This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/AJ6V8jm2bzR7l9LijJnNAo2C1So.roa File: AJ6V8jm2bzR7l9LijJnNAo2C1So.roa (raw, json) Hash identifier: JLik9PNu5MZ/DV5ew3sUl3oRvlGdo1/prN1/f8zb8rc= Subject key identifier: 00:9E:95:F2:39:B6:6F:34:7B:97:D2:E2:8C:99:CD:02:8D:82:D5:2A Certificate issuer: /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112 Certificate serial: 019B7F15881396649E24768E7E5F1EDC0325 Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/AJ6V8jm2bzR7l9LijJnNAo2C1So.roa Signing time: Fri 02 Jan 2026 14:21:16 +0000 ROA not before: Fri 02 Jan 2026 14:21:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2116 IP address blocks: 77.223.160.0/24 maxlen: 24 213.138.184.0/22 maxlen: 22 213.138.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:88:13:96:64:9e:24:76:8e:7e:5f:1e:dc:03:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112 Validity Not Before: Jan 2 14:21:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=009e95f239b66f347b97d2e28c99cd028d82d52a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:55:d3:e6:73:95:cf:1b:1d:75:68:d7:6f:7a: 33:e7:a0:ea:60:0c:bf:25:65:db:20:83:6c:f3:51: 51:b0:43:ca:92:8e:3a:ba:74:80:40:40:df:0f:2a: a2:e6:1c:a8:53:d1:a9:1d:3d:d9:01:30:39:03:7f: 48:e3:d7:73:24:88:83:05:40:bc:0d:a2:5e:17:81: 75:d1:6f:23:4e:b5:6e:26:2d:06:e1:79:fe:de:d6: 7e:e7:f0:7b:c1:0d:c9:4c:c2:60:17:03:0d:d3:1d: 4f:f5:c8:74:d9:85:ee:d1:90:3f:81:a2:ce:94:fc: 92:3b:4e:7b:fa:34:fa:c6:35:a1:75:b7:71:b4:6b: b3:3c:c5:63:4b:47:71:17:ea:fc:20:d7:97:66:19: b8:5e:9d:34:89:85:ab:08:fc:09:24:0d:8c:40:0e: 36:88:7a:25:a0:0e:66:93:fd:9e:b0:39:09:70:05: 59:ca:07:c5:3c:b2:a5:0b:c0:26:cc:0a:21:51:a2: 1b:2d:a9:b3:ea:d8:1f:80:33:8d:88:bc:92:a2:e5: 88:da:cc:87:49:24:00:45:0f:32:6f:c5:70:f9:82: 81:ef:ca:d4:3c:23:93:ec:72:79:f2:1e:1b:a8:c3: 98:64:e0:77:be:a5:ae:c4:54:51:f8:c1:de:46:4f: 75:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9E:95:F2:39:B6:6F:34:7B:97:D2:E2:8C:99:CD:02:8D:82:D5:2A X509v3 Authority Key Identifier: keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/AJ6V8jm2bzR7l9LijJnNAo2C1So.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.223.160.0/24 213.138.184.0/21 Signature Algorithm: sha256WithRSAEncryption a5:b3:2e:a7:ef:d5:c3:91:f3:2d:a9:a4:c1:7a:16:33:15:c8: bc:c1:fb:9b:38:92:e1:4a:9c:9e:5c:ba:f3:11:82:10:1b:32: 60:0b:25:b4:c9:b0:2f:d9:88:de:3c:cd:52:77:be:2b:6a:e3: a8:15:bf:74:b1:fb:06:87:50:ae:0e:d0:64:e7:57:77:40:d8: 3b:14:61:8c:c0:50:55:e8:c4:39:0a:ee:ee:36:8f:5c:f5:c2: d2:49:ef:2d:4a:72:05:14:44:41:3e:60:01:ea:44:eb:14:eb: fc:65:53:de:69:4c:70:f0:c4:86:ec:2a:60:ea:21:e1:22:a8: 8d:21:c1:eb:cc:d1:02:5a:5c:6f:20:96:45:12:45:66:f6:a4: 61:9f:b4:0c:df:1e:40:41:50:fd:d8:07:e4:0d:4b:6d:33:fb: 86:49:43:23:95:88:17:30:87:1f:ba:c6:7a:14:49:6c:f8:22: 6b:70:4e:28:c6:fd:01:ff:c0:e6:d9:a2:92:62:76:51:65:88: 68:b2:93:be:5a:31:4d:12:70:c9:1b:56:28:d4:ed:ce:f9:c6: b0:57:1c:9e:c8:7a:32:4a:fa:69:df:96:c0:cb:c4:ce:70:68: f5:78:28:2a:75:18:91:e3:3b:2a:55:f7:39:c1:b4:4f:9e:95: 08:1a:e4:2a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FYgTlmSeJHaOfl8e3AMlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YWM0OWQxY2NkY2FlZGQ5YTEzZjQ4MDNkZjFhZWRjZTZk YzExMTIwHhcNMjYwMTAyMTQyMTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDllOTVmMjM5YjY2ZjM0N2I5N2QyZTI4Yzk5Y2QwMjhkODJkNTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1XT5nOVzxsddWjXb3oz56DqYAy/ JWXbIINs81FRsEPKko46unSAQEDfDyqi5hyoU9GpHT3ZATA5A39I49dzJIiDBUC8 DaJeF4F10W8jTrVuJi0G4Xn+3tZ+5/B7wQ3JTMJgFwMN0x1P9ch02YXu0ZA/gaLO lPySO057+jT6xjWhdbdxtGuzPMVjS0dxF+r8INeXZhm4Xp00iYWrCPwJJA2MQA42 iHoloA5mk/2esDkJcAVZygfFPLKlC8AmzAohUaIbLamz6tgfgDONiLySouWI2syH SSQARQ8yb8Vw+YKB78rUPCOT7HJ58h4bqMOYZOB3vqWuxFRR+MHeRk91IwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFACelfI5tm80e5fS4oyZzQKNgtUqMB8GA1UdIwQY MBaAFLmsSdHM3K7dmhP0gD3xrtzm3BESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWF4SjBjemNydDJhRV9TQVBmR3UzT2JjRVJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81MzcxOTEtMTE3OS00OGVjLWFkOWYt ZmZlNDNhNTJkM2Y2LzEvQUo2VjhqbTJielI3bDlMaWpKbk5BbzJDMVNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC81MzcxOTEtMTE3OS00OGVjLWFkOWYtZmZlNDNhNTJkM2Y2 LzEvdWF4SjBjemNydDJhRV9TQVBmR3UzT2JjRVJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATd+gAwQD 1Yq4MA0GCSqGSIb3DQEBCwUAA4IBAQClsy6n79XDkfMtqaTBehYzFci8wfubOJLh SpyeXLrzEYIQGzJgCyW0ybAv2YjePM1Sd74rauOoFb90sfsGh1CuDtBk51d3QNg7 FGGMwFBV6MQ5Cu7uNo9c9cLSSe8tSnIFFERBPmAB6kTrFOv8ZVPeaUxw8MSG7Cpg 6iHhIqiNIcHrzNECWlxvIJZFEkVm9qRhn7QM3x5AQVD92AfkDUttM/uGSUMjlYgX MIcfusZ6FEls+CJrcE4oxv0B/8Dm2aKSYnZRZYhospO+WjFNEnDJG1Yo1O3O+caw VxyeyHoySvpp35bAy8TOcGj1eCgqdRiR4zsqVfc5wbRPnpUIGuQq -----END CERTIFICATE-----Generated at Mon Jan 26 16:57:53 2026 by rpki-client