This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/avaEnMlL7981ZoHlCmFBVvkLBCM.roa File: avaEnMlL7981ZoHlCmFBVvkLBCM.roa (raw, json) Hash identifier: 62norVZ5aOhRAssdJbDmNAm3FE+gQIMFJ2pokt5w/9I= Subject key identifier: 6A:F6:84:9C:C9:4B:EF:DF:35:66:81:E5:0A:61:41:56:F9:0B:04:23 Certificate issuer: /CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74 Certificate serial: 019B77C6914052DDEB03A8C089339D41428E Authority key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/avaEnMlL7981ZoHlCmFBVvkLBCM.roa Signing time: Thu 01 Jan 2026 04:17:40 +0000 ROA not before: Thu 01 Jan 2026 04:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 91.195.160.0/23 maxlen: 23 91.198.151.0/24 maxlen: 24 91.236.83.0/24 maxlen: 24 194.0.250.0/24 maxlen: 24 194.30.188.0/24 maxlen: 24 217.102.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:91:40:52:dd:eb:03:a8:c0:89:33:9d:41:42:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74 Validity Not Before: Jan 1 04:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6af6849cc94befdf356681e50a614156f90b0423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:77:f9:94:cf:dc:9d:d5:b9:a6:99:37:0a:8f: 59:d2:e8:8f:c2:cb:0e:1e:f2:0c:8e:04:71:55:ec: f6:67:bf:48:15:c6:a8:99:65:1d:b2:a6:2f:76:49: 90:61:12:7d:8e:dd:30:00:41:01:4b:27:7b:51:75: a0:ad:99:0d:5b:98:e5:91:07:8a:54:cc:ba:46:c9: de:da:97:eb:76:61:34:a1:58:71:c5:ef:55:3f:b8: 08:b5:21:5d:49:66:60:e5:c4:fc:a8:71:a6:cd:5a: 43:ba:bf:f2:d7:79:ab:ef:ea:87:4d:10:ce:f3:f1: 3d:ef:bb:28:7f:33:31:61:57:e4:93:74:73:3c:7c: a1:2f:90:78:7a:8d:f2:46:8b:67:95:0e:7a:f2:70: 57:ff:e8:1b:fe:c2:e9:65:6f:be:4d:74:96:6a:70: b1:6a:8e:14:d7:07:fa:70:e7:2d:3d:73:b0:41:ea: 33:3b:36:d7:64:7d:a6:60:08:d6:21:7e:24:0f:30: 97:39:b0:ca:77:e0:1c:b0:76:91:4e:87:64:e7:da: d2:26:3e:f8:e3:d4:a4:24:84:a7:09:df:bb:8e:f6: b5:b3:66:a9:9b:e7:3c:12:49:1e:3d:bd:68:03:23: ab:5c:28:91:f3:0b:39:f8:9e:94:f5:b1:37:d8:4d: 7a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F6:84:9C:C9:4B:EF:DF:35:66:81:E5:0A:61:41:56:F9:0B:04:23 X509v3 Authority Key Identifier: keyid:3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/avaEnMlL7981ZoHlCmFBVvkLBCM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.160.0/23 91.198.151.0/24 91.236.83.0/24 194.0.250.0/24 194.30.188.0/24 217.102.232.0/21 Signature Algorithm: sha256WithRSAEncryption 10:78:cd:a6:c7:95:5f:50:e7:0b:4d:3c:af:1a:2e:05:6c:a9: 29:35:c1:01:9c:96:ac:e7:6a:d0:61:22:3d:f9:ce:1a:4c:b9: