This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/ajM6u9AhobNFWsjqV0zszbZBQgg.roa File: ajM6u9AhobNFWsjqV0zszbZBQgg.roa (raw, json) Hash identifier: 9dpjav4k95AK45D3gY5gAwzQc5Jmp0J5EfW5NA6MQrY= Subject key identifier: 6A:33:3A:BB:D0:21:A1:B3:45:5A:C8:EA:57:4C:EC:CD:B6:41:42:08 Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748 Certificate serial: 019B791136D8D492AE246CC5CB96CC887D03 Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/ajM6u9AhobNFWsjqV0zszbZBQgg.roa Signing time: Thu 01 Jan 2026 10:18:49 +0000 ROA not before: Thu 01 Jan 2026 10:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198974 IP address blocks: 109.236.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:36:d8:d4:92:ae:24:6c:c5:cb:96:cc:88:7d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748 Validity Not Before: Jan 1 10:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a333abbd021a1b3455ac8ea574ceccdb6414208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:76:45:6f:c3:88:95:78:0f:d5:ad:de:54:1a: a8:b6:1a:d4:6d:78:78:43:87:8b:06:f0:90:d3:47: e7:10:43:b3:7a:5e:62:15:24:f7:db:67:dc:07:d5: cf:63:3d:5c:33:a1:62:09:d2:0a:57:e8:3e:dc:a1: ec:ef:ba:e4:01:90:b1:9a:c7:aa:76:06:36:68:68: 42:2c:31:ee:ca:fa:43:6c:e6:33:70:b6:32:71:17: 12:5e:57:22:e2:51:e9:34:c3:ad:ad:2f:f1:62:eb: d7:f9:ef:59:11:bd:5f:16:99:5b:3c:04:38:5d:2c: 55:9e:4d:9d:3f:05:30:a8:2b:e5:78:b6:d6:0c:3c: eb:c0:10:ca:90:ee:a7:d8:98:bd:f4:be:c1:37:eb: 06:3c:c2:74:3d:65:4a:b0:c3:51:c7:8e:81:50:de: d4:59:f4:69:aa:a1:05:a5:ce:1d:36:d1:82:30:f3: 18:05:57:2b:84:97:ce:99:68:46:3b:ce:7e:0c:02: 73:83:a7:15:0c:55:09:df:ca:36:72:49:1e:67:b8: 64:51:49:2c:2c:15:31:dd:ab:b9:89:4f:8f:b4:9d: a4:20:ee:43:af:0d:fd:72:41:0e:cb:5e:45:de:70: f2:dc:a7:eb:9c:ed:ad:75:72:da:fb:c3:ca:65:67: b2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:33:3A:BB:D0:21:A1:B3:45:5A:C8:EA:57:4C:EC:CD:B6:41:42:08 X509v3 Authority Key Identifier: keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/ajM6u9AhobNFWsjqV0zszbZBQgg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.236.245.0/24 Signature Algorithm: sha256WithRSAEncryption be:36:53:5f:07:bf:0e:4d:b2:c0:70:e0:70:29:1c:2d:f8:5a: c0:f0:6e:6e:49:77:ad:57:4d:08:a3:21:94:64:9c:d1:29:42: 20:62:e3:44:18:58:75:1d:80:e5:95:98:35:81:fe:2a:81:c3: 6c:c5:07:d8:e0:be:48:fa:76:ee:81:6d:ca:3d:e8:43:a1:d9: 2b:fd:4c:7e:e1:d5:ac:b1:19:ed:15:6a:82:37:b1:fa:4c:10: 49:15:1e:9b:4c:dd:e9:41:18:90:6e:55:1d:94:0e:bf:d6:dc: d6:15:cc:c9:f5:7a:19:bc:3d:87:ca:98:82:ba:82:33:ec:1a: ef:43:39:d9:55:c9:c8:95:22:90:e5:a2:a5:cc:f3:62:f5:45: f5:c3:0a:0a:af:ce:52:42:6c:7b:9c:9c:48:4c:cb:35:96:7e: 86:3c:be:e6:4b:ea:dc:df:07:bc:ea:89:ab:79:91:8d:e2:71: 7c:91:1a:d1:ff:43:86:32:16:15:72:0e:af:b3:2a:8e:6e:d5: 30:17:6e:d2:12:57:c3:36:e3:9b:66:60:4b:38:64:e8:4f:2f: 45:4d:b4:50:f1:f6:a7:f5:80:87:c7:63:03:ad:bb:22:f6:eb: 2c:21:19:27:bc:a0:dd:9c:08:10:5e:84:3a:59:df:20:ae:97: 0e:93:32:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ETbY1JKuJGzFy5bMiH0DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYzM0MmMwNmFhY2MzNTlkMzk0MzlmZjU4ZGVmYThlYTE4 NzU3NDgwHhcNMjYwMTAxMTAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTMzM2FiYmQwMjFhMWIzNDU1YWM4ZWE1NzRjZWNjZGI2NDE0MjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnZFb8OIlXgP1a3eVBqothrUbXh4 Q4eLBvCQ00fnEEOzel5iFST322fcB9XPYz1cM6FiCdIKV+g+3KHs77rkAZCxmseq dgY2aGhCLDHuyvpDbOYzcLYycRcSXlci4lHpNMOtrS/xYuvX+e9ZEb1fFplbPAQ4 XSxVnk2dPwUwqCvleLbWDDzrwBDKkO6n2Ji99L7BN+sGPMJ0PWVKsMNRx46BUN7U WfRpqqEFpc4dNtGCMPMYBVcrhJfOmWhGO85+DAJzg6cVDFUJ38o2ckkeZ7hkUUks LBUx3au5iU+PtJ2kIO5Drw39ckEOy15F3nDy3KfrnO2tdXLa+8PKZWey3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGozOrvQIaGzRVrI6ldM7M22QUIIMB8GA1UdIwQY MBaAFDPDQsBqrMNZ05Q5/1je+o6hh1dIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUt N2YyMzMzNjA0OTk3LzEvYWpNNnU5QWhvYk5GV3NqcVYwenN6YlpCUWdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUtN2YyMzMzNjA0OTk3 LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbez1MA0G CSqGSIb3DQEBCwUAA4IBAQC+NlNfB78OTbLAcOBwKRwt+FrA8G5uSXetV00IoyGU ZJzRKUIgYuNEGFh1HYDllZg1gf4qgcNsxQfY4L5I+nbugW3KPehDodkr/Ux+4dWs sRntFWqCN7H6TBBJFR6bTN3pQRiQblUdlA6/1tzWFczJ9XoZvD2HypiCuoIz7Brv QznZVcnIlSKQ5aKlzPNi9UX1wwoKr85SQmx7nJxITMs1ln6GPL7mS+rc3we86omr eZGN4nF8kRrR/0OGMhYVcg6vsyqObtUwF27SElfDNuObZmBLOGToTy9FTbRQ8fan 9YCHx2MDrbsi9ussIRknvKDdnAgQXoQ6Wd8grpcOkzKr -----END CERTIFICATE-----Generated at Mon Jan 26 09:25:02 2026 by rpki-client