This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/aXG7NaIqGWKi7o6aHjPRE8HPFiA.roa File: aXG7NaIqGWKi7o6aHjPRE8HPFiA.roa (raw, json) Hash identifier: jDv0yDp23XKkwYEhPArJWGx2AbgEczFY3DeF1dGUSmY= Subject key identifier: 69:71:BB:35:A2:2A:19:62:A2:EE:8E:9A:1E:33:D1:13:C1:CF:16:20 Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733 Certificate serial: 019C14CD633A7DEA7C0F9AD2632329CA89D5 Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/aXG7NaIqGWKi7o6aHjPRE8HPFiA.roa Signing time: Sat 31 Jan 2026 16:05:30 +0000 ROA not before: Sat 31 Jan 2026 16:05:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 80.246.229.0/24 maxlen: 24 80.246.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 21:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:14:cd:63:3a:7d:ea:7c:0f:9a:d2:63:23:29:ca:89:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733 Validity Not Before: Jan 31 16:05:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6971bb35a22a1962a2ee8e9a1e33d113c1cf1620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cc:53:e2:1a:7d:28:8a:86:46:e0:90:32:b7: b4:c7:d5:c5:bc:80:09:05:1c:e8:04:ab:d3:fd:c1: 67:77:45:2a:3c:61:f9:ed:d2:31:b4:81:9d:c6:2a: 0a:de:ee:75:9d:ca:d6:9d:07:5c:de:4c:1b:ef:a2: 2a:cc:a1:18:5d:a1:7e:50:67:33:cd:42:d7:8d:d8: 6f:24:b2:50:d8:bb:8d:51:d3:b2:de:ff:3d:1b:72: f4:bb:6f:43:68:fe:64:6e:c8:36:8e:39:a7:c8:b0: 64:72:f9:c8:4f:1b:7b:02:1f:66:6b:97:c4:1b:8f: 4c:b7:df:10:57:10:0c:e7:70:c9:c7:85:a2:99:85: ec:f3:f1:e3:fe:91:0a:d8:81:34:1d:50:3b:84:9d: 00:fc:cb:13:96:25:36:71:c0:bf:04:8d:b7:fb:ec: 8d:21:67:55:da:13:cc:15:47:40:17:cd:c2:6e:4d: 0e:72:e3:15:35:ba:40:e1:6a:09:d2:b4:d5:a4:08: be:b6:5e:d7:3c:a7:3a:ff:48:89:49:13:27:7e:d2: 28:d8:a5:e3:ea:a7:be:ed:bb:b7:65:ac:00:c6:fa: 56:42:83:13:c9:c7:5f:f9:2c:dc:fe:ac:3d:e8:7c: 4e:6b:a3:af:04:d5:53:5a:63:3f:c2:2e:11:23:30: b1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:71:BB:35:A2:2A:19:62:A2:EE:8E:9A:1E:33:D1:13:C1:CF:16:20 X509v3 Authority Key Identifier: keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/aXG7NaIqGWKi7o6aHjPRE8HPFiA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.246.229.0-80.246.230.255 Signature Algorithm: sha256WithRSAEncryption 6b:f1:4d:a6:9e:45:20:92:74:08:6c:0c:f4:53:dc:71:a9:e1: b8:16:18:63:ea:64:6d:ab:cd:ed:eb:97:0c:09:15:0c:81:d2: ca:7b:8c:f6:19:2c:19:79:45:df:a6:95:cb:25:36:75:8d:8e: 9c:60:c5:37:b5:ea:d7:df:6b:a8:9d:83:ac:11:92:9f:ad:dc: 68:48:09:18:43:65:86:e6:7d:56:d3:8d:04:9a:4a:1a:28:cc: 14:7c:0b:f2:f5:ba:e3:2f:0b:d7:ea:3f:46:48:59:c8:5c:c3: 5c:16:e4:4a:2f:2f:94:f5:c8:fd:aa:a8:f8:4d:37:75:65:5d: 20:95:9b:f3:a0:4b:fc:ad:12:6c:75:24:f6:14:9b:0c:41:df: 6b:ed:87:c2:da:47:5f:f3:f1:89:57:3d:06:eb:f1:5f:b1:f5: e3:3f:a8:3f:e9:02:36:af:60:90:7f:df:9a:cb:44:11:12:2a: 80:23:f5:d0:43:ac:aa:01:bd:1f:b4:a4:40:35:7b:c7:d8:7e: 2f:33:65:fe:fd:ac:70:f2:c8:ac:5c:ef:e4:d8:53:e8:34:e1: d8:27:1e:da:fc:61:4e:c6:70:f3:64:45:77:6d:4b:93:9b:39: 4f:8d:70:81:09:4a:c8:1c:be:44:19:79:82:ba:31:8d:c4:2a: b9:61:64:11 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZwUzWM6fep8D5rSYyMpyonVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2 Y2Q3MzMwHhcNMjYwMTMxMTYwNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTcxYmIzNWEyMmExOTYyYTJlZThlOWExZTMzZDExM2MxY2YxNjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8xT4hp9KIqGRuCQMre0x9XFvIAJ BRzoBKvT/cFnd0UqPGH57dIxtIGdxioK3u51ncrWnQdc3kwb76IqzKEYXaF+UGcz zULXjdhvJLJQ2LuNUdOy3v89G3L0u29DaP5kbsg2jjmnyLBkcvnITxt7Ah9ma5fE G49Mt98QVxAM53DJx4WimYXs8/Hj/pEK2IE0HVA7hJ0A/MsTliU2ccC/BI23++yN IWdV2hPMFUdAF83Cbk0OcuMVNbpA4WoJ0rTVpAi+tl7XPKc6/0iJSRMnftIo2KXj 6qe+7bu3ZawAxvpWQoMTycdf+Szc/qw96HxOa6OvBNVTWmM/wi4RIzCxtwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGlxuzWiKhliou6Omh4z0RPBzxYgMB8GA1UdIwQY MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt YWRlYWRlMjg2NWMxLzEvYVhHN05hSXFHV0tpN282YUhqUFJFOEhQRmlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABQ9uUD BABQ9uYwDQYJKoZIhvcNAQELBQADggEBAGvxTaaeRSCSdAhsDPRT3HGp4bgWGGPq ZG2rze3rlwwJFQyB0sp7jPYZLBl5Rd+mlcslNnWNjpxgxTe16tffa6idg6wRkp+t 3GhICRhDZYbmfVbTjQSaShoozBR8C/L1uuMvC9fqP0ZIWchcw1wW5EovL5T1yP2q qPhNN3VlXSCVm/OgS/ytEmx1JPYUmwxB32vth8LaR1/z8YlXPQbr8V+x9eM/qD/p AjavYJB/35rLRBESKoAj9dBDrKoBvR+0pEA1e8fYfi8zZf79rHDyyKxc7+TYU+g0 4dgnHtr8YU7GcPNkRXdtS5ObOU+NcIEJSsgcvkQZeYK6MY3EKrlhZBE= -----END CERTIFICATE-----Generated at Tue Feb 3 03:03:18 2026 by rpki-client