This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/Awu7K6uBqTyYqPynAIVRK-5kPm4.roa File: Awu7K6uBqTyYqPynAIVRK-5kPm4.roa (raw, json) Hash identifier: 7TiIWybHXRnbv5hE65euWBGO02DixC/YO8jfz7Nss8I= Subject key identifier: 03:0B:BB:2B:AB:81:A9:3C:98:A8:FC:A7:00:85:51:2B:EE:64:3E:6E Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d Certificate serial: 019B7AC826F16D4D85F684C5F94BD93EAF17 Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/Awu7K6uBqTyYqPynAIVRK-5kPm4.roa Signing time: Thu 01 Jan 2026 18:18:16 +0000 ROA not before: Thu 01 Jan 2026 18:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 86.38.191.0/24 maxlen: 24 89.117.212.0/24 maxlen: 24 89.117.214.0/24 maxlen: 24 89.117.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:26:f1:6d:4d:85:f6:84:c5:f9:4b:d9:3e:af:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d Validity Not Before: Jan 1 18:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=030bbb2bab81a93c98a8fca70085512bee643e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ff:25:4a:2e:09:0c:19:2d:2e:32:b3:58:c1: d9:2e:14:7e:29:b0:71:c1:60:40:63:28:9e:e5:4a: f1:79:a8:2e:f3:2f:50:7b:ac:db:99:33:55:13:0a: 89:09:d9:6a:6f:f2:ef:25:77:ba:52:d7:bb:42:f5: 7a:4d:41:b3:0c:87:65:00:78:37:66:5d:8e:ec:f1: 1f:03:78:42:2d:30:3f:c2:3d:34:ef:a5:a5:7a:2d: 9f:31:27:1d:02:0d:0c:7f:0a:cc:0d:6d:f6:7c:b2: f1:5e:15:3f:6d:3e:8a:ef:bf:02:6a:87:a9:d4:9a: 3b:74:8e:d8:c2:c3:d9:ac:bc:7d:98:dc:c5:2e:67: 2c:91:fd:b0:84:80:3d:18:09:4b:10:69:f4:e9:07: 6c:a0:14:43:fd:96:41:a0:1d:ef:9b:d9:39:83:2f: 91:43:0f:3f:fc:ad:d4:59:59:e3:95:f5:8d:29:07: 20:2d:32:32:1e:f9:57:0c:5c:6b:5f:e4:fa:d0:67: 65:3f:3d:4c:58:63:29:35:76:5c:6b:52:b8:f7:22: 79:30:95:ae:97:5d:6b:f9:c3:a4:4f:2b:1a:d1:0c: cd:64:ce:19:36:d8:4b:a3:46:3e:6a:88:20:70:f3: 6f:3b:39:64:be:43:c3:89:8e:f5:ce:8b:e9:cd:7e: b7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0B:BB:2B:AB:81:A9:3C:98:A8:FC:A7:00:85:51:2B:EE:64:3E:6E X509v3 Authority Key Identifier: keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/Awu7K6uBqTyYqPynAIVRK-5kPm4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.191.0/24 89.117.212.0/24 89.117.214.0/24 89.117.251.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:38:17:27:8e:f9:9c:46:36:d1:3f:e5:1f:3b:4f:ce:2a:2b: fe:66:59:bc:e4:83:ce:3a:cf:18:8b:6d:b0:b9:d5:11:29:56: 63:4f:eb:35:d5:27:7b:54:d4:bf:87:fa:20:0d:22:0e:75:28: bc:68:bb:22:5c:2d:e1:45:d3:ce:57:bf:fc:ca:0e:a9:11:03: 4b:67:42:ac:fb:3e:d7:74:7b:3d:c6:62:57:bc:51:7d:a4:5a: d8:87:63:fe:97:7a:70:a0:00:3b:5c:f3:4a:86:54:46:51:0e: 99:90:9e:04:f3:8f:7b:00:a2:36:02:54:ff:e5:07:4e:c3:1a: ce:12:9c:33:d6:6e:19:d6:39:c8:07:a4:3f:1c:9a:3e:f6:3e: ac:3e:2d:95:69:25:87:c5:60:af:b9:51:b5:b4:42:b8:1d:ca: 22:6a:18:e7:bf:97:c3:07:4d:7c:fd:65:77:ca:3e:5b:bf:23: b0:59:b5:0e:d6:15:7b:c0:62:76:63:bb:c0:ef:aa:3f:d2:af: 58:b9:a9:6a:5c:ef:13:99:35:f9:7f:c9:4f:69:b5:4d:78:ca: b9:b0:42:ba:d0:f4:b5:5c:dc:70:af:87:e8:f5:e1:2b:c6:52: f3:d2:0f:2c:4f:aa:ab:03:3a:ff:e6:93:62:3e:33:7f:c8:de: 52:70:71:5c -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6yCbxbU2F9oTF+UvZPq8XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3 MTE4MGQwHhcNMjYwMTAxMTgxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzBiYmIyYmFiODFhOTNjOThhOGZjYTcwMDg1NTEyYmVlNjQzZTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyv8lSi4JDBktLjKzWMHZLhR+KbBx wWBAYyie5Urxeagu8y9Qe6zbmTNVEwqJCdlqb/LvJXe6Ute7QvV6TUGzDIdlAHg3 Zl2O7PEfA3hCLTA/wj0076Wlei2fMScdAg0MfwrMDW32fLLxXhU/bT6K778Caoep 1Jo7dI7YwsPZrLx9mNzFLmcskf2whIA9GAlLEGn06QdsoBRD/ZZBoB3vm9k5gy+R Qw8//K3UWVnjlfWNKQcgLTIyHvlXDFxrX+T60GdlPz1MWGMpNXZca1K49yJ5MJWu l11r+cOkTysa0QzNZM4ZNthLo0Y+aoggcPNvOzlkvkPDiY71zovpzX63+QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFAMLuyurgak8mKj8pwCFUSvuZD5uMB8GA1UdIwQY MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt MDQ2ODA0MjQ4NmRjLzEvQXd1N0s2dUJxVHlZcVB5bkFJVlJLLTVrUG00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVia/AwQA WXXUAwQAWXXWAwQAWXX7MA0GCSqGSIb3DQEBCwUAA4IBAQAbOBcnjvmcRjbRP+Uf O0/OKiv+Zlm85IPOOs8Yi22wudURKVZjT+s11Sd7VNS/h/ogDSIOdSi8aLsiXC3h RdPOV7/8yg6pEQNLZ0Ks+z7XdHs9xmJXvFF9pFrYh2P+l3pwoAA7XPNKhlRGUQ6Z kJ4E8497AKI2AlT/5QdOwxrOEpwz1m4Z1jnIB6Q/HJo+9j6sPi2VaSWHxWCvuVG1 tEK4Hcoiahjnv5fDB018/WV3yj5bvyOwWbUO1hV7wGJ2Y7vA76o/0q9YualqXO8T mTX5f8lPabVNeMq5sEK60PS1XNxwr4fo9eErxlLz0g8sT6qrAzr/5pNiPjN/yN5S cHFc -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:08 2026 by rpki-client