This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/AXgTewH_1RhidVVdC0LlFAUDmcc.roa File: AXgTewH_1RhidVVdC0LlFAUDmcc.roa (raw, json) Hash identifier: csfJlTA1FCgWdUOWpa++6LVpL84VSb27tko0nSprbzs= Subject key identifier: 01:78:13:7B:01:FF:D5:18:62:75:55:5D:0B:42:E5:14:05:03:99:C7 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019BB6812141D3A483DAB4EC46246D67AB76 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/AXgTewH_1RhidVVdC0LlFAUDmcc.roa Signing time: Tue 13 Jan 2026 08:37:54 +0000 ROA not before: Tue 13 Jan 2026 08:37:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214025 IP address blocks: 109.121.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 19:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:81:21:41:d3:a4:83:da:b4:ec:46:24:6d:67:ab:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 13 08:37:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0178137b01ffd5186275555d0b42e514050399c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:26:37:84:f6:81:6c:b8:86:64:84:21:19:f2: 09:be:0a:5b:18:4f:74:6d:2f:f8:97:e7:5f:0b:b6: d3:66:82:d0:f1:72:85:8e:1c:92:1c:72:81:fb:d7: 71:99:49:bf:9b:61:e3:13:08:dd:ea:5a:8c:b7:7d: a0:52:0e:76:75:f0:c8:c3:08:2a:9f:d9:bc:e3:65: 05:49:e1:4b:29:fc:6d:71:4f:14:9f:c1:9d:83:7e: c2:fb:d4:fa:5b:fa:16:cb:46:55:e9:6b:70:ad:22: 31:38:ff:7a:31:c1:ea:df:d7:f0:58:92:80:95:b7: da:84:9f:67:0e:48:b6:55:53:81:26:74:18:a6:13: e9:70:d4:08:07:3e:60:4e:7e:6e:b0:23:83:fd:f9: fc:ed:d6:a9:6a:b4:72:09:d1:d5:9b:39:36:45:12: 3f:83:c6:98:f7:0b:e2:1c:3d:e1:b1:6d:7d:40:39: 7b:3c:d2:37:a1:f6:29:2a:c6:59:88:ce:a0:93:64: b0:3f:ef:ec:b7:3b:2c:4f:e6:68:93:1d:7f:02:cb: 10:58:d9:b1:bb:19:b7:9c:45:73:1f:65:15:7a:fc: 59:75:94:ab:85:07:42:86:02:4d:98:a8:19:a7:df: 6e:da:48:84:36:43:d8:04:a3:c2:fe:9d:cf:ed:9b: b6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:78:13:7B:01:FF:D5:18:62:75:55:5D:0B:42:E5:14:05:03:99:C7 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/AXgTewH_1RhidVVdC0LlFAUDmcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.121.45.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:14:c6:ac:3e:1d:d5:bb:89:39:61:ee:b4:7e:2a:bd:5a:1b: 6a:49:8f:43:f7:47:eb:e4:28:21:09:bb:8a:a1:3c:c8:89:c9: 0a:a9:ae:bd:68:98:85:54:fc:8d:ce:39:53:42:e2:0d:1d:27: 14:1a:fa:ee:99:e4:0a:68:b4:d6:d9:41:a4:75:d7:d0:99:cf: 83:53:35:ed:42:7c:97:9b:66:16:5e:08:07:7f:79:43:4b:06: a5:a7:b2:c0:17:17:b4:a3:fa:1f:96:24:cc:45:e2:01:3a:28: 73:15:64:18:62:44:83:57:21:1c:6d:09:46:47:00:d6:90:5e: 8e:94:94:12:4e:15:71:f4:62:7c:40:26:b4:8e:75:6c:5b:7a: 81:ba:36:b5:b1:19:83:ec:a4:81:b3:e0:4b:34:d8:97:83:98: 9d:e9:64:0c:1f:df:d8:a6:7e:9b:0a:f9:af:79:88:b8:6c:6e: e0:08:ab:56:17:91:08:a9:d2:d9:5d:7b:04:f4:04:40:08:97: 39:ab:65:77:63:56:39:90:57:98:98:39:20:94:21:8f:40:ef: fa:4a:44:5f:53:66:3c:60:a2:a5:a2:c6:11:f7:c1:09:99:52: aa:c0:5f:47:7d:7a:54:37:8e:19:93:41:03:04:63:65:48:e8: 88:7d:06:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu2gSFB06SD2rTsRiRtZ6t2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTEzMDgzNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTc4MTM3YjAxZmZkNTE4NjI3NTU1NWQwYjQyZTUxNDA1MDM5OWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyY3hPaBbLiGZIQhGfIJvgpbGE90 bS/4l+dfC7bTZoLQ8XKFjhySHHKB+9dxmUm/m2HjEwjd6lqMt32gUg52dfDIwwgq n9m842UFSeFLKfxtcU8Un8Gdg37C+9T6W/oWy0ZV6WtwrSIxOP96McHq39fwWJKA lbfahJ9nDki2VVOBJnQYphPpcNQIBz5gTn5usCOD/fn87daparRyCdHVmzk2RRI/ g8aY9wviHD3hsW19QDl7PNI3ofYpKsZZiM6gk2SwP+/stzssT+Zokx1/AssQWNmx uxm3nEVzH2UVevxZdZSrhQdChgJNmKgZp99u2kiENkPYBKPC/p3P7Zu20wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAF4E3sB/9UYYnVVXQtC5RQFA5nHMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvQVhnVGV3SF8xUmhpZFZWZEMwTGxGQVVEbWNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXktMA0G CSqGSIb3DQEBCwUAA4IBAQAsFMasPh3Vu4k5Ye60fiq9WhtqSY9D90fr5CghCbuK oTzIickKqa69aJiFVPyNzjlTQuINHScUGvrumeQKaLTW2UGkddfQmc+DUzXtQnyX m2YWXggHf3lDSwalp7LAFxe0o/ofliTMReIBOihzFWQYYkSDVyEcbQlGRwDWkF6O lJQSThVx9GJ8QCa0jnVsW3qBuja1sRmD7KSBs+BLNNiXg5id6WQMH9/Ypn6bCvmv eYi4bG7gCKtWF5EIqdLZXXsE9ARACJc5q2V3Y1Y5kFeYmDkglCGPQO/6SkRfU2Y8 YKKlosYR98EJmVKqwF9HfXpUN44Zk0EDBGNlSOiIfQaY -----END CERTIFICATE-----Generated at Mon Jan 19 05:21:45 2026 by rpki-client