This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/Aa2IxorzT-f0qos6APae9lJPvis.roa File: Aa2IxorzT-f0qos6APae9lJPvis.roa (raw, json) Hash identifier: 2snsQOp64NXZRDIW60ynJJ/L0sWlwOoUe2QkF5SYR1Y= Subject key identifier: 01:AD:88:C6:8A:F3:4F:E7:F4:AA:8B:3A:00:F6:9E:F6:52:4F:BE:2B Certificate issuer: /CN=10258ae0c26c65a6a6966f3f7e698633b9143426 Certificate serial: 019B7FF18AC3E2B52FD7869E6E85B9164000 Authority key identifier: 10:25:8A:E0:C2:6C:65:A6:A6:96:6F:3F:7E:69:86:33:B9:14:34:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/Aa2IxorzT-f0qos6APae9lJPvis.roa Signing time: Fri 02 Jan 2026 18:21:34 +0000 ROA not before: Fri 02 Jan 2026 18:21:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56874 IP address blocks: 91.228.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:8a:c3:e2:b5:2f:d7:86:9e:6e:85:b9:16:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10258ae0c26c65a6a6966f3f7e698633b9143426 Validity Not Before: Jan 2 18:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01ad88c68af34fe7f4aa8b3a00f69ef6524fbe2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:82:54:5b:92:f0:7f:9a:17:d0:2f:92:3d:e6: 67:b8:2a:8f:56:77:41:a4:5e:59:cd:6a:a3:c8:45: ab:db:b9:38:81:31:64:ff:3f:6e:b5:02:d3:0c:92: b4:cd:65:ca:e5:cd:40:99:52:13:76:30:bb:ec:7c: e6:35:d0:fd:5a:21:69:0c:e3:a3:3c:6b:31:54:32: d5:aa:cb:39:4c:ff:b8:35:c1:70:ed:1f:6b:83:82: a6:2c:06:b3:a5:45:9a:ae:f6:7c:9e:45:27:47:eb: af:da:94:31:86:31:aa:8a:d5:b1:14:87:76:aa:94: 11:4c:ee:f2:57:85:82:b9:52:d9:eb:4b:b0:d1:06: 7c:a8:cd:06:be:d4:ae:db:a4:30:5c:33:e0:85:ed: 2e:4a:56:d5:7b:0c:63:47:b4:fc:fe:8e:d3:dd:aa: 89:dd:a4:5a:7e:2b:23:5a:40:a5:bc:11:b6:66:de: 8a:bf:c6:97:cc:fb:3a:08:1d:51:34:9a:e2:c5:c0: 22:b9:43:95:5c:cb:eb:93:5b:ba:a7:17:60:23:c1: af:07:4a:d9:ee:e3:0a:78:6e:52:db:2e:7e:24:41: 39:20:90:41:31:d6:66:c1:c3:48:c2:c2:50:35:22: d1:b6:e5:29:bb:2b:c3:e2:f6:10:03:7e:07:21:a8: 6d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:AD:88:C6:8A:F3:4F:E7:F4:AA:8B:3A:00:F6:9E:F6:52:4F:BE:2B X509v3 Authority Key Identifier: keyid:10:25:8A:E0:C2:6C:65:A6:A6:96:6F:3F:7E:69:86:33:B9:14:34:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/Aa2IxorzT-f0qos6APae9lJPvis.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.228.118.