This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/apHXF-O4Ejo7yG2aEpQp8GLTcZs.roa File: apHXF-O4Ejo7yG2aEpQp8GLTcZs.roa (raw, json) Hash identifier: a/Y5u9hrVgeYy/2XjMITJ3BNw9T29U+bdFNSfBZc2ak= Subject key identifier: 6A:91:D7:17:E3:B8:12:3A:3B:C8:6D:9A:12:94:29:F0:62:D3:71:9B Certificate issuer: /CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b Certificate serial: 019B7EA6BEAB47D2715FA87FFA328E9F61C3 Authority key identifier: 49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/apHXF-O4Ejo7yG2aEpQp8GLTcZs.roa Signing time: Fri 02 Jan 2026 12:20:15 +0000 ROA not before: Fri 02 Jan 2026 12:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21465 IP address blocks: 217.23.96.0/20 maxlen: 20 217.23.96.0/21 maxlen: 21 217.23.104.0/21 maxlen: 21 217.23.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:be:ab:47:d2:71:5f:a8:7f:fa:32:8e:9f:61:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b Validity Not Before: Jan 2 12:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a91d717e3b8123a3bc86d9a129429f062d3719b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:93:b0:7a:e9:42:9b:52:61:96:e9:30:ff:1c: 1a:32:29:ac:e9:1f:59:23:48:32:5f:88:0d:a7:dc: 4a:73:39:0f:ee:59:45:46:5a:55:35:ac:9c:46:77: 11:33:c0:87:85:63:28:d8:de:7a:d5:01:9b:ac:f7: 8c:14:fc:cb:c3:39:d5:e2:e6:3d:82:b8:ff:f8:20: 9a:be:78:55:b1:44:e8:e7:2b:6c:14:7c:8b:b1:03: d0:6c:fe:b6:0f:14:08:3e:85:6f:0c:d6:93:94:51: b5:5a:8b:1b:46:7e:ed:13:09:8d:08:37:de:0c:17: cd:f8:2a:83:9f:1a:fe:13:13:69:72:d8:92:c3:01: cf:fb:4a:59:2c:f1:d3:23:7e:f0:9b:eb:b5:e4:d1: 93:9e:55:d9:20:80:ad:ab:50:2f:12:89:1c:66:e7: 71:8f:7d:3b:89:49:a6:ee:78:86:f5:dd:e7:da:67: 16:2c:1f:d3:dc:9e:f0:20:84:b6:c6:a4:6a:e6:71: 00:28:bd:87:5a:d8:7a:ba:a5:14:7a:9c:e1:b2:3f: 5a:c1:9b:d1:6e:48:7f:92:8a:cb:9b:1d:ec:e1:8c: f6:7e:4e:33:6e:0b:31:24:6f:9f:e6:f8:ce:78:63: 66:dc:89:c5:9f:46:81:30:5a:62:30:37:e8:b1:5f: aa:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:91:D7:17:E3:B8:12:3A:3B:C8:6D:9A:12:94:29:F0:62:D3:71:9B X509v3 Authority Key Identifier: keyid:49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/apHXF-O4Ejo7yG2aEpQp8GLTcZs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.23.96.0/20 Signature Algorithm: sha256WithRSAEncryption 2f:ea:1b:17:bd:fc:4b:7b:21:1d:55:1a:d0:31:0d:49:88:97: f2:7c:ef:96:b3:c3:e5:09:64:2d:2e:fb:eb:db:ae:b6:72:84: 62:7d:29:62:1f:df:95:2f:bd:f5:57:d6:9e:5c:95:93:7a:2f: cd:d9:e6:1d:17:49:28:fa:72:ed:85:a3:e5:4e:fc:bf:46:a2: fe:bd:f0:ce:ee:c5:b7:67:66:bb:30:cf:77:3d:26:e9:33:a5: 99:77:0b:f9:6d:34:38:e2:a8:e9:48:de:9b:66:70:de:e1:14: d6:27:c8:1b:b7:95:1c:ac:65:a3:79:cf:a9:80:55:44:da:b8: 66:d8:26:d4:d5:33:92:57:92:37:9f:25:19:5d:2a:2c:a9:9d: 71:b2:d5:69:c8:db:00:34:36:84:bb:c1:66:e8:0d:b2:b9:fe: 7b:54:57:62:6a:51:f5:27:aa:f4:4a:a8:c4:54:09:45:e9:07: aa:90:75:be:2c:dd:dd:77:78:bd:97:a5:a6:a1:ef:b7:62:2d: d9:58:11:d7:61:60:bc:0b:e4:77:19:2d:3a:94:96:8f:09:8f: 9e:6d:0f:72:bb:74:6a:39:61:65:ca:9c:2f:c1:be:7a:b2:1b: 70:fd:76:94:1f:78:9a:1b:50:da:eb:17:c5:4d:be:d1:8f:7f: 73:fa:20:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pr6rR9JxX6h/+jKOn2HDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODRkMGNjNjcwM2JmOTQyYzZkYWM4OWRmZjFhN2JmNjYz MmVhOGIwHhcNMjYwMTAyMTIyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTkxZDcxN2UzYjgxMjNhM2JjODZkOWExMjk0MjlmMDYyZDM3MTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpOweulCm1Jhlukw/xwaMims6R9Z I0gyX4gNp9xKczkP7llFRlpVNaycRncRM8CHhWMo2N561QGbrPeMFPzLwznV4uY9 grj/+CCavnhVsUTo5ytsFHyLsQPQbP62DxQIPoVvDNaTlFG1WosbRn7tEwmNCDfe DBfN+CqDnxr+ExNpctiSwwHP+0pZLPHTI37wm+u15NGTnlXZIICtq1AvEokcZudx j307iUmm7niG9d3n2mcWLB/T3J7wIIS2xqRq5nEAKL2HWth6uqUUepzhsj9awZvR bkh/korLmx3s4Yz2fk4zbgsxJG+f5vjOeGNm3InFn0aBMFpiMDfosV+q6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGqR1xfjuBI6O8htmhKUKfBi03GbMB8GA1UdIwQY MBaAFEmE0MxnA7+ULG2sid/xp79mMuqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1lUUXpHY0R2NVFzYmF5SjNfR252Mll5Nm9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hNTgzMTEtZTY3NC00MDVjLTk4ZjIt MTQ3MGJjY2VlYjFiLzEvYXBIWEYtTzRFam83eUcyYUVwUXA4R0xUY1pzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9hNTgzMTEtZTY3NC00MDVjLTk4ZjItMTQ3MGJjY2VlYjFi LzEvU1lUUXpHY0R2NVFzYmF5SjNfR252Mll5Nm9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2RdgMA0G CSqGSIb3DQEBCwUAA4IBAQAv6hsXvfxLeyEdVRrQMQ1JiJfyfO+Ws8PlCWQtLvvr 2662coRifSliH9+VL731V9aeXJWTei/N2eYdF0ko+nLthaPlTvy/RqL+vfDO7sW3 Z2a7MM93PSbpM6WZdwv5bTQ44qjpSN6bZnDe4RTWJ8gbt5UcrGWjec+pgFVE2rhm 2CbU1TOSV5I3nyUZXSosqZ1xstVpyNsANDaEu8Fm6A2yuf57VFdialH1J6r0SqjE VAlF6QeqkHW+LN3dd3i9l6Wmoe+3Yi3ZWBHXYWC8C+R3GS06lJaPCY+ebQ9yu3Rq OWFlypwvwb56shtw/XaUH3iaG1Da6xfFTb7Rj39z+iDu -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:23 2026 by rpki-client