This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/r_AxxcY8QiH2nWS9CL04AgPUmsY.roa File: r_AxxcY8QiH2nWS9CL04AgPUmsY.roa (raw, json) Hash identifier: l8fqDJAdHfTIgiiJd3kewidzUv4M6LymruB3QWo/rdY= Subject key identifier: AF:F0:31:C5:C6:3C:42:21:F6:9D:64:BD:08:BD:38:02:03:D4:9A:C6 Certificate issuer: /CN=485ddb678c4c0d0c488efd3b8367142189f3358a Certificate serial: 019B76EAEE8BF6998D4813DFBC72EDFAC8F8 Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/r_AxxcY8QiH2nWS9CL04AgPUmsY.roa Signing time: Thu 01 Jan 2026 00:17:46 +0000 ROA not before: Thu 01 Jan 2026 00:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51500 IP address blocks: 109.235.10.0/23 maxlen: 23 109.235.10.0/24 maxlen: 24 109.235.11.0/24 maxlen: 24 109.235.12.0/23 maxlen: 23 109.235.12.0/24 maxlen: 24 109.235.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ee:8b:f6:99:8d:48:13:df:bc:72:ed:fa:c8:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a Validity Not Before: Jan 1 00:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aff031c5c63c4221f69d64bd08bd380203d49ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:32:ad:5f:f6:b1:28:b6:9a:21:a5:2f:53:12: 9b:f9:a6:4a:23:86:4f:ce:34:09:73:df:d0:51:6e: 05:c2:07:7c:83:09:ba:ee:cb:25:07:2f:8a:0d:b3: 9b:d3:2c:1a:58:f2:68:18:ce:b5:12:34:23:9b:ec: 76:f2:c5:a0:10:f7:24:86:46:ef:b1:e9:b8:b5:7c: ba:12:ca:79:f5:7b:c1:81:44:a0:fd:d6:a6:82:45: 77:76:ae:96:d9:41:50:f2:fa:8e:5c:6f:1d:b5:14: 57:c0:e2:8c:fd:4f:47:28:82:b9:29:17:22:1e:5f: d4:70:7c:ce:2e:e4:a6:88:da:3d:8f:f6:00:95:6e: 18:72:05:59:e5:bd:20:51:ef:c1:52:6b:03:5d:ef: 25:35:bd:a1:10:14:d9:65:ca:5f:4d:1f:87:09:7b: 13:d3:4c:59:62:25:94:02:7c:da:2b:62:2d:25:b0: 4c:4f:cf:55:99:39:3d:7c:54:70:c2:36:7d:3b:d6: d9:86:09:9a:1b:c1:86:a4:86:f0:7e:6c:d1:17:66: ea:21:92:d0:70:1e:46:d5:ae:97:58:23:cb:6f:e4: 8a:5c:57:ed:56:97:31:f2:22:98:a4:78:79:c0:a2: f8:49:a8:4e:b6:ab:3c:3d:35:ef:53:e5:3e:7c:90: 51:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F0:31:C5:C6:3C:42:21:F6:9D:64:BD:08:BD:38:02:03:D4:9A:C6 X509v3 Authority Key Identifier: keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/r_AxxcY8QiH2nWS9CL04AgPUmsY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.235.10.0-109.235.13.255 Signature Algorithm: sha256WithRSAEncryption 42:28:6f:f4:8e:60:13:97:10:4b:82:45:06:8e:47:19:fe:1d: aa:c6:5a:c8:44:aa:31:32:fa:34:d8:6e:0f:62:93:1d:2a:79: cb:31:26:9a:4b:ef:cf:8a:75:e3:47:64:35:9a:cf:44:fd:35: 3e:d2:af:48:5b:4a:83:08:77:03:7d:87:9c:f0:2d:f4:63:ef: 5b:4f:70:c4:89:14:df:d4:24:2b:37:5e:7a:97:27:9c:2b:39: 1d:34:6b:3f:87:66:c7:3e:e2:9e:31:86:9c:49:c9:d1:e9:08: 4d:3c:b3:dc:0e:4d:da:a3:a6:fb:0a:c8:c0:71:94:1c:7d:68: 2a:8a:fd:00:5e:ef:8f:98:c0:c9:23:30:68:83:5e:6a:b9:2c: 87:5a:8d:ed:5f:82:f9:25:f1:45:11:be:49:c4:e8:89:fc:48: 28:1b:4b:b3:51:fb:21:18:d1:26:34:d8:8e:1d:4d:a3:9a:73: 26:2a:e9:d2:f6:98:cb:12:53:69:86:f5:00:e2:92:3f:59:c7: c9:d0:01:f1:ac:99:cc:d4:f7:3d:40:b1:6f:61:78:09:f8:fe: 30:87:b6:61:c7:d8:21:0b:78:b8:d1:5f:b1:40:3c:29:1e:eb: e0:6b:66:79:27:71:5e:90:2d:1e:12:1c:d4:e0:45:c8:56:47: 04:5d:33:13 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt26u6L9pmNSBPfvHLt+sj4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NWRkYjY3OGM0YzBkMGM0ODhlZmQzYjgzNjcxNDIxODlm MzM1OGEwHhcNMjYwMTAxMDAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmYwMzFjNWM2M2M0MjIxZjY5ZDY0YmQwOGJkMzgwMjAzZDQ5YWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDKtX/axKLaaIaUvUxKb+aZKI4ZP zjQJc9/QUW4Fwgd8gwm67sslBy+KDbOb0ywaWPJoGM61EjQjm+x28sWgEPckhkbv sem4tXy6Esp59XvBgUSg/damgkV3dq6W2UFQ8vqOXG8dtRRXwOKM/U9HKIK5KRci Hl/UcHzOLuSmiNo9j/YAlW4YcgVZ5b0gUe/BUmsDXe8lNb2hEBTZZcpfTR+HCXsT 00xZYiWUAnzaK2ItJbBMT89VmTk9fFRwwjZ9O9bZhgmaG8GGpIbwfmzRF2bqIZLQ cB5G1a6XWCPLb+SKXFftVpcx8iKYpHh5wKL4SahOtqs8PTXvU+U+fJBRtwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFK/wMcXGPEIh9p1kvQi9OAID1JrGMB8GA1UdIwQY MBaAFEhd22eMTA0MSI79O4NnFCGJ8zWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iZWIyMDAtZTVkNi00Njk2LWFlMjUt ZGViZmNkOWViMjBlLzEvcl9BeHhjWThRaUgybldTOUNMMDRBZ1BVbXNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9iZWIyMDAtZTVkNi00Njk2LWFlMjUtZGViZmNkOWViMjBl LzEvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFt6woD BAFt6wwwDQYJKoZIhvcNAQELBQADggEBAEIob/SOYBOXEEuCRQaORxn+HarGWshE qjEy+jTYbg9ikx0qecsxJppL78+KdeNHZDWaz0T9NT7Sr0hbSoMIdwN9h5zwLfRj 71tPcMSJFN/UJCs3XnqXJ5wrOR00az+HZsc+4p4xhpxJydHpCE08s9wOTdqjpvsK yMBxlBx9aCqK/QBe74+YwMkjMGiDXmq5LIdaje1fgvkl8UURvknE6In8SCgbS7NR +yEY0SY02I4dTaOacyYq6dL2mMsSU2mG9QDikj9Zx8nQAfGsmczU9z1AsW9heAn4 /jCHtmHH2CELeLjRX7FAPCke6+BrZnkncV6QLR4SHNTgRchWRwRdMxM= -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:17 2026 by rpki-client