This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/aZInJVVj-s0Wg32prdB7tBivvYA.roa File: aZInJVVj-s0Wg32prdB7tBivvYA.roa (raw, json) Hash identifier: PJXuAgUz8U1MrkWq0hGkH/inn8z2Szk0o8qw96eYX7Q= Subject key identifier: 69:92:27:25:55:63:FA:CD:16:83:7D:A9:AD:D0:7B:B4:18:AF:BD:80 Certificate issuer: /CN=b754652a9e989145a059f78883d536e92c43b53f Certificate serial: 019B7F83514B06FD6BFF0012972F973C197D Authority key identifier: B7:54:65:2A:9E:98:91:45:A0:59:F7:88:83:D5:36:E9:2C:43:B5:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/aZInJVVj-s0Wg32prdB7tBivvYA.roa Signing time: Fri 02 Jan 2026 16:21:11 +0000 ROA not before: Fri 02 Jan 2026 16:21:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199878 IP address blocks: 82.118.146.0/23 maxlen: 23 82.118.146.0/24 maxlen: 24 82.118.147.0/24 maxlen: 24 95.171.236.0/23 maxlen: 23 95.171.236.0/24 maxlen: 24 95.171.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:51:4b:06:fd:6b:ff:00:12:97:2f:97:3c:19:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b754652a9e989145a059f78883d536e92c43b53f Validity Not Before: Jan 2 16:21:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=699227255563facd16837da9add07bb418afbd80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2b:0c:a2:36:70:21:8b:3b:da:72:7c:7f:12: b0:c5:ca:b9:8d:3e:0e:a1:7e:94:47:d0:aa:2f:21: d7:65:73:c3:9b:6a:24:49:7a:63:8a:9e:6d:10:a8: 2e:0e:5f:38:eb:12:44:fd:39:82:51:ce:77:c9:a9: f9:6b:b3:00:3a:08:7c:31:ab:fa:c5:38:3e:21:34: be:fb:5e:16:7d:70:c3:05:1d:ef:a1:1f:04:1c:d4: 5b:e7:4b:89:60:ca:06:3e:e0:15:82:97:91:04:30: 00:e3:8c:14:bd:ef:aa:98:bd:c1:0f:ae:46:47:a2: 72:15:63:fa:c9:2c:1b:f1:ae:60:27:41:99:f9:ff: 8a:32:73:ff:29:19:d0:a8:54:54:fb:8f:e9:5a:f1: 38:af:f6:38:d9:4c:9f:89:ff:0d:a6:3c:54:4c:3e: 41:a5:fd:50:c5:c4:b8:79:99:3b:c1:d9:65:ee:46: df:96:30:43:17:89:48:bf:d5:90:8e:b5:74:16:50: bd:2a:6b:60:ac:41:40:52:98:f1:b8:e3:9b:07:98: 4b:9a:5b:0f:ae:26:8a:bf:e7:b7:bd:c7:bd:e9:25: 7a:15:39:83:1b:0e:76:1a:aa:4d:77:d6:9a:a1:f8: e8:5a:87:c3:6e:b5:4a:61:8f:eb:ce:03:ee:86:d0: 08:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:92:27:25:55:63:FA:CD:16:83:7D:A9:AD:D0:7B:B4:18:AF:BD:80 X509v3 Authority Key Identifier: keyid:B7:54:65:2A:9E:98:91:45:A0:59:F7:88:83:D5:36:E9:2C:43:B5:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/aZInJVVj-s0Wg32prdB7tBivvYA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.118.146.0/23 95.171.236.