This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/axFCojXUhSkytCN0atEZfj9fkA8.roa File: axFCojXUhSkytCN0atEZfj9fkA8.roa (raw, json) Hash identifier: I3PEkjutyOX2FwIEMplxrCsf4ez6AG70VNxYovdKhQs= Subject key identifier: 6B:11:42:A2:35:D4:85:29:32:B4:23:74:6A:D1:19:7E:3F:5F:90:0F Certificate issuer: /CN=9706aa905465586424f387fdbd83648b72d946de Certificate serial: 019B7BA447657DF0326464564ED834CDFF1A Authority key identifier: 97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/axFCojXUhSkytCN0atEZfj9fkA8.roa Signing time: Thu 01 Jan 2026 22:18:42 +0000 ROA not before: Thu 01 Jan 2026 22:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29243 IP address blocks: 80.83.0.0/20 maxlen: 20 109.163.208.0/21 maxlen: 21 185.168.212.0/22 maxlen: 22 2001:1430::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:47:65:7d:f0:32:64:64:56:4e:d8:34:cd:ff:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9706aa905465586424f387fdbd83648b72d946de Validity Not Before: Jan 1 22:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b1142a235d4852932b423746ad1197e3f5f900f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0b:7c:39:9d:21:b8:3d:8c:c2:cd:e0:61:1a: 3e:e3:9b:10:b0:d1:bb:64:32:a8:bf:61:60:40:47: fa:17:76:db:9d:81:db:82:fc:5e:ff:43:4e:70:04: 5f:f1:38:8c:7f:19:91:9a:eb:b9:4f:b5:48:46:b2: 21:cd:c4:21:a6:20:5c:ac:16:1e:ba:9d:5f:05:b2: 74:74:c6:12:3e:ae:98:b9:e2:e4:79:ac:06:6e:bf: ed:f1:ab:58:cc:c5:cd:96:75:2a:ba:8c:a6:39:3f: dc:d1:12:cc:4f:f2:03:49:78:9c:62:0d:b9:6f:ab: 27:12:55:46:dc:f0:50:1a:d9:b2:47:9f:85:86:b9: 17:6e:44:4b:04:3c:ea:ba:c7:1a:14:47:74:a4:8d: 35:89:53:17:3f:7b:ba:44:b9:08:03:dc:86:88:fa: 9d:ef:52:40:f1:6f:4e:f4:34:8b:db:32:33:a9:bc: 35:73:4d:e8:96:87:2d:a6:d5:3a:c3:60:2e:cf:68: 3f:dc:84:71:5a:7b:8a:e8:7c:31:a3:b1:ab:4b:b8: 29:f9:91:7d:b1:8d:35:08:48:e3:bd:a9:15:34:94: bb:a7:2c:a6:ca:dd:c7:5a:dd:e9:fb:b5:2d:00:b4: 3b:bf:0e:da:b3:83:fe:65:15:20:1d:dd:23:24:14: 41:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:11:42:A2:35:D4:85:29:32:B4:23:74:6A:D1:19:7E:3F:5F:90:0F X509v3 Authority Key Identifier: keyid:97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/axFCojXUhSkytCN0atEZfj9fkA8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.83.0.0/20 109.163.208.0/21 185.168.212.0/22 IPv6: 2001:1430::/32 Signature Algorithm: sha256WithRSAEncryption e6:b4:b4:b0:e3:22:79:d4:ff:4c:2f:d0:a8:5f:a7:ca:8f:4e: 5f:1b:27:71:e3:cb:f1:fc:f2:c2:68:78:48:bb:c1:b1:b4:df: