This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/AanVvurhzUc2_YlhTUVI0EdSJQM.roa File: AanVvurhzUc2_YlhTUVI0EdSJQM.roa (raw, json) Hash identifier: D8Ey7qoWHGx1lJPT+RSbE0DodoNoh42qXfRsH7R0814= Subject key identifier: 01:A9:D5:BE:EA:E1:CD:47:36:FD:89:61:4D:45:48:D0:47:52:25:03 Certificate issuer: /CN=8f3dcffca5795a47fcc2e138ce5473e800098295 Certificate serial: 019B7D5AB874AE144381B37D03937AB71746 Authority key identifier: 8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/AanVvurhzUc2_YlhTUVI0EdSJQM.roa Signing time: Fri 02 Jan 2026 06:17:35 +0000 ROA not before: Fri 02 Jan 2026 06:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20574 IP address blocks: 178.21.80.0/21 maxlen: 21 185.119.100.0/22 maxlen: 22 193.108.42.0/23 maxlen: 23 2a03:900::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:b8:74:ae:14:43:81:b3:7d:03:93:7a:b7:17:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3dcffca5795a47fcc2e138ce5473e800098295 Validity Not Before: Jan 2 06:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01a9d5beeae1cd4736fd89614d4548d047522503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:64:15:1d:49:3d:3f:63:c3:d0:33:96:a6:c5: d7:bb:1e:95:7a:31:55:7f:41:b2:89:ba:a2:80:44: 0e:a9:c2:33:77:2e:d1:b5:66:e6:3c:54:29:ca:8c: 47:2f:15:69:26:5c:d5:85:88:81:6f:36:bc:99:2c: 7a:ae:78:6d:1f:5e:91:ae:13:22:6d:04:5f:5c:cc: 34:35:0d:4e:2f:97:52:b2:d0:ec:83:fc:fb:6f:eb: fd:5a:d0:97:46:58:31:e7:35:92:db:ea:b1:f0:f2: 87:27:42:ec:68:63:bc:ee:ae:83:a4:aa:8d:41:47: e3:9d:90:dd:5b:fd:19:58:0f:59:26:8f:a8:bc:01: ad:d5:65:83:ae:15:29:19:8b:a0:75:5b:c8:78:7b: 61:3f:80:be:12:a7:77:b5:54:84:35:44:2c:1e:7b: 02:d5:4b:49:ed:e2:7e:fe:93:d2:87:97:c4:61:e1: 6b:d5:78:8a:7a:64:21:8a:07:27:62:2f:75:ff:c0: cb:86:07:6f:8b:4e:cd:fa:01:c6:c0:58:aa:b5:10: 08:6f:da:7f:83:06:5a:e9:46:f7:c6:a6:45:f1:95: b8:8f:31:e6:70:f3:a7:51:44:89:4c:dc:16:42:f3: 37:61:d3:c3:1a:3d:5f:02:35:98:f9:c2:87:20:30: d4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A9:D5:BE:EA:E1:CD:47:36:FD:89:61:4D:45:48:D0:47:52:25:03 X509v3 Authority Key Identifier: keyid:8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/AanVvurhzUc2_YlhTUVI0EdSJQM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.21.80.0/21 185.119.100.0/22 193.108.42.0/23 IPv6: 2a03:900::/32 Signature Algorithm: sha256WithRSAEncryption 02:52:6f:31:b7:bd:dd:ed:c5:82:b1:c7:6e:fa:ba:3b:7a:de: 31:83:41:2e:05:cf:b4:c2:2c:cf:b5:db:2a:42:41:b1:ba:43: