This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/aZZsOIYuWQNX6KZ6wMS1a5w6xsQ.roa File: aZZsOIYuWQNX6KZ6wMS1a5w6xsQ.roa (raw, json) Hash identifier: sOa0dIn7uqNOrAivXJIEeikXKxFSaK1g51TxfgbbJB8= Subject key identifier: 69:96:6C:38:86:2E:59:03:57:E8:A6:7A:C0:C4:B5:6B:9C:3A:C6:C4 Certificate issuer: /CN=e61c07c951488f04cb3b0fd338af84d77e46bf52 Certificate serial: 019B7F83CB0005DB151B205EB07B3CC68DE8 Authority key identifier: E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/aZZsOIYuWQNX6KZ6wMS1a5w6xsQ.roa Signing time: Fri 02 Jan 2026 16:21:42 +0000 ROA not before: Fri 02 Jan 2026 16:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15507 IP address blocks: 193.201.36.0/24 maxlen: 24 2001:678:b18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:cb:00:05:db:15:1b:20:5e:b0:7b:3c:c6:8d:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e61c07c951488f04cb3b0fd338af84d77e46bf52 Validity Not Before: Jan 2 16:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69966c38862e590357e8a67ac0c4b56b9c3ac6c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:82:83:6e:28:1a:63:b1:31:ec:4d:92:0c:95: 70:c8:46:ca:d1:8e:c8:7d:82:6a:76:23:e0:a2:ac: 68:b0:80:f1:9b:2f:9f:29:c4:fe:bf:21:6f:8a:1a: 91:70:c1:e3:c7:66:74:fe:c1:8e:32:10:3b:b2:60: 6a:22:16:ce:2c:53:89:fe:1f:6b:81:24:a7:8e:e0: 3f:23:a4:2f:9b:42:1f:d3:f3:06:1c:67:d1:ef:e4: 3d:13:7b:91:5c:d8:34:2e:8f:07:ac:33:bf:7e:e7: 2e:dc:b8:95:5c:93:c8:00:07:0e:56:a6:45:6c:7c: 7b:cd:dd:f3:22:f8:ad:71:b2:6b:ff:c7:7e:ae:53: e5:5a:a1:c7:03:3f:40:7e:3d:c2:80:8b:54:77:9a: 7c:dc:82:e9:24:7d:48:12:2e:ec:81:7a:1d:c0:26: 46:83:3e:8a:eb:c6:d6:b1:4e:b7:f1:d8:b3:c1:7e: 13:2b:2e:7b:e8:e7:ab:8a:de:99:b9:d3:c0:c9:e1: 02:15:ce:1f:0b:5f:0c:4e:4e:b7:06:db:1e:4e:5f: 16:28:8e:f8:db:12:d2:c5:0a:e8:bd:db:18:ac:19: 29:ff:67:d5:ce:79:15:dd:9f:1c:c9:bd:ab:35:2d: 85:09:71:8b:e5:4f:f3:d2:80:a6:51:d5:de:55:a5: 2f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:96:6C:38:86:2E:59:03:57:E8:A6:7A:C0:C4:B5:6B:9C:3A:C6:C4 X509v3 Authority Key Identifier: keyid:E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/aZZsOIYuWQNX6KZ6wMS1a5w6xsQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.201.36.0/24 IPv6: 2001:678:b18::/48 Signature Algorithm: sha256WithRSAEncryption aa:ee:4f:00:ba:f6:4b:42:ef:c3:0c:20:0d:13:26:1d:47:13: 05:49:93:2b:00:e3:bd:1d:68:91:5e:0d:57:55:ee:7d:3d:6d: