This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/AvxqIWZ-E7bh6G4yF6njgmxxMMI.roa File: AvxqIWZ-E7bh6G4yF6njgmxxMMI.roa (raw, json) Hash identifier: Z+imZ5655NZiZ8Bxl+9m7o5Ixqod9YPgL5ar48lEv6c= Subject key identifier: 02:FC:6A:21:66:7E:13:B6:E1:E8:6E:32:17:A9:E3:82:6C:71:30:C2 Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7 Certificate serial: 019B7C800DF8A23371D22B83065F84CA8DF4 Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/AvxqIWZ-E7bh6G4yF6njgmxxMMI.roa Signing time: Fri 02 Jan 2026 02:18:45 +0000 ROA not before: Fri 02 Jan 2026 02:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202278 IP address blocks: 80.75.214.0/24 maxlen: 24 2a13:5680::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:0d:f8:a2:33:71:d2:2b:83:06:5f:84:ca:8d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7 Validity Not Before: Jan 2 02:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02fc6a21667e13b6e1e86e3217a9e3826c7130c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b4:f4:a7:d9:93:66:2d:e9:7f:b9:06:22:32: 6d:7a:f6:86:1b:c2:14:93:8d:58:b1:f1:46:b0:02: 30:85:af:d1:4e:82:77:d0:7d:ba:e6:59:e2:b0:e4: 4b:8e:e9:27:f0:d6:6a:8a:63:45:c0:59:14:07:68: 7e:95:ec:66:7d:32:10:15:18:1f:b8:6b:c8:15:98: 35:6b:31:47:5a:61:08:55:57:08:0a:84:4e:e4:d4: 4e:51:ed:e8:d0:d6:9e:a4:7b:da:0f:22:87:9e:2f: 08:c1:43:b4:c0:63:64:a6:b7:1c:67:14:bc:f2:d1: 56:64:c4:20:90:65:84:40:f8:70:0f:59:ee:1e:22: 00:40:8f:0d:de:3d:dc:9c:92:b8:f3:2c:0f:d6:90: e6:16:4f:f2:b2:1c:3a:39:f6:e0:d8:56:5d:97:b6: 18:79:94:85:a4:56:4e:a3:38:df:7e:1c:a6:ae:f0: 19:b0:28:07:54:5a:13:9d:c6:40:0b:79:b5:51:c1: c7:35:b3:2d:49:d4:3d:0e:ed:b3:bb:e1:5c:c3:2f: aa:b9:98:d4:c1:4b:b6:f1:6c:a5:8b:b8:a8:72:4b: 65:22:bf:0c:57:d9:86:44:ee:44:68:41:d3:96:87: 69:aa:41:35:72:c8:3c:71:b1:e4:30:57:c8:62:fc: 39:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FC:6A:21:66:7E:13:B6:E1:E8:6E:32:17:A9:E3:82:6C:71:30:C2 X509v3 Authority Key Identifier: keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/AvxqIWZ-E7bh6G4yF6njgmxxMMI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.75.214.0/24 IPv6: 2a13:5680::/32 Signature Algorithm: sha256WithRSAEncryption 3a:8b:cb:7b:e5:97:d2:f1:3f:b2:69:bd:95:92:06:ed:a0:fe: 5d:41:7d:83:d6:9e:47:81:e7:a7:c9:7b:6e:58:7e:38:60:11: 21:09:6d:5a:19:b8:9e:1c:a1:77:eb:00:90:d0:7d:ac:dc:ee: ef:b1:64:97:e7:a8:63:c6:6c:de:bb:33:a0:c6:87:d8:09:de: 0b:7b:35:76:00:1e:99:d0:84:d2:65:42:0c:f9:83:0f:1f:9b: 97:d7:63:71:91:9a:d2:eb:0a:2c:be:06:8c:d2:8b:3a:f6:6a: 87:ed:b3:b6:24:4d:cd:22:60:0d:08:36:d5:47:03:81:5c:50: d2:28:81:46:57:90:51:4b:b3:3e:2e:19:cb:20:29:80:41:6d: e6:22:f2:9f:d1:63:88:dd:ea:a2:c8:73:73:43:64:39:01:de: 60:33:67:10:39:78:52:3a:e8:6d:a7:62:bd:90:c0:ac:d6:97: e1:e1:fc:8f:61:e0:24:4c:62:18:0c:ce:cd:f5:a3:70:17:67: d5:a7:6a:57:3f:76:04:69:74:c1:38:1e:48:95:37:3d:f2:32: da:de:ec:ba:07:37:7f:61:9d:ec:42:b0:4d:72:05:5d:83:0c: 28:12:59:4a:f5:40:0c:08:20:a8:f2:71:77:39:91:e6:1f:da: dc:55:61:b6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gA34ojNx0iuDBl+Eyo30MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiZDg3YmJlZjU5NDM1NDZiMmE4M2QzMWVjMmI5OWFkODgz ZDUxZDcwHhcNMjYwMTAyMDIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmZjNmEyMTY2N2UxM2I2ZTFlODZlMzIxN2E5ZTM4MjZjNzEzMGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7T0p9mTZi3pf7kGIjJtevaGG8IU k41YsfFGsAIwha/RToJ30H265lnisORLjukn8NZqimNFwFkUB2h+lexmfTIQFRgf uGvIFZg1azFHWmEIVVcICoRO5NROUe3o0NaepHvaDyKHni8IwUO0wGNkprccZxS8 8tFWZMQgkGWEQPhwD1nuHiIAQI8N3j3cnJK48ywP1pDmFk/yshw6Ofbg2FZdl7YY eZSFpFZOozjffhymrvAZsCgHVFoTncZAC3m1UcHHNbMtSdQ9Du2zu+Fcwy+quZjU wUu28Wyli7iocktlIr8MV9mGRO5EaEHTlodpqkE1csg8cbHkMFfIYvw5swIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAL8aiFmfhO24ehuMhep44JscTDCMB8GA1UdIwQY MBaAFKvYe771lDVGsqg9Mewrma2IPVHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYt MmY1Yzc0YzY5YWUxLzEvQXZ4cUlXWi1FN2JoNkc0eUY2bmpnbXh4TU1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYtMmY1Yzc0YzY5YWUx LzEvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAUEvWMA0E AgACMAcDBQAqE1aAMA0GCSqGSIb3DQEBCwUAA4IBAQA6i8t75ZfS8T+yab2Vkgbt oP5dQX2D1p5HgeenyXtuWH44YBEhCW1aGbieHKF36wCQ0H2s3O7vsWSX56hjxmze uzOgxofYCd4LezV2AB6Z0ITSZUIM+YMPH5uX12NxkZrS6wosvgaM0os69mqH7bO2 JE3NImANCDbVRwOBXFDSKIFGV5BRS7M+LhnLICmAQW3mIvKf0WOI3eqiyHNzQ2Q5 Ad5gM2cQOXhSOuhtp2K9kMCs1pfh4fyPYeAkTGIYDM7N9aNwF2fVp2pXP3YEaXTB OB5IlTc98jLa3uy6Bzd/YZ3sQrBNcgVdgwwoEllK9UAMCCCo8nF3OZHmH9rcVWG2 -----END CERTIFICATE-----Generated at Thu Jan 22 01:14:50 2026 by rpki-client