This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/AoU_pxzG_o6ZdZCCDWMVfDhpvWo.roa File: AoU_pxzG_o6ZdZCCDWMVfDhpvWo.roa (raw, json) Hash identifier: BRGrCuSHF/KxuLb2FPfCsu+om1pAKryDQAGzbDeUu7s= Subject key identifier: 02:85:3F:A7:1C:C6:FE:8E:99:75:90:82:0D:63:15:7C:38:69:BD:6A Certificate issuer: /CN=296016ad64c22600acf3049f8758f53ebb1e57c4 Certificate serial: 019B7A5AC0F821BC24F1013FC9379F854471 Authority key identifier: 29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/AoU_pxzG_o6ZdZCCDWMVfDhpvWo.roa Signing time: Thu 01 Jan 2026 16:18:46 +0000 ROA not before: Thu 01 Jan 2026 16:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208226 IP address blocks: 216.87.54.0/24 maxlen: 24 2001:678:204::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c0:f8:21:bc:24:f1:01:3f:c9:37:9f:85:44:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296016ad64c22600acf3049f8758f53ebb1e57c4 Validity Not Before: Jan 1 16:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02853fa71cc6fe8e997590820d63157c3869bd6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:47:fc:36:8e:2c:25:e5:5c:ca:c1:63:81:d7: 59:2d:7a:17:e5:22:2f:56:0b:0d:1b:bc:f8:9d:25: b2:c4:cb:2f:10:8a:ba:9d:fc:4a:62:67:d7:57:b4: af:26:98:87:ef:38:93:79:50:b3:be:12:66:4e:e4: 1b:1a:52:a6:89:63:f5:8b:4d:07:bb:ee:0e:89:91: 61:53:1b:c7:59:d2:f9:69:49:42:4c:8b:26:60:41: d7:d1:f5:5c:12:e5:f5:a0:e4:bd:cc:57:14:d4:8d: 50:44:9b:6f:6c:51:dd:85:3d:39:2a:f8:b7:2e:4e: d5:f4:c9:a3:50:ba:96:21:30:51:e0:f0:0b:28:55: de:40:86:41:61:60:de:46:54:1e:b3:53:ea:c9:95: 61:eb:d7:ee:c8:be:55:aa:04:58:02:56:d5:fb:b3: 93:48:4e:63:46:22:4a:3b:0c:c9:4a:a0:b0:72:f6: 0a:17:3d:73:24:d6:d3:23:48:2c:ad:9b:61:f0:bf: a7:f4:a2:58:a4:a3:a5:2a:78:6f:ce:a2:d8:68:ea: 9b:53:b1:ef:da:7e:6c:86:74:d7:a6:43:94:42:59: 3c:8d:fc:0d:ec:cb:74:5d:3a:9f:c2:21:47:63:a0: 74:06:f8:d2:de:2b:5d:40:11:47:ce:82:ff:19:17: 11:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:85:3F:A7:1C:C6:FE:8E:99:75:90:82:0D:63:15:7C:38:69:BD:6A X509v3 Authority Key Identifier: keyid:29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/AoU_pxzG_o6ZdZCCDWMVfDhpvWo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.87.54.0/24 IPv6: 2001:678:204::/48 Signature Algorithm: sha256WithRSAEncryption 3c:d2:dc:7d:b8:c1:30:64:33:55:15:5f:a4:fc:8e:f7:f5:d9: c3:19:f4:d1:04:e7:6f:0d:d4:80:8b:43:2f:af:34:be:19:28: 