This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/ajuDEzNJwC4r5rxMhDlnFbCct18.roa File: ajuDEzNJwC4r5rxMhDlnFbCct18.roa (raw, json) Hash identifier: d8WaXIaoocbHmWCmpBjreywqEe6b/owRz1fe/aRzGoQ= Subject key identifier: 6A:3B:83:13:33:49:C0:2E:2B:E6:BC:4C:84:39:67:15:B0:9C:B7:5F Certificate issuer: /CN=500596ce6073e8ededc5105f814ec97191b5e1d5 Certificate serial: 019B78A358A3223C3085FA58E23BF5D9C80D Authority key identifier: 50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/ajuDEzNJwC4r5rxMhDlnFbCct18.roa Signing time: Thu 01 Jan 2026 08:18:49 +0000 ROA not before: Thu 01 Jan 2026 08:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42473 IP address blocks: 185.140.140.0/22 maxlen: 23 2a07:1b80::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:58:a3:22:3c:30:85:fa:58:e2:3b:f5:d9:c8:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=500596ce6073e8ededc5105f814ec97191b5e1d5 Validity Not Before: Jan 1 08:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a3b83133349c02e2be6bc4c84396715b09cb75f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e6:00:76:56:2f:bf:8c:6e:75:08:c8:17:ca: 2a:7a:ff:9e:6d:32:92:71:e8:68:9b:7f:f6:b4:fc: c2:09:79:2c:14:58:82:06:16:6e:1c:35:54:09:02: ba:69:f7:77:87:d5:6d:1b:59:1b:2c:53:56:f5:73: 42:60:27:8b:ef:a0:cc:8c:de:ca:c1:fd:39:10:40: de:40:42:04:3d:d1:a1:a4:be:b0:5f:70:06:44:8e: ae:09:51:8f:2b:54:bf:cb:22:f7:fc:59:d6:53:01: 66:ff:90:17:f0:6d:64:ac:79:9e:51:3c:76:fc:13: 9d:59:55:73:88:ae:5c:21:3a:4f:75:2b:c9:8f:c3: 63:e0:09:88:d5:67:4b:37:f0:76:6a:92:4b:fb:4d: 06:47:ab:77:53:f9:6e:47:b9:e4:69:2e:48:ae:1b: 73:46:64:28:f9:eb:0c:6f:27:bb:73:7d:54:79:aa: d4:af:e3:94:de:0c:50:94:ce:ed:19:16:77:31:a6: 29:78:96:b3:40:cc:a0:db:69:c4:3d:60:d1:68:d5: 91:4f:b3:8e:65:e7:79:09:57:87:aa:85:96:10:19: b8:68:8e:22:fb:b3:d9:fe:ee:e2:a0:8c:c5:5f:5c: b8:ea:d1:e1:ad:31:0e:d6:34:54:c9:2e:18:76:5e: 82:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:3B:83:13:33:49:C0:2E:2B:E6:BC:4C:84:39:67:15:B0:9C:B7:5F X509v3 Authority Key Identifier: keyid:50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/ajuDEzNJwC4r5rxMhDlnFbCct18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.140.140.0/22 IPv6: 2a07:1b80::/40 Signature Algorithm: sha256WithRSAEncryption 70:e8:65:8a:57:90:dd:32:36:bb:4e:5f:86:1f:70:55:b5:41: 91:3f:2e:5e:29:d8:3b:91:d5:76:fc:f7:36:96:0a:c7:82:e7: ea:97:7a:b6:8e:ec:92:02:69:c7:7b:32:9c:d8:2a:c3:0a:d6: