This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/ayl3vnvrrdmk5cZvehuS-xb9kOo.roa File: ayl3vnvrrdmk5cZvehuS-xb9kOo.roa (raw, json) Hash identifier: RrcMxnc59zE7RGrIC4ZPK4DT+x6V2IkZuo1eiCNAHss= Subject key identifier: 6B:29:77:BE:7B:EB:AD:D9:A4:E5:C6:6F:7A:1B:92:FB:16:FD:90:EA Certificate issuer: /CN=2c37b4bec97d608abe23bc57ba398246ccc57760 Certificate serial: 019B7C7F3F63E4EECB6501BAE79639E4D902 Authority key identifier: 2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/ayl3vnvrrdmk5cZvehuS-xb9kOo.roa Signing time: Fri 02 Jan 2026 02:17:52 +0000 ROA not before: Fri 02 Jan 2026 02:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205671 IP address blocks: 185.210.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:3f:63:e4:ee:cb:65:01:ba:e7:96:39:e4:d9:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c37b4bec97d608abe23bc57ba398246ccc57760 Validity Not Before: Jan 2 02:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b2977be7bebadd9a4e5c66f7a1b92fb16fd90ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:32:23:1a:ff:89:da:7a:4b:28:d6:50:35:1f: 92:d6:43:b6:c9:16:6e:9c:0d:1f:cb:b4:18:bf:79: b1:29:b7:b5:97:d6:d1:6f:cd:cb:6b:26:a0:67:49: 83:cf:49:c1:77:1d:78:58:35:96:d6:b0:0d:8d:35: 97:ff:40:70:87:29:75:55:ad:2d:43:59:a5:27:6b: 84:45:1e:86:5a:48:4a:e4:e9:67:ed:8f:80:8a:88: 01:8e:d3:1f:8f:1a:2e:1c:fa:b5:4a:38:60:e5:36: 5f:36:ba:77:63:7f:3b:a6:5f:d9:22:c3:c3:b4:6d: 15:db:34:a0:5e:5c:89:30:0e:5e:1d:ba:50:86:26: 4d:6d:93:59:fb:95:b0:ea:b0:61:63:5c:c2:86:c9: bc:5e:94:7a:57:19:9d:6f:b9:38:f0:74:31:07:51: aa:75:a4:bd:c9:5a:63:99:8c:6b:9c:1e:17:90:ba: 42:86:96:8d:98:c5:f6:2b:22:1e:5c:fd:9f:55:e5: 55:c5:7d:23:06:49:5c:22:f4:56:26:c7:42:15:c4: 24:24:c4:6c:c8:b1:6d:fb:b4:b7:71:de:ca:27:95: 7f:41:0f:0b:13:aa:54:3a:47:5e:4d:d1:81:55:33: 15:5d:61:b1:d5:57:2d:05:34:39:97:14:97:02:b4: 01:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:29:77:BE:7B:EB:AD:D9:A4:E5:C6:6F:7A:1B:92:FB:16:FD:90:EA X509v3 Authority Key Identifier: keyid:2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/ayl3vnvrrdmk5cZvehuS-xb9kOo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.210.124.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:4e:a2:1e:04:79:6a:cf:0c:2d:b8:dd:30:d3:66:ab:66:29: db:c3:fc:8d:96:9b:d5:17:a9:fd:cc:fd:f3:49:31:62:41:fc: 08:41:2f:42:fd:5b:0b:b0:2a:61:f4:b8:68:af:f6:9c:20:6e: 20:75:98:89:67:c1:25:33:24:5b:6c:68:6a:4b:00:8f:16:39: d5:70:24:d0:d0:1b:d4:39:c1:b5:e5:6c:39:77:0b:e8:c2:eb: 41:05:74:fb:94:06:b5:2e:bd:b5:50:30:f1:7a:2f:e4:8c:b1: 53:e2:c5:c7:64:d2:73:98:51:76:67:23:1f:f3:2d:35:b7:b8: 09:c3:86:4d:4d:f8:5b:25:74:bd:81:96:c1:be:f2:0e:72:d1: 7b:ac:c7:51:a9:9c:4d:9d:25:a8:7e:69:07:45:6d:38:43:7b: 20:c3:ce:3d:ce:3a:83:91:43:1b:fd:bd:94:e0:47:d7:0e:d3: ff:f9:14:e7:70:86:10:d0:94:eb:4b:84:03:94:af:f4:c8:ab: b3:0c:31:38:8b:1a:f5:4a:e3:2c:61:4d:10:d8:9f:db:bd:95: 68:37:de:92:10:4a:aa:82:d3:6c:5d:be:88:26:7b:64:26:63: fd:2c:3f:21:fb:a0:44:d0:0c:2a:90:df:f4:d8:ce:0d:3d:4b: 67:93:a1:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fz9j5O7LZQG655Y55NkCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMzdiNGJlYzk3ZDYwOGFiZTIzYmM1N2JhMzk4MjQ2Y2Nj NTc3NjAwHhcNMjYwMTAyMDIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjI5NzdiZTdiZWJhZGQ5YTRlNWM2NmY3YTFiOTJmYjE2ZmQ5MGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DIjGv+J2npLKNZQNR+S1kO2yRZu nA0fy7QYv3mxKbe1l9bRb83LayagZ0mDz0nBdx14WDWW1rANjTWX/0Bwhyl1Va0t Q1mlJ2uERR6GWkhK5Oln7Y+AiogBjtMfjxouHPq1Sjhg5TZfNrp3Y387pl/ZIsPD tG0V2zSgXlyJMA5eHbpQhiZNbZNZ+5Ww6rBhY1zChsm8XpR6Vxmdb7k48HQxB1Gq daS9yVpjmYxrnB4XkLpChpaNmMX2KyIeXP2fVeVVxX0jBklcIvRWJsdCFcQkJMRs yLFt+7S3cd7KJ5V/QQ8LE6pUOkdeTdGBVTMVXWGx1VctBTQ5lxSXArQBzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGspd757663ZpOXGb3obkvsW/ZDqMB8GA1UdIwQY MBaAFCw3tL7JfWCKviO8V7o5gkbMxXdgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTERlMHZzbDlZSXEtSTd4WHVqbUNSc3pGZDJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9iMTI2MDQtYjQ4MS00MTZkLWIwODgt MjEwNzY3YmQwYmEyLzEvYXlsM3ZudnJyZG1rNWNadmVodVMteGI5a09vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9iMTI2MDQtYjQ4MS00MTZkLWIwODgtMjEwNzY3YmQwYmEy LzEvTERlMHZzbDlZSXEtSTd4WHVqbUNSc3pGZDJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudJ8MA0G CSqGSIb3DQEBCwUAA4IBAQBvTqIeBHlqzwwtuN0w02arZinbw/yNlpvVF6n9zP3z STFiQfwIQS9C/VsLsCph9Lhor/acIG4gdZiJZ8ElMyRbbGhqSwCPFjnVcCTQ0BvU OcG15Ww5dwvowutBBXT7lAa1Lr21UDDxei/kjLFT4sXHZNJzmFF2ZyMf8y01t7gJ w4ZNTfhbJXS9gZbBvvIOctF7rMdRqZxNnSWofmkHRW04Q3sgw849zjqDkUMb/b2U 4EfXDtP/+RTncIYQ0JTrS4QDlK/0yKuzDDE4ixr1SuMsYU0Q2J/bvZVoN96SEEqq gtNsXb6IJntkJmP9LD8h+6BE0AwqkN/02M4NPUtnk6Ew -----END CERTIFICATE-----Generated at Tue Feb 10 00:08:57 2026 by rpki-client