This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/AVxiOXJDrisHfmZgr2aXeclmtwU.roa File: AVxiOXJDrisHfmZgr2aXeclmtwU.roa (raw, json) Hash identifier: 4L7UFMqLp3HNu/xc7sjo2ZgReOCpLyizZvJkZ1OP7h0= Subject key identifier: 01:5C:62:39:72:43:AE:2B:07:7E:66:60:AF:66:97:79:C9:66:B7:05 Certificate issuer: /CN=756c9ebc7ff8759d8a106fffaf335ea346faea57 Certificate serial: 019B7C1352CB91211C7B16A9CB5FF01F04B0 Authority key identifier: 75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/AVxiOXJDrisHfmZgr2aXeclmtwU.roa Signing time: Fri 02 Jan 2026 00:19:59 +0000 ROA not before: Fri 02 Jan 2026 00:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34680 IP address blocks: 185.243.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:52:cb:91:21:1c:7b:16:a9:cb:5f:f0:1f:04:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=756c9ebc7ff8759d8a106fffaf335ea346faea57 Validity Not Before: Jan 2 00:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=015c62397243ae2b077e6660af669779c966b705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4f:57:57:0e:be:97:90:8d:13:1d:0f:77:f9: dd:22:94:12:27:16:eb:31:f0:2e:85:ee:36:9b:c1: 1f:cb:3f:d7:97:5b:62:ad:fd:4d:35:e8:f0:13:27: 78:9a:37:bc:80:a1:11:54:3a:48:8d:5f:04:35:55: bb:c9:22:e3:c0:a4:49:2f:68:f3:20:20:2e:ec:aa: 71:d0:2e:64:23:1c:f9:3d:75:96:d4:94:40:85:d0: af:1d:3a:83:fc:67:7c:40:78:41:2d:12:c7:1f:5a: 12:bf:6f:8a:1b:1a:ae:81:b4:fc:2e:70:4a:d5:0b: 23:6b:75:b5:f0:18:45:41:42:71:1c:f4:7d:ae:f9: 93:c1:2c:df:0a:2f:e7:f5:67:78:22:07:7e:e5:d0: db:35:9c:3a:7b:9c:fb:cd:7f:18:d4:eb:8a:fc:e9: b9:19:08:76:d5:63:04:bc:02:a7:b7:66:ec:ab:f3: b4:bd:16:2b:de:96:94:57:f8:1e:ce:8e:d5:da:5e: 79:d2:e0:a5:da:2a:14:0f:87:51:52:78:84:52:99: a9:49:e7:1c:60:e4:3d:32:06:cb:d5:26:7a:34:3a: 0d:57:22:c5:c6:a7:c3:66:88:d7:2a:89:6e:7a:f6: 82:c7:28:a8:2d:4c:0f:90:1a:79:b1:f4:11:52:30: 73:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5C:62:39:72:43:AE:2B:07:7E:66:60:AF:66:97:79:C9:66:B7:05 X509v3 Authority Key Identifier: keyid:75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/AVxiOXJDrisHfmZgr2aXeclmtwU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.36.0/22 Signature Algorithm: sha256WithRSAEncryption 81:e8:ea:3b:8f:d1:d2:86:7c:5a:b8:10:ee:fc:01:b7:e1:62: 2b:d1:1b:e0:58:2d:20:5a:a3:d0:1f:a5:e2:1d:d6:11:bc:6f: e3:1a:cd:5b:bb:61:98:f0:38:fa:b4:b0:38:59:d0:99:b0:db: af:5a:4c:b1:e7:76:da:34:49:de:08:a8:a7:b1:d5:7b:0d:f5: b4:f3:d4:28:ee:0d:f7:9d:ea:55:3c:23:58:10:34:ad:c4:9b: 53:8a:ea:a5:6e:2d:cb:7d:0c:01:17:71:7e:d3:04:90:b3:6b: ad:bc:fd:5c:25:18:05:a1:f8:32:a1:7c:7b:37:fb:38:38:61: 9a:02:70:36:62:4a:bf:07:ab:0d:cf:2a:58:05:63:dd:88:7c: 9d:59:d6:dc:fa:9f:e2:1a:4f:0a:35:32:76:95:3b:ec:ce:de: 8a:a6:ea:b0:80:41:a9:bb:b4:16:5b:86:c9:d9:24:b3:66:4e: 4d:e3:a5:32:5b:16:f0:2f:8c:1b:5d:91:db:04:3d:ed:cc:df: 89:46:3b:ea:03:77:94:2e:65:60:2a:20:be:98:84:82:32:1e: a2:37:f3:ce:eb:db:f5:b4:f7:d1:4b:a7:38:7e:6c:87:d4:d1: de:5e:a9:60:1b:e0:0d:0c:84:f0:df:cb:c2:a8:08:63:9f:f1: f0:da:d1:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E1LLkSEcexapy1/wHwSwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NmM5ZWJjN2ZmODc1OWQ4YTEwNmZmZmFmMzM1ZWEzNDZm YWVhNTcwHhcNMjYwMTAyMDAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTVjNjIzOTcyNDNhZTJiMDc3ZTY2NjBhZjY2OTc3OWM5NjZiNzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE9XVw6+l5CNEx0Pd/ndIpQSJxbr MfAuhe42m8Efyz/Xl1tirf1NNejwEyd4mje8gKERVDpIjV8ENVW7ySLjwKRJL2jz ICAu7Kpx0C5kIxz5PXWW1JRAhdCvHTqD/Gd8QHhBLRLHH1oSv2+KGxqugbT8LnBK 1Qsja3W18BhFQUJxHPR9rvmTwSzfCi/n9Wd4Igd+5dDbNZw6e5z7zX8Y1OuK/Om5 GQh21WMEvAKnt2bsq/O0vRYr3paUV/gezo7V2l550uCl2ioUD4dRUniEUpmpSecc YOQ9MgbL1SZ6NDoNVyLFxqfDZojXKoluevaCxyioLUwPkBp5sfQRUjBzzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAFcYjlyQ64rB35mYK9ml3nJZrcFMB8GA1UdIwQY MBaAFHVsnrx/+HWdihBv/68zXqNG+upXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFd5ZXZIXzRkWjJLRUdfX3J6TmVvMGI2NmxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81ZjY1MzAtMTE2Ni00YjlkLTlkZmQt Y2FhZTBlZGY2OWYxLzEvQVZ4aU9YSkRyaXNIZm1aZ3IyYVhlY2xtdHdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy81ZjY1MzAtMTE2Ni00YjlkLTlkZmQtY2FhZTBlZGY2OWYx LzEvZFd5ZXZIXzRkWjJLRUdfX3J6TmVvMGI2NmxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufMkMA0G CSqGSIb3DQEBCwUAA4IBAQCB6Oo7j9HShnxauBDu/AG34WIr0RvgWC0gWqPQH6Xi HdYRvG/jGs1bu2GY8Dj6tLA4WdCZsNuvWkyx53baNEneCKinsdV7DfW089Qo7g33 nepVPCNYEDStxJtTiuqlbi3LfQwBF3F+0wSQs2utvP1cJRgFofgyoXx7N/s4OGGa AnA2Ykq/B6sNzypYBWPdiHydWdbc+p/iGk8KNTJ2lTvszt6KpuqwgEGpu7QWW4bJ 2SSzZk5N46UyWxbwL4wbXZHbBD3tzN+JRjvqA3eULmVgKiC+mISCMh6iN/PO69v1 tPfRS6c4fmyH1NHeXqlgG+ANDITw38vCqAhjn/Hw2tEz -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:50 2026 by rpki-client