This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/AJ4mHcqVQB0Jw29slkc3-EN6ZfQ.roa File: AJ4mHcqVQB0Jw29slkc3-EN6ZfQ.roa (raw, json) Hash identifier: jnlgewfbqIp0YBe4Rjalvc6ZdnSouVs+i9ih3ynldlg= Subject key identifier: 00:9E:26:1D:CA:95:40:1D:09:C3:6F:6C:96:47:37:F8:43:7A:65:F4 Certificate issuer: /CN=3261efe627712604f35b9ad9ccbf0368695f5013 Certificate serial: 019B7F135BFDF6B30D931427DDF7B94C84B7 Authority key identifier: 32:61:EF:E6:27:71:26:04:F3:5B:9A:D9:CC:BF:03:68:69:5F:50:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmHv5idxJgTzW5rZzL8DaGlfUBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/AJ4mHcqVQB0Jw29slkc3-EN6ZfQ.roa Signing time: Fri 02 Jan 2026 14:18:53 +0000 ROA not before: Fri 02 Jan 2026 14:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60344 IP address blocks: 141.49.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.crl rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmHv5idxJgTzW5rZzL8DaGlfUBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:5b:fd:f6:b3:0d:93:14:27:dd:f7:b9:4c:84:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3261efe627712604f35b9ad9ccbf0368695f5013 Validity Not Before: Jan 2 14:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=009e261dca95401d09c36f6c964737f8437a65f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f3:04:70:7d:9e:05:dc:44:b8:d4:cd:ed:30: 42:2b:fd:2e:2b:2a:de:ab:99:10:5f:42:31:b3:c3: 80:d0:25:b4:af:8c:35:2c:d9:4a:b0:9f:66:7d:ea: 0c:8c:55:b7:f6:57:6a:15:0b:46:74:29:91:46:ae: 71:d2:28:61:14:2f:f7:da:b6:42:bb:fa:d1:e9:6a: bd:76:e8:65:05:c4:1b:81:76:6c:7f:66:a9:7a:6f: a5:a7:f1:2f:f2:c1:8d:6b:f9:36:93:45:aa:0d:32: 7a:96:6e:ff:d6:8e:2b:f3:e6:f9:4f:a3:a0:29:11: c9:38:8c:e5:ec:65:af:04:62:5e:b0:42:a2:d2:9a: f5:35:2b:91:84:38:23:fd:5e:ef:c3:c3:2b:e2:46: 3c:2f:e5:96:56:fd:cf:33:66:11:33:1f:63:dc:78: 74:7a:fe:5e:1b:7c:20:4a:d4:82:47:ca:a0:73:ea: 0b:01:83:c8:6d:c6:f4:f5:dd:05:be:76:e1:ff:b9: be:07:f0:aa:4a:34:7f:c2:0c:30:ba:8b:35:b1:9d: 04:c7:f1:4c:35:54:e1:43:a4:6a:ff:39:0f:11:ac: fc:04:3d:19:93:98:71:fe:53:28:89:52:b3:df:cf: be:ca:92:6d:4c:2b:8f:16:c3:a5:30:74:95:ba:eb: cf:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9E:26:1D:CA:95:40:1D:09:C3:6F:6C:96:47:37:F8:43:7A:65:F4 X509v3 Authority Key Identifier: keyid:32:61:EF:E6:27:71:26:04:F3:5B:9A:D9:CC:BF:03:68:69:5F:50:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmHv5idxJgTzW5rZzL8DaGlfUBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/AJ4mHcqVQB0Jw29slkc3-EN6ZfQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.49.0.0/16 