This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ahLyioH5iGzlFHMfoD4gXiKnAY0.roa File: ahLyioH5iGzlFHMfoD4gXiKnAY0.roa (raw, json) Hash identifier: 3wjdQPHn7/Uu6DZ8ugPpFJ9TotKKa1HLrE706/QSaMQ= Subject key identifier: 6A:12:F2:8A:81:F9:88:6C:E5:14:73:1F:A0:3E:20:5E:22:A7:01:8D Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A3327B99D3071C8323A0F1E4274E4E Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ahLyioH5iGzlFHMfoD4gXiKnAY0.roa Signing time: Thu 01 Jan 2026 08:18:39 +0000 ROA not before: Thu 01 Jan 2026 08:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205533 IP address blocks: 194.48.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:32:7b:99:d3:07:1c:83:23:a0:f1:e4:27:4e:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a12f28a81f9886ce514731fa03e205e22a7018d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c1:dd:07:6e:2f:8e:67:d0:fe:c3:3d:64:2b: 0b:7d:93:a3:cd:8b:3a:fb:f8:f6:3c:bf:0a:81:76: 1b:6a:70:56:fa:26:64:fb:c9:9f:19:87:92:8f:34: e0:f1:02:06:8b:1b:4e:e8:60:63:ba:aa:26:ba:0e: a9:ef:c9:ab:ca:83:88:df:3d:ba:48:fb:e1:34:1b: a7:31:0e:d8:9a:6d:31:ac:de:4f:f1:b4:d9:68:3d: 83:c4:fd:9e:24:8d:93:c0:7d:3c:3b:7e:5a:2f:91: 0f:f0:c7:68:2d:42:8f:d5:30:9c:bd:1a:da:31:41: b6:e7:7c:76:73:15:54:68:c0:76:1d:fb:1f:03:63: 89:83:33:24:64:2e:43:94:42:10:82:06:86:a5:61: bb:6e:84:19:3a:49:9f:82:bd:b6:db:14:ce:07:8b: 22:51:7e:f2:25:96:08:26:2f:5b:37:8a:35:50:fb: da:9a:63:58:e9:ae:01:72:e6:0a:e9:ec:11:37:19: 59:47:10:23:44:bd:f4:60:90:0d:75:20:7f:08:93: 7f:33:8c:d6:d2:3d:35:62:d6:63:fb:5e:d1:7a:be: f2:f7:23:48:4d:a6:07:34:9e:cd:40:1b:45:a0:d6: f9:40:83:80:ce:1c:af:bf:e2:ff:27:04:c3:04:69: ae:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:12:F2:8A:81:F9:88:6C:E5:14:73:1F:A0:3E:20:5E:22:A7:01:8D X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ahLyioH5iGzlFHMfoD4gXiKnAY0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.48.251.0/24 Signature Algorithm: sha256WithRSAEncryption 53:59:b5:3e:6a:8d:11:e6:bc:31:7a:5b:1c:ab:37:0f:74:37: 5e:ec:63:ba:e7:9e:85:b3:5a:6e:a3:1c:e2:75:0e:c4:46:80: 13:b5:dc:a9:88:38:e4:40:3b:98:da:e8:8d:fe:c7:bc:14:4f: 0e:51:55:54:8c:82:a7:c5:fb:da:2f:53:bb:d2:b5:e3:23:89: e4:5c:07:e0:66:ff:c6:5b:3f:bb:ea:b3:4a:76:70:fe:c5:19: 77:37:16:eb:30:a5:1f:9a:56:93:5a:3b:8b:98:54:ea:8c:ec: af:ba:df:02:71:77:7b:6b:a3:61:d8:81:99:d0:04:a5:77:d4: 99:ce:f8:54:45:cf:00:23:67:ec:d6:01:71:ae:f0:9b:33:eb: 31:bb:22:0a:73:ea:d8:0e:23:c5:45:a6:34:57:5f:d6:d5:59: ef:06:6f:21:40:94:19:30:bc:12:c3:45:6c:c2:14:64:6e:e5: a6:52:f7:05:54:3f:3a:42:25:56:f5:c3:3f:de:f7:04:32:06: 83:29:fa:5e:01:a6:75:6e:ae:03:ea:e7:40:f9:00:8a:11:33: ae:e7:c0:23:ff:31:ac:a8:32:88:8c:05:96:c6:d5:48:06:98: 69:e9:78:31:cf:e7:68:8f:b7:17:f1:89:bb:c0:1a:c3:9d:e2: 2c:df:a6:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ozJ7mdMHHIMjoPHkJ05OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTEyZjI4YTgxZjk4ODZjZTUxNDczMWZhMDNlMjA1ZTIyYTcwMThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MHdB24vjmfQ/sM9ZCsLfZOjzYs6 +/j2PL8KgXYbanBW+iZk+8mfGYeSjzTg8QIGixtO6GBjuqomug6p78mryoOI3z26 SPvhNBunMQ7Ymm0xrN5P8bTZaD2DxP2eJI2TwH08O35aL5EP8MdoLUKP1TCcvRra MUG253x2cxVUaMB2HfsfA2OJgzMkZC5DlEIQggaGpWG7boQZOkmfgr222xTOB4si UX7yJZYIJi9bN4o1UPvammNY6a4BcuYK6ewRNxlZRxAjRL30YJANdSB/CJN/M4zW 0j01YtZj+17Rer7y9yNITaYHNJ7NQBtFoNb5QIOAzhyvv+L/JwTDBGmu9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGoS8oqB+Yhs5RRzH6A+IF4ipwGNMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvYWhMeWlvSDVpR3psRkhNZm9ENGdYaUtuQVkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjD7MA0G CSqGSIb3DQEBCwUAA4IBAQBTWbU+ao0R5rwxelscqzcPdDde7GO6556Fs1puoxzi dQ7ERoATtdypiDjkQDuY2uiN/se8FE8OUVVUjIKnxfvaL1O70rXjI4nkXAfgZv/G Wz+76rNKdnD+xRl3NxbrMKUfmlaTWjuLmFTqjOyvut8CcXd7a6Nh2IGZ0ASld9SZ zvhURc8AI2fs1gFxrvCbM+sxuyIKc+rYDiPFRaY0V1/W1VnvBm8hQJQZMLwSw0Vs whRkbuWmUvcFVD86QiVW9cM/3vcEMgaDKfpeAaZ1bq4D6udA+QCKETOu58Aj/zGs qDKIjAWWxtVIBphp6Xgxz+doj7cX8Ym7wBrDneIs36ZP -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:50 2026 by rpki-client