This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/aaFAcQyNz_bh03nU4UduWytMpCw.roa File: aaFAcQyNz_bh03nU4UduWytMpCw.roa (raw, json) Hash identifier: XS3fKDDD3W6Us7JiqVX66U0+QZo2VcO9tr0sYbN8CSI= Subject key identifier: 69:A1:40:71:0C:8D:CF:F6:E1:D3:79:D4:E1:47:6E:5B:2B:4C:A4:2C Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Certificate serial: 019B7FF1B5F90A0ADEA928137AC930EFA66E Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/aaFAcQyNz_bh03nU4UduWytMpCw.roa Signing time: Fri 02 Jan 2026 18:21:45 +0000 ROA not before: Fri 02 Jan 2026 18:21:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62119 IP address blocks: 194.147.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:b5:f9:0a:0a:de:a9:28:13:7a:c9:30:ef:a6:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Validity Not Before: Jan 2 18:21:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69a140710c8dcff6e1d379d4e1476e5b2b4ca42c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:74:33:22:7c:c7:2c:76:62:88:77:f8:a5:35: 7e:1f:f5:10:b8:2a:f9:96:43:9c:2f:64:8e:ce:9d: ec:fb:34:0e:f4:8c:cd:ab:f7:21:2b:f8:4a:35:bb: 52:67:f3:43:74:c6:e0:fe:80:af:90:fe:cd:43:c1: 06:e2:2c:dd:4c:0d:1d:60:fa:b3:6a:87:a1:b0:4f: 96:1a:52:6d:6d:cd:ef:9b:a4:80:5b:2e:15:f2:59: 72:c7:2d:da:f5:de:ea:e3:1d:3e:a0:55:79:f9:52: a3:aa:87:b6:63:e8:28:cf:48:40:72:f9:b1:1f:3e: d9:4d:d8:cc:15:62:8e:e2:17:a9:e6:fc:c5:e1:0c: 4a:89:65:1e:2d:ea:c3:28:e8:fc:92:54:a4:78:c6: d5:35:18:02:06:1e:38:75:85:ec:98:74:2c:e8:08: 2c:16:90:d7:31:42:36:cd:cf:9b:2c:0d:7c:b5:87: 6b:cc:c4:02:6d:78:f4:42:91:14:b7:00:23:72:c6: 5b:47:7a:0e:94:38:4e:2f:3f:61:ef:1d:6e:66:1c: 20:03:0c:cc:9e:96:24:9e:1c:06:69:df:d0:e7:fb: f4:4e:48:5c:03:cf:7d:cd:d6:20:50:6b:c6:9a:33: 20:b0:4b:fd:1b:3e:94:47:d6:77:06:9d:9c:27:71: 2d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A1:40:71:0C:8D:CF:F6:E1:D3:79:D4:E1:47:6E:5B:2B:4C:A4:2C X509v3 Authority Key Identifier: keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/aaFAcQyNz_bh03nU4UduWytMpCw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.97.0/24 Signature Algorithm: sha256WithRSAEncryption 67:a9:14:68:60:a9:31:03:1f:70:a7:b6:ea:d6:49:ba:06:96: 9d:0f:23:4b:de:00:e4:69:87:38:6d:16:97:0e:1f:72:33:ed: fc:54:b4:af:32:28:2a:e7:49:40:66:b0:85:bd:6c:24:eb:85: d6:cc:3c:8a:de:cc:ae:ca:33:42:61:07:ec:53:57:75:34:b8: 8b:63:b0:2a:00:8d:e0:7a:f8:2b:e1:32:3a:1c:45:ff:e2:35: cd:98:eb:39:43:ed:21:fb:43:d0:ae:7e:ab:a3:70:aa:ee:b9: 6c:c7:2b:06:5a:5b:4a:b1:0f:07:26:88:59:e0:5d:f4:65:04: 23:95:44:c9:8a:ec:32:48:53:37:86:c4:83:53:ce:3f:0f:ed: f0:0e:23:b2:24:7e:a5:a8:c8:b5:43:c6:b2:6d:12:7a:02:83: 43:2e:a3:bc:4b:50:71:8d:72:26:e5:c9:12:d1:f3:ef:6a:63: 0f:9d:87:de:ab:7c:17:97:9e:2c:30:02:00:e2:d6:ba:31:6c: bc:79:4a:90:cc:72:75:d9:0b:75:89:1f:01:1f:92:df:b3:c9: d1:56:3b:46:62:fc:18:13:2d:56:02:70:ea:ef:ca:81:8a:3f: 3f:63:8d:ae:32:4b:45:e9:88:5f:0e:fe:a9:98:cb:86:3c:d3: b6:76:a2:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8bX5CgreqSgTeskw76ZuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1 ODYzNWEwHhcNMjYwMTAyMTgyMTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWExNDA3MTBjOGRjZmY2ZTFkMzc5ZDRlMTQ3NmU1YjJiNGNhNDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3QzInzHLHZiiHf4pTV+H/UQuCr5 lkOcL2SOzp3s+zQO9IzNq/chK/hKNbtSZ/NDdMbg/oCvkP7NQ8EG4izdTA0dYPqz aoehsE+WGlJtbc3vm6SAWy4V8llyxy3a9d7q4x0+oFV5+VKjqoe2Y+goz0hAcvmx Hz7ZTdjMFWKO4hep5vzF4QxKiWUeLerDKOj8klSkeMbVNRgCBh44dYXsmHQs6Ags FpDXMUI2zc+bLA18tYdrzMQCbXj0QpEUtwAjcsZbR3oOlDhOLz9h7x1uZhwgAwzM npYknhwGad/Q5/v0TkhcA899zdYgUGvGmjMgsEv9Gz6UR9Z3Bp2cJ3EtqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGmhQHEMjc/24dN51OFHblsrTKQsMB8GA1UdIwQY MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt NmNiODk3OTFkN2ZkLzEvYWFGQWNReU56X2JoMDNuVTRVZHVXeXRNcEN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpNhMA0G CSqGSIb3DQEBCwUAA4IBAQBnqRRoYKkxAx9wp7bq1km6BpadDyNL3gDkaYc4bRaX Dh9yM+38VLSvMigq50lAZrCFvWwk64XWzDyK3syuyjNCYQfsU1d1NLiLY7AqAI3g evgr4TI6HEX/4jXNmOs5Q+0h+0PQrn6ro3Cq7rlsxysGWltKsQ8HJohZ4F30ZQQj lUTJiuwySFM3hsSDU84/D+3wDiOyJH6lqMi1Q8aybRJ6AoNDLqO8S1BxjXIm5ckS 0fPvamMPnYfeq3wXl54sMAIA4ta6MWy8eUqQzHJ12Qt1iR8BH5Lfs8nRVjtGYvwY Ey1WAnDq78qBij8/Y42uMktF6YhfDv6pmMuGPNO2dqI2 -----END CERTIFICATE-----Generated at Fri Jan 23 15:23:24 2026 by rpki-client