This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/axq7mHJm2Hnm-H9JADqzbawUKIA.roa File: axq7mHJm2Hnm-H9JADqzbawUKIA.roa (raw, json) Hash identifier: pXMV2sY+byn88wNA/ocyULAR0qZzmlc5Pn6ZSaCAZWk= Subject key identifier: 6B:1A:BB:98:72:66:D8:79:E6:F8:7F:49:00:3A:B3:6D:AC:14:28:80 Certificate issuer: /CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1 Certificate serial: 019B7F81F1EEC184CB05E42B3E493205B49A Authority key identifier: 58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/axq7mHJm2Hnm-H9JADqzbawUKIA.roa Signing time: Fri 02 Jan 2026 16:19:41 +0000 ROA not before: Fri 02 Jan 2026 16:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211895 IP address blocks: 193.111.32.0/24 maxlen: 24 2a0f:8cc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:f1:ee:c1:84:cb:05:e4:2b:3e:49:32:05:b4:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1 Validity Not Before: Jan 2 16:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b1abb987266d879e6f87f49003ab36dac142880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e1:af:bb:31:27:20:92:38:05:a2:3e:8b:83: 85:0f:86:b6:53:b1:12:0d:15:7b:43:50:22:b3:2f: dc:7e:a1:30:b1:e2:d3:48:b5:14:73:2e:3d:ee:a9: 0d:94:bd:40:a5:0e:4a:c4:f7:58:31:c5:c7:4e:47: d1:73:ec:bf:74:93:5d:b8:c7:35:50:e0:38:1b:a7: a4:20:46:09:1d:c9:a8:08:58:a9:d9:e5:67:52:93: b1:96:7d:0b:44:8c:ae:05:7d:93:57:6d:b8:62:36: 3c:67:0b:f0:0e:d7:b0:4b:74:1f:b4:ab:3b:ee:17: c5:71:64:56:6e:ac:2b:d2:9c:91:d3:3a:e6:69:88: 62:1e:da:d3:7d:23:71:24:a7:b1:e2:fe:ce:bd:e6: e9:5f:9c:65:6e:d6:bd:af:b6:7e:7d:70:a7:30:d0: 23:bb:bd:fb:83:18:7b:a2:28:87:05:5f:ee:28:35: b1:ac:2f:a5:b4:cb:cf:7b:b9:fa:6d:3b:2a:94:d6: 16:9b:c5:27:b4:29:d2:fc:67:8d:07:fc:40:9a:c4: 78:4e:59:b5:90:23:6d:8c:d4:17:82:1e:f8:46:a7: af:87:3f:03:01:5d:62:78:4c:05:ea:7f:80:ad:13: 08:30:6d:0b:f8:34:08:66:5e:87:13:a8:ce:e6:6d: 19:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1A:BB:98:72:66:D8:79:E6:F8:7F:49:00:3A:B3:6D:AC:14:28:80 X509v3 Authority Key Identifier: keyid:58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/axq7mHJm2Hnm-H9JADqzbawUKIA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.32.0/24 IPv6: 2a0f:8cc0::/48 Signature Algorithm: sha256WithRSAEncryption 1a:32:b1:bf:d8:e9:67:9b:f4:4c:50:d0:72:12:69:24:b9:72: c5:6d:e5:f2:47:4a:18:06:6d:02:4a:f8:61:df:b9:97:64:e8: 8d:0b:39:2f:8d:ca:ba:c0:fa:d8:2a:fd:df:74:7b:89:4f:52: fe:69:e6:61:5d:ca:e3:dd:60:99:f3:6a:ec:38:42:5f:79:9c: 4e:9f:83:88:38:05:13:de:48:27:67:94:c0:f6:d3:12:c3:2d: 49:6c:64:5d:0d:12:27:14:1c:d9:0c:34:5f:e5:af:a2:d9:b5: 6a:56:89:f0:b0:3a:a8:75:13:25:6b:5f:37:ba:bf:04:71:ac: 07:7c:96:b0:3b:80:f0:e4:c1:f3:54:1a:d5:b3:74:e9:2c:6b: d0:2c:7d:e5:e3:c1:eb:a8:76:55:f2:8a:14:b9:ef:31:0f:22: 42:cc:fe:12:78:2a:18:d3:3c:09:64:5e:ae:b0:2f:ac:f6:bd: c4:0d:0b:08:2f:f2:ae:04:09:70:19:ca:aa:47:70:4d:e3:61: 55:55:06:cb:c9:ba:d9:7d:52:40:de:e1:7a:fd:b6:b3:f4:6b: 1f:3c:0b:ad:17:d0:ea:54:98:c6:44:1c:6b:3c:2c:88:03:8c: 5d:22:bc:0b:5d:51:2e:08:77:9e:b2:ff:71:35:e0:ba:1c:7f: f8:e2:37:cd -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/gfHuwYTLBeQrPkkyBbSaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4N2Q4YjBlNzU0NjM1MTE3NmNjMGM2ZTUxZWQ0NTIwYWJl MDRlZjEwHhcNMjYwMTAyMTYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjFhYmI5ODcyNjZkODc5ZTZmODdmNDkwMDNhYjM2ZGFjMTQyODgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeGvuzEnIJI4BaI+i4OFD4a2U7ES DRV7Q1Aisy/cfqEwseLTSLUUcy497qkNlL1ApQ5KxPdYMcXHTkfRc+y/dJNduMc1 UOA4G6ekIEYJHcmoCFip2eVnUpOxln0LRIyuBX2TV224YjY8ZwvwDtewS3QftKs7 7hfFcWRWbqwr0pyR0zrmaYhiHtrTfSNxJKex4v7OvebpX5xlbta9r7Z+fXCnMNAj u737gxh7oiiHBV/uKDWxrC+ltMvPe7n6bTsqlNYWm8UntCnS/GeNB/xAmsR4Tlm1 kCNtjNQXgh74Rqevhz8DAV1ieEwF6n+ArRMIMG0L+DQIZl6HE6jO5m0ZiwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGsau5hyZth55vh/SQA6s22sFCiAMB8GA1UdIwQY MBaAFFh9iw51RjURdswMblHtRSCr4E7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0gyTERuVkdOUkYyekF4dVVlMUZJS3ZnVHZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84MWRjNjItYjNjYy00Zjk5LWFhNDIt YzEwZjc4MmZiMDdmLzEvYXhxN21ISm0ySG5tLUg5SkFEcXpiYXdVS0lBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC84MWRjNjItYjNjYy00Zjk5LWFhNDItYzEwZjc4MmZiMDdm LzEvV0gyTERuVkdOUkYyekF4dVVlMUZJS3ZnVHZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwW8gMA8E AgACMAkDBwAqD4zAAAAwDQYJKoZIhvcNAQELBQADggEBABoysb/Y6Web9ExQ0HIS aSS5csVt5fJHShgGbQJK+GHfuZdk6I0LOS+NyrrA+tgq/d90e4lPUv5p5mFdyuPd YJnzauw4Ql95nE6fg4g4BRPeSCdnlMD20xLDLUlsZF0NEicUHNkMNF/lr6LZtWpW ifCwOqh1EyVrXze6vwRxrAd8lrA7gPDkwfNUGtWzdOksa9AsfeXjweuodlXyihS5 7zEPIkLM/hJ4KhjTPAlkXq6wL6z2vcQNCwgv8q4ECXAZyqpHcE3jYVVVBsvJutl9 UkDe4Xr9trP0ax88C60X0OpUmMZEHGs8LIgDjF0ivAtdUS4Id56y/3E14Locf/ji N80= -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:20 2026 by rpki-client