This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/aw0kaP6tIT_mdV8AcbxSRrcepIA.roa File: aw0kaP6tIT_mdV8AcbxSRrcepIA.roa (raw, json) Hash identifier: jPlLZlAVe0p14TNSjMBImeiv89vVJK+QB0jxm40jndI= Subject key identifier: 6B:0D:24:68:FE:AD:21:3F:E6:75:5F:00:71:BC:52:46:B7:1E:A4:80 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA3FDE38D91CE65CBFB5ED0D9B8D62A Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/aw0kaP6tIT_mdV8AcbxSRrcepIA.roa Signing time: Thu 01 Jan 2026 22:18:23 +0000 ROA not before: Thu 01 Jan 2026 22:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43278 IP address blocks: 185.17.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:fd:e3:8d:91:ce:65:cb:fb:5e:d0:d9:b8:d6:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b0d2468fead213fe6755f0071bc5246b71ea480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ca:b2:de:88:c4:0a:c5:df:04:b5:66:db:b4: ac:ba:44:96:ca:90:51:6f:c6:7a:77:21:fb:6e:46: ab:7f:0d:95:9a:81:6b:7e:9a:62:45:d4:3f:a6:e7: 17:a7:55:38:10:a8:69:8f:07:6d:c0:ad:00:94:4b: 06:90:dd:3a:6d:e7:82:c7:b9:e0:76:5d:45:5c:2d: 8f:99:bc:99:65:83:ff:96:9f:4e:bb:e4:d8:a7:a1: c8:1f:9f:68:97:f8:e9:17:c5:e5:7a:68:25:19:2d: 6f:26:33:f3:10:5a:9c:55:de:a2:b7:d3:ef:8a:2f: 02:4f:de:39:d5:7c:f3:b0:72:fd:cb:6e:68:1f:4a: 94:d4:59:10:45:7f:33:4d:e7:58:71:59:e2:dc:78: fb:df:3a:b8:29:36:a4:ef:e9:e6:bc:db:47:e6:e5: 82:ac:3d:1b:bf:45:39:3a:b1:b9:f3:13:66:cd:85: b9:2e:ac:96:ce:94:b7:d4:9a:03:93:7c:12:9f:8e: 79:4f:b3:fc:51:74:de:65:fe:86:26:dd:83:93:e8: be:e2:c3:d8:cc:ff:43:4c:c6:a3:af:c5:4e:81:9f: 4b:17:02:75:d2:2b:cf:3b:49:33:ae:ff:1e:b7:75: 5b:11:56:0c:98:34:6e:89:15:ef:eb:9c:b1:bb:51: e7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:0D:24:68:FE:AD:21:3F:E6:75:5F:00:71:BC:52:46:B7:1E:A4:80 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/aw0kaP6tIT_mdV8AcbxSRrcepIA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.17.0.0/24 Signature Algorithm: sha256WithRSAEncryption c6:ee:dd:af:1c:93:32:91:ed:d0:2f:01:61:79:07:02:64:f3: 0b:ae:72:a0:39:46:8d:73:a0:40:6b:67:c6:3b:fc:31:25:7d: 62:43:0d:6f:b3:c3:d5:95:1d:80:57:bc:d7:63:26:35:f8:ff: 2e:fd:81:3b:51:f2:4b:01:0c:5d:a8:91:d9:b8:b3:d7:4b:f6: 51:8d:49:db:fd:7e:5f:03:67:f2:0f:0d:1a:d8:1a:87:4a:c4: 04:95:f3:90:ed:9c:82:4f:cf:ed:ca:b1:b7:8e:9a:ea:5e:25: 8c:d0:5d:5c:66:39:40:76:fc:5d:b1:3f:96:e3:b0:2f:36:49: 15:db:86:79:d6:3c:92:07:66:25:ec:0f:d2:bc:e7:e8:3b:f7: e8:6f:ac:1d:17:f9:ad:96:43:1a:57:f2:83:0d:73:5f:8c:fd: 32:5c:49:e3:41:81:7f:bd:21:13:b8:a0:d4:a9:ef:f9:f9:50: f5:11:74:87:95:cd:85:85:97:29:a1:c9:48:74:18:b1:f0:e5: d8:d4:24:15:48:da:0c:d4:c5:89:40:8c:42:b4:2a:ad:2e:10: 1c:4c:d7:fa:60:0d:ef:df:71:1c:55:8b:f4:07:20:88:13:f4: 56:9c:7c:09:fa:0d:59:15:22:c0:a2:aa:7b:db:68:af:64:12: 52:16:17:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o/3jjZHOZcv7XtDZuNYqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjBkMjQ2OGZlYWQyMTNmZTY3NTVmMDA3MWJjNTI0NmI3MWVhNDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8qy3ojECsXfBLVm27SsukSWypBR b8Z6dyH7bkarfw2VmoFrfppiRdQ/pucXp1U4EKhpjwdtwK0AlEsGkN06beeCx7ng dl1FXC2PmbyZZYP/lp9Ou+TYp6HIH59ol/jpF8XlemglGS1vJjPzEFqcVd6it9Pv ii8CT9451XzzsHL9y25oH0qU1FkQRX8zTedYcVni3Hj73zq4KTak7+nmvNtH5uWC rD0bv0U5OrG58xNmzYW5LqyWzpS31JoDk3wSn455T7P8UXTeZf6GJt2Dk+i+4sPY zP9DTMajr8VOgZ9LFwJ10ivPO0kzrv8et3VbEVYMmDRuiRXv65yxu1HnwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGsNJGj+rSE/5nVfAHG8Uka3HqSAMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvYXcwa2FQNnRJVF9tZFY4QWNieFNScmNlcElBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuREAMA0G CSqGSIb3DQEBCwUAA4IBAQDG7t2vHJMyke3QLwFheQcCZPMLrnKgOUaNc6BAa2fG O/wxJX1iQw1vs8PVlR2AV7zXYyY1+P8u/YE7UfJLAQxdqJHZuLPXS/ZRjUnb/X5f A2fyDw0a2BqHSsQElfOQ7ZyCT8/tyrG3jprqXiWM0F1cZjlAdvxdsT+W47AvNkkV 24Z51jySB2Yl7A/SvOfoO/fob6wdF/mtlkMaV/KDDXNfjP0yXEnjQYF/vSETuKDU qe/5+VD1EXSHlc2FhZcpoclIdBix8OXY1CQVSNoM1MWJQIxCtCqtLhAcTNf6YA3v 33EcVYv0ByCIE/RWnHwJ+g1ZFSLAoqp722ivZBJSFhdS -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:11 2026 by rpki-client