ed:5b:b5:51:ba:61:49:6c: 07:80:96:78:90:21:43:f9:21:89:4c:fb:0e:2f:e1: 4e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9A:55:F2:1A:5C:0B:D3:57:CA:4A:28:F7:E7:4B:E9:A1:F4:03:D8 X509v3 Authority Key Identifier: keyid:2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/AJpV8hpcC9NXykoo9-dL6aH0A9g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.27.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:58:d8:6d:d2:65:6e:02:85:9b:57:f9:3a:0d:fb:59:84:dc: e3:16:f6:c0:98:ca:ed:5d:8b:3b:9c:39:ab:0e:2d:ca:b9:25: be:77:e7:31:62:b2:1a:73:40:2a:c5:15:be:8c:5b:a6:86:f0: dd:22:4e:fb:03:b6:be:3c:d9:37:0d:be:70:f2:75:ce:2b:b8: 08:86:1d:5d:5d:39:41:8c:30:6e:a2:28:1e:2a:2f:11:f2:18: 73:60:13:e6:13:20:29:0e:f3:18:13:69:b1:5c:b6:98:9d:da: 19:15:04:3c:d8:ee:1a:d7:71:ee:33:90:df:71:a7:ac:d4:aa: de:67:e8:5b:bc:80:f4:f3:87:cc:00:2b:87:69:a1:c5:50:be: 87:3e:74:6e:1a:cb:f9:0b:f5:9e:28:1f:69:24:49:19:e5:ec: e1:0a:e1:1d:0f:d9:02:de:94:ce:e5:ed:e3:9d:24:6a:e7:53: 13:d8:31:fb:8a:e5:2e:5f:17:04:19:93:14:23:f5:fb:4b:6c: bf:95:2d:b1:74:14:18:64:7e:f8:69:1d:c4:eb:f6:9d:f0:da: 4e:7a:50:88:27:38:78:87:b6:7d:60:e2:c0:34:d1:50:6b:e0: 9d:be:c6:02:5d:0f:0e:69:4d:32:1b:03:4c:02:48:44:14:66: fd:c2:e6:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NN+5S1QyUrQMCqY7aSRwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNDQ3MjMzNmM5ZDAyYTQ4OGNkZDc3NTM0ZDY1ZmIxNDY1 ZWMwOWEwHhcNMjYwMTAxMDYxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDlhNTVmMjFhNWMwYmQzNTdjYTRhMjhmN2U3NGJlOWExZjQwM2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4s6liLAzfzLoV8E+HFcKgfFZQyBO 5qkdmbZ7/GVbhlz+p5UOCmMghLC+6Llkb3/odmx8VhvUwediqgBiyICmL0dCmX4D 5c6DRk1jjEF8Ji+sVa0pi5RhazmzcVESkle8IlBW2gqoy6qDdJ7t2S95T2KeKQdG efmvdL+XKlzNCdGdQvQ5NkOvg+Qe4BENq1JndJJrdBrq5WfwnnH1msmjHUwYuYe5 HK6i8lfCzNRwpDMxEGxDJg5vwu9DvzPaXGCwlnaOGxLrm+caNZAQf5YL0NEPnE7i TIRMPpaCeRgp5hwXsuR9tER/7Vu1UbphSWwHgJZ4kCFD+SGJTPsOL+FOeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFACaVfIaXAvTV8pKKPfnS+mh9APYMB8GA1UdIwQY MBaAFCpEcjNsnQKkiM3XdTTWX7FGXsCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2tSeU0yeWRBcVNJemRkMU5OWmZzVVpld0pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wMWRiODItNDE3Mi00NDA1LWFiNTUt MDA4NmQwMjM4NWQ2LzEvQUpwVjhocGNDOU5YeWtvbzktZEw2YUgwQTlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8wMWRiODItNDE3Mi00NDA1LWFiNTUtMDA4NmQwMjM4NWQ2 LzEvS2tSeU0yeWRBcVNJemRkMU5OWmZzVVpld0pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVgbMA0G CSqGSIb3DQEBCwUAA4IBAQCPWNht0mVuAoWbV/k6DftZhNzjFvbAmMrtXYs7nDmr Di3KuSW+d+cxYrIac0AqxRW+jFumhvDdIk77A7a+PNk3Db5w8nXOK7gIhh1dXTlB jDBuoigeKi8R8hhzYBPmEyApDvMYE2mxXLaYndoZFQQ82O4a13HuM5Dfcaes1Kre Z+hbvID084fMACuHaaHFUL6HPnRuGsv5C/WeKB9pJEkZ5ezhCuEdD9kC3pTO5e3j nSRq51MT2DH7iuUuXxcEGZMUI/X7S2y/lS2xdBQYZH74aR3E6/ad8NpOelCIJzh4 h7Z9YOLANNFQa+CdvsYCXQ8OaU0yGwNMAkhEFGb9wuZt -----END CERTIFICATE-----Generated at Sun Jan 25 20:31:24 2026 by rpki-client