This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/axLujUagH_dCn6TXOtWPBDE3Szo.roa File: axLujUagH_dCn6TXOtWPBDE3Szo.roa (raw, json) Hash identifier: jt/V9NWMIChAooozTeAvM5YQ3gDwItihIdrwd9f6W0g= Subject key identifier: 6B:12:EE:8D:46:A0:1F:F7:42:9F:A4:D7:3A:D5:8F:04:31:37:4B:3A Certificate issuer: /CN=bfb548d85725104527f3be47976b674739ae2f13 Certificate serial: 019B76EB1678CD9180623AF0923A81855937 Authority key identifier: BF:B5:48:D8:57:25:10:45:27:F3:BE:47:97:6B:67:47:39:AE:2F:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/axLujUagH_dCn6TXOtWPBDE3Szo.roa Signing time: Thu 01 Jan 2026 00:17:56 +0000 ROA not before: Thu 01 Jan 2026 00:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204403 IP address blocks: 185.250.16.0/22 maxlen: 24 2a0b:c700::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:16:78:cd:91:80:62:3a:f0:92:3a:81:85:59:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb548d85725104527f3be47976b674739ae2f13 Validity Not Before: Jan 1 00:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b12ee8d46a01ff7429fa4d73ad58f0431374b3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:47:ff:6b:21:4b:49:6e:b8:06:bb:24:08:f6: 30:22:2b:96:ea:28:12:85:61:79:70:7f:11:8c:7d: a1:d9:53:1d:04:bf:07:0f:32:49:8d:4d:7f:d0:96: bb:9f:7b:c8:3f:1d:d9:2c:40:18:32:ce:8f:a9:8b: 20:9a:46:7f:19:71:5a:fb:7d:dd:19:18:d0:88:f0: eb:69:b5:1c:86:88:58:1d:15:77:d7:0e:86:db:01: 56:1d:ac:b8:ef:fd:b6:a8:12:fc:b6:24:65:ac:97: b3:fe:2d:7b:80:62:67:7e:9d:ea:a9:2d:13:51:21: b2:f2:65:3a:0e:50:71:70:e8:6b:67:51:1a:38:d9: f9:e6:74:36:b9:4e:ea:15:ab:d4:c7:02:a4:99:40: 71:5c:8f:0b:27:d6:ee:93:a5:d4:ac:c6:bc:4f:bf: 64:08:36:2d:d7:04:6b:64:f8:0b:44:cd:a8:1a:a4: 17:b0:ee:2e:82:78:4e:52:39:d7:3f:67:d2:e6:ba: 1e:48:04:a5:2e:78:39:ec:a7:c3:aa:d0:12:7d:d8: b0:c3:7f:e7:b8:8e:b9:f8:d8:34:a5:0a:73:29:81: 30:9d:6a:de:d7:91:9e:38:13:5f:6f:3a:8e:d1:e8: e2:50:02:a3:e3:67:94:99:d6:8a:05:f3:cd:97:47: 76:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:12:EE:8D:46:A0:1F:F7:42:9F:A4:D7:3A:D5:8F:04:31:37:4B:3A X509v3 Authority Key Identifier: keyid:BF:B5:48:D8:57:25:10:45:27:F3:BE:47:97:6B:67:47:39:AE:2F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/axLujUagH_dCn6TXOtWPBDE3Szo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.250.16.0/22 IPv6: 2a0b:c700::/29 Signature Algorithm: sha256WithRSAEncryption bb:64:ab:52:71:36:f8:75:b7:0f:a6:a8:b4:62:35:99:79:57: 