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:8a:73:86:8b:57:69:62:6d:81:36:35:b0:5e:e9:d3:56:56: 41:8c:c7:45:a2:b5:57:64:eb:21:80:5d:05:2a:a3:29:9b:65: 34:cd:8b:0c:c6:53:42:71:32:d9:9e:67:7d:e4:c0:7a:90:db: 13:26:d8:75:3c:87:0e:e5:27:4b:51:87:be:d2:af:69:c9:3c: e7:d8:87:cb:35:ac:a5:e2:83:18:04:f1:c7:ac:f9:56:2d:0c: 19:e5:cb:d8:1f:f5:d8:0e:cd:08:4f:ab:8e:1b:53:5d:70:35: c7:af:05:94:5d:84:a1:d0:c6:ef:e6:33:9d:c7:17:74:fa:0c: 0b:1e:68:75:82:e6:85:8a:4c:fb:03:48:c7:6d:75:9a:13:db: 3d:3e:0a:f0:0b:06:40:c6:75:ef:38:16:68:fd:77:d8:32:70: 4c:e6:f5:ac:be:c2:5a:dc:b8:b5:14:3d:3e:87:b7:0b:82:97: 3f:52:48:96:78:4a:23:36:c6:2c:43:3a:5d:1e:55:5f:f7:38: a0:48:14:b9:57:5b:80:4b:f5:af:6d:c9:8b:0e:b1:35:96:c0: 23:49:4b:78:96:61:f3:9d:04:54:5a:90:62:c2:48:00:ac:a0: 7e:d9:aa:96:2a:09:73:53:cf:36:07:b6:6a:ad:bb:f5:3a:61: 8c:c2:46:0e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/g1FLBv1r/wASly+XPBl9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NTQ2NTJhOWU5ODkxNDVhMDU5Zjc4ODgzZDUzNmU5MmM0 M2I1M2YwHhcNMjYwMTAyMTYyMTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTkyMjcyNTU1NjNmYWNkMTY4MzdkYTlhZGQwN2JiNDE4YWZiZDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SsMojZwIYs72nJ8fxKwxcq5jT4O oX6UR9CqLyHXZXPDm2okSXpjip5tEKguDl846xJE/TmCUc53yan5a7MAOgh8Mav6 xTg+ITS++14WfXDDBR3voR8EHNRb50uJYMoGPuAVgpeRBDAA44wUve+qmL3BD65G R6JyFWP6ySwb8a5gJ0GZ+f+KMnP/KRnQqFRU+4/pWvE4r/Y42Uyfif8NpjxUTD5B pf1QxcS4eZk7wdll7kbfljBDF4lIv9WQjrV0FlC9KmtgrEFAUpjxuOObB5hLmlsP riaKv+e3vce96SV6FTmDGw52GqpNd9aaofjoWofDbrVKYY/rzgPuhtAI6wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGmSJyVVY/rNFoN9qa3Qe7QYr72AMB8GA1UdIwQY MBaAFLdUZSqemJFFoFn3iIPVNuksQ7U/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDFSbEtwNllrVVdnV2ZlSWc5VTI2U3hEdFQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hZmQ2YjktNmM0ZS00MGUwLWFlOTYt YjRkYTIwYTc1N2NmLzEvYVpJbkpWVmotczBXZzMycHJkQjd0Qml2dllBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9hZmQ2YjktNmM0ZS00MGUwLWFlOTYtYjRkYTIwYTc1N2Nm LzEvdDFSbEtwNllrVVdnV2ZlSWc5VTI2U3hEdFQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUnaSAwQB X6vsMA0GCSqGSIb3DQEBCwUAA4IBAQAOinOGi1dpYm2BNjWwXunTVlZBjMdForVX ZOshgF0FKqMpm2U0zYsMxlNCcTLZnmd95MB6kNsTJth1PIcO5SdLUYe+0q9pyTzn 2IfLNayl4oMYBPHHrPlWLQwZ5cvYH/XYDs0IT6uOG1NdcDXHrwWUXYSh0Mbv5jOd xxd0+gwLHmh1guaFikz7A0jHbXWaE9s9PgrwCwZAxnXvOBZo/XfYMnBM5vWsvsJa 3Li1FD0+h7cLgpc/UkiWeEojNsYsQzpdHlVf9zigSBS5V1uAS/WvbcmLDrE1lsAj SUt4lmHznQRUWpBiwkgArKB+2aqWKglzU882B7Zqrbv1OmGMwkYO -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:21 2026 by rpki-client