ae:28:38:55:4d:7a:82:09:0d:d9:a5:a1:b7:73:7a:18:bd:75: 22:21:80:2f:dd:2b:85:d2:22:9e:79:7d:13:2f:d8:74:4f:62: 32:ad:67:42:3d:99:d8:ef:8e:3c:ea:fe:51:04:ec:53:99:cb: b8:8b:83:b8:b1:f8:97:47:cf:c6:61:e2:cc:8b:5f:f4:4c:d1: 9e:08:f8:ed:ad:df:e3:b7:6b:5e:cd:55:98:23:5d:4a:34:28: 38:89:68:35:d4:34:75:82:97:a2:f3:7c:c3:56:7d:4d:95:29: be:b7:97:95:2c:d4:12:bc:00:f2:cd:70:4c:34:85:55:74:e5: 87:fc:9c:35:b9:ff:a0:b3:eb:ca:8a:af:94:e1:63:10:dc:b0: b0:57:b5:10:d6:58:3b:3f:97:c0:85:52:99:f2:5c:2f:cc:a7: 1d:e6:67:24:a3:10:b5:71:7b:26:87:19:1d:2b:3d:48:e6:80: 67:69:7a:da:26:02:ea:dc:bf:6a:64:e1:02:09:b7:8c:a0:28: 7b:fe:fb:1e:07:8a:ec:f5:8e:df:ac:58:ee:a1:3f:7a:71:60: dd:5e:7e:0e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/g8sABdsVGyBesHs8xo3oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MWMwN2M5NTE0ODhmMDRjYjNiMGZkMzM4YWY4NGQ3N2U0 NmJmNTIwHhcNMjYwMTAyMTYyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTk2NmMzODg2MmU1OTAzNTdlOGE2N2FjMGM0YjU2YjljM2FjNmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYKDbigaY7Ex7E2SDJVwyEbK0Y7I fYJqdiPgoqxosIDxmy+fKcT+vyFvihqRcMHjx2Z0/sGOMhA7smBqIhbOLFOJ/h9r gSSnjuA/I6Qvm0If0/MGHGfR7+Q9E3uRXNg0Lo8HrDO/fucu3LiVXJPIAAcOVqZF bHx7zd3zIvitcbJr/8d+rlPlWqHHAz9Afj3CgItUd5p83ILpJH1IEi7sgXodwCZG gz6K68bWsU638dizwX4TKy576Oerit6ZudPAyeECFc4fC18MTk63BtseTl8WKI74 2xLSxQrovdsYrBkp/2fVznkV3Z8cyb2rNS2FCXGL5U/z0oCmUdXeVaUvTQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGmWbDiGLlkDV+imesDEtWucOsbEMB8GA1UdIwQY MBaAFOYcB8lRSI8EyzsP0zivhNd+Rr9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWh3SHlWRklqd1RMT3dfVE9LLUUxMzVHdjFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yZGJhNWMtOWE5MC00MDUyLWExZWIt NmE4NDc3Y2I2YzJhLzEvYVpac09JWXVXUU5YNktaNndNUzFhNXc2eHNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8yZGJhNWMtOWE5MC00MDUyLWExZWItNmE4NDc3Y2I2YzJh LzEvNWh3SHlWRklqd1RMT3dfVE9LLUUxMzVHdjFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwckkMA8E AgACMAkDBwAgAQZ4CxgwDQYJKoZIhvcNAQELBQADggEBAKruTwC69ktC78MMIA0T Jh1HEwVJkysA470daJFeDVdV7n09ba4oOFVNeoIJDdmlobdzehi9dSIhgC/dK4XS Ip55fRMv2HRPYjKtZ0I9mdjvjjzq/lEE7FOZy7iLg7ix+JdHz8Zh4syLX/RM0Z4I +O2t3+O3a17NVZgjXUo0KDiJaDXUNHWCl6LzfMNWfU2VKb63l5Us1BK8APLNcEw0 hVV05Yf8nDW5/6Cz68qKr5ThYxDcsLBXtRDWWDs/l8CFUpnyXC/Mpx3mZySjELVx eyaHGR0rPUjmgGdpetomAurcv2pk4QIJt4ygKHv++x4Hiuz1jt+sWO6hP3pxYN1e fg4= -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:33 2026 by rpki-client