This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/ayNw208-0jdHTmZbn4HX-2MZet0.roa File: ayNw208-0jdHTmZbn4HX-2MZet0.roa (raw, json) Hash identifier: tNFhBG2uENbbChNJjGZGwhvIYrpJIH7cPKL/gvb0Bd4= Subject key identifier: 6B:23:70:DB:4F:3E:D2:37:47:4E:66:5B:9F:81:D7:FB:63:19:7A:DD Certificate issuer: /CN=1062bc36512658a0f7d3f96bc1d8e67d9fd4918b Certificate serial: 019B7C127AB1E11106FE16D8FC3AF8E5E2FE Authority key identifier: 10:62:BC:36:51:26:58:A0:F7:D3:F9:6B:C1:D8:E6:7D:9F:D4:91:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/ayNw208-0jdHTmZbn4HX-2MZet0.roa Signing time: Fri 02 Jan 2026 00:19:04 +0000 ROA not before: Fri 02 Jan 2026 00:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 195.245.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.crl rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:7a:b1:e1:11:06:fe:16:d8:fc:3a:f8:e5:e2:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1062bc36512658a0f7d3f96bc1d8e67d9fd4918b Validity Not Before: Jan 2 00:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b2370db4f3ed237474e665b9f81d7fb63197add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e9:0a:4b:dc:4c:5c:90:b4:32:ef:08:e5:aa: af:9d:38:33:83:60:43:92:17:93:f5:26:8e:47:0a: 09:df:af:f3:3a:3d:9f:6a:40:74:84:0d:f0:de:24: 79:3e:0e:d2:c5:a8:4f:31:42:d3:57:c6:6d:48:c2: e8:36:9b:a3:2c:08:10:f5:e6:60:b7:88:07:99:40: f1:a2:58:be:aa:49:56:d3:bc:f7:c3:68:79:c4:e6: 73:50:08:9c:e6:82:c0:7a:ae:fc:9c:d2:0a:d9:9d: 8e:7e:a4:6b:60:1c:52:02:8e:70:e0:cb:e9:f3:dd: 36:3e:6e:54:80:1f:cf:a2:11:ef:84:c1:6d:28:de: dd:88:32:a6:6a:fc:67:02:cc:54:cc:73:03:a0:ff: bc:4e:aa:05:60:4a:ec:64:85:ef:1c:0a:8f:95:e4: b0:21:ff:7f:ce:3c:95:15:5c:33:fc:c1:0c:90:98: d2:df:7e:d2:f1:51:ff:8c:02:5d:25:ad:7a:36:17: 25:70:66:52:83:24:2e:72:0c:c3:03:94:bb:4e:35: a8:f9:ff:49:f9:e1:e1:99:ed:5a:52:29:9b:80:34: 57:3a:15:b2:aa:d3:12:34:df:f9:b7:0d:e8:d0:4c: 39:8c:93:fc:98:5e:c7:0c:5e:ff:61:7d:5a:12:31: 93:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:23:70:DB:4F:3E:D2:37:47:4E:66:5B:9F:81:D7:FB:63:19:7A:DD X509v3 Authority Key Identifier: keyid:10:62:BC:36:51:26:58:A0:F7:D3:F9:6B:C1:D8:E6:7D:9F:D4:91:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/ayNw208-0jdHTmZbn4HX-2MZet0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.245.86.0/23 Signature Algorithm: sha256WithRSAEncryption a8:d9:6a:d5:22:2c:dc:f0:bf:3a:20:9e:f6:1b:93:19:27:89: 