This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/atxYNSY6Yx-7ElIL_eqsGGTZriY.roa File: atxYNSY6Yx-7ElIL_eqsGGTZriY.roa (raw, json) Hash identifier: sK5wSL3tcZLQ9cvUwLxP7MoUiyiicJ+mjfpcgXnlWkc= Subject key identifier: 6A:DC:58:35:26:3A:63:1F:BB:12:52:0B:FD:EA:AC:18:64:D9:AE:26 Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 019B7AC8E131EFD8352D447186E6CB68CF93 Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/atxYNSY6Yx-7ElIL_eqsGGTZriY.roa Signing time: Thu 01 Jan 2026 18:19:03 +0000 ROA not before: Thu 01 Jan 2026 18:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39847 IP address blocks: 89.185.160.0/19 maxlen: 19 178.18.176.0/20 maxlen: 20 185.150.120.0/22 maxlen: 22 2a00:b280::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:e1:31:ef:d8:35:2d:44:71:86:e6:cb:68:cf:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: Jan 1 18:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6adc5835263a631fbb12520bfdeaac1864d9ae26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f5:db:5e:bf:7a:cd:9f:af:f8:17:0b:ff:c0: 8f:29:73:ec:73:48:a7:57:4d:17:2c:15:75:f1:d7: 56:62:34:48:7e:8b:6e:e2:eb:2c:45:10:e7:db:9f: fb:90:4f:44:a9:0c:01:03:b0:d5:c4:23:f8:7a:92: 55:3a:fe:63:bf:6b:0e:d3:ee:35:7a:b3:cd:44:c7: a0:c3:6d:d0:9b:42:2c:df:78:06:53:58:51:7a:7e: 01:dc:bc:0f:3a:b7:dc:b5:b1:5d:e6:85:7f:e1:5d: 03:8b:82:cc:e7:d0:00:44:3a:a0:3e:ff:74:9f:e3: 73:7e:bc:2e:c3:7d:25:c0:22:24:ef:7a:16:8c:57: 40:d1:3e:c5:db:d5:14:99:9c:5f:8e:b7:d1:ec:62: 94:4d:42:6e:dd:71:78:d4:b3:4b:26:48:39:ea:ee: 73:df:46:84:f9:3b:dc:2f:12:c6:ee:98:0e:3f:a4: 92:b1:82:ca:ef:5d:bd:43:ff:e9:b4:2e:47:1d:61: 83:45:23:26:b5:bd:82:32:3a:89:47:bf:29:36:8b: 1a:ba:3a:f1:9a:c7:2b:b1:b1:83:1e:43:03:ad:01: d8:33:dd:b4:a5:2e:89:e8:e6:bd:56:6a:e2:4e:5b: 7b:59:74:fa:66:22:55:ac:25:ac:b7:77:00:af:10: 60:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:DC:58:35:26:3A:63:1F:BB:12:52:0B:FD:EA:AC:18:64:D9:AE:26 X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/atxYNSY6Yx-7ElIL_eqsGGTZriY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.160.0/19 178.18.176.0/20 185.150.120.0/22 IPv6: 2a00:b280::/32 Signature Algorithm: sha256WithRSAEncryption 67:72:aa:14:75:30:ae:88:f0:a4:9b:93:48:b1:72:05:ae:4b: e0:5d:d5:4f:16:0f:61:4d:c2:45:6f:1f:b5:e8:64:ea:4b:bc: ee:36:ca:6c:58:0c:4f:fd:3b:29:48:3b:77:ce:c8:38:4a:94: ab:0e:37:ae:30:ff:2f:4c:ab:a4:24:f0:a0:61:df:7c:7b:02: a8:65:a1:34:45:60:72:10:81:28:28:c0:c7:42:be:75:c1:cf: 4e:6b:1f:db:e8:91:67:4c:97:f1:8c:9e:54:3f:aa:8f:e9:c3: 6d:95:94:8e:ec:3a:21:62:f7:33:94:37:b6:89:31:e3:b0:78: 3e:c9:4d:49:07:dc:74:bf:b9:ac:25:9e:3f:63:12:5e:83:08: 48:70:28:db:ad:8b:68:8e:f0:96:e8:bf:9f:a8:3f:e4:b8:c3: 8a:f3:71:9e:a3:48:7d:16:2a:0c:24:e9:4b:9e:e1:51:e1:51: ff:78:b7:db:a1:ae:8c:d2:33:6b:90:02:81:8b:ab:b8:95:28: 58:18:54:21:9e:f8:1e:fa:67:69:b6:c4:b1:70:dc:7b:e9:07: f3:c1:ee:50:20:c4:63:4b:1f:29:9f:98:b3:97:6e:08:9f:c3: e8:02:91:2b:16:64:ec:8d:0e:65:a6:2c:9d:07:3f:60:92:cc: 1a:73:1f:1f -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6yOEx79g1LURxhubLaM+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjYwMTAxMTgxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWRjNTgzNTI2M2E2MzFmYmIxMjUyMGJmZGVhYWMxODY0ZDlhZTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPXbXr96zZ+v+BcL/8CPKXPsc0in V00XLBV18ddWYjRIfotu4ussRRDn25/7kE9EqQwBA7DVxCP4epJVOv5jv2sO0+41 erPNRMegw23Qm0Is33gGU1hRen4B3LwPOrfctbFd5oV/4V0Di4LM59AARDqgPv90 n+Nzfrwuw30lwCIk73oWjFdA0T7F29UUmZxfjrfR7GKUTUJu3XF41LNLJkg56u5z 30aE+TvcLxLG7pgOP6SSsYLK7129Q//ptC5HHWGDRSMmtb2CMjqJR78pNosaujrx mscrsbGDHkMDrQHYM920pS6J6Oa9VmriTlt7WXT6ZiJVrCWst3cArxBgVQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFGrcWDUmOmMfuxJSC/3qrBhk2a4mMB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEvYXR4WU5TWTZZeC03RWxJTF9lcXNHR1RacmlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFWbmgAwQE shKwAwQCuZZ4MA0EAgACMAcDBQAqALKAMA0GCSqGSIb3DQEBCwUAA4IBAQBncqoU dTCuiPCkm5NIsXIFrkvgXdVPFg9hTcJFbx+16GTqS7zuNspsWAxP/TspSDt3zsg4 SpSrDjeuMP8vTKukJPCgYd98ewKoZaE0RWByEIEoKMDHQr51wc9Oax/b6JFnTJfx jJ5UP6qP6cNtlZSO7DohYvczlDe2iTHjsHg+yU1JB9x0v7msJZ4/YxJegwhIcCjb rYtojvCW6L+fqD/kuMOK83Geo0h9FioMJOlLnuFR4VH/eLfboa6M0jNrkAKBi6u4 lShYGFQhnvge+mdptsSxcNx76Qfzwe5QIMRjSx8pn5izl24In8PoApErFmTsjQ5l piydBz9gkswacx8f -----END CERTIFICATE-----Generated at Mon Jan 26 20:59:40 2026 by rpki-client