This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/AxycDmx0_sRBRNwROaLXtKkwrSA.roa File: AxycDmx0_sRBRNwROaLXtKkwrSA.roa (raw, json) Hash identifier: /OH19GJSnVpqoFUA2l9v57qAgYy75+THHbmUdJGT9/U= Subject key identifier: 03:1C:9C:0E:6C:74:FE:C4:41:44:DC:11:39:A2:D7:B4:A9:30:AD:20 Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 019B7F840E0D12C5FBF4546076676341C4D4 Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/AxycDmx0_sRBRNwROaLXtKkwrSA.roa Signing time: Fri 02 Jan 2026 16:21:59 +0000 ROA not before: Fri 02 Jan 2026 16:21:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 146.255.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:0e:0d:12:c5:fb:f4:54:60:76:67:63:41:c4:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: Jan 2 16:21:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=031c9c0e6c74fec44144dc1139a2d7b4a930ad20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ce:e1:68:40:90:0c:74:05:d4:2f:21:1b:4d: f0:05:55:b5:30:15:14:68:76:08:09:b7:42:80:d2: 89:a7:bb:af:81:04:ea:2d:64:40:be:63:a2:11:f3: 54:d0:88:2b:5c:c1:73:50:23:43:6c:1a:95:21:82: 25:d4:20:cc:04:89:91:7a:42:f1:62:38:4a:68:76: e5:53:f3:cc:fc:86:4e:45:35:9b:23:6e:33:c8:5f: 1f:de:5a:e5:97:d9:52:8e:f4:28:f0:cc:7a:5b:e9: 04:c9:d3:e0:9f:3a:6e:f7:16:0a:06:27:77:e4:88: b9:ab:1f:e6:95:57:1d:33:29:b0:e5:41:a0:25:30: c5:66:f9:d5:92:9e:53:fd:0c:bd:32:ac:db:28:03: d9:83:e6:ff:45:2d:22:94:27:a2:17:3c:88:0c:ec: 13:d8:de:28:cc:e2:a2:a4:d5:c4:3c:be:6e:f1:4e: 81:b2:77:32:10:7f:4b:22:3f:4a:38:26:e0:49:14: f3:6d:e1:c1:2f:30:bf:90:d6:28:3d:65:2a:e5:43: d3:02:70:60:d9:24:b6:8d:23:9f:95:7f:ce:12:0f: e8:28:09:03:51:08:58:67:9c:68:30:d2:0a:bd:b8: 44:d5:07:dc:37:4e:2c:6f:1f:84:06:0d:6a:7c:7f: 44:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:1C:9C:0E:6C:74:FE:C4:41:44:DC:11:39:A2:D7:B4:A9:30:AD:20 X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/AxycDmx0_sRBRNwROaLXtKkwrSA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.255.32.0/22 Signature Algorithm: sha256WithRSAEncryption 00:5b:08:47:a7:a0:dd:50:6b:d8:db:bb:d4:82:79:29:1d:6a: 42:6e:29:49:db:84:69:65:58:a3:24:53:f9:6e:95:31:3b:86: dc:12:b7:bc:36:cc:9b:95:30:46:d5:8c:f1:cb:c1:f4:8f:bc: be:43:c2:0f:e1:0b:92:0a:3e:f5:00:cb:ac:00:59:cd:7a:04: 9d:b2:0d:bb:9f:a1:df:9b:59:67:bd:97:c5:62:0a:96:91:39: 08:ae:64:d0:6d:4b:f0:a6:b1:a6:90:2b:16:95:a7:11:ea:a0: d8:6e:d4:61:5f:ab:e0:ee:96:4a:27:d8:ec:da:e1:c2:85:dd: 4d:f3:31:ae:c6:5a:6a:c7:de:bb:df:4a:e2:f3:22:ac:f3:03: 06:a4:73:09:fa:ec:43:ea:5a:fe:f4:28:90:eb:bb:37:32:de: e9:30:25:cc:c9:8a:1e:06:09:b4:4b:2b:58:8e:c2:a4:4a:0c: 6f:b3:13:64:2a:0b:dc:36:8d:3f:cc:6c:70:88:75:13:ef:b7: 8b:2a:c4:27:2b:68:5d:25:46:c8:11:bf:19:55:08:48:aa:5d: 30:5f:7e:a5:57:d0:60:c7:ad:97:a9:c3:33:be:2e:96:21:44: 79:bb:97:74:f4:63:cc:1b:46:fa:fb:e4:d3:01:1a:cb:03:ad: c1:51:a9:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hA4NEsX79FRgdmdjQcTUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjYwMTAyMTYyMTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzFjOWMwZTZjNzRmZWM0NDE0NGRjMTEzOWEyZDdiNGE5MzBhZDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM7haECQDHQF1C8hG03wBVW1MBUU aHYICbdCgNKJp7uvgQTqLWRAvmOiEfNU0IgrXMFzUCNDbBqVIYIl1CDMBImRekLx YjhKaHblU/PM/IZORTWbI24zyF8f3lrll9lSjvQo8Mx6W+kEydPgnzpu9xYKBid3 5Ii5qx/mlVcdMymw5UGgJTDFZvnVkp5T/Qy9MqzbKAPZg+b/RS0ilCeiFzyIDOwT 2N4ozOKipNXEPL5u8U6BsncyEH9LIj9KOCbgSRTzbeHBLzC/kNYoPWUq5UPTAnBg 2SS2jSOflX/OEg/oKAkDUQhYZ5xoMNIKvbhE1QfcN04sbx+EBg1qfH9EFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAMcnA5sdP7EQUTcETmi17SpMK0gMB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvQXh5Y0RteDBfc1JCUk53Uk9hTFh0S2t3clNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkv8gMA0G CSqGSIb3DQEBCwUAA4IBAQAAWwhHp6DdUGvY27vUgnkpHWpCbilJ24RpZVijJFP5 bpUxO4bcEre8NsyblTBG1Yzxy8H0j7y+Q8IP4QuSCj71AMusAFnNegSdsg27n6Hf m1lnvZfFYgqWkTkIrmTQbUvwprGmkCsWlacR6qDYbtRhX6vg7pZKJ9js2uHChd1N 8zGuxlpqx96730ri8yKs8wMGpHMJ+uxD6lr+9CiQ67s3Mt7pMCXMyYoeBgm0SytY jsKkSgxvsxNkKgvcNo0/zGxwiHUT77eLKsQnK2hdJUbIEb8ZVQhIql0wX36lV9Bg x62XqcMzvi6WIUR5u5d09GPMG0b6++TTARrLA63BUalg -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:19 2026 by rpki-client