This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/ASjcIfGbiNQMdDG-NkaJ2godGXI.roa File: ASjcIfGbiNQMdDG-NkaJ2godGXI.roa (raw, json) Hash identifier: eOAB7JSxUOBnovgBRfzr3wOE0ITCJL98E+CzEew1Lmo= Subject key identifier: 01:28:DC:21:F1:9B:88:D4:0C:74:31:BE:36:46:89:DA:0A:1D:19:72 Certificate issuer: /CN=452e7d87922129df90c4870da2a7738404724858 Certificate serial: 019B76EB8FED83FD8DD4789E32A2E8DC041A Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/ASjcIfGbiNQMdDG-NkaJ2godGXI.roa Signing time: Thu 01 Jan 2026 00:18:27 +0000 ROA not before: Thu 01 Jan 2026 00:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 185.34.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8f:ed:83:fd:8d:d4:78:9e:32:a2:e8:dc:04:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=452e7d87922129df90c4870da2a7738404724858 Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0128dc21f19b88d40c7431be364689da0a1d1972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bb:3b:f3:c2:79:ad:dc:3a:86:fc:b6:7c:75: 64:57:80:13:4a:76:43:99:c3:95:41:bc:5f:71:30: 76:db:a5:2e:ac:25:aa:4c:ed:66:b9:a6:11:82:e9: 57:38:3a:ff:33:c6:37:aa:fe:32:42:1e:46:ba:ae: ad:ac:fa:e9:89:89:f6:36:6e:e9:8b:54:7f:c7:cb: ae:38:86:02:35:b3:81:f1:b8:05:13:f8:f7:48:6a: ef:2d:86:eb:b1:7b:ae:74:60:b0:15:a7:7d:f4:02: 5d:cf:6a:86:07:22:df:f2:48:4b:b1:11:e9:5a:6c: c0:31:09:6d:79:47:d8:b2:b6:14:9e:5d:52:fc:01: dc:b5:b7:11:75:e9:2c:b5:e2:45:bf:06:f1:23:88: d8:bb:a9:48:20:e5:32:db:5a:29:55:9a:b2:e7:fe: bd:41:3b:6f:46:71:73:89:12:69:1d:2e:15:8f:be: 83:e6:90:c0:b0:14:b2:7d:fd:cc:3a:ce:2c:24:88: 95:83:99:90:a5:64:93:b7:49:fd:53:42:51:14:8e: e8:75:53:16:9d:10:ca:05:71:01:77:1c:6c:56:60: 99:63:ed:01:dc:e3:e2:64:02:0a:26:d0:db:78:c9: fd:2a:5c:93:3f:7e:c6:0d:5c:41:25:5e:09:32:73: 27:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:28:DC:21:F1:9B:88:D4:0C:74:31:BE:36:46:89:DA:0A:1D:19:72 X509v3 Authority Key Identifier: keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/ASjcIfGbiNQMdDG-NkaJ2godGXI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.34.250.0/24 Signature Algorithm: sha256WithRSAEncryption af:68:97:db:39:68:b1:c0:d3:df:7e:9f:93:5a:13:30:dc:13: d9:b7:c2:d9:a8:c0:6f:65:d1:bc:c9:6f:69:3f:3a:5c:58:0c: 3c:96:86:93:bf:c0:09:ce:7f:e4:2a:46:99:6c:00:a1:df:e7: bc:7d:5e:31:db:6f:69:c5:60:f0:db:d9:32:67:f7:a3:a5:4d: b8:7f:b7:6f:1b:41:5d:fd:33:f6:eb:db:1d:9b:0b:18:88:db: a9:6b:13:90:93:b5:db:82:fe:37:4f:c9:d7:b6:54:83:4f:e8: 42:7f:29:94:94:f8:37:cc:9b:f9:d8:13:5b:0e:89:8c:d3:af: 33:e0:bb:84:85:6e:73:5c:cd:e1:a9:26:f1:b0:79:0d:82:9b: 32:d0:47:49:61:b8:e8:69:84:33:03:bd:05:c8:10:54:30:83: cf:1f:26:96:1f:ab:d8:da:a8:f1:63:12:0c:3d:80:ff:0e:a0: 08:c8:09:b4:c6:ca:d0:de:0d:b8:2a:33:e3:0d:ca:5c:11:21: a5:e7:29:12:2e:e7:20:86:5d:0e:c8:74:a2:1e:64:72:f8:a9: 69:a9:06:cc:61:6e:ec:35:c3:f2:0e:09:f5:d7:e7:03:33:41: 58:0a:0b:3e:80:fd:f5:8c:75:57:9c:db:b1:42:c1:3a:3d:0a: 6f:9a:82:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264/tg/2N1HieMqLo3AQaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MmU3ZDg3OTIyMTI5ZGY5MGM0ODcwZGEyYTc3Mzg0MDQ3 MjQ4NTgwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTI4ZGMyMWYxOWI4OGQ0MGM3NDMxYmUzNjQ2ODlkYTBhMWQxOTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbs788J5rdw6hvy2fHVkV4ATSnZD mcOVQbxfcTB226UurCWqTO1muaYRgulXODr/M8Y3qv4yQh5Guq6trPrpiYn2Nm7p i1R/x8uuOIYCNbOB8bgFE/j3SGrvLYbrsXuudGCwFad99AJdz2qGByLf8khLsRHp WmzAMQlteUfYsrYUnl1S/AHctbcRdeksteJFvwbxI4jYu6lIIOUy21opVZqy5/69 QTtvRnFziRJpHS4Vj76D5pDAsBSyff3MOs4sJIiVg5mQpWSTt0n9U0JRFI7odVMW nRDKBXEBdxxsVmCZY+0B3OPiZAIKJtDbeMn9KlyTP37GDVxBJV4JMnMnPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAEo3CHxm4jUDHQxvjZGidoKHRlyMB8GA1UdIwQY MBaAFEUufYeSISnfkMSHDaKnc4QEckhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlM1OWg1SWhLZC1ReEljTm9xZHpoQVJ5U0ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80ODc5NjItODU4OC00ZjBhLWJiN2Qt YWFhOGQzYTk0MGFjLzEvQVNqY0lmR2JpTlFNZERHLU5rYUoyZ29kR1hJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC80ODc5NjItODU4OC00ZjBhLWJiN2QtYWFhOGQzYTk0MGFj LzEvUlM1OWg1SWhLZC1ReEljTm9xZHpoQVJ5U0ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSL6MA0G CSqGSIb3DQEBCwUAA4IBAQCvaJfbOWixwNPffp+TWhMw3BPZt8LZqMBvZdG8yW9p PzpcWAw8loaTv8AJzn/kKkaZbACh3+e8fV4x229pxWDw29kyZ/ejpU24f7dvG0Fd /TP269sdmwsYiNupaxOQk7Xbgv43T8nXtlSDT+hCfymUlPg3zJv52BNbDomM068z 4LuEhW5zXM3hqSbxsHkNgpsy0EdJYbjoaYQzA70FyBBUMIPPHyaWH6vY2qjxYxIM PYD/DqAIyAm0xsrQ3g24KjPjDcpcESGl5ykSLucghl0OyHSiHmRy+KlpqQbMYW7s NcPyDgn11+cDM0FYCgs+gP31jHVXnNuxQsE6PQpvmoJU -----END CERTIFICATE-----Generated at Fri Jan 9 09:39:27 2026 by rpki-client