This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/aAOBblLWkFYVgOvKXUdh349Ivbc.roa File: aAOBblLWkFYVgOvKXUdh349Ivbc.roa (raw, json) Hash identifier: uLq1Kq/7zhHKqQxmYPWH/BcB/xo1/OuYwRKLP1AY8zY= Subject key identifier: 68:03:81:6E:52:D6:90:56:15:80:EB:CA:5D:47:61:DF:8F:48:BD:B7 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA77B8FF163FB081558A9DD471C2568 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/aAOBblLWkFYVgOvKXUdh349Ivbc.roa Signing time: Fri 02 Jan 2026 12:21:03 +0000 ROA not before: Fri 02 Jan 2026 12:21:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48421 IP address blocks: 2.63.192.0/24 maxlen: 24 87.242.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:7b:8f:f1:63:fb:08:15:58:a9:dd:47:1c:25:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6803816e52d690561580ebca5d4761df8f48bdb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0a:31:cb:41:9b:f4:b3:25:de:ff:a0:95:48: 8c:40:68:48:6e:62:82:f7:f0:24:59:e5:11:7e:47: 20:77:a1:21:09:7a:04:38:b7:34:c4:eb:b5:bd:7f: 51:51:d2:5b:33:af:26:91:43:be:29:af:90:b1:47: 30:f7:eb:3d:2c:11:2f:da:cf:f1:22:3b:b8:be:14: 3d:f7:4e:a3:40:25:57:84:58:4c:81:3c:b7:88:75: 74:ed:96:90:a8:86:04:44:1a:62:37:f8:6b:a7:2f: 30:4d:35:89:b9:49:03:9c:1c:53:68:cc:8a:ae:26: 62:31:38:79:03:87:d1:88:bb:23:1c:81:21:75:9f: 7b:b3:66:89:2c:ad:af:6e:f3:44:76:54:03:b5:54: 90:99:68:56:fd:96:d8:60:7c:42:09:4b:a2:76:41: 7f:5a:99:8f:ee:e9:42:c0:30:84:c1:3e:e4:72:7b: f5:95:0f:65:6f:27:31:71:6e:96:e2:cd:2c:80:c2: e1:ad:d8:a4:08:18:bf:76:29:1c:f1:0a:94:72:08: 0a:c7:16:cf:5c:99:3a:4c:a9:da:52:85:c0:5b:ab: 9f:cb:4c:2d:40:af:9f:02:36:ad:33:f3:3e:27:b0: fe:c4:fa:d8:1a:cf:83:88:16:33:fd:fb:f4:2c:2e: e2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:03:81:6E:52:D6:90:56:15:80:EB:CA:5D:47:61:DF:8F:48:BD:B7 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/aAOBblLWkFYVgOvKXUdh349Ivbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.63.192.0/24 87.242.66.0/24 Signature Algorithm: sha256WithRSAEncryption 44:89:ff:6e:b9:da:fb:26:02:ed:8f:63:89:d9:4b:fe:8b:0b: 36:82:6a:73:78:21:f0:78:6a:89:77:f9:57:54:40:0b:85:92: c7:4a:86:2d:46:fe:9c:95:d7:da:d4:86:1f:21:17:eb:75:31: f5:dc:ac:b9:40:ec:9a:d5:22:e4:5a:2f:73:c3:66:29:38:56: a9:ee:a0:e3:f3:ca:45:5d:7b:09:e4:09:db:84:ba:ab:90:bf: 2f:10:27:b5:9b:21:41:db:38:ec:25:59:e0:f0:7f:b9:14:15: f8:3f:0d:b8:a6:69:d2:db:e5:72:4e:56:7a:b7:1b:8c:1a:17: bf:76:d3:23:65:09:3f:84:48:d6:e4:6e:0c:1e:88:13:52:44: d2:e5:a2:12:91:c7:3c:5d:1d:0a:68:6b:8e:50:64:ae:8e:31: 48:5c:08:02:ec:9d:5a:3d:28:f0:73:c7:ac:05:ec:d1:d4:7d: 31:f1:78:f1:aa:af:fb:7c:f1:67:85:c9:db:38:0f:3d:83:bd: 4f:0d:75:6b:5e:d6:2d:d7:8d:0f:3c:41:8c:5b:3c:43:6f:36: a5:f7:1d:c9:fb:d3:b1:71:02:bf:ff:60:04:9c:31:22:7f:be: 46:24:66:b0:e7:6e:26:1e:41:c8:05:07:49:6d:0f:fa:7b:bb: 76:bf:56:86 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+p3uP8WP7CBVYqd1HHCVoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODAzODE2ZTUyZDY5MDU2MTU4MGViY2E1ZDQ3NjFkZjhmNDhiZGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2goxy0Gb9LMl3v+glUiMQGhIbmKC 9/AkWeURfkcgd6EhCXoEOLc0xOu1vX9RUdJbM68mkUO+Ka+QsUcw9+s9LBEv2s/x Iju4vhQ9906jQCVXhFhMgTy3iHV07ZaQqIYERBpiN/hrpy8wTTWJuUkDnBxTaMyK riZiMTh5A4fRiLsjHIEhdZ97s2aJLK2vbvNEdlQDtVSQmWhW/ZbYYHxCCUuidkF/ WpmP7ulCwDCEwT7kcnv1lQ9lbycxcW6W4s0sgMLhrdikCBi/dikc8QqUcggKxxbP XJk6TKnaUoXAW6ufy0wtQK+fAjatM/M+J7D+xPrYGs+DiBYz/fv0LC7iKwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGgDgW5S1pBWFYDryl1HYd+PSL23MB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvYUFPQmJsTFdrRllWZ092S1hVZGgzNDlJdmJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAj/AAwQA V/JCMA0GCSqGSIb3DQEBCwUAA4IBAQBEif9uudr7JgLtj2OJ2Uv+iws2gmpzeCHw eGqJd/lXVEALhZLHSoYtRv6cldfa1IYfIRfrdTH13Ky5QOya1SLkWi9zw2YpOFap 7qDj88pFXXsJ5AnbhLqrkL8vECe1myFB2zjsJVng8H+5FBX4Pw24pmnS2+VyTlZ6 txuMGhe/dtMjZQk/hEjW5G4MHogTUkTS5aISkcc8XR0KaGuOUGSujjFIXAgC7J1a PSjwc8esBezR1H0x8Xjxqq/7fPFnhcnbOA89g71PDXVrXtYt140PPEGMWzxDbzal 9x3J+9OxcQK//2AEnDEif75GJGaw524mHkHIBQdJbQ/6e7t2v1aG -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:45 2026 by rpki-client