This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/AyxCahcSKu47yxPv4m32n1KPeFU.roa File: AyxCahcSKu47yxPv4m32n1KPeFU.roa (raw, json) Hash identifier: +WkSYCnFPhdi7837ndWHjwqAWUrNMMzWhW5p7s1rMYY= Subject key identifier: 03:2C:42:6A:17:12:2A:EE:3B:CB:13:EF:E2:6D:F6:9F:52:8F:78:55 Certificate issuer: /CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7 Certificate serial: 019B77C6F5A3A2695AD5C28505893632BEA5 Authority key identifier: 9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/AyxCahcSKu47yxPv4m32n1KPeFU.roa Signing time: Thu 01 Jan 2026 04:18:06 +0000 ROA not before: Thu 01 Jan 2026 04:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.37.37.0/24 maxlen: 24 185.37.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f5:a3:a2:69:5a:d5:c2:85:05:89:36:32:be:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7 Validity Not Before: Jan 1 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=032c426a17122aee3bcb13efe26df69f528f7855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dd:5c:b0:94:bb:00:17:56:6c:38:f4:1f:1a: ec:6d:da:70:9b:62:ff:b2:96:73:81:60:95:a1:28: 5c:48:a5:f3:ab:a4:0f:e4:a8:30:60:36:dc:ec:69: 6a:14:18:8c:66:29:37:d3:22:e7:8f:50:ae:2e:6d: 8a:ef:12:60:bc:69:d7:bd:58:f4:9d:60:bd:e8:11: 61:95:bb:a6:ca:d6:f2:fe:fc:c2:c2:5f:32:5d:bc: 45:02:3b:de:9a:3c:44:30:3e:59:3b:fe:12:ef:95: 0f:18:84:71:0d:2b:b9:cd:28:01:d2:a0:1e:75:51: cd:31:36:22:8d:68:08:e7:5e:29:5e:e9:ec:6f:7b: 90:b7:0e:67:60:4a:f7:4f:7a:36:1d:0b:37:bd:d6: a0:80:46:60:8e:2c:48:b7:3e:f5:82:4a:bc:4b:6a: ee:66:89:5f:32:08:41:06:d6:f2:8f:15:f9:24:45: fb:1b:82:32:97:87:7a:6a:e7:d6:e7:f8:49:5c:f2: c6:09:fa:93:82:2c:56:08:3e:5b:40:b3:4b:c4:30: 28:60:9f:fe:0e:e5:9e:77:38:05:f9:a1:21:d3:e4: e7:5c:72:28:09:b9:9c:20:fb:ec:e9:6c:9f:20:cd: ef:72:06:cf:d0:e0:4c:2e:6b:3b:a4:06:59:01:20: 72:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2C:42:6A:17:12:2A:EE:3B:CB:13:EF:E2:6D:F6:9F:52:8F:78:55 X509v3 Authority Key Identifier: keyid:9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/AyxCahcSKu47yxPv4m32n1KPeFU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.37.37.0/24 185.37.39.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:0c:bb:8c:b7:91:a2:57:95:ac:e0:01:94:60:97:ee:5b:5a: a8:8d:f7:18:87:93:4f:4b:d6:3c:d6:1e:21:bc:b1:77:f1:e3: d6:1e:33:14:a0:a3:54:8f:ba:af:d8:15:b8:c4:6d:55:45:79: 43:d9:de:1c:40:6e:7b:2d:76:71:bc:dd:89:c0:c2:8e:93:48: 06:0c:c9:f6:6a:8e:6c:7c:7f:a8:03:74:bd:ee:30:28:c8:1a: 5f:e2:a6:23:67:13:2e:7e:33:84:f7:cf:41:ee:d0:d3:aa:d4: c5:4f:3d:46:9e:8c:9e:cf:f9:de:c1:ff:09:0b:f8:92:1a:e8: 36:35:4d:36:77:82:e5:96:62:0b:cf:ae:01:ed:23:04:20:3f: ff:f5:ed:27:c3:7d:0b:bf:a5:cb:96:e1:15:92:47:59:6d:0d: ec:8d:f6:31:71:1f:8c:d9:67:11:c1:77:ee:df:e4:7f:4a:0a: e1:dc:7c:8c:d2:75:e9:e9:d7:83:12:86:55:75:64:9d:35:c7: 25:0d:a3:f1:99:b3:94:28:20:60:48:31:f9:09:64:b7:be:aa: 88:45:39:13:02:c8:9e:b0:99:df:a5:6e:79:36:e2:67:70:0e: 83:00:28:30:1d:b0:b8:3c:e8:24:43:d6:7b:0c:54:26:2a:0d: a4:6e:be:07 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xvWjomla1cKFBYk2Mr6lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhOGFjYTFjMjY1YzEzMjgyM2M3ODRmZGE4NDJmN2ExYTA1 YjhjYjcwHhcNMjYwMTAxMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzJjNDI2YTE3MTIyYWVlM2JjYjEzZWZlMjZkZjY5ZjUyOGY3ODU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt91csJS7ABdWbDj0Hxrsbdpwm2L/ spZzgWCVoShcSKXzq6QP5KgwYDbc7GlqFBiMZik30yLnj1CuLm2K7xJgvGnXvVj0 nWC96BFhlbumytby/vzCwl8yXbxFAjvemjxEMD5ZO/4S75UPGIRxDSu5zSgB0qAe dVHNMTYijWgI514pXunsb3uQtw5nYEr3T3o2HQs3vdaggEZgjixItz71gkq8S2ru ZolfMghBBtbyjxX5JEX7G4Iyl4d6aufW5/hJXPLGCfqTgixWCD5bQLNLxDAoYJ/+ DuWedzgF+aEh0+TnXHIoCbmcIPvs6WyfIM3vcgbP0OBMLms7pAZZASByCwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAMsQmoXEiruO8sT7+Jt9p9Sj3hVMB8GA1UdIwQY MBaAFJqKyhwmXBMoI8eE/ahC96GgW4y3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW9yS0hDWmNFeWdqeDRUOXFFTDNvYUJiakxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wMjIyZDgtOGQ4YS00NGMwLWExMWYt ZGMwYzRmMTA4M2M5LzEvQXl4Q2FoY1NLdTQ3eXhQdjRtMzJuMUtQZUZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8wMjIyZDgtOGQ4YS00NGMwLWExMWYtZGMwYzRmMTA4M2M5 LzEvbW9yS0hDWmNFeWdqeDRUOXFFTDNvYUJiakxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuSUlAwQA uSUnMA0GCSqGSIb3DQEBCwUAA4IBAQA7DLuMt5GiV5Ws4AGUYJfuW1qojfcYh5NP S9Y81h4hvLF38ePWHjMUoKNUj7qv2BW4xG1VRXlD2d4cQG57LXZxvN2JwMKOk0gG DMn2ao5sfH+oA3S97jAoyBpf4qYjZxMufjOE989B7tDTqtTFTz1Gnoyez/newf8J C/iSGug2NU02d4LllmILz64B7SMEID//9e0nw30Lv6XLluEVkkdZbQ3sjfYxcR+M 2WcRwXfu3+R/Sgrh3HyM0nXp6deDEoZVdWSdNcclDaPxmbOUKCBgSDH5CWS3vqqI RTkTAsiesJnfpW55NuJncA6DACgwHbC4POgkQ9Z7DFQmKg2kbr4H -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:13 2026 by rpki-client