This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/AyjB4EHPCDq9p7LZ4QxN-ryxrkM.roa File: AyjB4EHPCDq9p7LZ4QxN-ryxrkM.roa (raw, json) Hash identifier: TjTKp2DaLx4thRMtFk13G01LVFaqUeVARGlNcCmXfhM= Subject key identifier: 03:28:C1:E0:41:CF:08:3A:BD:A7:B2:D9:E1:0C:4D:FA:BC:B1:AE:43 Certificate issuer: /CN=0b1b318e5057a1c10341607cddddadb46d71abf5 Certificate serial: 019B7D5C31991F4572B4D85235D07F42275A Authority key identifier: 0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/AyjB4EHPCDq9p7LZ4QxN-ryxrkM.roa Signing time: Fri 02 Jan 2026 06:19:12 +0000 ROA not before: Fri 02 Jan 2026 06:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211683 IP address blocks: 5.253.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:31:99:1f:45:72:b4:d8:52:35:d0:7f:42:27:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1b318e5057a1c10341607cddddadb46d71abf5 Validity Not Before: Jan 2 06:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0328c1e041cf083abda7b2d9e10c4dfabcb1ae43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:88:74:7e:e4:fe:8d:d6:71:2a:33:5a:dc:8e: 0c:97:1d:b7:20:85:cf:10:92:4a:3d:8d:29:07:0b: 5c:b7:2e:c2:14:39:f6:54:47:d6:3f:45:13:6c:80: f9:78:0a:03:78:a5:22:9d:5b:c8:bd:16:80:79:7d: 97:e8:e1:b4:4c:70:20:7a:e5:67:92:14:e5:10:f9: 7e:f9:08:4d:4a:2e:1b:ec:54:f7:b9:aa:39:9b:a3: ab:3c:be:e1:3d:ac:c9:ac:e9:8d:5a:2b:d8:5a:24: 89:76:d3:af:07:27:c7:4f:65:95:b5:0e:e4:ea:97: 5e:5b:a0:80:72:0c:1f:ff:48:67:90:c3:fa:c3:83: 31:2f:a2:d7:7a:b5:a3:be:34:fc:cd:06:b8:d5:77: 83:4e:f4:5e:7d:0c:0b:a4:5b:16:86:35:be:ae:de: 99:d6:fc:2b:1f:eb:3e:68:59:4d:d8:b8:af:34:91: eb:d1:e6:f9:0b:d6:7b:29:9e:96:3e:e5:ab:8c:cf: bb:dd:28:f6:66:ab:fc:a8:ce:c8:9e:5f:c7:c1:f0: b7:59:2e:88:78:5b:9a:aa:15:06:10:bd:8a:c8:96: 00:b9:a8:da:5f:13:ed:d5:29:0f:e1:e1:3b:94:de: 01:18:fc:90:30:dc:9d:69:01:8b:45:be:a2:54:ae: 9f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:28:C1:E0:41:CF:08:3A:BD:A7:B2:D9:E1:0C:4D:FA:BC:B1:AE:43 X509v3 Authority Key Identifier: keyid:0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/AyjB4EHPCDq9p7LZ4QxN-ryxrkM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.231.0/24 Signature Algorithm: sha256WithRSAEncryption 24:b6:0e:3f:f0:e1:e3:ca:2c:47:33:84:a6:35:85:c7:92:4f: 0d:23:b5:dd:69:00:23:4e:88:a5:36:6e:9d:85:e4:d3:57:4a: de:fa:d3:60:73:6f:b5:11:45:88:ea:5f:e7:e8:c9:4f:0a:3a: c7:54:53:26:4a:99:b0:1c:79:eb:86:81:d8:d3:9c:fc:c3:4c: f1:36:9c:52:32:94:13:ea:23:41:5c:b2:d5:23:46:22:89:25: 3a:ec:f4:19:ad:94:2e:f3:86:ef:76:f1:d4:0c:7e:b6:f6:e1: 8e:3e:be:9b:5c:1d:a5:04:67:7d:e9:96:f2:07:a4:16:dc:05: 0a:02:d2:6d:6b:c4:39:53:a1:89:de:e8:af:13:16:3a:51:de: c5:ce:e9:7c:d8:19:7a:38:0e:07:2d:78:e2:c1:aa:83:87:68: 3e:db:4f:52:29:bf:4c:b5:ea:33:2f:e7:81:17:aa:68:0d:8f: 8a:29:f5:0d:00:1b:8e:ad:2f:b7:a8:59:18:f5:8f:bd:5e:52: 03:2d:41:59:f3:71:ba:8c:79:a9:c8:76:20:17:ba:90:44:d2: b6:68:59:0e:36:f0:3a:f0:2d:65:1c:87:d5:a7:7b:cd:1e:97: ef:37:01:57:d6:8f:91:9f:db:4f:88:d2:1b:92:16:22:b8:a3: 03:c9:3e:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XDGZH0VytNhSNdB/QidaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMWIzMThlNTA1N2ExYzEwMzQxNjA3Y2RkZGRhZGI0NmQ3 MWFiZjUwHhcNMjYwMTAyMDYxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzI4YzFlMDQxY2YwODNhYmRhN2IyZDllMTBjNGRmYWJjYjFhZTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoh0fuT+jdZxKjNa3I4Mlx23IIXP EJJKPY0pBwtcty7CFDn2VEfWP0UTbID5eAoDeKUinVvIvRaAeX2X6OG0THAgeuVn khTlEPl++QhNSi4b7FT3uao5m6OrPL7hPazJrOmNWivYWiSJdtOvByfHT2WVtQ7k 6pdeW6CAcgwf/0hnkMP6w4MxL6LXerWjvjT8zQa41XeDTvRefQwLpFsWhjW+rt6Z 1vwrH+s+aFlN2LivNJHr0eb5C9Z7KZ6WPuWrjM+73Sj2Zqv8qM7Inl/HwfC3WS6I eFuaqhUGEL2KyJYAuajaXxPt1SkP4eE7lN4BGPyQMNydaQGLRb6iVK6f1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAMoweBBzwg6vaey2eEMTfq8sa5DMB8GA1UdIwQY MBaAFAsbMY5QV6HBA0FgfN3drbRtcav1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3hzeGpsQlhvY0VEUVdCODNkMnR0RzF4cV9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YjRkZjctZDcyYi00NzRmLTk2M2Yt NTllNmE2ZDRkNTc2LzEvQXlqQjRFSFBDRHE5cDdMWjRReE4tcnl4cmtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YjRkZjctZDcyYi00NzRmLTk2M2YtNTllNmE2ZDRkNTc2 LzEvQ3hzeGpsQlhvY0VEUVdCODNkMnR0RzF4cV9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABf3nMA0G CSqGSIb3DQEBCwUAA4IBAQAktg4/8OHjyixHM4SmNYXHkk8NI7XdaQAjToilNm6d heTTV0re+tNgc2+1EUWI6l/n6MlPCjrHVFMmSpmwHHnrhoHY05z8w0zxNpxSMpQT 6iNBXLLVI0YiiSU67PQZrZQu84bvdvHUDH629uGOPr6bXB2lBGd96ZbyB6QW3AUK AtJta8Q5U6GJ3uivExY6Ud7Fzul82Bl6OA4HLXjiwaqDh2g+209SKb9MteozL+eB F6poDY+KKfUNABuOrS+3qFkY9Y+9XlIDLUFZ83G6jHmpyHYgF7qQRNK2aFkONvA6 8C1lHIfVp3vNHpfvNwFX1o+Rn9tPiNIbkhYiuKMDyT5k -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:49 2026 by rpki-client