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:2f:81:1b:00:36:c2:aa:9b:6b:32:98:7a:31:26:10:92:23: 71:5f:32:af:c6:a5:91:d8:6c:0f:13:a9:cb:5a:48:05:06:77: 9b:9e:56:1b:bf:c9:15:1f:41:5e:ae:1b:df:61:38:92:26:83: 3b:86:44:e6:96:8b:1c:48:e9:bd:2d:e2:db:ab:d4:d4:58:e3: 73:b5:6d:d5:06:e9:96:d1:24:46:1a:4f:ef:b9:6e:23:f5:84: 39:99:a4:09:43:94:71:86:de:7a:ca:90:21:3b:7c:56:55:1d: 33:93:65:e0:e7:ed:0a:12:82:02:4e:8a:9c:db:fa:8e:8f:46: 0f:dd:2e:3c:f8:56:47:51:34:b8:7b:ff:02:6c:44:52:58:02: 59:b9:e5:d0:75:93:23:ff:0c:e2:1f:bb:af:63:b4:62:3c:e5: 6e:d1:93:92:e0:9a:ed:8f:4a:32:db:67:63:6f:42:2d:f8:3a: 23:05:e0:b5:fe:f6:23:65:f1:8b:1a:a3:6c:ad:03:cd:41:cd: 80:4c:29:e6:51:28:85:6d:01:c0:36:ed:a8:86:01:78:06:a4: 65:00:e7:d9:b4:5f:69:5b:a8:f1:a3:23:78:2a:21:4f:fd:0b: cb:a4:8a:dd:67:4b:70:de:ad:a8:89:d9:c5:e3:f2:99:89:c2: eb:3b:e5:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8YrD4rUv14aeboW5FkAAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMjU4YWUwYzI2YzY1YTZhNjk2NmYzZjdlNjk4NjMzYjkx NDM0MjYwHhcNMjYwMTAyMTgyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWFkODhjNjhhZjM0ZmU3ZjRhYThiM2EwMGY2OWVmNjUyNGZiZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IJUW5Lwf5oX0C+SPeZnuCqPVndB pF5ZzWqjyEWr27k4gTFk/z9utQLTDJK0zWXK5c1AmVITdjC77HzmNdD9WiFpDOOj PGsxVDLVqss5TP+4NcFw7R9rg4KmLAazpUWarvZ8nkUnR+uv2pQxhjGqitWxFId2 qpQRTO7yV4WCuVLZ60uw0QZ8qM0GvtSu26QwXDPghe0uSlbVewxjR7T8/o7T3aqJ 3aRafisjWkClvBG2Zt6Kv8aXzPs6CB1RNJrixcAiuUOVXMvrk1u6pxdgI8GvB0rZ 7uMKeG5S2y5+JEE5IJBBMdZmwcNIwsJQNSLRtuUpuyvD4vYQA34HIahtdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAGtiMaK80/n9KqLOgD2nvZST74rMB8GA1UdIwQY MBaAFBAliuDCbGWmppZvP35phjO5FDQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUNXSzRNSnNaYWFtbG04X2ZtbUdNN2tVTkNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xMzQxYTctMWNlNi00M2I5LWJmNzYt ZWY3ZThkNDQzNGYzLzEvQWEySXhvcnpULWYwcW9zNkFQYWU5bEpQdmlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8xMzQxYTctMWNlNi00M2I5LWJmNzYtZWY3ZThkNDQzNGYz LzEvRUNXSzRNSnNaYWFtbG04X2ZtbUdNN2tVTkNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+R2MA0G CSqGSIb3DQEBCwUAA4IBAQBaL4EbADbCqptrMph6MSYQkiNxXzKvxqWR2GwPE6nL WkgFBnebnlYbv8kVH0FerhvfYTiSJoM7hkTmloscSOm9LeLbq9TUWONztW3VBumW 0SRGGk/vuW4j9YQ5maQJQ5Rxht56ypAhO3xWVR0zk2Xg5+0KEoICToqc2/qOj0YP 3S48+FZHUTS4e/8CbERSWAJZueXQdZMj/wziH7uvY7RiPOVu0ZOS4Jrtj0oy22dj b0It+DojBeC1/vYjZfGLGqNsrQPNQc2ATCnmUSiFbQHANu2ohgF4BqRlAOfZtF9p W6jxoyN4KiFP/QvLpIrdZ0tw3q2oidnF4/KZicLrO+XO -----END CERTIFICATE-----Generated at Mon Jan 26 20:24:45 2026 by rpki-client