This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/ATXg03GR8zoML1xy7L80ZPtMT8M.roa File: ATXg03GR8zoML1xy7L80ZPtMT8M.roa (raw, json) Hash identifier: nheIXMj5AVfyPJ0H/Ys4b1d8hSHkVKCMyhmzU1gBfCw= Subject key identifier: 01:35:E0:D3:71:91:F3:3A:0C:2F:5C:72:EC:BF:34:64:FB:4C:4F:C3 Certificate issuer: /CN=a56316c7129831e0511079532ded81dc12c81da0 Certificate serial: 019B77C7278FAA3C5224F91413A82366DB9D Authority key identifier: A5:63:16:C7:12:98:31:E0:51:10:79:53:2D:ED:81:DC:12:C8:1D:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/ATXg03GR8zoML1xy7L80ZPtMT8M.roa Signing time: Thu 01 Jan 2026 04:18:18 +0000 ROA not before: Thu 01 Jan 2026 04:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64441 IP address blocks: 91.206.160.0/23 maxlen: 23 194.102.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.crl rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:27:8f:aa:3c:52:24:f9:14:13:a8:23:66:db:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a56316c7129831e0511079532ded81dc12c81da0 Validity Not Before: Jan 1 04:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0135e0d37191f33a0c2f5c72ecbf3464fb4c4fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cb:c3:c1:0f:ce:c6:50:cb:46:2e:d8:61:01: ce:f6:06:72:e0:8b:e2:a4:98:c0:a5:08:8d:e2:0a: eb:f9:4b:b7:b4:54:07:20:fc:ce:68:73:7c:b5:41: a8:7a:ba:12:e6:d2:48:b3:df:6e:f5:19:13:2d:04: 73:a9:47:02:bf:db:0e:36:04:01:97:82:fd:a2:e3: f4:ee:27:b9:e2:69:4c:31:cd:64:bd:89:21:60:d0: b1:8c:2c:80:cf:db:22:98:1c:4d:fa:3a:ad:1c:6e: 02:91:d3:72:ce:2a:7b:f1:2f:b9:65:ea:5a:53:18: 4a:88:61:41:cb:f8:79:c7:01:e2:53:ae:41:1b:7f: 7d:df:9d:c6:e1:98:b7:68:ef:cc:35:5e:f1:5a:98: b1:f8:6d:8d:78:b3:80:34:6d:9e:bc:4e:63:3f:70: 84:42:b2:51:e8:17:f5:ff:a7:fa:0a:03:56:d9:bc: 6b:f2:ed:b4:55:98:1b:a7:c5:3e:22:4c:91:ea:b9: 56:65:c1:ab:dc:b6:4a:d8:77:1b:21:49:c7:1b:c0: 27:9f:0f:1a:12:b0:7e:46:96:1f:a9:64:04:19:7f: c9:fe:77:e2:3d:77:90:e0:88:b8:d6:a1:84:1a:93: 86:3c:2a:6b:e1:cb:ba:fb:4e:cd:99:da:5d:d3:6c: 25:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:35:E0:D3:71:91:F3:3A:0C:2F:5C:72:EC:BF:34:64:FB:4C:4F:C3 X509v3 Authority Key Identifier: keyid:A5:63:16:C7:12:98:31:E0:51:10:79:53:2D:ED:81:DC:12:C8:1D:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/ATXg03GR8zoML1xy7L80ZPtMT8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.160.0/23 194.102.162.0/24 Signature Algorithm: sha256WithRSAEncryption 65:d7:50:9f:8d:67:ef:18:9f:c3:7e:d4:e1:96:79:0a:d1:19: 