This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/AW17FInZXbbfzlPfQfag3e5H2tA.roa File: AW17FInZXbbfzlPfQfag3e5H2tA.roa (raw, json) Hash identifier: dmQitLz8NUYQglDkSo+N/IQ9Ntp7x8tsHi+hjRpZyNs= Subject key identifier: 01:6D:7B:14:89:D9:5D:B6:DF:CE:53:DF:41:F6:A0:DD:EE:47:DA:D0 Certificate issuer: /CN=10fe683b1d7e47b7c7eda15501627b70920853a1 Certificate serial: 019B76EAFDBE399B3A6676651A493D5CAF0E Authority key identifier: 10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/AW17FInZXbbfzlPfQfag3e5H2tA.roa Signing time: Thu 01 Jan 2026 00:17:50 +0000 ROA not before: Thu 01 Jan 2026 00:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 158.94.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:fd:be:39:9b:3a:66:76:65:1a:49:3d:5c:af:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10fe683b1d7e47b7c7eda15501627b70920853a1 Validity Not Before: Jan 1 00:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=016d7b1489d95db6dfce53df41f6a0ddee47dad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:81:8c:d5:1a:25:68:d4:9f:f4:44:d5:67:8e: 16:87:d1:df:05:b8:c7:41:3e:3a:f0:3d:60:6b:38: 05:35:98:20:b2:cd:4b:69:22:27:56:91:e1:4d:de: 30:7d:42:95:cb:8b:2c:a2:85:40:33:98:74:a3:59: 5d:1b:81:b9:b5:0a:46:54:81:bf:c4:82:94:d0:51: 4d:cb:8f:3b:a9:2f:ca:44:75:fd:27:38:3d:aa:47: 64:42:6c:b5:4b:d9:1a:05:69:5f:40:0e:7a:07:57: 9d:d2:13:ea:96:e2:ce:28:cf:c5:72:89:9c:3a:27: b4:3d:e0:cb:ff:d1:2a:c6:a6:f7:46:5d:97:2a:ec: 8d:ee:e0:60:c7:ad:b3:91:59:dc:c4:b5:18:3b:37: 49:a7:be:23:68:cb:02:1a:e3:d0:54:32:4a:fc:e4: 3c:49:4b:4f:8c:fa:75:7b:78:7e:83:a4:8f:23:75: 96:14:e1:f5:53:af:e1:6d:1a:2c:25:34:63:87:d4: 1e:b0:be:d6:47:9c:69:ae:df:2c:0c:ff:d4:53:14: e9:4b:cc:0a:7d:86:39:11:07:e1:78:4a:bb:21:fe: b4:ac:8d:a0:b7:7e:da:01:ae:d5:1c:23:f0:2d:cf: 5d:8c:e7:d4:24:bd:79:f9:f6:d7:b4:c6:18:03:08: 7d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:6D:7B:14:89:D9:5D:B6:DF:CE:53:DF:41:F6:A0:DD:EE:47:DA:D0 X509v3 Authority Key Identifier: keyid:10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/AW17FInZXbbfzlPfQfag3e5H2tA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.94.32.0/20 Signature Algorithm: sha256WithRSAEncryption b1:8e:de:38:46:51:eb:82:51:dc:9b:50:62:58:5b:d9:23:7e: 19:04:02:c7:7c:04:c4:04:57:a4:0f:e4:23:03:70:cc:13:b7: 3f:e9:bb:77:c1:18:3c:8b:77:a5:74:e8:3d:58:f2:e1:14:16: e2:4f:d7:31:9b:ff:91:98:b8:01:d1:88:75:44:c0:5a:bc:ac: 14:b7:b0:68:2a:a8:17:ba:25:1a:d9:8a:70:b3:36:89:47:27: 13:f9:a8:ae:7c:df:93:02:d2:20:d3:ef:5a:26:49:80:25:67: b2:53:d2:04:b3:9f:aa:8a:47:4f:1a:71:71:2a:e3:c7:0d:6f: a4:ff:54:5c:62:ca:4a:08:67:4b:4a:51:95:bf:97:48:21:6a: 51:e6:20:72:4c:a9:0f:be:fa:f4:1f:c3:4a:81:3c:0f:de:ff: b0:41:d6:e6:d3:7b:b2:c6:05:b0:f2:f0:29:d2:b6:5b:d9:5e: cd:35:35:16:81:92:db:f0:86:b7:61:a8:41:5b:1d:78:d7:e7: 96:44:fa:84:95:cf:a0:c1:0b:81:8e:af:46:9a:ba:f0:a7:b8: 67:eb:ea:65:17:da:88:c0:3d:e6:74:e9:7d:23:e0:48:f5:e9: a4:a8:0a:85:62:3c:72:9e:e8:74:36:59:c0:ac:fe:c8:4f:5c: c2:f3:62:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26v2+OZs6ZnZlGkk9XK8OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZmU2ODNiMWQ3ZTQ3YjdjN2VkYTE1NTAxNjI3YjcwOTIw ODUzYTEwHhcNMjYwMTAxMDAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTZkN2IxNDg5ZDk1ZGI2ZGZjZTUzZGY0MWY2YTBkZGVlNDdkYWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4GM1RolaNSf9ETVZ44Wh9HfBbjH QT468D1gazgFNZggss1LaSInVpHhTd4wfUKVy4ssooVAM5h0o1ldG4G5tQpGVIG/ xIKU0FFNy487qS/KRHX9Jzg9qkdkQmy1S9kaBWlfQA56B1ed0hPqluLOKM/Fcomc Oie0PeDL/9Eqxqb3Rl2XKuyN7uBgx62zkVncxLUYOzdJp74jaMsCGuPQVDJK/OQ8 SUtPjPp1e3h+g6SPI3WWFOH1U6/hbRosJTRjh9QesL7WR5xprt8sDP/UUxTpS8wK fYY5EQfheEq7If60rI2gt37aAa7VHCPwLc9djOfUJL15+fbXtMYYAwh9OQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAFtexSJ2V22385T30H2oN3uR9rQMB8GA1UdIwQY MBaAFBD+aDsdfke3x+2hVQFie3CSCFOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVA1b094MS1SN2ZIN2FGVkFXSjdjSklJVTZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kZTg0YTAtN2I0Yi00NDVkLWEyMTIt YzRiZWZiMjU2MjJjLzEvQVcxN0ZJblpYYmJmemxQZlFmYWczZTVIMnRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9kZTg0YTAtN2I0Yi00NDVkLWEyMTItYzRiZWZiMjU2MjJj LzEvRVA1b094MS1SN2ZIN2FGVkFXSjdjSklJVTZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnl4gMA0G CSqGSIb3DQEBCwUAA4IBAQCxjt44RlHrglHcm1BiWFvZI34ZBALHfATEBFekD+Qj A3DME7c/6bt3wRg8i3eldOg9WPLhFBbiT9cxm/+RmLgB0Yh1RMBavKwUt7BoKqgX uiUa2YpwszaJRycT+aiufN+TAtIg0+9aJkmAJWeyU9IEs5+qikdPGnFxKuPHDW+k /1RcYspKCGdLSlGVv5dIIWpR5iByTKkPvvr0H8NKgTwP3v+wQdbm03uyxgWw8vAp 0rZb2V7NNTUWgZLb8Ia3YahBWx141+eWRPqElc+gwQuBjq9Gmrrwp7hn6+plF9qI wD3mdOl9I+BI9emkqAqFYjxynuh0NlnArP7IT1zC82Ky -----END CERTIFICATE-----Generated at Mon Jan 19 11:47:16 2026 by rpki-client