This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/aVUZS4-CHRozzaf-0Lg-vLPM0lQ.roa File: aVUZS4-CHRozzaf-0Lg-vLPM0lQ.roa (raw, json) Hash identifier: 6DtekGqBnxqwfEgVeCHzYBxBLkfvZ8uuLMWoMN3eaIY= Subject key identifier: 69:55:19:4B:8F:82:1D:1A:33:CD:A7:FE:D0:B8:3E:BC:B3:CC:D2:54 Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758DEE89E50713984A358125294B3E9 Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/aVUZS4-CHRozzaf-0Lg-vLPM0lQ.roa Signing time: Thu 01 Jan 2026 02:17:51 +0000 ROA not before: Thu 01 Jan 2026 02:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16125 IP address blocks: 5.1.82.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:de:e8:9e:50:71:39:84:a3:58:12:52:94:b3:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6955194b8f821d1a33cda7fed0b83ebcb3ccd254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:70:2d:ee:83:3d:99:17:de:c3:2b:09:01:e9: 95:a2:59:d1:2f:20:ee:4c:b0:b7:68:e0:fd:58:bf: 6b:5c:45:f7:bd:e4:d6:a3:1d:25:c1:a9:7e:93:2d: bb:6d:09:b8:50:00:7d:df:b9:ac:0d:ba:fa:0e:80: 4f:f9:20:ce:8b:c0:51:de:4a:55:bc:04:e2:81:1b: ed:1e:98:61:fc:68:5e:c1:b5:ef:53:00:00:27:12: 56:33:d2:55:85:1f:28:06:ea:8f:e1:6a:7a:be:f7: 2e:3f:e2:20:18:12:71:6b:52:63:37:87:5f:42:e5: dc:28:ce:88:31:f1:22:46:8b:6b:f5:d6:41:94:82: ab:9f:76:95:60:39:b0:fc:83:42:ba:6c:47:9a:f9: e9:d2:08:d8:a2:6e:ab:ec:55:0b:8d:82:1e:7c:1c: 20:82:3d:29:08:e7:54:0f:b7:8e:4e:0c:2a:af:f6: 24:5b:26:49:25:ec:d1:9b:25:cc:14:c7:23:77:a0: 3a:7a:cb:f1:bb:44:5f:06:84:ec:ca:04:d6:16:75: e8:a6:0c:90:47:7a:e8:f5:d8:15:f7:df:d8:c0:2f: 00:4b:27:ee:84:6c:44:e5:8f:b1:f4:9c:2a:9e:c7: 93:42:06:d8:55:be:37:6f:20:29:e8:b4:5d:e8:3d: 7d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:55:19:4B:8F:82:1D:1A:33:CD:A7:FE:D0:B8:3E:BC:B3:CC:D2:54 X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/aVUZS4-CHRozzaf-0Lg-vLPM0lQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.82.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:bb:76:5d:e1:ba:23:ee:e5:4d:f8:0d:be:1e:d6:ed:d7:24: aa:2c:37:ca:00:27:42:4b:b4:93:ed:89:f6:15:8a:e1:c8:a5: f5:90:41:bc:5c:01:aa:4c:e3:b3:57:c9:e5:79:b4:b6:8a:e5: 6c:3c:8c:56:b4:b6:a9:1b:1d:7c:17:13:1b:07:9a:8a:2b:16: fe:10:59:68:f8:9a:79:d4:2a:7b:37:38:46:16:f9:be:e1:f9: 8d:64:38:ed:49:e6:8a:91:7d:39:85:b9:99:cb:33:7a:ef:80: 42:fb:55:d1:db:41:e9:84:62:cb:a3:02:a8:61:da:82:28:0f: e6:b5:6c:4f:c7:cb:29:db:98:cd:75:81:f1:eb:bc:7d:cb:5d: f1:e3:d4:75:e0:24:17:79:95:58:92:f7:42:95:92:1d:78:d1: 2b:7e:d5:0e:7d:c3:28:f2:cc:8a:29:f2:cb:da:73:e3:d8:9f: 6d:8a:ff:13:be:87:b1:54:8f:d9:c5:93:c1:54:a0:74:d1:a2: 0f:f7:1c:e5:e0:8c:3f:28:35:02:67:80:9f:79:28:9d:e1:62: 85:c0:3a:86:f6:bd:10:e0:f8:c3:5e:0c:9a:46:10:11:74:8a: 7a:f7:60:dd:fe:92:28:5b:e3:4c:3e:b7:8f:6d:02:c2:99:3a: 87:fd:f2:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WN7onlBxOYSjWBJSlLPpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTU1MTk0YjhmODIxZDFhMzNjZGE3ZmVkMGI4M2ViY2IzY2NkMjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HAt7oM9mRfewysJAemVolnRLyDu TLC3aOD9WL9rXEX3veTWox0lwal+ky27bQm4UAB937msDbr6DoBP+SDOi8BR3kpV vATigRvtHphh/GhewbXvUwAAJxJWM9JVhR8oBuqP4Wp6vvcuP+IgGBJxa1JjN4df QuXcKM6IMfEiRotr9dZBlIKrn3aVYDmw/INCumxHmvnp0gjYom6r7FULjYIefBwg gj0pCOdUD7eOTgwqr/YkWyZJJezRmyXMFMcjd6A6esvxu0RfBoTsygTWFnXopgyQ R3ro9dgV99/YwC8ASyfuhGxE5Y+x9JwqnseTQgbYVb43byAp6LRd6D19FQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGlVGUuPgh0aM82n/tC4PryzzNJUMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvYVZVWlM0LUNIUm96emFmLTBMZy12TFBNMGxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQFSMA0G CSqGSIb3DQEBCwUAA4IBAQBtu3Zd4boj7uVN+A2+Htbt1ySqLDfKACdCS7ST7Yn2 FYrhyKX1kEG8XAGqTOOzV8nlebS2iuVsPIxWtLapGx18FxMbB5qKKxb+EFlo+Jp5 1Cp7NzhGFvm+4fmNZDjtSeaKkX05hbmZyzN674BC+1XR20HphGLLowKoYdqCKA/m tWxPx8sp25jNdYHx67x9y13x49R14CQXeZVYkvdClZIdeNErftUOfcMo8syKKfLL 2nPj2J9tiv8TvoexVI/ZxZPBVKB00aIP9xzl4Iw/KDUCZ4CfeSid4WKFwDqG9r0Q 4PjDXgyaRhARdIp692Dd/pIoW+NMPrePbQLCmTqH/fL6 -----END CERTIFICATE-----Generated at Wed Jan 21 00:03:48 2026 by rpki-client