8c:68:15:7f:ec:f2:a6:12:72:a8:29:4b:1b:48:20:50:42:d6: 25:f7:e6:6a:3f:47:cf:c5:e9:ea:a0:c9:bc:da:ec:79:37:48: 79:7f:59:59:3b:b6:9c:ff:16:28:67:6f:5c:b4:91:3b:d8:13: 99:a0:37:61:3e:02:66:3a:c3:5f:50:1d:0a:62:6f:d2:8a:13: e6:b0:c7:71:fc:de:3b:f4:41:7f:ba:7e:01:db:ff:b8:3a:9e: e6:93:05:ff:ef:29:86:65:aa:22:79:d1:b6:37:6a:0d:de:82: 41:bd:42:21:67:21:14:35:be:39:18:94:26:06:6f:f8:37:63: a0:5b:29:93:24:c5:87:00:3f:a4:61:94:16:80:5f:e3:c2:ff: 5b:d9:07:52:4c:7b:8a:a2:92:12:fa:12:3b:81:b3:d9:ce:3c: b1:91:71:dc:be:58:e8:ae:2b:b0:ba:2f:6e:91:2e:81:24:e7: e8:82:d1:e4:78:81:42:12:7c:a9:b3:c8:8a:df:11:9c:34:b5: 67:ce:75:16:78:6c:54:32:fa:02:bb:0b:54:ff:33:81:2a:d2: d5:18:dc:f0:a6:7b:82:3b:51:f9:02:7c:f7:8c:f6:9d:aa:5b: 3d:df:65:8b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xyePqjxSJPkUE6gjZtudMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NjMxNmM3MTI5ODMxZTA1MTEwNzk1MzJkZWQ4MWRjMTJj ODFkYTAwHhcNMjYwMTAxMDQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTM1ZTBkMzcxOTFmMzNhMGMyZjVjNzJlY2JmMzQ2NGZiNGM0ZmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8vDwQ/OxlDLRi7YYQHO9gZy4Ivi pJjApQiN4grr+Uu3tFQHIPzOaHN8tUGoeroS5tJIs99u9RkTLQRzqUcCv9sONgQB l4L9ouP07ie54mlMMc1kvYkhYNCxjCyAz9simBxN+jqtHG4CkdNyzip78S+5Zepa UxhKiGFBy/h5xwHiU65BG399353G4Zi3aO/MNV7xWpix+G2NeLOANG2evE5jP3CE QrJR6Bf1/6f6CgNW2bxr8u20VZgbp8U+IkyR6rlWZcGr3LZK2HcbIUnHG8Annw8a ErB+RpYfqWQEGX/J/nfiPXeQ4Ii41qGEGpOGPCpr4cu6+07Nmdpd02wllwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAE14NNxkfM6DC9ccuy/NGT7TE/DMB8GA1UdIwQY MBaAFKVjFscSmDHgURB5Uy3tgdwSyB2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFdNV3h4S1lNZUJSRUhsVExlMkIzQkxJSGFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS80ZDkyNjctNGVhYy00MjEzLTliY2It MjhiODJjMGExNGYwLzEvQVRYZzAzR1I4em9NTDF4eTdMODBaUHRNVDhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS80ZDkyNjctNGVhYy00MjEzLTliY2ItMjhiODJjMGExNGYw LzEvcFdNV3h4S1lNZUJSRUhsVExlMkIzQkxJSGFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW86gAwQA wmaiMA0GCSqGSIb3DQEBCwUAA4IBAQBl11CfjWfvGJ/DftThlnkK0RmMaBV/7PKm EnKoKUsbSCBQQtYl9+ZqP0fPxenqoMm82ux5N0h5f1lZO7ac/xYoZ29ctJE72BOZ oDdhPgJmOsNfUB0KYm/SihPmsMdx/N479EF/un4B2/+4Op7mkwX/7ymGZaoiedG2 N2oN3oJBvUIhZyEUNb45GJQmBm/4N2OgWymTJMWHAD+kYZQWgF/jwv9b2QdSTHuK opIS+hI7gbPZzjyxkXHcvljoriuwui9ukS6BJOfogtHkeIFCEnyps8iK3xGcNLVn znUWeGxUMvoCuwtU/zOBKtLVGNzwpnuCO1H5Anz3jPadqls932WL -----END CERTIFICATE-----Generated at Tue Feb 10 00:28:48 2026 by rpki-client