This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/aXQxzuaw5fOn2DOJkKPhPnT7WdE.roa File: aXQxzuaw5fOn2DOJkKPhPnT7WdE.roa (raw, json) Hash identifier: sMCacWvcaSAOlXkq8w8cutQmDcf7CB0LY+fxLKRnzwE= Subject key identifier: 69:74:31:CE:E6:B0:E5:F3:A7:D8:33:89:90:A3:E1:3E:74:FB:59:D1 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 019B7A5B0C3ADF64397722DBC4058A7DB87C Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/aXQxzuaw5fOn2DOJkKPhPnT7WdE.roa Signing time: Thu 01 Jan 2026 16:19:05 +0000 ROA not before: Thu 01 Jan 2026 16:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199698 IP address blocks: 82.199.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:0c:3a:df:64:39:77:22:db:c4:05:8a:7d:b8:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Jan 1 16:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=697431cee6b0e5f3a7d8338990a3e13e74fb59d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:58:85:c4:87:d6:9d:28:34:26:0d:bc:e1:40: 79:d7:46:18:19:0f:68:cb:10:76:0c:30:cf:85:05: 55:41:c7:84:c6:70:79:f3:86:a8:5a:d7:43:64:a2: a5:64:fe:fd:cc:38:6c:cf:90:e1:91:b4:1b:08:cf: 3a:75:28:57:30:bd:e9:ce:8d:13:5c:7a:81:6c:6e: 45:03:61:4d:ef:61:6d:45:fd:89:ef:f8:42:ba:a1: 59:cf:07:6e:6b:93:45:88:75:ab:ba:77:02:12:18: 78:ef:ad:5a:d1:3d:a5:da:e2:fd:2b:dd:69:54:40: 12:9b:49:95:1b:7c:ff:c7:37:07:b1:a2:fa:04:72: e6:a4:4f:be:20:0f:24:82:b9:96:94:4e:9f:1e:b7: a8:b9:ef:d6:f0:27:1d:a3:f9:26:5a:dc:73:44:5c: a4:8c:f3:ca:af:31:cb:d3:b8:ca:26:0f:7c:46:27: 7d:6d:95:cd:db:17:1e:fb:a6:ed:8f:af:1f:4f:e7: 62:dc:03:5a:7f:f9:64:ee:89:4d:00:04:74:25:ba: b4:97:05:ad:48:82:76:1e:78:e2:2f:59:fa:93:e1: 7f:4b:a4:83:f0:fc:23:9c:7e:e2:1f:82:e7:e4:aa: 5c:8a:ff:6e:61:8a:c1:79:50:fe:fb:bd:49:51:ad: 6b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:74:31:CE:E6:B0:E5:F3:A7:D8:33:89:90:A3:E1:3E:74:FB:59:D1 X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/aXQxzuaw5fOn2DOJkKPhPnT7WdE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.199.202.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:dd:db:de:a3:5f:54:35:35:79:1d:ef:8a:c9:e5:90:21:8a: 62:a8:cf:a2:bf:fc:18:54:ca:e8:1f:54:36:f0:aa:63:47:5b: 18:9a:ad:b5:33:31:50:3a:79:1b:a7:02:ef:fd:b9:4a:77:67: 1e:34:15:64:73:b6:49:91:c2:11:08:3b:d8:73:23:45:be:2e: fe:78:01:2a:67:2a:2c:96:6e:3c:f7:d8:1e:2a:71:c0:a2:8b: 80:65:71:ee:0c:c6:71:c6:d2:72:a0:62:b7:7a:21:8a:fc:c1: dc:8f:2e:ac:0f:a6:de:11:60:da:ac:00:55:ad:f9:06:f1:be: c9:19:7c:3f:22:67:a1:a9:62:a6:5c:4c:14:81:67:f3:c0:2d: a2:11:e9:ed:0d:c1:79:43:ea:96:42:ea:95:b6:5f:1c:cf:a1: 16:85:f5:cb:dc:19:74:d3:b1:89:cd:fa:0b:e7:ae:75:43:2d: 3a:ec:82:7b:71:f6:98:be:0b:89:01:2a:e9:e3:4d:1c:ff:9a: 69:bc:41:92:fd:3b:86:7c:8e:be:d2:a9:ad:44:71:b1:e9:8c: 7d:5c:85:7d:dd:7f:d3:60:2c:7d:59:cb:04:bc:63:6d:27:1d: ab:4e:92:99:8e:e6:07:73:a3:77:75:d0:87:f4:dc:ba:a5:33: 29:ea:09:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Www632Q5dyLbxAWKfbh8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjYwMTAxMTYxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTc0MzFjZWU2YjBlNWYzYTdkODMzODk5MGEzZTEzZTc0ZmI1OWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1iFxIfWnSg0Jg284UB510YYGQ9o yxB2DDDPhQVVQceExnB584aoWtdDZKKlZP79zDhsz5DhkbQbCM86dShXML3pzo0T XHqBbG5FA2FN72FtRf2J7/hCuqFZzwdua5NFiHWruncCEhh4761a0T2l2uL9K91p VEASm0mVG3z/xzcHsaL6BHLmpE++IA8kgrmWlE6fHreoue/W8Ccdo/kmWtxzRFyk jPPKrzHL07jKJg98Rid9bZXN2xce+6btj68fT+di3ANaf/lk7olNAAR0Jbq0lwWt SIJ2HnjiL1n6k+F/S6SD8PwjnH7iH4Ln5Kpciv9uYYrBeVD++71JUa1r4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGl0Mc7msOXzp9gziZCj4T50+1nRMB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvYVhReHp1YXc1Zk9uMkRPSmtLUGhQblQ3V2RFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUsfKMA0G CSqGSIb3DQEBCwUAA4IBAQAq3dveo19UNTV5He+KyeWQIYpiqM+iv/wYVMroH1Q2 8KpjR1sYmq21MzFQOnkbpwLv/blKd2ceNBVkc7ZJkcIRCDvYcyNFvi7+eAEqZyos lm4899geKnHAoouAZXHuDMZxxtJyoGK3eiGK/MHcjy6sD6beEWDarABVrfkG8b7J GXw/ImehqWKmXEwUgWfzwC2iEentDcF5Q+qWQuqVtl8cz6EWhfXL3Bl007GJzfoL 5651Qy067IJ7cfaYvguJASrp400c/5ppvEGS/TuGfI6+0qmtRHGx6Yx9XIV93X/T YCx9WcsEvGNtJx2rTpKZjuYHc6N3ddCH9Ny6pTMp6gme -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:56 2026 by rpki-client