b9:d1:6b:36:94:e2:cf:15:2b:cc:aa:9d:8c:96:38:41:4b:12: de:bd:ee:0f:b7:54:df:82:43:2c:d9:87:11:ac:6a:06:fe:c6: a3:2d:d4:80:06:c7:a8:68:58:46:a3:a1:98:17:85:ba:cc:e4: b7:17:29:eb:67:83:f8:12:3d:6b:30:37:b9:61:f0:f2:c2:58: cb:eb:1e:ff:6c:27:d7:82:b6:17:ce:94:bc:73:fe:2c:3c:ed: 19:d1:e2:57:2c:bd:dc:70:9c:de:2f:c0:57:76:08:3c:9d:de: 80:45:ee:ed:fa:a0:e8:78:65:82:3b:c3:10:b6:b9:f7:c7:08: 8d:6c:a4:2f:a0:ac:76:fa:34:45:4f:54:2b:f2:57:a6:69:8e: 94:4c:1d:e5:b6:fe:e8:6a:4e:aa:df:93:d3:83:68:77:dc:ee: 61:c6:df:e0:6d:30:a4:f6:d1:54:eb:a7:0b:c1:e2:bb:a4:b0: 3c:38:ad:cd:4c:f4:86:f5:8e:10:e2:ae:8d:08:6f:ff:2c:50: 8b:af:8f:ae:f5:2b:d3:4f:0a:99:7a:9a:2b:7d:19:6c:05:c7: c0:3b:90:82 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt7pEdlffAyZGRWTtg0zf8aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MDZhYTkwNTQ2NTU4NjQyNGYzODdmZGJkODM2NDhiNzJk OTQ2ZGUwHhcNMjYwMTAxMjIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjExNDJhMjM1ZDQ4NTI5MzJiNDIzNzQ2YWQxMTk3ZTNmNWY5MDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygt8OZ0huD2Mws3gYRo+45sQsNG7 ZDKov2FgQEf6F3bbnYHbgvxe/0NOcARf8TiMfxmRmuu5T7VIRrIhzcQhpiBcrBYe up1fBbJ0dMYSPq6YueLkeawGbr/t8atYzMXNlnUquoymOT/c0RLMT/IDSXicYg25 b6snElVG3PBQGtmyR5+FhrkXbkRLBDzquscaFEd0pI01iVMXP3u6RLkIA9yGiPqd 71JA8W9O9DSL2zIzqbw1c03oloctptU6w2Auz2g/3IRxWnuK6Hwxo7GrS7gp+ZF9 sY01CEjjvakVNJS7pyymyt3HWt3p+7UtALQ7vw7as4P+ZRUgHd0jJBRBfQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFGsRQqI11IUpMrQjdGrRGX4/X5APMB8GA1UdIwQY MBaAFJcGqpBUZVhkJPOH/b2DZIty2UbeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHdhcWtGUmxXR1FrODRmOXZZTmtpM0xaUnQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8xY2YzZjAtYTAzNi00Yzc2LThiMDkt NWM1MzViNzQ2MzUzLzEvYXhGQ29qWFVoU2t5dENOMGF0RVpmajlma0E4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8xY2YzZjAtYTAzNi00Yzc2LThiMDktNWM1MzViNzQ2MzUz LzEvbHdhcWtGUmxXR1FrODRmOXZZTmtpM0xaUnQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEUFMAAwQD baPQAwQCuajUMA0EAgACMAcDBQAgARQwMA0GCSqGSIb3DQEBCwUAA4IBAQDmtLSw 4yJ51P9ML9CoX6fKj05fGydx48vx/PLCaHhIu8GxtN+50Ws2lOLPFSvMqp2MljhB SxLeve4Pt1TfgkMs2YcRrGoG/sajLdSABseoaFhGo6GYF4W6zOS3FynrZ4P4Ej1r MDe5YfDywljL6x7/bCfXgrYXzpS8c/4sPO0Z0eJXLL3ccJzeL8BXdgg8nd6ARe7t +qDoeGWCO8MQtrn3xwiNbKQvoKx2+jRFT1Qr8lemaY6UTB3ltv7oak6q35PTg2h3 3O5hxt/gbTCk9tFU66cLweK7pLA8OK3NTPSG9Y4Q4q6NCG//LFCLr4+u9SvTTwqZ eporfRlsBcfAO5CC -----END CERTIFICATE-----Generated at Mon Jan 26 19:34:44 2026 by rpki-client