This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/AAxqzE_DaNwqJtSiSRt01LrD11E.roa File: AAxqzE_DaNwqJtSiSRt01LrD11E.roa (raw, json) Hash identifier: AsdkBWjUsMF1PMPWszixSJb73omz0Nujo4Z01ynXMW8= Subject key identifier: 00:0C:6A:CC:4F:C3:68:DC:2A:26:D4:A2:49:1B:74:D4:BA:C3:D7:51 Certificate issuer: /CN=7976d7d0bbcc08516523d5df24e6882b72ca5693 Certificate serial: 019B77C661F1C9327065F468F8C38874FE55 Authority key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/AAxqzE_DaNwqJtSiSRt01LrD11E.roa Signing time: Thu 01 Jan 2026 04:17:28 +0000 ROA not before: Thu 01 Jan 2026 04:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57567 IP address blocks: 103.39.41.0/24 maxlen: 24 185.86.44.0/23 maxlen: 23 185.86.44.0/24 maxlen: 24 185.86.45.0/24 maxlen: 24 185.86.46.0/23 maxlen: 23 185.86.46.0/24 maxlen: 24 185.86.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 16:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:61:f1:c9:32:70:65:f4:68:f8:c3:88:74:fe:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693 Validity Not Before: Jan 1 04:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=000c6acc4fc368dc2a26d4a2491b74d4bac3d751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:b9:ea:f0:e6:32:f0:dd:0d:3e:6b:39:f4:0c: 1c:b4:86:a6:e1:bd:21:fe:f9:e5:0a:ae:2d:ca:f0: e6:0d:34:41:bb:55:ba:bd:cd:b7:86:92:fc:72:64: 92:dc:fe:41:e5:6e:20:01:f7:51:35:50:9c:47:f8: a9:1f:29:d7:70:da:e7:39:67:a8:b3:5b:a8:e5:e8: 61:50:d9:d0:8f:09:3c:f0:cf:4c:0a:d2:71:62:61: 8c:0a:a7:f3:0c:e1:85:ab:a4:bb:99:1d:86:99:0e: 85:e0:5c:65:6a:d5:db:4f:ce:64:88:65:3e:ef:64: 41:a8:d1:fd:ee:91:82:73:1d:c4:9e:3c:bd:36:36: f1:90:2b:29:0a:77:e4:35:9a:a5:32:f1:83:8d:be: 01:52:6f:80:9a:cb:a7:20:ab:c8:a6:9e:e4:4e:f4: e4:d5:95:4c:76:8a:fe:c9:eb:a4:db:de:27:4a:41: 16:dc:02:e7:1f:0f:10:e8:7c:d4:a7:3f:bc:d9:2d: e0:b2:31:fb:e7:59:60:63:bc:f3:5a:cf:c1:ef:d2: ea:47:f7:a4:65:7f:c9:89:14:6e:db:e9:aa:29:93: 40:52:08:42:c0:59:48:77:21:99:4e:4b:9b:02:80: 4c:af:a0:7b:f4:b1:c2:29:01:51:a0:72:ee:09:b0: 2b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0C:6A:CC:4F:C3:68:DC:2A:26:D4:A2:49:1B:74:D4:BA:C3:D7:51 X509v3 Authority Key Identifier: keyid:79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/AAxqzE_DaNwqJtSiSRt01LrD11E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.39.41.0/24 185.86.44.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:47:cf:b4:79:9f:11:b0:7e:1a:8e:c7:5c:5a:9f:86:54:fc: 5a:65:85:ae:e3:a9:40:a6:2e:13:7b:a0:0a:a6:13:25:94:c4: 49:87:0c:bf:e9:f9:3c:3d:d6:20:05:0a:9d:89:25:6a:5f:1f: 25:2c:f4:8e:a4:cc:f5:aa:f4:54:78:00:e4:27:9e:b5:43:98: 4c:b7:d0:f0:0e:aa:12:f7:99:de:d9:c9:a7:7a:ae:a1:08:c8: c9:32:07:67:1e:80:fd:18:08:ff:69:10:c7:38:4b:9e:58:b8: 19:bc:68:31:ff:d1:42:48:71:d7:a0:b0:8d:11:e1:33:e4:42: 4d:17:69:f7:27:fa:76:bf:c9:9a:74:c4:27:43:74:de:b2:86: 75:0b:bd:6a:7f:7e:06:48:36:2b:01:7d:ff:85:a6:39:0c:a3: ab:16:48:d1:ee:95:0d:a0:ae:12:80:2a:f0:4b:86:65:5b:32: 88:2c:46:d7:bc:3a:e8:73:68:b6:ea:bb:c0:52:37:26:98:20: 11:80:97:f6:56:88:aa:4d:88:3d:b9:cb:63:b8:27:6c:3d:f1: 47:69:1b:ce:3a:75:4c:05:14:76:ab:36:97:27:11:c7:45:99: 52:f0:93:fd:a5:33:33:28:8a:23:e6:66:6d:65:c8:64:61:3a: 64:75:4e:c3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xmHxyTJwZfRo+MOIdP5VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NzZkN2QwYmJjYzA4NTE2NTIzZDVkZjI0ZTY4ODJiNzJj YTU2OTMwHhcNMjYwMTAxMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDBjNmFjYzRmYzM2OGRjMmEyNmQ0YTI0OTFiNzRkNGJhYzNkNzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9rnq8OYy8N0NPms59AwctIam4b0h /vnlCq4tyvDmDTRBu1W6vc23hpL8cmSS3P5B5W4gAfdRNVCcR/ipHynXcNrnOWeo s1uo5ehhUNnQjwk88M9MCtJxYmGMCqfzDOGFq6S7mR2GmQ6F4FxlatXbT85kiGU+ 72RBqNH97pGCcx3Enjy9NjbxkCspCnfkNZqlMvGDjb4BUm+AmsunIKvIpp7kTvTk 1ZVMdor+yeuk294nSkEW3ALnHw8Q6HzUpz+82S3gsjH751lgY7zzWs/B79LqR/ek ZX/JiRRu2+mqKZNAUghCwFlIdyGZTkubAoBMr6B79LHCKQFRoHLuCbArcwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAAMasxPw2jcKibUokkbdNS6w9dRMB8GA1UdIwQY MBaAFHl219C7zAhRZSPV3yTmiCtyylaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kZDY5NDMtNmZjZS00MzA5LTg3MTMt ODU0MTgyY2IwNmE2LzEvQUF4cXpFX0RhTndxSnRTaVNSdDAxTHJEMTFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9kZDY5NDMtNmZjZS00MzA5LTg3MTMtODU0MTgyY2IwNmE2 LzEvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAZycpAwQC uVYsMA0GCSqGSIb3DQEBCwUAA4IBAQB6R8+0eZ8RsH4ajsdcWp+GVPxaZYWu46lA pi4Te6AKphMllMRJhwy/6fk8PdYgBQqdiSVqXx8lLPSOpMz1qvRUeADkJ561Q5hM t9DwDqoS95ne2cmneq6hCMjJMgdnHoD9GAj/aRDHOEueWLgZvGgx/9FCSHHXoLCN EeEz5EJNF2n3J/p2v8madMQnQ3TesoZ1C71qf34GSDYrAX3/haY5DKOrFkjR7pUN oK4SgCrwS4ZlWzKILEbXvDroc2i26rvAUjcmmCARgJf2VoiqTYg9uctjuCdsPfFH aRvOOnVMBRR2qzaXJxHHRZlS8JP9pTMzKIoj5mZtZchkYTpkdU7D -----END CERTIFICATE-----Generated at Sat Jan 3 01:34:30 2026 by rpki-client