This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/AOST2v0fOQI-ty-pWahAGdkHAEs.roa File: AOST2v0fOQI-ty-pWahAGdkHAEs.roa (raw, json) Hash identifier: jxMvz/MnFmWAmclh3cHyqmlZEVpCA/u6934edlXvIDs= Subject key identifier: 00:E4:93:DA:FD:1F:39:02:3E:B7:2F:A9:59:A8:40:19:D9:07:00:4B Certificate issuer: /CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6 Certificate serial: 019B76EAAFD4BEAFC4167FBD0CFAF3C18895 Authority key identifier: C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/AOST2v0fOQI-ty-pWahAGdkHAEs.roa Signing time: Thu 01 Jan 2026 00:17:30 +0000 ROA not before: Thu 01 Jan 2026 00:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50304 IP address blocks: 62.176.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 12:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:af:d4:be:af:c4:16:7f:bd:0c:fa:f3:c1:88:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6 Validity Not Before: Jan 1 00:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00e493dafd1f39023eb72fa959a84019d907004b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4b:19:0e:c4:2f:50:42:0c:07:e8:df:42:9c: 74:15:38:11:c2:18:75:ef:84:86:b2:10:be:05:64: 8f:08:d5:75:dc:83:f3:2e:f1:75:bf:84:7d:2a:4d: cd:12:51:55:96:4a:b7:60:dc:88:48:eb:76:c0:55: 3b:d4:ef:e0:6e:dc:93:7e:81:7d:db:74:4c:c5:a7: eb:b0:e1:ee:55:9e:a8:87:a4:e1:7f:72:2b:0f:88: 7a:4d:d2:ab:d3:bb:5e:47:c9:50:fe:74:05:3b:27: cf:50:71:1e:90:ed:94:62:84:9f:67:24:bf:be:70: 96:62:e2:c4:8b:cb:f8:1c:40:c9:1d:7c:fe:48:d5: 9d:d6:f6:ee:b5:df:52:18:bd:a8:7d:96:ef:c0:3b: 10:79:ba:36:bd:d8:53:20:a7:5d:79:d3:ef:61:ae: 2b:83:85:a6:71:fc:d6:16:90:19:76:2d:a3:89:de: ee:2c:14:ba:4b:1c:cd:9c:73:dc:7a:12:87:43:dd: 40:90:57:09:37:1d:21:c6:be:3d:c6:24:f9:d3:ac: a7:f3:55:30:3b:44:d0:c8:23:5f:cd:95:6e:a0:dd: c9:c2:dc:2f:4d:9e:d3:53:8d:8a:42:fe:db:e8:78: 43:b0:f7:ad:ad:86:6e:a0:cd:5c:1c:71:ae:15:9b: 45:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E4:93:DA:FD:1F:39:02:3E:B7:2F:A9:59:A8:40:19:D9:07:00:4B X509v3 Authority Key Identifier: keyid:C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/AOST2v0fOQI-ty-pWahAGdkHAEs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.176.216.0/21 Signature Algorithm: sha256WithRSAEncryption 17:e0:5f:90:9a:35:e2:a5:cb:b1:9f:b3:fe:e2:cc:c8:1a:f4: cb:34:69:54:03:a9:39:4c:29:62:c9:ca:fe:85:5d:4c:30:16: 49:27:0a:75:cf:36:7b:66:80:87:da:6e:0d:6d:f8:cd:47:6f: 1a:6f:a4:05:b8:06:65:32:20:d2:84:53:96:bd:3f:b8:e8:bc: 51:4e:ec:b1:d3:02:5a:44:7a:e6:62:8c:c5:43:a9:27:6b:13: 24:93:08:80:97:6f:9a:96:45:74:d7:75:a6:51:ec:cb:1f:de: 4e:8c:cf:64:1c:4c:6a:0b:47:28:cf:63:88:91:cf:53:9a:ec: fb:1c:cb:54:52:b1:b7:36:56:13:87:c0:84:30:43:80:29:c4: 0a:b8:90:3b:74:6c:60:59:e0:58:f9:bd:23:ea:0c:b7:e9:4f: 22:1e:68:52:2f:57:e4:4e:f2:b9:31:08:d2:36:78:91:b4:a5: 19:90:d0:4e:8a:77:d4:a4:71:c3:29:16:0d:92:72:df:fa:00: 7a:8e:dc:3c:64:c9:af:d0:7f:f7:c8:d6:09:e0:48:80:b8:3f: 41:b7:e8:f8:16:ad:d0:48:08:a1:27:cd:3b:67:7b:d2:1f:41: b1:33:a3:9d:aa:02:1e:46:86:c9:44:61:9e:b3:41:12:34:e7: 01:73:93:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26q/Uvq/EFn+9DPrzwYiVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZDhjMTk4NWM1MGM3ZWFkNGNmZDhkM2E5M2Q2M2U1NjEx ZjZmYjYwHhcNMjYwMTAxMDAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGU0OTNkYWZkMWYzOTAyM2ViNzJmYTk1OWE4NDAxOWQ5MDcwMDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UsZDsQvUEIMB+jfQpx0FTgRwhh1 74SGshC+BWSPCNV13IPzLvF1v4R9Kk3NElFVlkq3YNyISOt2wFU71O/gbtyTfoF9 23RMxafrsOHuVZ6oh6Thf3IrD4h6TdKr07teR8lQ/nQFOyfPUHEekO2UYoSfZyS/ vnCWYuLEi8v4HEDJHXz+SNWd1vbutd9SGL2ofZbvwDsQebo2vdhTIKddedPvYa4r g4WmcfzWFpAZdi2jid7uLBS6SxzNnHPcehKHQ91AkFcJNx0hxr49xiT506yn81Uw O0TQyCNfzZVuoN3JwtwvTZ7TU42KQv7b6HhDsPetrYZuoM1cHHGuFZtFNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFADkk9r9HzkCPrcvqVmoQBnZBwBLMB8GA1UdIwQY MBaAFMTYwZhcUMfq1M/Y06k9Y+VhH2+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE5qQm1GeFF4LXJVejlqVHFUMWo1V0VmYjdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83N2Q2MDctN2Q3Yy00NTg5LWFmZjct MmZkYTk3MDc5YzAxLzEvQU9TVDJ2MGZPUUktdHktcFdhaEFHZGtIQUVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS83N2Q2MDctN2Q3Yy00NTg5LWFmZjctMmZkYTk3MDc5YzAx LzEveE5qQm1GeFF4LXJVejlqVHFUMWo1V0VmYjdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDPrDYMA0G CSqGSIb3DQEBCwUAA4IBAQAX4F+QmjXipcuxn7P+4szIGvTLNGlUA6k5TCliycr+ hV1MMBZJJwp1zzZ7ZoCH2m4NbfjNR28ab6QFuAZlMiDShFOWvT+46LxRTuyx0wJa RHrmYozFQ6knaxMkkwiAl2+alkV013WmUezLH95OjM9kHExqC0coz2OIkc9Tmuz7 HMtUUrG3NlYTh8CEMEOAKcQKuJA7dGxgWeBY+b0j6gy36U8iHmhSL1fkTvK5MQjS NniRtKUZkNBOinfUpHHDKRYNknLf+gB6jtw8ZMmv0H/3yNYJ4EiAuD9Bt+j4Fq3Q SAihJ807Z3vSH0GxM6OdqgIeRobJRGGes0ESNOcBc5Nk -----END CERTIFICATE-----Generated at Fri Jan 23 21:39:55 2026 by rpki-client