Signature Algorithm: sha256WithRSAEncryption 57:4e:06:a8:b6:fd:96:0d:df:5d:5e:25:e6:c4:b4:56:0b:cc: 11:bd:df:3b:4b:6a:88:78:68:69:d0:59:e1:aa:09:15:20:b0: f2:ff:63:d7:12:c3:e6:08:be:ff:0d:f2:6d:fc:5f:02:a1:4c: 81:a8:5f:31:c7:f5:86:3d:72:4f:27:c7:18:27:f0:75:9f:97: 31:9e:39:30:7b:2d:1e:94:99:10:a0:29:b6:b1:d6:22:fc:61: d0:4d:e4:8e:39:e9:6b:d2:5a:5a:17:c2:9d:95:1b:17:b2:81: 7d:59:18:82:fb:58:75:4e:2f:5a:15:43:b4:b2:8a:b7:4e:2e: ea:9c:03:e3:5e:c5:cd:a7:71:eb:b4:61:8d:b5:e3:c6:0e:ae: 34:fa:4b:e3:62:b7:1f:76:85:a1:20:7f:b8:4c:e6:0a:4e:1e: 28:34:ea:28:1e:07:c5:ee:d1:0c:30:6d:8d:f8:b8:60:ee:71: 1d:82:9e:b7:5a:4d:af:23:27:8e:a4:84:72:c1:e2:16:41:c8: f4:ef:ba:a1:10:5f:de:f7:29:dc:bc:52:b8:2b:35:90:ff:38: 62:b4:b1:62:4e:c2:5a:95:aa:17:93:f1:1a:72:c6:37:cd:2d: d6:1e:5a:16:f8:bf:76:6b:c5:5c:c0:1c:cc:12:dd:4e:b6:36: f0:c2:9c:23 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt/E1v99rMNkxQn3fe5TIS3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjFlZmU2Mjc3MTI2MDRmMzViOWFkOWNjYmYwMzY4Njk1 ZjUwMTMwHhcNMjYwMTAyMTQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDllMjYxZGNhOTU0MDFkMDljMzZmNmM5NjQ3MzdmODQzN2E2NWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPMEcH2eBdxEuNTN7TBCK/0uKyre q5kQX0Ixs8OA0CW0r4w1LNlKsJ9mfeoMjFW39ldqFQtGdCmRRq5x0ihhFC/32rZC u/rR6Wq9duhlBcQbgXZsf2apem+lp/Ev8sGNa/k2k0WqDTJ6lm7/1o4r8+b5T6Og KRHJOIzl7GWvBGJesEKi0pr1NSuRhDgj/V7vw8Mr4kY8L+WWVv3PM2YRMx9j3Hh0 ev5eG3wgStSCR8qgc+oLAYPIbcb09d0Fvnbh/7m+B/CqSjR/wgwwuos1sZ0Ex/FM NVThQ6Rq/zkPEaz8BD0Zk5hx/lMoiVKz38++ypJtTCuPFsOlMHSVuuvPNwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFACeJh3KlUAdCcNvbJZHN/hDemX0MB8GA1UdIwQY MBaAFDJh7+YncSYE81ua2cy/A2hpX1ATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1IdjVpZHhKZ1R6VzVyWnpMOERhR2xmVUJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wZGUzOGMtYmFhOS00MDg3LTliZDUt NzU3Y2IyNzBkNGMyLzEvQUo0bUhjcVZRQjBKdzI5c2xrYzMtRU42WmZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8wZGUzOGMtYmFhOS00MDg3LTliZDUtNzU3Y2IyNzBkNGMy LzEvTW1IdjVpZHhKZ1R6VzVyWnpMOERhR2xmVUJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjTEwDQYJ KoZIhvcNAQELBQADggEBAFdOBqi2/ZYN311eJebEtFYLzBG93ztLaoh4aGnQWeGq CRUgsPL/Y9cSw+YIvv8N8m38XwKhTIGoXzHH9YY9ck8nxxgn8HWflzGeOTB7LR6U mRCgKbax1iL8YdBN5I456WvSWloXwp2VGxeygX1ZGIL7WHVOL1oVQ7SyirdOLuqc A+Nexc2nceu0YY2148YOrjT6S+Nitx92haEgf7hM5gpOHig06igeB8Xu0QwwbY34 uGDucR2CnrdaTa8jJ46khHLB4hZByPTvuqEQX973Kdy8UrgrNZD/OGK0sWJOwlqV qheT8RpyxjfNLdYeWhb4v3ZrxVzAHMwS3U62NvDCnCM= -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:10 2026 by rpki-client