This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/AYmY6bS1DW5wNX1gemsinMtxn4A.roa File: AYmY6bS1DW5wNX1gemsinMtxn4A.roa (raw, json) Hash identifier: zRK2sb27i2HJzTqfMswAMQmmf/Cx/9L2B5J6Nm4MQxc= Subject key identifier: 01:89:98:E9:B4:B5:0D:6E:70:35:7D:60:7A:6B:22:9C:CB:71:9F:80 Certificate issuer: /CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df Certificate serial: 019B7B36D38C62C80480F5C81F7381A136B5 Authority key identifier: CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/AYmY6bS1DW5wNX1gemsinMtxn4A.roa Signing time: Thu 01 Jan 2026 20:19:09 +0000 ROA not before: Thu 01 Jan 2026 20:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 212.104.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d3:8c:62:c8:04:80:f5:c8:1f:73:81:a1:36:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df Validity Not Before: Jan 1 20:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=018998e9b4b50d6e70357d607a6b229ccb719f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:80:8a:43:8d:97:e8:29:de:16:13:dc:57:3b: 77:18:6f:36:02:65:8a:93:9d:e6:60:45:e0:77:3f: 13:f7:0d:8b:f0:44:fc:cc:1c:05:2b:65:3c:49:8d: f5:72:4a:bb:2e:a0:a3:5a:5d:3b:fa:7e:6c:7d:5d: 54:2e:36:78:0d:42:5c:2f:7e:58:8e:9d:f8:28:87: 47:09:da:59:be:2f:fa:e1:48:b2:1c:fe:66:91:b5: 62:f7:4a:34:2d:6d:98:79:c1:a3:1a:5d:80:b0:20: 93:fc:0d:3f:03:5c:98:67:d8:12:f2:aa:e7:82:0d: aa:7b:3a:92:ce:00:f6:8f:4c:41:f4:96:05:87:eb: f2:12:1f:b6:01:69:85:9c:09:66:f8:0d:7e:47:90: 21:fc:5b:2d:0a:00:dd:f1:f8:fb:b8:dd:43:c0:7c: 61:d6:7c:34:3a:db:ac:e2:81:ef:79:e8:df:e4:9b: 81:6e:27:98:77:28:57:34:6d:42:5d:c2:aa:cc:35: d9:d5:ac:7d:4f:7f:c4:e1:71:2d:da:3b:ca:f2:ec: 24:da:e6:53:40:c9:b5:0f:8b:ad:75:62:2e:00:8a: a8:85:a0:22:9d:15:0b:d0:0e:7c:a2:5d:2b:09:cc: e6:53:2f:36:6b:8f:19:7c:fb:d4:ff:05:33:03:8c: 17:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:89:98:E9:B4:B5:0D:6E:70:35:7D:60:7A:6B:22:9C:CB:71:9F:80 X509v3 Authority Key Identifier: keyid:CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/AYmY6bS1DW5wNX1gemsinMtxn4A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.104.209.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:14:99:6d:25:65:77:35:d9:e2:f7:98:1a:f1:d8:ec:d9:b1: 86:dc:28:a4:0c:55:d3:1b:40:d0:17:d7:f2:3f:2a:9f:7f:eb: 56:6d:86:f5:d0:cf:90:9a:0c:17:8b:34:97:93:22:af:82:60: b8:16:34:71:43:99:bb:d5:d0:5c:b1:2d:a3:3e:8f:d3:c0:74: 4f:5c:81:b3:1a:cc:9c:7b:84:01:1a:f6:77:ca:0a:99:c3:69: 69:c7:fd:fb:06:ba:53:ff:ee:20:34:a7:84:df:a3:51:2a:ae: 05:be:53:37:83:08:8e:d9:02:6e:70:bb:0a:a0:3f:57:8e:7f: 51:9c:fc:9a:a6:85:08:5a:9d:d4:14:df:ce:ce:c6:58:53:63: a0:45:bd:8e:74:da:15:c6:5d:8d:5c:db:46:f2:61:25:ee:62: 62:6c:4a:a5:c4:55:14:67:ee:a2:e2:de:1d:56:38:fc:19:92: 35:b9:0f:ef:f7:e4:d3:ce:b4:6e:2e:20:ed:36:46:e6:72:42: 6b:6d:5b:a9:83:de:8c:dc:b7:e3:22:0d:1f:40:8a:49:3a:8e: 77:38:ec:fa:3e:dd:de:1d:b3:c4:dd:c9:85:ca:66:61:a9:56: bb:84:c3:b6:7b:8b:5c:19:f7:5d:d4:33:4a:91:9c:49:1a:0c: d4:65:2f:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NtOMYsgEgPXIH3OBoTa1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZGU4NWJiZDQ3OGY1ZTg0MmY0YzRmOGQ4NTIyNWQxMDBl MGY0ZGYwHhcNMjYwMTAxMjAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTg5OThlOWI0YjUwZDZlNzAzNTdkNjA3YTZiMjI5Y2NiNzE5ZjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4CKQ42X6CneFhPcVzt3GG82AmWK k53mYEXgdz8T9w2L8ET8zBwFK2U8SY31ckq7LqCjWl07+n5sfV1ULjZ4DUJcL35Y jp34KIdHCdpZvi/64UiyHP5mkbVi90o0LW2YecGjGl2AsCCT/A0/A1yYZ9gS8qrn gg2qezqSzgD2j0xB9JYFh+vyEh+2AWmFnAlm+A1+R5Ah/FstCgDd8fj7uN1DwHxh 1nw0Otus4oHveejf5JuBbieYdyhXNG1CXcKqzDXZ1ax9T3/E4XEt2jvK8uwk2uZT QMm1D4utdWIuAIqohaAinRUL0A58ol0rCczmUy82a48ZfPvU/wUzA4wX7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAGJmOm0tQ1ucDV9YHprIpzLcZ+AMB8GA1UdIwQY MBaAFM/ehbvUePXoQvTE+NhSJdEA4PTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejk2RnU5UjQ5ZWhDOU1UNDJGSWwwUURnOU44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81ZTI2MTktZDcyYi00MTBiLWI5ZTgt ZjkzZDFmODE1YjdkLzEvQVltWTZiUzFEVzV3TlgxZ2Vtc2luTXR4bjRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy81ZTI2MTktZDcyYi00MTBiLWI5ZTgtZjkzZDFmODE1Yjdk LzEvejk2RnU5UjQ5ZWhDOU1UNDJGSWwwUURnOU44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GjRMA0G CSqGSIb3DQEBCwUAA4IBAQCfFJltJWV3Ndni95ga8djs2bGG3CikDFXTG0DQF9fy Pyqff+tWbYb10M+QmgwXizSXkyKvgmC4FjRxQ5m71dBcsS2jPo/TwHRPXIGzGsyc e4QBGvZ3ygqZw2lpx/37BrpT/+4gNKeE36NRKq4FvlM3gwiO2QJucLsKoD9Xjn9R nPyapoUIWp3UFN/OzsZYU2OgRb2OdNoVxl2NXNtG8mEl7mJibEqlxFUUZ+6i4t4d Vjj8GZI1uQ/v9+TTzrRuLiDtNkbmckJrbVupg96M3LfjIg0fQIpJOo53OOz6Pt3e HbPE3cmFymZhqVa7hMO2e4tcGfdd1DNKkZxJGgzUZS9i -----END CERTIFICATE-----Generated at Fri Jan 9 06:25:37 2026 by rpki-client