This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/aASnsFjaGSv1507L70pG1D3Mylw.roa File: aASnsFjaGSv1507L70pG1D3Mylw.roa (raw, json) Hash identifier: oa7lWKQuw6P6CITW8+9RNGq86p0mYNRQt2gm7DcEnkk= Subject key identifier: 68:04:A7:B0:58:DA:19:2B:F5:E7:4E:CB:EF:4A:46:D4:3D:CC:CA:5C Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019B797EF3BFD83B9C3C233408393F4805AE Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/aASnsFjaGSv1507L70pG1D3Mylw.roa Signing time: Thu 01 Jan 2026 12:18:41 +0000 ROA not before: Thu 01 Jan 2026 12:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19148 IP address blocks: 89.249.194.0/24 maxlen: 24 89.249.195.0/24 maxlen: 24 212.42.196.0/24 maxlen: 24 212.42.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f3:bf:d8:3b:9c:3c:23:34:08:39:3f:48:05:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Jan 1 12:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6804a7b058da192bf5e74ecbef4a46d43dccca5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d7:96:dc:42:23:4c:75:ee:a6:36:53:65:a8: b2:95:0e:c6:bf:b1:aa:db:c3:7c:8b:39:fb:75:31: 73:05:e8:86:90:55:b3:f1:dc:d6:2b:97:c2:71:88: 8f:97:5d:5b:fa:ee:c1:f2:55:cd:7b:e8:4e:15:79: 4c:15:c0:53:6f:9a:6a:1e:0e:83:be:9d:bc:17:47: df:ab:92:ed:bf:16:8a:20:0d:11:ac:cc:cf:b6:78: 15:f2:f3:d0:de:4e:d0:f9:46:b3:27:92:dc:de:33: 25:1d:e3:39:da:e5:59:e8:0e:a1:d7:89:3d:e4:00: ac:06:2b:cb:44:5c:c4:0f:ec:f1:53:00:8e:44:1e: 5c:9c:7a:87:bc:7a:18:83:fa:06:5f:e8:cc:c6:10: 86:64:9c:0e:4a:6f:4d:ac:af:27:d4:3c:b0:c0:57: eb:8e:ba:f9:13:ad:58:a1:e3:95:08:fd:8e:1e:83: 7d:e1:c7:80:7a:4f:0e:ee:d2:9d:d3:23:95:80:f6: ab:57:2a:b7:c3:81:94:6b:dc:38:a8:80:6c:af:ef: 73:fa:76:9d:65:39:b1:d0:b3:6c:1b:59:ba:4b:5f: 36:6c:47:64:21:71:ed:b4:0d:64:22:28:01:35:9f: 20:1c:ca:3f:e3:64:72:9a:51:25:2a:75:23:77:ee: 6c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:04:A7:B0:58:DA:19:2B:F5:E7:4E:CB:EF:4A:46:D4:3D:CC:CA:5C X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/aASnsFjaGSv1507L70pG1D3Mylw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.249.194.0/23 212.42.196.0/24 212.42.206.0/24 Signature Algorithm: sha256WithRSAEncryption c5:d1:d0:6d:09:40:5b:49:48:19:a4:a1:96:f9:7c:a0:e7:89: 5a:03:93:87:96:b3:d8:c4:22:ae:62:5a:68:db:b5:6b:11:93: b0:4f:74:25:1d:e3:7f:9f:38:ee:f7:3e:85:7c:e8:11:2b:c9: 3d:29:46:40:cc:f3:f9:ff:53:89:34:76:9f:cf:48:a9:3d:88: 21:59:82:c7:bd:71:04:09:b1:5f:08:f0:e6:06:0b:5b:fe:de: 8b:de:ba:f2:b0:a8:14:86:11:40:90:f7:2c:c7:12:11:fa:48: ad:e3:80:c8:52:3a:aa:0d:c1:36:51:84:e4:8c:f9:b0:4e:9c: 14:23:dd:bc:86:8c:eb:96:9c:77:d1:32:94:e7:c2:d7:a2:1c: 2d:ce:86:8e:d0:92:ac:7a:71:31:2a:12:ad:64:64:47:4d:ae: c8:6a:ab:7e:87:7c:62:6f:35:f2:55:67:f6:6c:a2:23:97:57: a4:27:a0:b6:07:09:c4:49:f3:c2:65:f4:9b:70:78:74:84:5d: 8b:70:59:6d:e2:81:77:09:1c:f3:0c:6c:5e:df:70:16:51:5f: 0a:17:f8:c1:02:e8:17:ff:67:3b:6e:64:94:42:09:9b:5d:51: c4:9f:b5:03:c0:35:70:14:86:80:d9:40:c6:de:47:3c:bd:2d: 6a:2c:fc:88 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5fvO/2DucPCM0CDk/SAWuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjYwMTAxMTIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODA0YTdiMDU4ZGExOTJiZjVlNzRlY2JlZjRhNDZkNDNkY2NjYTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdeW3EIjTHXupjZTZaiylQ7Gv7Gq 28N8izn7dTFzBeiGkFWz8dzWK5fCcYiPl11b+u7B8lXNe+hOFXlMFcBTb5pqHg6D vp28F0ffq5LtvxaKIA0RrMzPtngV8vPQ3k7Q+UazJ5Lc3jMlHeM52uVZ6A6h14k9 5ACsBivLRFzED+zxUwCORB5cnHqHvHoYg/oGX+jMxhCGZJwOSm9NrK8n1DywwFfr jrr5E61YoeOVCP2OHoN94ceAek8O7tKd0yOVgParVyq3w4GUa9w4qIBsr+9z+nad ZTmx0LNsG1m6S182bEdkIXHttA1kIigBNZ8gHMo/42RymlElKnUjd+5sSwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGgEp7BY2hkr9edOy+9KRtQ9zMpcMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvYUFTbnNGamFHU3YxNTA3TDcwcEcxRDNNeWx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBWfnCAwQA 1CrEAwQA1CrOMA0GCSqGSIb3DQEBCwUAA4IBAQDF0dBtCUBbSUgZpKGW+Xyg54la A5OHlrPYxCKuYlpo27VrEZOwT3QlHeN/nzju9z6FfOgRK8k9KUZAzPP5/1OJNHaf z0ipPYghWYLHvXEECbFfCPDmBgtb/t6L3rrysKgUhhFAkPcsxxIR+kit44DIUjqq DcE2UYTkjPmwTpwUI928hozrlpx30TKU58LXohwtzoaO0JKsenExKhKtZGRHTa7I aqt+h3xibzXyVWf2bKIjl1ekJ6C2BwnESfPCZfSbcHh0hF2LcFlt4oF3CRzzDGxe 33AWUV8KF/jBAugX/2c7bmSUQgmbXVHEn7UDwDVwFIaA2UDG3kc8vS1qLPyI -----END CERTIFICATE-----Generated at Sat Jan 10 21:05:55 2026 by rpki-client