This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/AivxhCc3KftlbRJ2QOx1bc5jT4g.roa File: AivxhCc3KftlbRJ2QOx1bc5jT4g.roa (raw, json) Hash identifier: zvJKZXyKG3gOAWGo2xAL2tA+hTKuMQ+ifbBQsnPmXV8= Subject key identifier: 02:2B:F1:84:27:37:29:FB:65:6D:12:76:40:EC:75:6D:CE:63:4F:88 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15E5C263294E4FFCF862A90A333B50 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/AivxhCc3KftlbRJ2QOx1bc5jT4g.roa Signing time: Fri 02 Jan 2026 14:21:40 +0000 ROA not before: Fri 02 Jan 2026 14:21:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50751 IP address blocks: 195.62.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e5:c2:63:29:4e:4f:fc:f8:62:a9:0a:33:3b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=022bf184273729fb656d127640ec756dce634f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:bd:65:92:d5:92:cb:12:d5:69:a5:2c:2a:38: 89:90:73:4b:47:a2:ae:18:dc:81:cc:21:0b:b8:89: d9:21:9f:c2:83:67:89:0d:27:a6:fd:50:8c:7a:4b: dd:e4:bf:7d:a1:9e:53:37:0d:8a:b5:a9:5d:6e:fa: 08:cc:8b:41:b3:1c:d0:63:c7:c8:56:0c:f8:ff:de: 36:99:1e:c8:5e:d7:93:09:99:13:72:b7:e3:00:80: 5a:66:7a:bb:f9:98:a1:0f:2f:9a:44:ad:bb:b0:41: 60:99:3f:99:67:34:61:f2:65:1b:cf:0a:29:12:2f: 43:6f:89:17:84:4f:06:53:01:35:79:03:45:7e:2a: 14:29:39:21:50:9a:b9:a6:94:8f:05:09:63:84:f9: 91:7c:e1:f2:8c:69:82:f8:09:bf:54:d4:05:5a:54: 86:41:f0:6d:e3:44:42:0e:2b:9d:d0:93:ed:62:c1: 79:f5:00:52:3e:8c:a5:dd:f2:cf:12:de:68:3c:2e: 96:4b:fe:1d:8d:ff:f3:11:8a:2b:52:39:45:40:0d: 82:92:ca:f7:b7:87:b2:0a:2f:64:15:74:93:3f:f0: 97:dc:6f:1f:84:37:da:33:74:e8:ce:a0:62:b6:ec: a8:0a:9d:db:36:38:ef:f4:0b:51:93:b0:1a:be:11: 7c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2B:F1:84:27:37:29:FB:65:6D:12:76:40:EC:75:6D:CE:63:4F:88 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/AivxhCc3KftlbRJ2QOx1bc5jT4g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.62.25.0/24 Signature Algorithm: sha256WithRSAEncryption 85:2b:e2:7d:27:ac:b5:fd:0e:40:02:aa:aa:1d:6c:75:aa:3f: 72:3f:af:09:e1:be:b3:a7:e5:41:ee:c3:ee:96:d0:93:57:63: dd:37:de:bf:c2:90:b4:88:95:06:c0:ff:33:85:ba:2a:f8:df: 09:ba:d5:bf:bd:d8:11:41:56:67:a2:ec:9b:e8:30:7b:6a:f8: fb:3c:6d:07:b9:b1:ff:1d:a0:b5:02:af:d9:e3:67:da:68:25: f7:11:0c:fe:77:40:91:f0:f1:e1:9b:44:13:76:0b:bf:29:31: 71:73:c9:bd:22:6a:57:9a:7c:e3:e0:53:bd:4f:5f:12:b2:63: 26:68:8c:85:60:a4:83:51:32:79:95:54:dd:89:ce:89:02:85: 46:8d:e7:5d:ec:51:6b:8f:ed:19:e6:37:73:74:ee:19:c7:f3: f4:3d:89:12:29:b3:57:f9:44:a9:b0:f0:7f:32:38:ab:71:3f: e3:90:b1:f7:19:7a:51:e9:3e:37:70:19:4a:4f:da:a2:e7:7f: ca:21:70:1e:dd:23:80:2c:12:70:7e:8a:d0:a5:73:28:c4:c4: 23:05:1e:42:b2:3c:95:bc:7f:6f:eb:b1:19:a4:fc:ba:4c:7c: 1b:78:8e:b0:07:71:e9:4a:f5:b6:7e:0f:76:98:9e:c1:63:45: 4c:9f:cb:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FeXCYylOT/z4YqkKMztQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjJiZjE4NDI3MzcyOWZiNjU2ZDEyNzY0MGVjNzU2ZGNlNjM0Zjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3b1lktWSyxLVaaUsKjiJkHNLR6Ku GNyBzCELuInZIZ/Cg2eJDSem/VCMekvd5L99oZ5TNw2KtaldbvoIzItBsxzQY8fI Vgz4/942mR7IXteTCZkTcrfjAIBaZnq7+ZihDy+aRK27sEFgmT+ZZzRh8mUbzwop Ei9Db4kXhE8GUwE1eQNFfioUKTkhUJq5ppSPBQljhPmRfOHyjGmC+Am/VNQFWlSG QfBt40RCDiud0JPtYsF59QBSPoyl3fLPEt5oPC6WS/4djf/zEYorUjlFQA2Cksr3 t4eyCi9kFXSTP/CX3G8fhDfaM3TozqBituyoCp3bNjjv9AtRk7AavhF87wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAIr8YQnNyn7ZW0SdkDsdW3OY0+IMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvQWl2eGhDYzNLZnRsYlJKMlFPeDFiYzVqVDRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwz4ZMA0G CSqGSIb3DQEBCwUAA4IBAQCFK+J9J6y1/Q5AAqqqHWx1qj9yP68J4b6zp+VB7sPu ltCTV2PdN96/wpC0iJUGwP8zhboq+N8JutW/vdgRQVZnouyb6DB7avj7PG0HubH/ HaC1Aq/Z42faaCX3EQz+d0CR8PHhm0QTdgu/KTFxc8m9ImpXmnzj4FO9T18SsmMm aIyFYKSDUTJ5lVTdic6JAoVGjedd7FFrj+0Z5jdzdO4Zx/P0PYkSKbNX+USpsPB/ MjircT/jkLH3GXpR6T43cBlKT9qi53/KIXAe3SOALBJwforQpXMoxMQjBR5CsjyV vH9v67EZpPy6THwbeI6wB3HpSvW2fg92mJ7BY0VMn8tU -----END CERTIFICATE-----Generated at Tue Jan 6 20:51:38 2026 by rpki-client