This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/ay-C8TILWdjhcn8eurN_Kh9djso.roa File: ay-C8TILWdjhcn8eurN_Kh9djso.roa (raw, json) Hash identifier: 5zpy3ri3yGj4QIMvpFMovV5Sm6F5Vl5ppvnDDWWEVdw= Subject key identifier: 6B:2F:82:F1:32:0B:59:D8:E1:72:7F:1E:BA:B3:7F:2A:1F:5D:8E:CA Certificate issuer: /CN=7e2cb3d0a641769c7801c481612015c2ccb3b655 Certificate serial: 019B7AC86C80300192D9F367D0FAEE74CCE8 Authority key identifier: 7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/ay-C8TILWdjhcn8eurN_Kh9djso.roa Signing time: Thu 01 Jan 2026 18:18:33 +0000 ROA not before: Thu 01 Jan 2026 18:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 46.255.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:6c:80:30:01:92:d9:f3:67:d0:fa:ee:74:cc:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e2cb3d0a641769c7801c481612015c2ccb3b655 Validity Not Before: Jan 1 18:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b2f82f1320b59d8e1727f1ebab37f2a1f5d8eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:50:5e:a6:fc:02:a3:c9:76:0f:c7:91:c8:96: 68:c0:4d:ce:25:94:2b:06:f8:08:e5:9f:79:21:11: b2:9a:6a:3b:4e:65:b0:d1:8c:9e:5d:b0:c0:8f:75: ba:4c:de:3f:7c:ec:d5:ca:45:54:ac:2f:dc:e8:ab: 29:48:2e:2d:83:42:4d:0e:77:02:f7:5e:6d:c1:ae: d8:86:a9:7b:17:ad:3f:11:d9:d3:39:74:58:5c:b9: 80:4f:b7:04:47:81:4e:d7:85:13:32:ff:29:64:dd: 5c:75:25:09:bd:a0:cc:5c:00:bf:49:3f:11:66:b5: f5:46:1c:8c:23:49:87:5b:24:f6:c9:98:93:16:64: 6d:13:c3:b9:7d:52:0e:41:0a:37:b0:5d:af:6d:5d: 76:73:46:cc:24:21:74:ca:44:88:da:a4:2e:7b:ca: 3e:1a:26:66:8e:89:7a:dd:75:19:99:87:5a:b0:b7: 2b:92:b5:d4:7f:74:a6:ba:84:ea:8e:8a:fc:74:b3: bf:bb:b0:93:b5:b8:00:79:af:c3:d8:2d:e6:b5:dd: 05:e9:ac:df:78:97:40:b8:e1:ee:a0:43:b3:01:05: 10:37:37:91:20:2c:b7:91:1e:6f:02:92:67:48:6b: d5:c4:51:98:e7:57:ad:99:27:ad:1b:6a:58:63:64: 75:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2F:82:F1:32:0B:59:D8:E1:72:7F:1E:BA:B3:7F:2A:1F:5D:8E:CA X509v3 Authority Key Identifier: keyid:7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/ay-C8TILWdjhcn8eurN_Kh9djso.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.255.76.0/24 Signature Algorithm: sha256WithRSAEncryption 64:43:1c:61:8a:3f:f8:ac:06:c2:6a:01:3a:08:03:7b:34:7b: f1:63:87:2a:c5:72:bb:bd:0f:63:28:e7:63:ef:c8:0c:c6:d2: ad:95:c8:79:b5:8f:26:7c:ca:64:9a:1d:8c:1f:5f:b9:1e:9d: f7:4e:b9:c9:ab:2b:c1:5a:2a:0f:30:32:69:92:c3:4b:47:96: bb:6d:dd:79:e1:3e:e2:3e:06:73:2a:2d:f1:8d:45:7b:c1:88: 0f:8c:b1:df:d3:4e:5f:6f:a0:b3:b0:95:44:f2:9f:e5:10:b3: d3:e1:c9:7d:53:d6:55:ec:75:4a:31:ba:19:2f:64:a8:92:a3: 2e:61:6d:ee:f2:f0:54:01:5d:c4:1b:05:d1:97:d6:22:d1:39: 77:38:ed:2d:37:cf:d0:b5:20:a3:25:6c:9b:1c:bd:55:80:b8: c7:f5:d2:44:f1:4b:f7:5e:09:2f:9c:fb:fa:74:3a:3f:5b:12: 6c:df:83:b5:34:76:64:1e:f7:71:fa:1d:96:f5:d2:fc:f4:bf: 94:bc:66:ce:5e:92:42:2d:15:22:a6:2d:6e:95:4d:76:6e:03: 40:98:c2:6b:11:f1:f8:17:9c:07:f3:3c:c3:48:08:78:53:05: 57:26:ad:8b:15:0c:64:65:f2:26:2a:af:fc:c5:3f:3b:dd:fe: 4c:f2:d6:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yGyAMAGS2fNn0PrudMzoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMmNiM2QwYTY0MTc2OWM3ODAxYzQ4MTYxMjAxNWMyY2Ni M2I2NTUwHhcNMjYwMTAxMTgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjJmODJmMTMyMGI1OWQ4ZTE3MjdmMWViYWIzN2YyYTFmNWQ4ZWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVBepvwCo8l2D8eRyJZowE3OJZQr BvgI5Z95IRGymmo7TmWw0YyeXbDAj3W6TN4/fOzVykVUrC/c6KspSC4tg0JNDncC 915twa7Yhql7F60/EdnTOXRYXLmAT7cER4FO14UTMv8pZN1cdSUJvaDMXAC/ST8R ZrX1RhyMI0mHWyT2yZiTFmRtE8O5fVIOQQo3sF2vbV12c0bMJCF0ykSI2qQue8o+ GiZmjol63XUZmYdasLcrkrXUf3SmuoTqjor8dLO/u7CTtbgAea/D2C3mtd0F6azf eJdAuOHuoEOzAQUQNzeRICy3kR5vApJnSGvVxFGY51etmSetG2pYY2R13wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGsvgvEyC1nY4XJ/HrqzfyofXY7KMB8GA1UdIwQY MBaAFH4ss9CmQXaceAHEgWEgFcLMs7ZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZml5ejBLWkJkcHg0QWNTQllTQVZ3c3l6dGxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80MzFkZjEtMDlmNC00NzVjLWEwNDUt ZjViYjI4NDNjODllLzEvYXktQzhUSUxXZGpoY244ZXVyTl9LaDlkanNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80MzFkZjEtMDlmNC00NzVjLWEwNDUtZjViYjI4NDNjODll LzEvZml5ejBLWkJkcHg0QWNTQllTQVZ3c3l6dGxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALv9MMA0G CSqGSIb3DQEBCwUAA4IBAQBkQxxhij/4rAbCagE6CAN7NHvxY4cqxXK7vQ9jKOdj 78gMxtKtlch5tY8mfMpkmh2MH1+5Hp33TrnJqyvBWioPMDJpksNLR5a7bd154T7i PgZzKi3xjUV7wYgPjLHf005fb6CzsJVE8p/lELPT4cl9U9ZV7HVKMboZL2SokqMu YW3u8vBUAV3EGwXRl9Yi0Tl3OO0tN8/QtSCjJWybHL1VgLjH9dJE8Uv3XgkvnPv6 dDo/WxJs34O1NHZkHvdx+h2W9dL89L+UvGbOXpJCLRUipi1ulU12bgNAmMJrEfH4 F5wH8zzDSAh4UwVXJq2LFQxkZfImKq/8xT873f5M8tZ8 -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:56 2026 by rpki-client