This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/aUJMDEtRX1banRXwrPT5sFHhkeg.roa File: aUJMDEtRX1banRXwrPT5sFHhkeg.roa (raw, json) Hash identifier: 0/UZj7YZxYGNN/GvqnOO6zWSihyzEMYvUavPTxZ/YyY= Subject key identifier: 69:42:4C:0C:4B:51:5F:56:DA:9D:15:F0:AC:F4:F9:B0:51:E1:91:E8 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A23E6FE0A1FB4ABCEBF95406D4DBEC Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/aUJMDEtRX1banRXwrPT5sFHhkeg.roa Signing time: Thu 01 Jan 2026 08:17:37 +0000 ROA not before: Thu 01 Jan 2026 08:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6220 IP address blocks: 87.83.53.0/24 maxlen: 24 195.172.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:3e:6f:e0:a1:fb:4a:bc:eb:f9:54:06:d4:db:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69424c0c4b515f56da9d15f0acf4f9b051e191e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:db:e5:c0:66:08:cb:56:71:82:68:96:9e:14: 1c:d3:92:d5:1f:cf:86:46:ad:1e:53:70:bf:1b:48: 46:8c:9e:19:79:eb:a2:c0:9f:3a:8a:b8:9f:c7:84: 4b:73:01:f9:3e:b5:5d:43:42:07:a3:fb:75:c3:f4: a2:1f:dc:3f:eb:aa:01:29:c4:8f:15:5e:c5:b6:0c: 4f:18:62:6e:f8:33:41:86:2f:54:ee:fd:64:c7:0d: 08:e8:08:1b:d2:8f:20:01:c2:9f:00:96:c8:4a:85: b0:82:21:90:8b:bf:5b:0e:b5:6b:75:82:ec:2e:10: 35:d7:70:7c:28:5d:22:84:2e:23:8f:93:bf:24:fa: 7f:e5:46:e1:88:a0:31:58:6f:5a:3c:60:4d:06:34: dd:8b:2b:ee:fd:1e:3f:dc:92:e9:c1:b9:35:32:9e: e0:5a:be:ac:9d:eb:4a:b4:0f:b3:4d:81:69:b4:99: 7f:a6:a1:da:2e:3a:b4:79:00:fd:70:26:64:5f:a0: 36:15:8e:7e:3a:f3:25:66:61:a6:e2:f4:1f:8c:9f: 7d:ea:a4:ba:4c:f1:52:2c:a5:a9:5a:8f:8e:46:09: 10:fc:3b:26:51:3f:3a:57:de:84:0e:fd:1f:76:a0: a0:ef:c6:83:ef:9c:38:d6:aa:15:5a:ed:0a:45:92: 67:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:42:4C:0C:4B:51:5F:56:DA:9D:15:F0:AC:F4:F9:B0:51:E1:91:E8 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/aUJMDEtRX1banRXwrPT5sFHhkeg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.83.53.0/24 195.172.144.0/24 Signature Algorithm: sha256WithRSAEncryption cc:cd:fd:db:e3:04:e2:b8:0d:d5:3f:81:6c:ad:1b:11:e0:47: 7a:7d:5e:08:b3:91:0d:85:c4:79:85:73:4d:e4:c8:15:4d:9f: c7:b6:4c:bd:e6:37:1c:bb:8d:c6:e7:4e:2d:11:c7:e4:79:05: b2:55:a7:41:31:0e:71:41:e4:a0:7e:f5:78:d3:02:f7:86:0b: c5:5a:7d:a7:35:83:ed:4f:67:6b:7d:2c:0e:50:ba:17:39:76: 66:ed:2a:e1:f6:c2:4b:f9:43:26:5f:cb:ed:76:14:0c:8d:55: fe:b9:d9:af:21:53:68:61:68:10:7d:8d:fa:e9:b7:a5:f1:f2: 5a:a7:dd:ee:a6:6f:d3:31:0d:c2:7b:41:ea:4e:90:18:3f:37: 3c:fb:3c:12:77:d2:34:93:a1:f9:ba:4f:bd:47:a8:b9:a2:e2: 3e:e6:2a:d7:23:5a:55:40:ed:e6:82:d7:2c:f4:d1:50:0b:0e: b1:ad:f6:54:db:05:ea:77:6c:55:0e:51:24:8a:6c:e0:d4:db: 32:2c:9b:a1:ea:09:3c:95:53:aa:68:1f:49:18:0c:fa:5d:9a: bc:11:fa:81:3d:41:c4:0c:19:c7:32:a2:e2:9e:b8:d2:3d:d1: a5:c7:de:3c:cd:dc:7f:81:b0:f8:fd:96:a8:d3:96:40:0e:72: b6:92:cb:42 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4oj5v4KH7Srzr+VQG1NvsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTQyNGMwYzRiNTE1ZjU2ZGE5ZDE1ZjBhY2Y0ZjliMDUxZTE5MWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9vlwGYIy1ZxgmiWnhQc05LVH8+G Rq0eU3C/G0hGjJ4ZeeuiwJ86irifx4RLcwH5PrVdQ0IHo/t1w/SiH9w/66oBKcSP FV7FtgxPGGJu+DNBhi9U7v1kxw0I6Agb0o8gAcKfAJbISoWwgiGQi79bDrVrdYLs LhA113B8KF0ihC4jj5O/JPp/5UbhiKAxWG9aPGBNBjTdiyvu/R4/3JLpwbk1Mp7g Wr6snetKtA+zTYFptJl/pqHaLjq0eQD9cCZkX6A2FY5+OvMlZmGm4vQfjJ996qS6 TPFSLKWpWo+ORgkQ/DsmUT86V96EDv0fdqCg78aD75w41qoVWu0KRZJngQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGlCTAxLUV9W2p0V8Kz0+bBR4ZHoMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvYVVKTURFdFJYMWJhblJYd3JQVDVzRkhoa2VnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV1M1AwQA w6yQMA0GCSqGSIb3DQEBCwUAA4IBAQDMzf3b4wTiuA3VP4FsrRsR4Ed6fV4Is5EN hcR5hXNN5MgVTZ/Htky95jccu43G504tEcfkeQWyVadBMQ5xQeSgfvV40wL3hgvF Wn2nNYPtT2drfSwOULoXOXZm7Srh9sJL+UMmX8vtdhQMjVX+udmvIVNoYWgQfY36 6bel8fJap93upm/TMQ3Ce0HqTpAYPzc8+zwSd9I0k6H5uk+9R6i5ouI+5irXI1pV QO3mgtcs9NFQCw6xrfZU2wXqd2xVDlEkimzg1NsyLJuh6gk8lVOqaB9JGAz6XZq8 EfqBPUHEDBnHMqLinrjSPdGlx948zdx/gbD4/Zao05ZADnK2kstC -----END CERTIFICATE-----Generated at Mon Jan 19 08:16:57 2026 by rpki-client