35:f3:d2:7e:e7:f8:64:ad:02:1d:ee:30:a2:7d:01:42:61:93: d7:12:e1:de:18:a2:8d:a1:10:0b:00:db:10:96:1d:e2:1a:54: 84:04:29:a3:52:0a:78:12:c4:52:4d:5a:70:a0:59:30:cd:bd: 34:df:61:9a:e5:28:48:0b:4e:e2:7a:ea:76:60:be:98:20:70: b1:92:23:29:98:fc:e9:45:9f:5b:42:17:8f:6a:fc:18:ad:f6: 9a:e9:1f:f0:00:98:e3:e1:28:73:6d:22:ef:40:6f:dd:01:70: 37:03:96:16:62:49:d7:fd:12:d2:37:02:6f:cb:dc:f1:67:a4: f4:e4:e5:17:02:d0:3d:51:76:13:9b:e3:dc:88:9b:55:51:91: d9:00:ef:21:9d:a7:a8:8f:ac:6e:20:7f:c8:a2:96:81:b0:0b: 88:18:71:9c:b7:65:cf:80:ff:c5:e1:3f:8b:81:1e:b9:07:04: af:c2:e4:46:27:10:ae:c2:1b:05:25:67:f5:93:fd:4e:88:3d: 3c:a3:b2:57:46:15:19:24:00:eb:37:ca:7c:0c:b5:35:95:67: 5e:84:95:67 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6WsD4Ibwk8QE/yTefhURxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjAxNmFkNjRjMjI2MDBhY2YzMDQ5Zjg3NThmNTNlYmIx ZTU3YzQwHhcNMjYwMTAxMTYxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjg1M2ZhNzFjYzZmZThlOTk3NTkwODIwZDYzMTU3YzM4NjliZDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEf8No4sJeVcysFjgddZLXoX5SIv VgsNG7z4nSWyxMsvEIq6nfxKYmfXV7SvJpiH7ziTeVCzvhJmTuQbGlKmiWP1i00H u+4OiZFhUxvHWdL5aUlCTIsmYEHX0fVcEuX1oOS9zFcU1I1QRJtvbFHdhT05Kvi3 Lk7V9MmjULqWITBR4PALKFXeQIZBYWDeRlQes1PqyZVh69fuyL5VqgRYAlbV+7OT SE5jRiJKOwzJSqCwcvYKFz1zJNbTI0gsrZth8L+n9KJYpKOlKnhvzqLYaOqbU7Hv 2n5shnTXpkOUQlk8jfwN7Mt0XTqfwiFHY6B0BvjS3itdQBFHzoL/GRcR3QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAKFP6ccxv6OmXWQgg1jFXw4ab1qMB8GA1UdIwQY MBaAFClgFq1kwiYArPMEn4dY9T67HlfEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dBV3JXVENKZ0NzOHdTZmgxajFQcnNlVjhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMzM0ODEtNjYzNC00ZDA5LWJmMTIt YWI3ZjE0ZGFhZTRmLzEvQW9VX3B4ekdfbzZaZFpDQ0RXTVZmRGhwdldvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMzM0ODEtNjYzNC00ZDA5LWJmMTItYWI3ZjE0ZGFhZTRm LzEvS1dBV3JXVENKZ0NzOHdTZmgxajFQcnNlVjhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA2Fc2MA8E AgACMAkDBwAgAQZ4AgQwDQYJKoZIhvcNAQELBQADggEBADzS3H24wTBkM1UVX6T8 jvf12cMZ9NEE528N1ICLQy+vNL4ZKDXz0n7n+GStAh3uMKJ9AUJhk9cS4d4Yoo2h EAsA2xCWHeIaVIQEKaNSCngSxFJNWnCgWTDNvTTfYZrlKEgLTuJ66nZgvpggcLGS IymY/OlFn1tCF49q/Bit9prpH/AAmOPhKHNtIu9Ab90BcDcDlhZiSdf9EtI3Am/L 3PFnpPTk5RcC0D1RdhOb49yIm1VRkdkA7yGdp6iPrG4gf8iiloGwC4gYcZy3Zc+A /8XhP4uBHrkHBK/C5EYnEK7CGwUlZ/WT/U6IPTyjsldGFRkkAOs3ynwMtTWVZ16E lWc= -----END CERTIFICATE-----Generated at Wed Jan 21 09:57:25 2026 by rpki-client