This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/Ayu-_gJa59IASdEb579YZufiaXM.roa File: Ayu-_gJa59IASdEb579YZufiaXM.roa (raw, json) Hash identifier: J26vgsemze/6ogRWpTuEHbswaY4yl9PhqxhsozNo8bY= Subject key identifier: 03:2B:BE:FE:02:5A:E7:D2:00:49:D1:1B:E7:BF:58:66:E7:E2:69:73 Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Certificate serial: 019BD539E2CABDCC35DF746D1B5F801630BF Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/Ayu-_gJa59IASdEb579YZufiaXM.roa Signing time: Mon 19 Jan 2026 07:48:19 +0000 ROA not before: Mon 19 Jan 2026 07:48:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208410 IP address blocks: 46.32.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:39:e2:ca:bd:cc:35:df:74:6d:1b:5f:80:16:30:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Validity Not Before: Jan 19 07:48:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=032bbefe025ae7d20049d11be7bf5866e7e26973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5b:ef:b1:8b:c8:e5:26:b4:3f:1e:13:b5:97: c4:fa:75:fe:d7:b5:04:48:4b:0c:f4:bf:c4:ca:66: 4b:14:01:e6:b7:26:65:87:46:d9:ef:d6:91:de:26: 7b:5a:95:c3:34:48:06:36:fb:41:cb:0e:94:df:a0: 9b:5d:29:e4:c9:a7:f3:9d:4f:00:e4:55:58:33:2b: cf:32:ef:f8:06:59:d7:86:c4:2d:c1:5c:a9:b5:89: 6f:7a:3e:cd:0b:40:55:f6:8a:fa:4c:a9:a7:a1:f2: 34:1d:1f:7e:25:d7:d9:06:89:d5:9b:71:54:1e:c7: 84:27:80:a7:16:8c:62:25:de:59:3c:d6:1b:1f:1e: 7f:3e:4e:88:48:cd:a5:c0:48:7b:3c:36:63:88:97: bf:da:d9:d4:7d:03:f4:aa:0b:d3:dd:2e:10:4e:e6: 49:d7:98:16:3d:c5:a7:f5:75:d7:44:b1:fb:7b:1a: 42:50:cd:f8:b4:12:06:db:e0:8a:78:22:40:5e:d2: ef:4e:e9:96:24:aa:f9:4e:bd:59:1b:1f:ad:ac:4e: f4:4b:52:52:fd:eb:ec:c6:96:8a:11:f7:b0:27:26: c3:80:17:4a:dd:14:b7:f8:6c:d1:1c:9b:a9:93:79: ab:22:b6:e1:27:6a:b1:40:41:48:f1:a6:d1:ab:37: 18:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2B:BE:FE:02:5A:E7:D2:00:49:D1:1B:E7:BF:58:66:E7:E2:69:73 X509v3 Authority Key Identifier: keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/Ayu-_gJa59IASdEb579YZufiaXM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.32.188.0/24 Signature Algorithm: sha256WithRSAEncryption 02:f0:1e:43:64:07:5d:9d:c2:5a:62:52:50:e9:fb:08:4a:5f: 4c:58:8a:9c:8d:b3:3b:3c:61:90:fd:02:10:e8:ff:73:43:bb: f0:22:9d:d7:59:9e:ea:88:06:d4:35:df:f1:ee:6c:4f:55:0d: 09:d0:2f:f5:17:f1:95:10:7f:7a:7a:41:d2:89:4d:2c:40:21: 34:0b:64:d6:e9:61:84:dc:14:a4:c9:22:b7:51:ed:ee:d6:e0: 34:fc:7b:e0:f5:cc:d5:a7:a2:a1:e8:e6:89:ca:36:9f:7d:09: 21:91:f3:15:51:e8:b1:f6:fd:c9:13:5e:f7:fb:52:b6:59:eb: 1e:ec:d5:ef:b3:5d:f0:41:df:0b:79:93:a1:5a:0e:53:e6:42: a5:e2:09:2a:7d:91:a1:ea:ff:9b:b1:bc:2f:a4:b9:21:ae:60: db:97:c9:9c:ef:80:e8:9f:ac:91:54:6f:6a:00:14:f5:c4:c9: 11:7d:56:66:20:d2:34:da:36:6a:79:b4:93:12:3c:01:00:86: b7:5e:33:c1:06:82:b5:ca:32:ea:82:77:5f:5c:e1:93:4f:16: 91:b3:e3:51:42:92:95:74:05:65:a4:43:6b:de:ca:cf:06:8c: b8:4c:54:9d:71:f8:d7:01:3c:de:20:e5:71:e1:e9:6b:7d:ab: f0:88:c3:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvVOeLKvcw133RtG1+AFjC/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0 Mzc3OTUwHhcNMjYwMTE5MDc0ODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzJiYmVmZTAyNWFlN2QyMDA0OWQxMWJlN2JmNTg2NmU3ZTI2OTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFvvsYvI5Sa0Px4TtZfE+nX+17UE SEsM9L/EymZLFAHmtyZlh0bZ79aR3iZ7WpXDNEgGNvtByw6U36CbXSnkyafznU8A 5FVYMyvPMu/4BlnXhsQtwVyptYlvej7NC0BV9or6TKmnofI0HR9+JdfZBonVm3FU HseEJ4CnFoxiJd5ZPNYbHx5/Pk6ISM2lwEh7PDZjiJe/2tnUfQP0qgvT3S4QTuZJ 15gWPcWn9XXXRLH7expCUM34tBIG2+CKeCJAXtLvTumWJKr5Tr1ZGx+trE70S1JS /evsxpaKEfewJybDgBdK3RS3+GzRHJupk3mrIrbhJ2qxQEFI8abRqzcYrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAMrvv4CWufSAEnRG+e/WGbn4mlzMB8GA1UdIwQY MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEvQXl1LV9nSmE1OUlBU2RFYjU3OVladWZpYVhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiC8MA0G CSqGSIb3DQEBCwUAA4IBAQAC8B5DZAddncJaYlJQ6fsISl9MWIqcjbM7PGGQ/QIQ 6P9zQ7vwIp3XWZ7qiAbUNd/x7mxPVQ0J0C/1F/GVEH96ekHSiU0sQCE0C2TW6WGE 3BSkySK3Ue3u1uA0/Hvg9czVp6Kh6OaJyjaffQkhkfMVUeix9v3JE173+1K2Wese 7NXvs13wQd8LeZOhWg5T5kKl4gkqfZGh6v+bsbwvpLkhrmDbl8mc74Don6yRVG9q ABT1xMkRfVZmINI02jZqebSTEjwBAIa3XjPBBoK1yjLqgndfXOGTTxaRs+NRQpKV dAVlpENr3srPBoy4TFSdcfjXATzeIOVx4elrfavwiMOC -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:48 2026 by rpki-client