f6:21:c9:59:2f:d7:5d:27:d0:10:25:84:e4:03:c9:18:bf:54: ef:41:ec:38:32:80:66:58:2d:d0:1b:7c:3e:45:d0:fd:3f:3f: fe:68:00:64:42:12:fc:86:cb:e5:db:7d:0c:41:14:dc:34:0f: 34:56:41:b7:62:df:c3:e2:3c:7a:9e:42:9e:48:51:9b:82:b1: b6:80:66:44:fd:78:8e:73:8d:19:9d:86:b3:ff:03:78:ff:fc: f4:87:95:13:58:2a:99:b3:13:cc:25:3d:08:26:ca:20:e7:58: 0f:16:1b:a8:8a:2c:57:73:92:bb:52:d7:62:60:cf:ff:bf:d4: 63:05:9a:bb:fa:29:3c:4b:14:9d:52:70:27:97:a3:36:c0:b6: 15:45:66:f2:f2:c7:de:df:f2:78:d0:53:87:c8:99:28:55:82: de:71:21:78:69:50:6b:62:bd:63:e5:50:d3:db:8b:7f:bb:00: e0:f1:31:37:ee:ef:58:55:3e:0c:a3:63:e2:47:05:4a:da:10: c7:a0:15:be:8b:67:64:c9:9b:be:c3:f7:4a:96:3f:7e:47:46: b5:20:89:47 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9Wrh0rhRDgbN9A5N6txdGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmM2RjZmZjYTU3OTVhNDdmY2MyZTEzOGNlNTQ3M2U4MDAw OTgyOTUwHhcNMjYwMTAyMDYxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWE5ZDViZWVhZTFjZDQ3MzZmZDg5NjE0ZDQ1NDhkMDQ3NTIyNTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymQVHUk9P2PD0DOWpsXXux6VejFV f0GyibqigEQOqcIzdy7RtWbmPFQpyoxHLxVpJlzVhYiBbza8mSx6rnhtH16RrhMi bQRfXMw0NQ1OL5dSstDsg/z7b+v9WtCXRlgx5zWS2+qx8PKHJ0LsaGO87q6DpKqN QUfjnZDdW/0ZWA9ZJo+ovAGt1WWDrhUpGYugdVvIeHthP4C+Eqd3tVSENUQsHnsC 1UtJ7eJ+/pPSh5fEYeFr1XiKemQhigcnYi91/8DLhgdvi07N+gHGwFiqtRAIb9p/ gwZa6Ub3xqZF8ZW4jzHmcPOnUUSJTNwWQvM3YdPDGj1fAjWY+cKHIDDUNwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFAGp1b7q4c1HNv2JYU1FSNBHUiUDMB8GA1UdIwQY MBaAFI89z/yleVpH/MLhOM5Uc+gACYKVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanozUF9LVjVXa2Y4d3VFNHpsUno2QUFKZ3BVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8yZTM5M2UtMWU1Yi00YjBmLWJhNzYt YTBjZmUxMmYzZDUxLzEvQWFuVnZ1cmh6VWMyX1lsaFRVVkkwRWRTSlFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8yZTM5M2UtMWU1Yi00YjBmLWJhNzYtYTBjZmUxMmYzZDUx LzEvanozUF9LVjVXa2Y4d3VFNHpsUno2QUFKZ3BVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDshVQAwQC uXdkAwQBwWwqMA0EAgACMAcDBQAqAwkAMA0GCSqGSIb3DQEBCwUAA4IBAQACUm8x t73d7cWCscdu+ro7et4xg0EuBc+0wizPtdsqQkGxukP2IclZL9ddJ9AQJYTkA8kY v1TvQew4MoBmWC3QG3w+RdD9Pz/+aABkQhL8hsvl230MQRTcNA80VkG3Yt/D4jx6 nkKeSFGbgrG2gGZE/XiOc40ZnYaz/wN4//z0h5UTWCqZsxPMJT0IJsog51gPFhuo iixXc5K7UtdiYM//v9RjBZq7+ik8SxSdUnAnl6M2wLYVRWby8sfe3/J40FOHyJko VYLecSF4aVBrYr1j5VDT24t/uwDg8TE37u9YVT4Mo2PiRwVK2hDHoBW+i2dkyZu+ w/dKlj9+R0a1IIlH -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:54 2026 by rpki-client