This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/AyulhXyOhP2buicHYb4PF6awarA.roa File: AyulhXyOhP2buicHYb4PF6awarA.roa (raw, json) Hash identifier: o1jB5gIRXTUngRxBAxg2DTNhVQcSy127ziFioxQ1PVM= Subject key identifier: 03:2B:A5:85:7C:8E:84:FD:9B:BA:27:07:61:BE:0F:17:A6:B0:6A:B0 Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019B7910E7123E738AC8CAF7F9F70C49C4D2 Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/AyulhXyOhP2buicHYb4PF6awarA.roa Signing time: Thu 01 Jan 2026 10:18:29 +0000 ROA not before: Thu 01 Jan 2026 10:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 5.181.200.0/24 maxlen: 24 45.158.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 07:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e7:12:3e:73:8a:c8:ca:f7:f9:f7:0c:49:c4:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Jan 1 10:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=032ba5857c8e84fd9bba270761be0f17a6b06ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:38:eb:0f:db:ef:ed:ee:34:a9:54:7a:da:04: 9b:97:cd:2d:09:e4:cc:6e:46:e3:11:1c:93:9d:26: 17:99:54:84:48:9d:1e:09:5c:eb:bf:dd:8b:83:f1: e4:93:46:5d:1d:41:61:af:34:52:a9:0d:76:88:7d: 2b:47:7a:83:f4:1c:f3:5b:4f:33:fe:81:51:67:0f: 85:06:67:fe:cf:18:57:c6:23:12:32:66:75:38:22: 93:8d:95:3c:b9:b8:71:1e:24:38:f4:43:66:d0:bd: 5c:53:82:3c:3c:5b:39:d4:2b:41:7b:58:07:3a:36: 8c:13:53:31:09:f9:a3:cc:e1:f0:e5:ab:6f:e1:d9: dc:d0:ee:32:34:9c:3e:0b:ab:46:1e:59:18:86:2a: 39:5c:d5:6a:9e:a9:a4:6e:ac:85:de:92:3a:09:c5: c9:1b:7e:61:ae:88:f0:9d:90:33:a6:4b:26:73:c5: cd:2f:ba:4d:e1:8e:80:56:7b:5f:97:a8:ef:82:8d: dd:f7:b7:8d:92:35:fc:72:14:cc:c5:26:46:b6:02: 93:9a:f8:07:19:0d:a5:5d:59:38:c8:9d:5e:44:d7: 71:69:23:4b:60:a8:a4:68:1e:00:24:49:41:cd:d9: 5f:85:03:dd:04:4c:9a:29:16:68:a2:6b:77:9b:31: e8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2B:A5:85:7C:8E:84:FD:9B:BA:27:07:61:BE:0F:17:A6:B0:6A:B0 X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/AyulhXyOhP2buicHYb4PF6awarA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.200.0/24 45.158.83.0/24 Signature Algorithm: sha256WithRSAEncryption 50:76:5b:bb:e7:d7:6b:ba:57:9e:3e:8c:5f:e5:9c:c6:94:0f: eb:af:15:f4:db:61:23:7f:2e:73:0a:3d:ce:2b:07:b6:e2:44: cc:f2:16:62:65:98:16:fa:f2:53:22:e6:6f:ff:e7:c2:10:42: 73:1f:2e:cc:e4:13:be:7d:d1:3e:18:2a:fb:15:3d:ad:bb:45: 56:34:49:34:36:11:83:2d:30:37:41:59:4c:ee:f9:d4:ee:b9: 7e:73:ba:e1:f7:f7:1c:86:97:60:1a:df:e5:3b:42:19:9e:42: b2:59:68:f6:a4:5b:e4:eb:db:77:7a:ec:86:96:c1:96:23:02: a9:b3:15:d3:d6:60:69:cd:ac:ac:2f:7f:e2:fa:dd:ea:c1:5b: cd:58:6e:07:67:5c:a6:a7:61:01:a9:6f:2b:05:6e:a4:ff:74: 71:24:3a:48:45:8c:c9:4d:3b:ef:92:51:bd:97:94:1c:d0:d6: 99:a5:99:11:1f:fa:3f:74:9d:8c:31:57:64:65:3f:80:43:08: 84:fa:82:72:3c:e3:37:a9:c5:f9:12:57:0d:ff:67:20:e6:ba: f7:08:e1:e1:5d:1c:16:76:44:c2:fe:f7:6b:fd:81:23:83:a2: dc:db:8b:46:bf:52:63:f0:ea:53:0c:51:b0:a5:54:37:a2:a1: ba:55:92:67 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EOcSPnOKyMr3+fcMScTSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwMTAxMTAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzJiYTU4NTdjOGU4NGZkOWJiYTI3MDc2MWJlMGYxN2E2YjA2YWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjjrD9vv7e40qVR62gSbl80tCeTM bkbjERyTnSYXmVSESJ0eCVzrv92Lg/Hkk0ZdHUFhrzRSqQ12iH0rR3qD9BzzW08z /oFRZw+FBmf+zxhXxiMSMmZ1OCKTjZU8ubhxHiQ49ENm0L1cU4I8PFs51CtBe1gH OjaME1MxCfmjzOHw5atv4dnc0O4yNJw+C6tGHlkYhio5XNVqnqmkbqyF3pI6CcXJ G35hrojwnZAzpksmc8XNL7pN4Y6AVntfl6jvgo3d97eNkjX8chTMxSZGtgKTmvgH GQ2lXVk4yJ1eRNdxaSNLYKikaB4AJElBzdlfhQPdBEyaKRZoomt3mzHoJwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAMrpYV8joT9m7onB2G+DxemsGqwMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEvQXl1bGhYeU9oUDJidWljSFliNFBGNmF3YXJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbXIAwQA LZ5TMA0GCSqGSIb3DQEBCwUAA4IBAQBQdlu759druleePoxf5ZzGlA/rrxX022Ej fy5zCj3OKwe24kTM8hZiZZgW+vJTIuZv/+fCEEJzHy7M5BO+fdE+GCr7FT2tu0VW NEk0NhGDLTA3QVlM7vnU7rl+c7rh9/cchpdgGt/lO0IZnkKyWWj2pFvk69t3euyG lsGWIwKpsxXT1mBpzaysL3/i+t3qwVvNWG4HZ1ymp2EBqW8rBW6k/3RxJDpIRYzJ TTvvklG9l5Qc0NaZpZkRH/o/dJ2MMVdkZT+AQwiE+oJyPOM3qcX5ElcN/2cg5rr3 COHhXRwWdkTC/vdr/YEjg6Lc24tGv1Jj8OpTDFGwpVQ3oqG6VZJn -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:11 2026 by rpki-client