This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/a5xIvW3BW1C9Z86vKuhHNnMUW1I.roa File: a5xIvW3BW1C9Z86vKuhHNnMUW1I.roa (raw, json) Hash identifier: N1TPiZLS4CBPYcke7d0x1aNn6YXVm1B/Voa46DaLwok= Subject key identifier: 6B:9C:48:BD:6D:C1:5B:50:BD:67:CE:AF:2A:E8:47:36:73:14:5B:52 Certificate issuer: /CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8 Certificate serial: 019B7A5A84FD90E54228D45D876901381522 Authority key identifier: EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/a5xIvW3BW1C9Z86vKuhHNnMUW1I.roa Signing time: Thu 01 Jan 2026 16:18:31 +0000 ROA not before: Thu 01 Jan 2026 16:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 212.93.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 01:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:84:fd:90:e5:42:28:d4:5d:87:69:01:38:15:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8 Validity Not Before: Jan 1 16:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b9c48bd6dc15b50bd67ceaf2ae8473673145b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ac:1a:ae:d6:60:bf:72:6a:d0:fb:dd:84:33: d9:cd:d7:e6:92:69:93:f7:c9:d0:e7:03:1e:04:87: e4:e8:72:46:5e:36:f6:d2:c8:4f:65:24:11:92:a1: 2b:87:47:18:8e:07:26:a7:d8:1a:86:4a:1c:f4:85: 0e:c8:4b:1d:ee:06:9c:f9:3a:20:5c:28:05:0e:d1: 77:32:af:5b:0f:f1:45:25:f5:7f:76:14:9d:cb:ac: ea:de:a1:bc:76:f3:9e:eb:01:04:b4:c3:24:fb:57: 29:68:9c:9b:9b:a5:70:80:75:9e:16:5c:21:97:77: ad:f1:20:22:6b:d0:e2:33:34:e8:5a:a4:a4:82:7c: ad:24:02:b8:47:60:fa:ce:7b:6b:70:36:c3:28:f8: 65:da:53:a3:29:96:a3:22:f5:5d:52:eb:dc:8d:68: 78:d8:4f:fb:ca:2c:fd:6d:d0:50:ab:29:bb:dc:33: 11:8f:8d:11:04:fa:21:f0:23:fe:1f:04:d7:02:a9: 1a:de:f8:0b:e3:f6:c4:a7:27:c6:bb:48:2a:39:b5: bc:13:18:d6:61:e7:91:ac:f3:b5:46:94:d4:cf:6e: 24:e3:0e:6b:c9:55:86:2e:ba:41:ca:90:43:70:ab: f3:7a:08:e4:5f:c2:6d:8d:75:bb:2d:53:5c:9d:11: 8a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9C:48:BD:6D:C1:5B:50:BD:67:CE:AF:2A:E8:47:36:73:14:5B:52 X509v3 Authority Key Identifier: keyid:EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/a5xIvW3BW1C9Z86vKuhHNnMUW1I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.93.57.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:80:16:4b:61:42:47:2b:b1:51:aa:ad:98:27:75:de:ff:f0: 20:7f:06:59:a7:01:0a:a9:74:8e:c0:78:d3:51:63:46:39:73: 2d:18:9a:a4:d0:8b:a4:16:fe:16:99:0d:d3:1b:cd:73:88:25: 40:9f:a7:f6:07:95:c2:fc:ab:81:d8:e1:60:66:8b:3f:d2:ad: 1a:03:90:fc:40:b5:7d:4e:72:10:8c:d0:6a:ed:d8:4d:43:8a: eb:bf:bf:28:ea:b2:98:56:33:e3:c2:6e:56:f4:85:68:e1:38: 7e:2f:63:e4:ac:fe:a4:a6:74:60:82:5c:4f:56:ae:78:cd:c5: dc:4b:12:e5:85:06:d1:3d:32:2a:77:9f:38:99:15:86:2d:56: 50:2e:7a:51:7d:cf:a0:8b:e8:eb:9e:b2:3f:02:a3:d9:95:4e: 81:3f:97:d6:cd:2a:45:6b:d9:a3:1a:da:45:cb:51:d2:19:d9: ce:0a:e4:96:db:d6:68:35:e6:d0:a5:ab:95:48:9f:85:bb:8b: dd:f6:cb:23:bb:54:c5:2c:47:12:22:d1:5f:53:91:ac:24:dd: c8:21:45:98:b9:9b:86:04:45:39:6b:82:7d:ff:f9:da:59:15: c2:ce:7b:aa:0f:eb:bb:c1:b2:93:fd:34:d5:42:3e:1b:2b:de: 82:94:6f:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WoT9kOVCKNRdh2kBOBUiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYjA3OGY3NWVhM2Q1MzU4ZmNjYTQ2NmM3NTVkNzVkMTIz MGY4ZDgwHhcNMjYwMTAxMTYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjljNDhiZDZkYzE1YjUwYmQ2N2NlYWYyYWU4NDczNjczMTQ1YjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76wartZgv3Jq0PvdhDPZzdfmkmmT 98nQ5wMeBIfk6HJGXjb20shPZSQRkqErh0cYjgcmp9gahkoc9IUOyEsd7gac+Tog XCgFDtF3Mq9bD/FFJfV/dhSdy6zq3qG8dvOe6wEEtMMk+1cpaJybm6VwgHWeFlwh l3et8SAia9DiMzToWqSkgnytJAK4R2D6zntrcDbDKPhl2lOjKZajIvVdUuvcjWh4 2E/7yiz9bdBQqym73DMRj40RBPoh8CP+HwTXAqka3vgL4/bEpyfGu0gqObW8ExjW YeeRrPO1RpTUz24k4w5ryVWGLrpBypBDcKvzegjkX8JtjXW7LVNcnRGKbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGucSL1twVtQvWfOryroRzZzFFtSMB8GA1UdIwQY MBaAFO6wePdeo9U1j8ykZsdV110SMPjYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3JCNDkxNmoxVFdQektSbXgxWFhYUkl3LU5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZTYwZmEtOTZlNS00ZjZhLThiOTMt ODIxNzA3ZTJjMDAyLzEvYTV4SXZXM0JXMUM5Wjg2dkt1aEhObk1VVzFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hZTYwZmEtOTZlNS00ZjZhLThiOTMtODIxNzA3ZTJjMDAy LzEvN3JCNDkxNmoxVFdQektSbXgxWFhYUkl3LU5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1F05MA0G CSqGSIb3DQEBCwUAA4IBAQB8gBZLYUJHK7FRqq2YJ3Xe//AgfwZZpwEKqXSOwHjT UWNGOXMtGJqk0IukFv4WmQ3TG81ziCVAn6f2B5XC/KuB2OFgZos/0q0aA5D8QLV9 TnIQjNBq7dhNQ4rrv78o6rKYVjPjwm5W9IVo4Th+L2PkrP6kpnRgglxPVq54zcXc SxLlhQbRPTIqd584mRWGLVZQLnpRfc+gi+jrnrI/AqPZlU6BP5fWzSpFa9mjGtpF y1HSGdnOCuSW29ZoNebQpauVSJ+Fu4vd9ssju1TFLEcSItFfU5GsJN3IIUWYuZuG BEU5a4J9//naWRXCznuqD+u7wbKT/TTVQj4bK96ClG/B -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:27 2026 by rpki-client