This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/aJzyOGyfhWQB9IO4cSX0XmBDOKQ.roa File: aJzyOGyfhWQB9IO4cSX0XmBDOKQ.roa (raw, json) Hash identifier: m139T8ppJncJqfpJkbGEJi56c6CDQzFMWIIoFcfUyAQ= Subject key identifier: 68:9C:F2:38:6C:9F:85:64:01:F4:83:B8:71:25:F4:5E:60:43:38:A4 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA41E176EBA455CA006F9734936667E Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/aJzyOGyfhWQB9IO4cSX0XmBDOKQ.roa Signing time: Thu 01 Jan 2026 22:18:31 +0000 ROA not before: Thu 01 Jan 2026 22:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212936 IP address blocks: 82.115.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:1e:17:6e:ba:45:5c:a0:06:f9:73:49:36:66:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=689cf2386c9f856401f483b87125f45e604338a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b8:66:29:6b:7b:50:b5:fb:6a:a2:99:64:9e: 7f:c7:7f:16:86:90:b1:b8:bd:c3:1a:30:e7:89:29: 18:0a:f3:a3:c7:b9:97:12:c9:39:74:a7:75:27:46: fb:7a:a1:41:7b:71:8e:bf:59:12:df:b4:37:46:b9: 7a:07:69:84:bc:63:0e:a3:f2:de:d8:1a:ba:e8:b5: bb:f0:85:d7:9b:8c:7b:e5:24:d2:95:e3:5d:87:45: 7e:9e:9c:72:34:50:ee:70:b9:3c:b1:37:96:d7:2a: a1:c2:d9:40:c9:a7:96:e4:25:55:1e:f8:a2:a6:49: 9c:3b:53:a3:84:22:a7:f4:83:4f:7b:6b:03:7a:54: 76:f5:4f:82:af:25:cc:a0:36:67:c5:4d:4e:4b:0d: eb:e0:4a:12:9b:38:12:d5:30:61:bd:2c:39:8c:83: 6e:02:61:0b:a0:aa:87:7a:97:79:5d:7a:64:53:36: de:0c:cf:de:33:6f:3d:38:21:9e:b0:89:70:93:06: 4a:b1:17:bb:99:ee:ea:ea:48:d7:92:5b:8e:2d:0d: c6:c0:58:1d:c8:a8:6e:22:25:ee:94:79:5a:2b:bb: f9:a7:70:ff:bb:a3:33:56:1c:fe:76:c7:b7:b2:aa: f6:14:33:9a:93:24:b1:86:02:63:05:70:e8:8b:79: 1a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9C:F2:38:6C:9F:85:64:01:F4:83:B8:71:25:F4:5E:60:43:38:A4 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/aJzyOGyfhWQB9IO4cSX0XmBDOKQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.115.221.0/24 Signature Algorithm: sha256WithRSAEncryption 93:32:9d:21:04:64:ff:28:e8:2e:d2:8c:29:79:a9:ec:62:ed: 67:fc:d4:10:7a:57:ee:9a:98:33:36:39:ff:76:69:1a:80:07: 91:ba:26:3b:46:17:fd:bf:bf:eb:68:f2:3e:ed:ea:d4:33:1a: 3c:91:a0:4a:01:f5:09:bd:cf:38:f6:8e:ac:ad:50:4f:ae:2e: 62:ef:ff:2f:fa:4f:9f:79:48:bb:21:24:56:cc:6d:09:1d:7f: e3:01:1c:18:93:7b:9c:3b:41:20:11:d2:b8:aa:05:c3:ef:84: af:20:43:d8:44:f6:60:e3:29:ed:e7:5f:77:32:a0:7e:71:6e: d6:b2:6d:8c:5b:46:8d:bd:53:a0:5a:dd:dd:97:3a:f7:7a:71: d2:f1:11:29:14:b5:1b:75:6c:00:62:d0:50:e5:1b:64:d0:07: 7b:0b:9b:8f:9e:99:d6:93:f6:34:32:35:90:5b:f2:fd:df:fa: 28:58:0c:f4:8c:b2:a8:83:aa:2b:f9:71:ba:34:a8:85:2a:ae: 5d:1b:67:cc:f2:56:6b:de:5f:8b:6d:fb:fd:4e:32:51:fd:9a: 19:f3:da:95:61:50:f3:83:56:b1:f3:1f:30:13:c6:fb:9b:94: 25:6c:bb:1a:11:fd:18:fa:aa:eb:04:f7:1a:20:1e:b3:a3:b5: c7:27:e8:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pB4XbrpFXKAG+XNJNmZ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODljZjIzODZjOWY4NTY0MDFmNDgzYjg3MTI1ZjQ1ZTYwNDMzOGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLhmKWt7ULX7aqKZZJ5/x38WhpCx uL3DGjDniSkYCvOjx7mXEsk5dKd1J0b7eqFBe3GOv1kS37Q3Rrl6B2mEvGMOo/Le 2Bq66LW78IXXm4x75STSleNdh0V+npxyNFDucLk8sTeW1yqhwtlAyaeW5CVVHvii pkmcO1OjhCKn9INPe2sDelR29U+CryXMoDZnxU1OSw3r4EoSmzgS1TBhvSw5jINu AmELoKqHepd5XXpkUzbeDM/eM289OCGesIlwkwZKsRe7me7q6kjXkluOLQ3GwFgd yKhuIiXulHlaK7v5p3D/u6MzVhz+dse3sqr2FDOakySxhgJjBXDoi3kaaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGic8jhsn4VkAfSDuHEl9F5gQzikMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvYUp6eU9HeWZoV1FCOUlPNGNTWDBYbUJET0tRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUnPdMA0G CSqGSIb3DQEBCwUAA4IBAQCTMp0hBGT/KOgu0owpeansYu1n/NQQelfumpgzNjn/ dmkagAeRuiY7Rhf9v7/raPI+7erUMxo8kaBKAfUJvc849o6srVBPri5i7/8v+k+f eUi7ISRWzG0JHX/jARwYk3ucO0EgEdK4qgXD74SvIEPYRPZg4ynt5193MqB+cW7W sm2MW0aNvVOgWt3dlzr3enHS8REpFLUbdWwAYtBQ5Rtk0Ad7C5uPnpnWk/Y0MjWQ W/L93/ooWAz0jLKog6or+XG6NKiFKq5dG2fM8lZr3l+Lbfv9TjJR/ZoZ89qVYVDz g1ax8x8wE8b7m5QlbLsaEf0Y+qrrBPcaIB6zo7XHJ+h7 -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:34 2026 by rpki-client