This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/AxjWYbGGpT5pCJ414siHagIrYv0.roa File: AxjWYbGGpT5pCJ414siHagIrYv0.roa (raw, json) Hash identifier: Les+tBn+kJ+j2Lvoi/D4UE+2fwFt8YnrHjntjr+jnck= Subject key identifier: 03:18:D6:61:B1:86:A5:3E:69:08:9E:35:E2:C8:87:6A:02:2B:62:FD Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Certificate serial: 019B7B4106892A267EF9BEC8CB8196DFCFCD Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/AxjWYbGGpT5pCJ414siHagIrYv0.roa Signing time: Thu 01 Jan 2026 20:30:17 +0000 ROA not before: Thu 01 Jan 2026 20:30:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 11404 IP address blocks: 217.9.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:41:06:89:2a:26:7e:f9:be:c8:cb:81:96:df:cf:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Validity Not Before: Jan 1 20:30:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0318d661b186a53e69089e35e2c8876a022b62fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:49:3d:bc:f1:aa:e7:88:0d:3e:5e:2f:3c:b7: c5:b4:ab:a9:b2:fc:34:48:dd:14:91:86:88:30:1e: 35:6c:4b:b9:d7:33:a6:a7:d4:cb:9d:f4:eb:31:c3: 83:09:34:a9:cd:58:e7:18:7a:9d:bd:20:50:14:68: e4:6b:39:01:2a:c0:6d:fc:68:e4:f4:fc:0b:3b:4b: f4:09:91:eb:46:df:fb:70:8a:c3:c1:40:d1:4f:19: 27:45:01:2e:77:90:77:30:a7:49:a4:92:86:8d:be: b7:cd:ae:d5:b1:1d:49:17:d6:25:5b:9a:60:7c:c7: 1d:ec:19:28:6a:89:f6:55:b3:4d:0d:9a:71:07:64: ab:cf:07:f6:e6:3e:a9:b6:89:37:47:16:59:17:78: 51:92:45:72:cc:75:e1:4d:ab:d0:f7:53:ae:79:88: ea:49:a0:7f:a7:91:83:31:5b:e3:97:4b:c9:7a:89: 54:71:d7:06:9e:0b:71:43:60:d3:7d:4a:19:4a:e9: 16:c6:bc:17:c7:80:0e:b7:71:ad:1e:9d:31:28:01: 0c:fa:05:5e:37:b0:3c:14:f2:70:ce:be:0e:54:9c: 89:40:f9:ef:65:f9:12:a7:34:66:54:ad:dd:d1:8d: 8b:1f:81:4d:5d:30:5c:a3:a2:c5:30:96:f1:1f:76: e1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:18:D6:61:B1:86:A5:3E:69:08:9E:35:E2:C8:87:6A:02:2B:62:FD X509v3 Authority Key Identifier: keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/AxjWYbGGpT5pCJ414siHagIrYv0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.9.13.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:7e:8a:73:0c:21:a7:74:2d:0c:7e:8f:ab:f0:bd:fb:1b:97: bb:0c:3b:b7:4e:b9:fd:19:3e:d7:6b:88:25:62:04:a8:a2:25: 18:63:b5:52:89:d9:12:da:f4:fe:3c:fb:7d:1d:5c:bc:58:f8: 21:ba:70:44:32:16:d4:d6:38:7e:6a:97:d1:cf:8b:cb:e9:7b: 4c:8d:bb:e0:10:dd:42:ad:61:33:b9:fe:c4:a6:20:35:6d:f4: 34:87:dc:af:d1:84:12:c1:15:66:b6:cd:72:11:57:bb:e6:9d: 0a:2b:9f:78:da:d7:52:b1:38:65:3d:f3:17:1e:30:10:c1:7f: 3a:0f:e1:81:ea:0d:16:e4:32:ab:93:39:c6:a6:ee:e6:e4:ed: 3e:6d:59:26:d4:34:09:2f:b9:8c:17:c1:ce:c9:1e:02:5f:ee: 2c:b2:b6:a3:9b:58:24:24:bf:fa:3a:82:85:7a:0b:60:5b:cc: 4c:df:57:c8:84:50:b6:ab:36:06:69:f9:5f:0a:af:00:81:8b: 93:98:0c:ff:53:bd:16:46:26:85:8f:d6:a1:92:ce:e7:4d:8f: 36:23:a6:fe:92:e6:28:d6:f3:79:90:ec:d9:8b:d3:98:61:5a: 4a:6d:a4:b6:be:08:47:8e:fd:7d:94:28:5b:43:9b:69:fa:70: 64:9f:18:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7QQaJKiZ++b7Iy4GW38/NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZWUxODJkOWM0M2E1Y2U3MDY4ZGZkOWJhN2FhOGVkOTBl NWUwYmEwHhcNMjYwMTAxMjAzMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzE4ZDY2MWIxODZhNTNlNjkwODllMzVlMmM4ODc2YTAyMmI2MmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kk9vPGq54gNPl4vPLfFtKupsvw0 SN0UkYaIMB41bEu51zOmp9TLnfTrMcODCTSpzVjnGHqdvSBQFGjkazkBKsBt/Gjk 9PwLO0v0CZHrRt/7cIrDwUDRTxknRQEud5B3MKdJpJKGjb63za7VsR1JF9YlW5pg fMcd7Bkoaon2VbNNDZpxB2Srzwf25j6ptok3RxZZF3hRkkVyzHXhTavQ91OueYjq SaB/p5GDMVvjl0vJeolUcdcGngtxQ2DTfUoZSukWxrwXx4AOt3GtHp0xKAEM+gVe N7A8FPJwzr4OVJyJQPnvZfkSpzRmVK3d0Y2LH4FNXTBco6LFMJbxH3bhBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAMY1mGxhqU+aQieNeLIh2oCK2L9MB8GA1UdIwQY MBaAFKfuGC2cQ6XOcGjf2bp6qO2Q5eC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDkt NmI1ZjY4NTIyYTdkLzEvQXhqV1liR0dwVDVwQ0o0MTRzaUhhZ0lyWXYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDktNmI1ZjY4NTIyYTdk LzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2QkNMA0G CSqGSIb3DQEBCwUAA4IBAQAOfopzDCGndC0Mfo+r8L37G5e7DDu3Trn9GT7Xa4gl YgSooiUYY7VSidkS2vT+PPt9HVy8WPghunBEMhbU1jh+apfRz4vL6XtMjbvgEN1C rWEzuf7EpiA1bfQ0h9yv0YQSwRVmts1yEVe75p0KK5942tdSsThlPfMXHjAQwX86 D+GB6g0W5DKrkznGpu7m5O0+bVkm1DQJL7mMF8HOyR4CX+4ssrajm1gkJL/6OoKF egtgW8xM31fIhFC2qzYGaflfCq8AgYuTmAz/U70WRiaFj9ahks7nTY82I6b+kuYo 1vN5kOzZi9OYYVpKbaS2vghHjv19lChbQ5tp+nBknxja -----END CERTIFICATE-----Generated at Thu Jan 22 07:29:57 2026 by rpki-client