This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/ax-ColqjeYF9eczGcae0p5iqYTI.roa File: ax-ColqjeYF9eczGcae0p5iqYTI.roa (raw, json) Hash identifier: vae9CpPncBb3Ls30Ad4b2W/YH4fU7nMsAU7NBxhNjio= Subject key identifier: 6B:1F:82:A2:5A:A3:79:81:7D:79:CC:C6:71:A7:B4:A7:98:AA:61:32 Certificate issuer: /CN=172537601a31697404922d957e74450f5a9cbe73 Certificate serial: 019BA2785F4532F14B75DA3D1A9956518676 Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/ax-ColqjeYF9eczGcae0p5iqYTI.roa Signing time: Fri 09 Jan 2026 11:15:56 +0000 ROA not before: Fri 09 Jan 2026 11:15:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 81.17.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 02:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:78:5f:45:32:f1:4b:75:da:3d:1a:99:56:51:86:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=172537601a31697404922d957e74450f5a9cbe73 Validity Not Before: Jan 9 11:15:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b1f82a25aa379817d79ccc671a7b4a798aa6132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ae:fd:4d:a0:0f:16:ef:7a:f6:d4:a0:58:82: e7:95:68:6a:b2:b2:b2:23:01:13:3f:b5:41:ee:64: 7a:d8:ba:cf:a4:25:cf:ec:73:39:d9:84:ad:0d:f8: 15:6d:d8:5a:c8:06:5d:b5:bc:fd:51:39:73:67:af: 1a:d5:62:eb:fa:81:95:99:a6:ab:b5:e9:52:66:67: 0f:85:cf:15:8d:13:55:4a:80:21:6a:bd:a6:5b:bb: 75:bf:89:9b:a3:41:87:38:f8:16:96:44:45:bf:5b: 1e:b5:57:4e:f5:2a:18:b4:6a:90:43:71:65:95:93: 96:6c:ce:68:11:de:a5:45:42:de:0a:26:83:74:2e: 60:cf:d6:7d:47:6b:d9:5d:cb:b3:fd:41:20:c6:fc: 50:51:f1:0e:f6:7f:1f:54:47:c7:6c:76:c6:72:83: 2d:35:d5:9c:fb:5b:24:9e:d5:81:b4:8d:f9:da:5b: a5:8b:f8:bd:b3:67:1f:e5:88:1a:72:b1:18:41:82: 9c:db:32:61:cf:8b:c3:d4:c4:03:24:96:5b:55:a4: 22:43:74:d5:33:52:25:f5:66:e9:e5:46:9a:30:02: 1b:d0:88:f0:9c:bc:aa:08:89:f7:7b:50:d4:bc:21: 47:0f:dd:3f:2f:81:6b:95:9e:a8:db:5b:d8:62:62: 8f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1F:82:A2:5A:A3:79:81:7D:79:CC:C6:71:A7:B4:A7:98:AA:61:32 X509v3 Authority Key Identifier: keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/ax-ColqjeYF9eczGcae0p5iqYTI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.17.168.0/21 Signature Algorithm: sha256WithRSAEncryption 2e:46:8c:6e:61:85:2e:cf:94:c9:0b:1b:18:31:ed:96:a9:bb: 19:43:d7:fc:1e:b2:60:ef:dd:b1:01:d8:66:f9:be:30:51:56: 51:54:9e:3a:f2:64:7f:74:a7:91:59:13:b3:80:89:db:29:b0: 84:92:97:80:19:5c:41:9e:88:51:c0:f6:68:fa:d7:a0:ba:6a: 2b:d1:72:58:88:dd:ee:4c:10:e2:d1:28:f5:87:9a:89:08:f5: 8f:81:1b:1b:f1:68:b2:87:26:8a:2e:6f:33:4e:c8:2e:ab:51: 82:61:99:46:d5:52:d6:66:cf:d6:4f:47:0b:bf:21:cb:25:b7: 9a:04:9d:9c:3f:55:5d:1a:69:1b:9b:af:32:49:fe:1d:6d:ce: 94:93:98:dc:d6:e0:4a:72:27:ec:73:cb:06:bf:26:84:99:be: b7:4e:ed:08:90:55:ff:cf:2e:d1:f3:02:a7:4a:26:14:ec:0d: 27:c5:f7:57:b3:96:8c:19:07:2c:bc:23:ce:f9:3c:99:8a:a7: ac:13:12:d7:23:59:ca:8d:a4:fd:04:55:79:63:d3:a6:17:d7: af:75:97:8f:0c:d8:6d:96:a4:04:9e:96:3a:6d:75:7c:d1:2e: d3:c0:2d:1b:6d:fc:9e:bb:26:10:a9:5d:bd:dd:59:be:ae:86: dc:46:f7:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuieF9FMvFLddo9GplWUYZ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MjUzNzYwMWEzMTY5NzQwNDkyMmQ5NTdlNzQ0NTBmNWE5 Y2JlNzMwHhcNMjYwMTA5MTExNTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjFmODJhMjVhYTM3OTgxN2Q3OWNjYzY3MWE3YjRhNzk4YWE2MTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5q79TaAPFu969tSgWILnlWhqsrKy IwETP7VB7mR62LrPpCXP7HM52YStDfgVbdhayAZdtbz9UTlzZ68a1WLr+oGVmaar telSZmcPhc8VjRNVSoAhar2mW7t1v4mbo0GHOPgWlkRFv1setVdO9SoYtGqQQ3Fl lZOWbM5oEd6lRULeCiaDdC5gz9Z9R2vZXcuz/UEgxvxQUfEO9n8fVEfHbHbGcoMt NdWc+1skntWBtI352luli/i9s2cf5YgacrEYQYKc2zJhz4vD1MQDJJZbVaQiQ3TV M1Il9Wbp5UaaMAIb0IjwnLyqCIn3e1DUvCFHD90/L4FrlZ6o21vYYmKPvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGsfgqJao3mBfXnMxnGntKeYqmEyMB8GA1UdIwQY MBaAFBclN2AaMWl0BJItlX50RQ9anL5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnlVM1lCb3hhWFFFa2kyVmZuUkZEMXFjdm5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yMTljYWUtMjY0ZC00NmE3LTllNjQt ZTYwNGI2MWJlMGVhLzEvYXgtQ29scWplWUY5ZWN6R2NhZTBwNWlxWVRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8yMTljYWUtMjY0ZC00NmE3LTllNjQtZTYwNGI2MWJlMGVh LzEvRnlVM1lCb3hhWFFFa2kyVmZuUkZEMXFjdm5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDURGoMA0G CSqGSIb3DQEBCwUAA4IBAQAuRoxuYYUuz5TJCxsYMe2WqbsZQ9f8HrJg792xAdhm +b4wUVZRVJ468mR/dKeRWROzgInbKbCEkpeAGVxBnohRwPZo+tegumor0XJYiN3u TBDi0Sj1h5qJCPWPgRsb8WiyhyaKLm8zTsguq1GCYZlG1VLWZs/WT0cLvyHLJbea BJ2cP1VdGmkbm68ySf4dbc6Uk5jc1uBKcifsc8sGvyaEmb63Tu0IkFX/zy7R8wKn SiYU7A0nxfdXs5aMGQcsvCPO+TyZiqesExLXI1nKjaT9BFV5Y9OmF9evdZePDNht lqQEnpY6bXV80S7TwC0bbfyeuyYQqV293Vm+robcRvc6 -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:38 2026 by rpki-client