This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/ayC2OHHfb_6SQy2hYp8JrOvTWgw.roa File: ayC2OHHfb_6SQy2hYp8JrOvTWgw.roa (raw, json) Hash identifier: l2jgxe39FN9xPDnF6IEX7MtUqS5VgQqj0LIjS5Q/SzE= Subject key identifier: 6B:20:B6:38:71:DF:6F:FE:92:43:2D:A1:62:9F:09:AC:EB:D3:5A:0C Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA764A270B0D0F87521E37AEE7C695A Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/ayC2OHHfb_6SQy2hYp8JrOvTWgw.roa Signing time: Fri 02 Jan 2026 12:20:58 +0000 ROA not before: Fri 02 Jan 2026 12:20:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24789 IP address blocks: 81.16.80.0/20 maxlen: 20 81.25.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:64:a2:70:b0:d0:f8:75:21:e3:7a:ee:7c:69:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b20b63871df6ffe92432da1629f09acebd35a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3f:64:81:4d:fb:e8:76:f8:14:ee:6f:c9:5a: 72:2c:98:89:29:fe:82:80:dd:23:d9:00:66:8a:96: 54:57:a0:20:cc:72:89:f9:56:99:24:44:50:34:ce: 14:b9:3a:48:5a:78:f4:19:41:1b:4c:1a:ba:f7:22: 48:7d:7c:ee:3e:16:09:54:eb:68:0c:eb:8a:6d:f5: 55:23:98:20:3a:fb:08:58:97:1a:37:3d:8c:35:6e: 47:ce:ef:f8:2a:b9:d7:45:d3:c8:c0:48:19:d2:ff: f9:74:ce:7f:8e:0a:fd:08:ce:2e:40:b1:3c:f5:23: 70:b7:e8:f7:6c:20:28:38:44:5f:15:43:ee:ca:58: fe:53:63:4e:34:eb:b3:8b:05:40:6a:d1:c7:7c:d5: 49:44:cd:3c:52:49:b7:f9:2d:29:5f:a0:43:6e:11: 7a:8d:e2:b5:65:77:3e:2e:9a:8b:e9:49:49:9b:2f: c6:aa:70:6f:6b:6d:f4:8a:09:21:44:34:c4:62:89: 92:ed:0f:b5:c5:6a:ba:f1:fa:96:95:3f:93:ba:f2: 55:73:8a:36:0d:70:96:22:a5:52:ae:94:8e:c2:9e: ee:f7:ed:ab:e2:c8:5d:29:18:80:ca:4d:18:60:b6: 66:6f:c3:5d:2c:db:93:7a:e3:96:81:45:e0:f1:39: a2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:20:B6:38:71:DF:6F:FE:92:43:2D:A1:62:9F:09:AC:EB:D3:5A:0C X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/ayC2OHHfb_6SQy2hYp8JrOvTWgw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.16.80.0/20 81.25.0.0/20 Signature Algorithm: sha256WithRSAEncryption 84:fa:c1:aa:e3:e9:9d:f6:67:8a:0b:79:fe:83:ed:3a:34:5f: e5:b5:e8:0e:3c:a4:83:58:ca:39:53:b6:8b:38:54:dc:c0:07: 16:44:5f:2a:0f:af:70:cd:b6:73:59:a7:e4:7a:31:8b:ce:af: ac:c1:74:ca:65:94:a5:bb:6d:4f:f7:ea:7f:57:7e:69:41:12: 53:6b:ff:53:a1:25:30:db:66:ee:2f:e1:1e:94:aa:b5:92:2f: 2e:8f:de:cf:22:a2:cd:b5:1c:bf:11:2e:d9:f5:d3:62:29:ac: 7b:0f:5a:82:5e:86:5c:4e:e9:5b:f8:54:f0:43:76:fe:69:42: 24:8c:0d:b2:cf:32:17:63:c6:f1:ba:4d:7a:05:8f:0d:1f:a7: 75:9f:e2:d9:4c:c9:2b:65:d6:76:54:07:94:39:dc:07:e2:7d: bc:e8:b3:e2:55:a3:f1:29:b6:07:fa:c8:af:ff:a6:7f:60:46: b2:65:c1:a3:d9:28:6c:ee:85:4d:f8:4e:5d:e6:a5:3f:4f:40: f3:1b:f0:12:e7:23:8a:68:29:54:9d:91:73:ea:11:99:7d:0b: 52:d2:c6:76:c6:ac:f7:e4:29:d2:06:71:5f:c6:ed:32:15:a8: 42:34:6e:fb:42:fd:5d:40:f8:a3:22:e1:76:78:00:3f:3d:d3: 38:fc:28:a8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+p2SicLDQ+HUh43rufGlaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjIwYjYzODcxZGY2ZmZlOTI0MzJkYTE2MjlmMDlhY2ViZDM1YTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD9kgU376Hb4FO5vyVpyLJiJKf6C gN0j2QBmipZUV6AgzHKJ+VaZJERQNM4UuTpIWnj0GUEbTBq69yJIfXzuPhYJVOto DOuKbfVVI5ggOvsIWJcaNz2MNW5Hzu/4KrnXRdPIwEgZ0v/5dM5/jgr9CM4uQLE8 9SNwt+j3bCAoOERfFUPuylj+U2NONOuziwVAatHHfNVJRM08Ukm3+S0pX6BDbhF6 jeK1ZXc+LpqL6UlJmy/GqnBva230igkhRDTEYomS7Q+1xWq68fqWlT+TuvJVc4o2 DXCWIqVSrpSOwp7u9+2r4shdKRiAyk0YYLZmb8NdLNuTeuOWgUXg8TmiCQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGsgtjhx32/+kkMtoWKfCazr01oMMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvYXlDMk9ISGZiXzZTUXkyaFlwOEpyT3ZUV2d3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEURBQAwQE URkAMA0GCSqGSIb3DQEBCwUAA4IBAQCE+sGq4+md9meKC3n+g+06NF/ltegOPKSD WMo5U7aLOFTcwAcWRF8qD69wzbZzWafkejGLzq+swXTKZZSlu21P9+p/V35pQRJT a/9ToSUw22buL+EelKq1ki8uj97PIqLNtRy/ES7Z9dNiKax7D1qCXoZcTulb+FTw Q3b+aUIkjA2yzzIXY8bxuk16BY8NH6d1n+LZTMkrZdZ2VAeUOdwH4n286LPiVaPx KbYH+siv/6Z/YEayZcGj2Shs7oVN+E5d5qU/T0DzG/AS5yOKaClUnZFz6hGZfQtS 0sZ2xqz35CnSBnFfxu0yFahCNG77Qv1dQPijIuF2eAA/PdM4/Cio -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:14 2026 by rpki-client