b1:37:22:a9:ff:99:1b:b6:93:2b:be:5e:77:b4:e5:e3:04:35: 80:f5:fb:4c:16:e0:02:a5:65:83:9e:b9:ad:fc:42:f1:85:98: 81:55:13:e0:43:8d:b8:eb:99:35:5e:84:ab:7b:e2:62:52:58: 5b:12:83:e3:49:53:fa:16:0a:dc:48:77:e6:13:75:b9:63:b5: a9:4a:75:42:d5:e9:f8:c0:de:0e:0d:40:73:a6:b4:2e:12:e8: 49:f2:2e:9f:6a:0d:2d:25:58:c4:32:52:21:d1:4e:e0:2b:3c: 61:99:c0:50:ea:89:a8:97:15:65:a4:64:db:9c:23:76:2f:93: b9:d1:89:66:c4:bf:fe:ea:16:e5:ca:c5:3b:e4:2e:b4:0d:ad: 27:71:68:d9:d5:28:81:01:48:59:a1:56:c8:5a:8d:a2:f8:54: 81:f1:2b:dc:c3:7a:ab:ae:5a:07:33:15:e4:e4:18:a7:d2:41: 10:f3:90:f1:0b:95:c5:ce:be:5f:a8:a7:96:1d:4f:a7:e6:09: 91:3a:ec:bc -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt4o1ijIjwwhfpY4jv12cgNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMDU5NmNlNjA3M2U4ZWRlZGM1MTA1ZjgxNGVjOTcxOTFi NWUxZDUwHhcNMjYwMTAxMDgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTNiODMxMzMzNDljMDJlMmJlNmJjNGM4NDM5NjcxNWIwOWNiNzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7eYAdlYvv4xudQjIF8oqev+ebTKS cehom3/2tPzCCXksFFiCBhZuHDVUCQK6afd3h9VtG1kbLFNW9XNCYCeL76DMjN7K wf05EEDeQEIEPdGhpL6wX3AGRI6uCVGPK1S/yyL3/FnWUwFm/5AX8G1krHmeUTx2 /BOdWVVziK5cITpPdSvJj8Nj4AmI1WdLN/B2apJL+00GR6t3U/luR7nkaS5Irhtz RmQo+esMbye7c31UearUr+OU3gxQlM7tGRZ3MaYpeJazQMyg22nEPWDRaNWRT7OO Zed5CVeHqoWWEBm4aI4i+7PZ/u7ioIzFX1y46tHhrTEO1jRUyS4Ydl6CGwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFGo7gxMzScAuK+a8TIQ5ZxWwnLdfMB8GA1UdIwQY MBaAFFAFls5gc+jt7cUQX4FOyXGRteHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUFXV3ptQno2TzN0eFJCZmdVN0pjWkcxNGRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80YTI2MDQtNjZiNi00Y2IwLTlkMWUt MWUxNjdmYTExM2IyLzEvYWp1REV6Tkp3QzRyNXJ4TWhEbG5GYkNjdDE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi80YTI2MDQtNjZiNi00Y2IwLTlkMWUtMWUxNjdmYTExM2Iy LzEvVUFXV3ptQno2TzN0eFJCZmdVN0pjWkcxNGRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCuYyMMA4E AgACMAgDBgAqBxuAADANBgkqhkiG9w0BAQsFAAOCAQEAcOhlileQ3TI2u05fhh9w VbVBkT8uXinYO5HVdvz3NpYKx4Ln6pd6to7skgJpx3synNgqwwrWsTciqf+ZG7aT K75ed7Tl4wQ1gPX7TBbgAqVlg565rfxC8YWYgVUT4EONuOuZNV6Eq3viYlJYWxKD 40lT+hYK3Eh35hN1uWO1qUp1QtXp+MDeDg1Ac6a0LhLoSfIun2oNLSVYxDJSIdFO 4Cs8YZnAUOqJqJcVZaRk25wjdi+TudGJZsS//uoW5crFO+QutA2tJ3Fo2dUogQFI WaFWyFqNovhUgfEr3MN6q65aBzMV5OQYp9JBEPOQ8QuVxc6+X6inlh1Pp+YJkTrs vA== -----END CERTIFICATE-----Generated at Mon Jan 26 13:44:32 2026 by rpki-client