This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/aZ3Yoe0ZQdIXylk1FrtEwAkUD8k.roa File: aZ3Yoe0ZQdIXylk1FrtEwAkUD8k.roa (raw, json) Hash identifier: q1ah2hweQU+cFtZrhhXan7MxnsmHv01bYbCdDje0NNY= Subject key identifier: 69:9D:D8:A1:ED:19:41:D2:17:CA:59:35:16:BB:44:C0:09:14:0F:C9 Certificate issuer: /CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e Certificate serial: 019B797EE6F6EFC595555F4DA9137BF3B32A Authority key identifier: CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/aZ3Yoe0ZQdIXylk1FrtEwAkUD8k.roa Signing time: Thu 01 Jan 2026 12:18:38 +0000 ROA not before: Thu 01 Jan 2026 12:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202710 IP address blocks: 185.9.139.0/24 maxlen: 24 2a0c:b600::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e6:f6:ef:c5:95:55:5f:4d:a9:13:7b:f3:b3:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e Validity Not Before: Jan 1 12:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=699dd8a1ed1941d217ca593516bb44c009140fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8a:a8:bf:9e:2e:43:ac:f6:49:0d:ee:ab:a5: 52:ea:cd:be:19:8f:e6:83:8f:95:02:d6:3a:8b:cf: 7a:9e:1f:7b:26:7f:a0:35:0f:6a:d6:01:79:15:41: 89:33:a0:b2:95:89:7b:0b:be:0f:ae:8d:76:cf:c3: 6d:c0:0a:fe:b9:26:ef:ae:e0:8c:85:3d:d6:8a:a0: 25:d5:5c:0f:05:77:35:f0:ed:7d:24:18:89:99:fe: b0:e8:14:0c:da:74:a8:08:fc:38:bd:02:72:33:ea: df:92:42:35:89:a3:88:8e:d3:84:a4:05:73:fa:d3: ff:02:3d:10:ed:ad:cd:8b:ed:fe:f4:01:4d:67:61: 98:92:2b:9c:ff:75:f4:f3:be:be:14:ef:6b:be:09: 0b:85:c5:4c:e6:c2:72:9c:1d:a5:45:c3:cc:ea:3e: 84:6d:1b:13:08:7d:5b:8c:0e:1b:cc:26:55:0a:b4: d9:78:68:42:30:f4:80:97:68:99:b9:78:68:84:11: be:6c:81:34:3f:c8:c6:26:45:42:d0:17:d5:dd:47: af:35:87:4e:68:94:c2:65:9b:35:3e:ea:69:0b:e9: f4:c7:25:49:6a:a7:8c:29:8c:04:fc:aa:72:10:53: e2:9a:18:ce:64:bc:bd:f4:d5:2e:46:0c:aa:92:16: b8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9D:D8:A1:ED:19:41:D2:17:CA:59:35:16:BB:44:C0:09:14:0F:C9 X509v3 Authority Key Identifier: keyid:CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/aZ3Yoe0ZQdIXylk1FrtEwAkUD8k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.9.139.0/24 IPv6: 2a0c:b600::/29 Signature Algorithm: sha256WithRSAEncryption 94:fd:f0:6f:a3:5d:30:50:bc:ea:76:48:c1:1c:23:f7:06:ab: 6d:c2:34:30:dd:70:ef:68:2a:ce:bb:83:9b:67:d1:00:00:db: 96:7b:db:52:7d:46:62:71:90:be:6d:4e:fe:06:73:39:ce:49: 63:84:55:27:03:8f:d3:43:92:14:5d:79:be:78:fd:a7:2f:0b: f8:d4:47:0e:11:88:d8:4b:df:88:0b:bb:ec:e1:d8:a2:57:91: 4c:1c:ab:ff:00:e5:95:53:91:40:7d:a9:fd:b4:c4:1b:85:c4: c2:db:1f:f1:06:de:0e:b7:9e:3a:90:78:71:82:e7:7a:9e:36: ee:6a:e2:af:8b:44:1c:da:95:b4:b2:58:f4:37:da:de:ae:d1: 89:00:8c:32:35:97:05:af:48:6e:24:79:8a:95:4b:ca:63:18: 7a:b4:4d:ff:3f:91:77:34:0f:ff:e3:e5:83:3b:1e:23:d1:f4: 11:96:0c:3c:10:2c:86:1a:e2:12:ee:68:45:a1:bf:a0:93:a6: 12:8b:83:43:c8:fa:b5:a7:26:25:32:18:e3:32:64:fe:be:23: 27:ae:52:ce:f5:fe:ff:19:e7:ad:41:a1:ac:f4:79:15:b8:b7: a8:05:35:18:77:f6:58:ca:65:59:07:53:d1:2f:39:48:ea:ee: 5a:83:71:3f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fub278WVVV9NqRN787MqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNDI0YjQwYzFmODQwODRmOGQ0MGYyYjlkY2JlMWUxZjkx NmFmM2UwHhcNMjYwMTAxMTIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTlkZDhhMWVkMTk0MWQyMTdjYTU5MzUxNmJiNDRjMDA5MTQwZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoqov54uQ6z2SQ3uq6VS6s2+GY/m g4+VAtY6i896nh97Jn+gNQ9q1gF5FUGJM6CylYl7C74Pro12z8NtwAr+uSbvruCM hT3WiqAl1VwPBXc18O19JBiJmf6w6BQM2nSoCPw4vQJyM+rfkkI1iaOIjtOEpAVz +tP/Aj0Q7a3Ni+3+9AFNZ2GYkiuc/3X0876+FO9rvgkLhcVM5sJynB2lRcPM6j6E bRsTCH1bjA4bzCZVCrTZeGhCMPSAl2iZuXhohBG+bIE0P8jGJkVC0BfV3UevNYdO aJTCZZs1PuppC+n0xyVJaqeMKYwE/KpyEFPimhjOZLy99NUuRgyqkha4gQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGmd2KHtGUHSF8pZNRa7RMAJFA/JMB8GA1UdIwQY MBaAFMtCS0DB+ECE+NQPK53L4eH5Fq8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTBKTFFNSDRRSVQ0MUE4cm5jdmg0ZmtXcno0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS81MWJmZDktN2ZmYi00MTU5LTllZDUt M2E1ZmVjYWNkNDlhLzEvYVozWW9lMFpRZElYeWxrMUZydEV3QWtVRDhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS81MWJmZDktN2ZmYi00MTU5LTllZDUtM2E1ZmVjYWNkNDlh LzEveTBKTFFNSDRRSVQ0MUE4cm5jdmg0ZmtXcno0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuQmLMA0E AgACMAcDBQMqDLYAMA0GCSqGSIb3DQEBCwUAA4IBAQCU/fBvo10wULzqdkjBHCP3 BqttwjQw3XDvaCrOu4ObZ9EAANuWe9tSfUZicZC+bU7+BnM5zkljhFUnA4/TQ5IU XXm+eP2nLwv41EcOEYjYS9+IC7vs4diiV5FMHKv/AOWVU5FAfan9tMQbhcTC2x/x Bt4Ot546kHhxgud6njbuauKvi0Qc2pW0slj0N9rertGJAIwyNZcFr0huJHmKlUvK Yxh6tE3/P5F3NA//4+WDOx4j0fQRlgw8ECyGGuIS7mhFob+gk6YSi4NDyPq1pyYl MhjjMmT+viMnrlLO9f7/GeetQaGs9HkVuLeoBTUYd/ZYymVZB1PRLzlI6u5ag3E/ -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:34 2026 by rpki-client