This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/A9aoKjX-PrUz_ZVee2BMxOCs9TI.roa File: A9aoKjX-PrUz_ZVee2BMxOCs9TI.roa (raw, json) Hash identifier: PItL9VEZ22gUVFc40yuCEtz0/J/RBchQKzizlIZNgJg= Subject key identifier: 03:D6:A8:2A:35:FE:3E:B5:33:FD:95:5E:7B:60:4C:C4:E0:AC:F5:32 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797ED6FEFD69C16680F79BB5391D8F08 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/A9aoKjX-PrUz_ZVee2BMxOCs9TI.roa Signing time: Thu 01 Jan 2026 12:18:34 +0000 ROA not before: Thu 01 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205886 IP address blocks: 79.175.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d6:fe:fd:69:c1:66:80:f7:9b:b5:39:1d:8f:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03d6a82a35fe3eb533fd955e7b604cc4e0acf532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:23:27:66:78:01:aa:6c:6e:09:3d:dd:11:d9: a9:6f:4f:a2:f5:1a:cf:ac:45:fd:79:7b:dd:36:37: 27:a8:6b:64:2f:5a:69:ea:f8:15:c6:f0:04:b3:8e: bf:22:a3:86:3d:e4:32:c9:8a:1e:48:91:b8:d6:79: 9a:00:19:4b:90:35:db:9b:62:3a:f2:3a:39:3e:df: ae:8e:72:67:13:8a:33:ef:d7:36:ea:10:08:6e:2b: aa:4b:39:8a:8a:28:37:5b:43:69:2e:eb:d7:44:48: 7f:c7:1b:67:1e:76:34:d8:e5:28:ff:f4:6c:d5:a6: 84:43:39:29:1d:60:f4:e5:67:6e:56:de:e6:bd:75: f3:2d:f3:bf:65:34:69:a0:52:c7:b6:77:fa:b8:c9: 25:7b:83:29:ca:2a:66:c3:ab:af:21:b2:19:d1:c7: c3:1a:8f:68:86:34:45:d6:e1:b8:c7:67:83:3d:67: 36:83:a1:3c:66:6d:ea:02:b3:c9:1c:0c:47:76:0b: 21:26:ea:ec:dc:2c:19:f3:87:ae:76:8a:b1:c3:cc: ef:56:20:64:7d:2f:ed:b3:f9:72:f9:40:c9:43:97: 46:99:f8:63:f1:54:17:56:71:e0:6f:80:66:cb:4c: 15:de:ab:19:74:0e:34:d4:42:94:41:15:c5:c9:70: 87:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D6:A8:2A:35:FE:3E:B5:33:FD:95:5E:7B:60:4C:C4:E0:AC:F5:32 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/A9aoKjX-PrUz_ZVee2BMxOCs9TI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.175.115.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:69:57:72:f5:ed:f5:57:71:b1:38:e3:92:fa:cc:00:37:50: 0e:52:e1:55:c8:f0:35:d2:6f:7d:db:aa:b0:e6:c5:0a:88:93: b4:49:ed:d3:ee:f9:8d:e4:f3:12:bc:af:24:b0:5b:a0:7f:5b: 4f:bc:2d:71:f3:16:22:70:59:42:73:35:d1:76:be:c5:19:ac: cf:ed:99:9e:1c:37:ee:a8:01:28:d2:b9:f5:96:e8:49:20:3c: 89:78:b7:74:3a:82:86:69:44:53:1d:0c:f4:74:e5:03:b7:16: 4b:5d:6e:d1:c5:21:ae:20:cc:84:d4:3e:38:73:32:c7:de:1d: ae:89:01:f4:65:18:f0:bc:49:57:e6:e8:01:e0:88:f0:a2:db: 51:1b:a1:5d:23:2b:c7:04:5e:aa:7e:d2:96:f1:ec:f0:cd:75: f9:07:26:ab:24:cd:3e:26:32:a3:b3:d1:96:0a:22:4e:39:8f: d7:10:94:2a:9e:d1:8c:2d:8c:4b:2f:1b:5f:cc:43:34:16:90: 46:cc:0a:fc:87:f5:23:71:b1:b6:a3:77:ff:7c:cd:5b:8f:eb: 85:a8:68:3f:84:87:d4:02:13:e2:69:2c:be:b3:00:1d:5f:df: 1a:a4:24:d2:61:88:ec:e4:9a:bb:61:d2:0b:a4:e9:06:73:8c: b8:92:e9:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ftb+/WnBZoD3m7U5HY8IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2Q2YTgyYTM1ZmUzZWI1MzNmZDk1NWU3YjYwNGNjNGUwYWNmNTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CMnZngBqmxuCT3dEdmpb0+i9RrP rEX9eXvdNjcnqGtkL1pp6vgVxvAEs46/IqOGPeQyyYoeSJG41nmaABlLkDXbm2I6 8jo5Pt+ujnJnE4oz79c26hAIbiuqSzmKiig3W0NpLuvXREh/xxtnHnY02OUo//Rs 1aaEQzkpHWD05WduVt7mvXXzLfO/ZTRpoFLHtnf6uMkle4Mpyipmw6uvIbIZ0cfD Go9ohjRF1uG4x2eDPWc2g6E8Zm3qArPJHAxHdgshJurs3CwZ84eudoqxw8zvViBk fS/ts/ly+UDJQ5dGmfhj8VQXVnHgb4Bmy0wV3qsZdA401EKUQRXFyXCHIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAPWqCo1/j61M/2VXntgTMTgrPUyMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvQTlhb0tqWC1QclV6X1pWZWUyQk14T0NzOVRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT69zMA0G CSqGSIb3DQEBCwUAA4IBAQBtaVdy9e31V3GxOOOS+swAN1AOUuFVyPA10m9926qw 5sUKiJO0Se3T7vmN5PMSvK8ksFugf1tPvC1x8xYicFlCczXRdr7FGazP7ZmeHDfu qAEo0rn1luhJIDyJeLd0OoKGaURTHQz0dOUDtxZLXW7RxSGuIMyE1D44czLH3h2u iQH0ZRjwvElX5ugB4IjwottRG6FdIyvHBF6qftKW8ezwzXX5ByarJM0+JjKjs9GW CiJOOY/XEJQqntGMLYxLLxtfzEM0FpBGzAr8h/UjcbG2o3f/fM1bj+uFqGg/hIfU AhPiaSy+swAdX98apCTSYYjs5Jq7YdILpOkGc4y4kulO -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:16 2026 by rpki-client