47:5a:cd:1a:65:a7:1d:40:4c:f8:04:df:14:f4:06:24:68:44: 18:a4:d6:c6:d9:b7:1f:d4:09:bb:27:1f:62:e8:68:fd:bb:85: 2b:78:aa:29:45:4f:cc:09:c5:0f:0d:cf:fe:09:35:20:a7:2c: bb:6b:58:0f:cf:3e:bc:d1:59:a5:cc:72:b3:08:cf:76:e4:06: 38:1c:df:7e:aa:8f:e2:bc:16:0f:f0:17:38:df:22:ec:d0:5b: 71:8a:38:83:e3:ad:14:93:0b:05:07:e8:66:22:64:bf:ff:52: 45:14:30:7d:72:dd:10:76:06:63:5e:11:32:1d:10:77:bc:db: bd:9c:c2:6b:e3:fd:93:f1:e2:e6:63:54:4d:a1:41:59:f9:41: aa:bf:e2:9c:45:2f:b8:66:2e:b5:cd:3c:67:8f:d3:77:ab:4b: 90:1c:c2:68:52:58:3f:a6:8b:c8:e3:50:22:1e:75:3e:a8:c6: dd:84:2d:37:24:51:9d:4a:a8:19:bc:15:f7:07:f9:b9:44:75: 4c:15:bc:42:90:50:2a:d4:cc:a3:e3:88:67:1d:6a:f8:6b:92: f1:28:89:89:54:ac:4b:68:3d:90:77:ed:be:d0:16:47:30:64: 52:a8:e3:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Enqx4REG/hbY/Dr45eL+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNjJiYzM2NTEyNjU4YTBmN2QzZjk2YmMxZDhlNjdkOWZk NDkxOGIwHhcNMjYwMTAyMDAxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjIzNzBkYjRmM2VkMjM3NDc0ZTY2NWI5ZjgxZDdmYjYzMTk3YWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoekKS9xMXJC0Mu8I5aqvnTgzg2BD kheT9SaORwoJ36/zOj2fakB0hA3w3iR5Pg7SxahPMULTV8ZtSMLoNpujLAgQ9eZg t4gHmUDxoli+qklW07z3w2h5xOZzUAic5oLAeq78nNIK2Z2OfqRrYBxSAo5w4Mvp 8902Pm5UgB/PohHvhMFtKN7diDKmavxnAsxUzHMDoP+8TqoFYErsZIXvHAqPleSw If9/zjyVFVwz/MEMkJjS337S8VH/jAJdJa16NhclcGZSgyQucgzDA5S7TjWo+f9J +eHhme1aUimbgDRXOhWyqtMSNN/5tw3o0Ew5jJP8mF7HDF7/YX1aEjGT2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGsjcNtPPtI3R05mW5+B1/tjGXrdMB8GA1UdIwQY MBaAFBBivDZRJlig99P5a8HY5n2f1JGLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUdLOE5sRW1XS0QzMF9scndkam1mWl9Va1lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82NjllYmYtZWU3Zi00ZWI3LTg0ODYt OTVhZDkyYWM4Njk4LzEvYXlOdzIwOC0wamRIVG1aYm40SFgtMk1aZXQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC82NjllYmYtZWU3Zi00ZWI3LTg0ODYtOTVhZDkyYWM4Njk4 LzEvRUdLOE5sRW1XS0QzMF9scndkam1mWl9Va1lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/VWMA0G CSqGSIb3DQEBCwUAA4IBAQCo2WrVIizc8L86IJ72G5MZJ4lHWs0aZacdQEz4BN8U 9AYkaEQYpNbG2bcf1Am7Jx9i6Gj9u4UreKopRU/MCcUPDc/+CTUgpyy7a1gPzz68 0VmlzHKzCM925AY4HN9+qo/ivBYP8Bc43yLs0FtxijiD460UkwsFB+hmImS//1JF FDB9ct0QdgZjXhEyHRB3vNu9nMJr4/2T8eLmY1RNoUFZ+UGqv+KcRS+4Zi61zTxn j9N3q0uQHMJoUlg/povI41AiHnU+qMbdhC03JFGdSqgZvBX3B/m5RHVMFbxCkFAq 1Myj44hnHWr4a5LxKImJVKxLaD2Qd+2+0BZHMGRSqOOr -----END CERTIFICATE-----Generated at Fri Jan 9 06:21:10 2026 by rpki-client