This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/atlX5R7OuIS1PQzqBknaYxqyxGk.roa File: atlX5R7OuIS1PQzqBknaYxqyxGk.roa (raw, json) Hash identifier: 5/i/dQUhdEq0qUCbQyvW7eHwZ91BhWUrpKQoBYHqbkA= Subject key identifier: 6A:D9:57:E5:1E:CE:B8:84:B5:3D:0C:EA:06:49:DA:63:1A:B2:C4:69 Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Certificate serial: 019B7D5D2FE854B6E74FEF40AA6FC7D99066 Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/atlX5R7OuIS1PQzqBknaYxqyxGk.roa Signing time: Fri 02 Jan 2026 06:20:17 +0000 ROA not before: Fri 02 Jan 2026 06:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213845 IP address blocks: 77.93.88.0/22 maxlen: 24 217.116.168.0/21 maxlen: 24 2a14:7dc0:100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 Jan 2026 04:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2f:e8:54:b6:e7:4f:ef:40:aa:6f:c7:d9:90:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Validity Not Before: Jan 2 06:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ad957e51eceb884b53d0cea0649da631ab2c469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:62:4c:79:9a:de:27:c0:43:02:35:d5:b0:f8: de:cd:27:66:5e:4b:28:cf:49:50:20:f7:67:35:37: e3:94:bd:38:0d:9c:0e:d8:36:c6:ac:d7:93:6d:e8: c3:73:5d:9d:96:4e:2a:6a:00:cf:ff:f8:15:1b:3b: 9e:a7:71:6a:d8:b4:a7:f5:26:97:04:05:c4:f7:3d: 14:f1:be:d7:a7:05:1e:e2:c1:20:5e:d0:ae:9d:06: 5b:ae:7a:e0:c4:4d:0d:ed:8a:96:5b:9a:a0:a0:ea: 4d:a8:67:b7:1c:2a:bc:69:14:85:23:6d:e9:fb:66: fa:a8:17:35:40:b5:99:ef:b4:a9:13:60:be:1f:a0: a8:c1:7d:91:3a:6e:e6:57:66:a4:8c:90:23:1f:94: aa:a9:7c:38:fc:ee:4b:6b:c3:ba:b0:e3:56:49:72: f2:d8:86:b4:df:f8:23:f1:96:18:4c:f6:2e:e4:23: 6c:7f:01:a9:0b:43:ad:38:90:0e:0f:03:56:8c:4a: 1c:55:ff:58:9b:5b:84:1c:d6:67:f1:2e:45:85:ed: 6d:42:0a:be:51:5a:2b:89:55:1b:88:75:10:f7:69: 20:ba:5d:7d:9e:c2:8b:c4:38:26:5c:30:ce:73:4f: 1c:a5:5b:85:59:cc:bf:f0:b0:31:9a:8a:9b:24:15: 4e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D9:57:E5:1E:CE:B8:84:B5:3D:0C:EA:06:49:DA:63:1A:B2:C4:69 X509v3 Authority Key Identifier: keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/atlX5R7OuIS1PQzqBknaYxqyxGk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.93.88.0/22 217.116.168.0/21 IPv6: 2a14:7dc0:100::/40 Signature Algorithm: sha256WithRSAEncryption 9c:0c:63:b5:7c:d0:d5:1b:25:40:d6:7e:0f:87:a1:94:67:ea: 2c:01:66:d0:76:e7:67:d3:b7:80:6a:a8:e1:87:4f:ae:de:27: 4a:ed:31:57:49:5f:d7:27:a1:8b:b5:2a:5a:25:07:d2:fb:2d: cd:cb:72:34:62:bf:23:26:3b:66:7a:20:e7:e2:0d:70:f9:1b: b1:9c:8b:69:c3:af:69:f4:84:6e:49:c1:ae:a8:05:68:17:d8: dd:03:0b:23:8c:98:92:7c:2d:bf:2e:bb:4c:0e:3d:90:72:fb: 59:e3:e8:e8:f9:c1:4a:5d:bf:b5:92:82:d2:44:fc:ac:fd:7b: 2e:1f:51:32:71:30:c8:e5:4a:9d:17:38:ef:0a:30:56:7e:3e: 08:c6:cd:59:a0:46:94:93:51:b2:a7:f9:d5:b1:7c:e2:5c:32: 1b:00:22:29:19:1c:04:f5:e4:2f:96:02:a9:ce:c0:61:e3:51: fd:7b:7d:42:b8:85:f3:0a:07:90:9e:3c:a2:99:03:2d:6b:76: f9:8c:33:1e:21:53:12:58:61:95:37:f3:32:6c:3e:ee:57:4c: a8:2b:1d:50:ac:cb:8a:75:c1:78:6b:c6:23:8a:e4:03:b9:94: 4d:dc:26:f2:61:40:01:80:0c:b4:46:dc:46:46:ba:e2:6d:be: 17:1b:c9:00 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt9XS/oVLbnT+9Aqm/H2ZBmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZDNjYTJjMjMxYWZkZjNiMDM1NWM3N2E3Y2JiMjI2Zjgx Yjc0ZGUwHhcNMjYwMTAyMDYyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWQ5NTdlNTFlY2ViODg0YjUzZDBjZWEwNjQ5ZGE2MzFhYjJjNDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmJMeZreJ8BDAjXVsPjezSdmXkso z0lQIPdnNTfjlL04DZwO2DbGrNeTbejDc12dlk4qagDP//gVGzuep3Fq2LSn9SaX BAXE9z0U8b7XpwUe4sEgXtCunQZbrnrgxE0N7YqWW5qgoOpNqGe3HCq8aRSFI23p +2b6qBc1QLWZ77SpE2C+H6CowX2ROm7mV2akjJAjH5SqqXw4/O5La8O6sONWSXLy 2Ia03/gj8ZYYTPYu5CNsfwGpC0OtOJAODwNWjEocVf9Ym1uEHNZn8S5Fhe1tQgq+ UVoriVUbiHUQ92kgul19nsKLxDgmXDDOc08cpVuFWcy/8LAxmoqbJBVOawIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFGrZV+UezriEtT0M6gZJ2mMassRpMB8GA1UdIwQY MBaAFNjTyiwjGv3zsDVcd6fLsib4G3TeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTkt OTkxMjhiZjZhODQxLzEvYXRsWDVSN091SVMxUFF6cUJrbmFZeHF5eEdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTktOTkxMjhiZjZhODQx LzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQCTV1YAwQD 2XSoMA4EAgACMAgDBgAqFH3AATANBgkqhkiG9w0BAQsFAAOCAQEAnAxjtXzQ1Rsl QNZ+D4ehlGfqLAFm0HbnZ9O3gGqo4YdPrt4nSu0xV0lf1yehi7UqWiUH0vstzcty NGK/IyY7Znog5+INcPkbsZyLacOvafSEbknBrqgFaBfY3QMLI4yYknwtvy67TA49 kHL7WePo6PnBSl2/tZKC0kT8rP17Lh9RMnEwyOVKnRc47wowVn4+CMbNWaBGlJNR sqf51bF84lwyGwAiKRkcBPXkL5YCqc7AYeNR/Xt9QriF8woHkJ48opkDLWt2+Ywz HiFTElhhlTfzMmw+7ldMqCsdUKzLinXBeGvGI4rkA7mUTdwm8mFAAYAMtEbcRka6 4m2+FxvJAA== -----END CERTIFICATE-----Generated at Wed Jan 14 09:33:30 2026 by rpki-client