c8:f2:df:da:cd:56:66:29:e6:36:d9:86:6b:84:07:54:62:d3: 08:e0:39:07:fc:3d:a4:8f:02:7f:59:9f:5a:86:6c:0d:6a:52: 48:b6:40:cb:10:42:d4:fe:e1:b7:8d:50:a9:76:df:0d:37:66: f4:d3:3c:59:06:7e:d5:b0:c6:75:65:a6:d7:7a:fc:65:f9:1d: 10:05:46:92:e3:cc:0c:d1:bf:e2:37:71:f1:e8:ab:1f:36:67: 35:7e:f1:cc:8c:fc:e2:17:46:f2:23:57:d2:0f:fe:18:8d:9c: 67:4a:26:6a:c1:7b:39:af:de:f1:c6:19:d6:9a:d6:2b:75:3c: be:87:72:09:ba:21:2f:91:a0:8a:75:53:c7:3b:7e:9b:93:a6: b7:c9:53:58:fc:21:9b:40:bd:82:d1:2b:91:66:70:d6:5c:ad: 9b:6f:e6:74:b6:91:12:ca:56:0c:51:49:ab:8d:df:be:3d:8c: a8:15:79:3c:cd:98:05:14:fc:de:06:ee:db:b1:cf:4b:71:7f: f7:ec:10:de:60:c5:fa:a0:07:bd:87:e1:ff:f0:d3:ff:0d:40: 47:56:bd:94 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt3xpFAUt3rA6jAiTOdQUKOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZGUyY2Q1MjE1ZTkzYmZhMGNhNmRmOGIyYzFmNWVkMmM5 NGFmNzQwHhcNMjYwMTAxMDQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWY2ODQ5Y2M5NGJlZmRmMzU2NjgxZTUwYTYxNDE1NmY5MGIwNDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknf5lM/cndW5ppk3Co9Z0uiPwssO HvIMjgRxVez2Z79IFcaomWUdsqYvdkmQYRJ9jt0wAEEBSyd7UXWgrZkNW5jlkQeK VMy6Rsne2pfrdmE0oVhxxe9VP7gItSFdSWZg5cT8qHGmzVpDur/y13mr7+qHTRDO 8/E977sofzMxYVfkk3RzPHyhL5B4eo3yRotnlQ568nBX/+gb/sLpZW++TXSWanCx ao4U1wf6cOctPXOwQeozOzbXZH2mYAjWIX4kDzCXObDKd+AcsHaRTodk59rSJj74 49SkJISnCd+7jva1s2apm+c8EkkePb1oAyOrXCiR8ws5+J6U9bE32E16kwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFGr2hJzJS+/fNWaB5QphQVb5CwQjMB8GA1UdIwQY MBaAFDveLNUhXpO/oMpt+LLB9e0slK90MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzk0czFTRmVrNy1neW0zNHNzSDE3U3lVcjNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jNTNhM2UtZjkwZC00NzQyLTg0ZmIt ZGIzMTlhMzFiZGY3LzEvYXZhRW5NbEw3OTgxWm9IbENtRkJWdmtMQkNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9jNTNhM2UtZjkwZC00NzQyLTg0ZmItZGIzMTlhMzFiZGY3 LzEvTzk0czFTRmVrNy1neW0zNHNzSDE3U3lVcjNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBW8OgAwQA W8aXAwQAW+xTAwQAwgD6AwQAwh68AwQD2WboMA0GCSqGSIb3DQEBCwUAA4IBAQAQ eM2mx5VfUOcLTTyvGi4FbKkpNcEBnJas52rQYSI9+c4aTLnI8t/azVZmKeY22YZr hAdUYtMI4DkH/D2kjwJ/WZ9ahmwNalJItkDLEELU/uG3jVCpdt8NN2b00zxZBn7V sMZ1ZabXevxl+R0QBUaS48wM0b/iN3Hx6KsfNmc1fvHMjPziF0byI1fSD/4YjZxn SiZqwXs5r97xxhnWmtYrdTy+h3IJuiEvkaCKdVPHO36bk6a3yVNY/CGbQL2C0SuR ZnDWXK2bb+Z0tpESylYMUUmrjd++PYyoFXk8zZgFFPzeBu7bsc9LcX/37BDeYMX6 oAe9h+H/8NP/DUBHVr2U -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:50 2026 by rpki-client