41:e4:b8:5e:3f:e8:74:9b:e2:f5:73:00:fb:20:99:73:5f:7c: 7f:da:1e:9f:78:8c:1c:6a:4f:5b:6b:47:bd:22:f4:bd:6d:69: ad:f1:b5:25:86:c7:71:3c:2b:89:96:fa:40:8d:d3:78:ed:d4: c9:f2:43:63:fd:19:ef:35:b9:3a:e8:73:6e:70:15:0c:7a:01: 6a:c9:cf:39:b1:30:65:9f:d6:f8:cb:f1:8a:0d:0e:a0:b3:e7: 64:46:98:23:3d:33:90:be:b8:fe:58:ed:6c:17:d4:92:46:ca: 1e:fa:64:b9:6f:77:3a:b2:89:83:5a:9f:87:3a:44:9a:bc:32: 53:7c:6d:0b:31:78:48:17:01:2c:ab:7b:8e:17:af:71:6c:21: 27:96:22:4b:33:ce:f6:0b:a5:60:06:ce:c0:64:7f:02:a1:a9: b1:a2:f6:93:59:ab:7b:db:5c:4c:23:fa:e1:7f:ef:e8:08:bb: 3c:9b:71:0d:f3:eb:b6:c3:34:00:d4:ca:cc:a1:97:f4:ce:19: de:c6:cb:49:c5:e4:fc:6f:e1:b5:0c:3b:76:9f:fb:a5:bf:7d: ae:ff:8d:b2:b3:76:24:73:e9:37:6d:61:77:7f:4a:2e:c9:ef: 2a:a0:df:1f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt26xZ4zZGAYjrwkjqBhVk3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjU0OGQ4NTcyNTEwNDUyN2YzYmU0Nzk3NmI2NzQ3Mzlh ZTJmMTMwHhcNMjYwMTAxMDAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjEyZWU4ZDQ2YTAxZmY3NDI5ZmE0ZDczYWQ1OGYwNDMxMzc0YjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEf/ayFLSW64BrskCPYwIiuW6igS hWF5cH8RjH2h2VMdBL8HDzJJjU1/0Ja7n3vIPx3ZLEAYMs6PqYsgmkZ/GXFa+33d GRjQiPDrabUchohYHRV31w6G2wFWHay47/22qBL8tiRlrJez/i17gGJnfp3qqS0T USGy8mU6DlBxcOhrZ1EaONn55nQ2uU7qFavUxwKkmUBxXI8LJ9buk6XUrMa8T79k CDYt1wRrZPgLRM2oGqQXsO4ugnhOUjnXP2fS5roeSASlLng57KfDqtASfdiww3/n uI65+Ng0pQpzKYEwnWre15GeOBNfbzqO0ejiUAKj42eUmdaKBfPNl0d24QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGsS7o1GoB/3Qp+k1zrVjwQxN0s6MB8GA1UdIwQY MBaAFL+1SNhXJRBFJ/O+R5drZ0c5ri8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdWSTJGY2xFRVVuODc1SGwydG5Sem11THhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lN2NjNmItNTJhMC00YjdhLThmYzIt NzFjNDZjMTk5NjM2LzEvYXhMdWpVYWdIX2RDbjZUWE90V1BCREUzU3pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9lN2NjNmItNTJhMC00YjdhLThmYzItNzFjNDZjMTk5NjM2 LzEvdjdWSTJGY2xFRVVuODc1SGwydG5Sem11THhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufoQMA0E AgACMAcDBQMqC8cAMA0GCSqGSIb3DQEBCwUAA4IBAQC7ZKtScTb4dbcPpqi0YjWZ eVdB5LheP+h0m+L1cwD7IJlzX3x/2h6feIwcak9ba0e9IvS9bWmt8bUlhsdxPCuJ lvpAjdN47dTJ8kNj/RnvNbk66HNucBUMegFqyc85sTBln9b4y/GKDQ6gs+dkRpgj PTOQvrj+WO1sF9SSRsoe+mS5b3c6somDWp+HOkSavDJTfG0LMXhIFwEsq3uOF69x bCEnliJLM872C6VgBs7AZH8CoamxovaTWat721xMI/rhf+/oCLs8m3EN8+u2wzQA 1MrMoZf0zhnexstJxeT8b+G1DDt2n/ulv32u/42ys3Ykc+k3bWF3f0ouye8qoN8f -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:13 2026 by rpki-client