This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AeZNmdBli6p5iSm_RUpgpjLrcC0.roa File: AeZNmdBli6p5iSm_RUpgpjLrcC0.roa (raw, json) Hash identifier: BA6k3bP/fspRShxV1qpltbco/xBOzi11scunRrlLUpE= Subject key identifier: 01:E6:4D:99:D0:65:8B:AA:79:89:29:BF:45:4A:60:A6:32:EB:70:2D Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A315DCB303E59D6518DA6F93E0414C Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AeZNmdBli6p5iSm_RUpgpjLrcC0.roa Signing time: Thu 01 Jan 2026 08:18:32 +0000 ROA not before: Thu 01 Jan 2026 08:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 132969 IP address blocks: 193.35.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:15:dc:b3:03:e5:9d:65:18:da:6f:93:e0:41:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01e64d99d0658baa798929bf454a60a632eb702d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:79:37:17:5f:91:03:a1:32:69:9b:14:53:7d: eb:6e:bc:25:29:b7:45:87:48:80:04:03:75:9c:05: 8b:8d:26:01:fd:31:68:2d:95:4a:03:9e:f7:9f:6d: aa:14:e0:b9:a3:75:c6:f3:b7:c0:29:9e:86:cb:d6: d5:c8:d0:d4:2f:c1:79:1e:c9:41:42:e9:2b:5a:01: 1c:18:a8:19:95:d2:67:6e:83:66:b9:1e:8b:8d:3a: c3:19:dd:0d:a7:5b:50:55:d6:04:60:54:5b:9a:93: c8:6b:d7:20:4f:67:41:16:62:4c:da:48:84:9b:c4: 21:b6:cc:a9:69:eb:91:82:4c:75:21:3d:4c:39:af: 30:12:f9:29:bd:32:a7:89:87:8e:60:95:c8:0f:c8: 5f:18:4f:0a:ee:28:d4:67:21:43:d9:7d:34:81:1c: 51:36:4e:53:27:7f:f2:eb:17:45:43:02:ab:53:0b: 33:3a:1e:35:96:ba:43:29:fd:39:3c:e7:8a:db:6b: 58:87:ab:63:92:5f:fc:10:a6:ed:e4:ca:67:14:6d: 11:69:1f:b3:dd:27:5f:ed:fb:7e:d1:39:20:86:f8: 4b:e3:fb:06:e0:d7:0b:d0:55:6c:3d:58:8b:7a:36: 74:3f:46:93:79:28:60:bc:a7:3e:79:2f:a0:f6:5c: 9c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E6:4D:99:D0:65:8B:AA:79:89:29:BF:45:4A:60:A6:32:EB:70:2D X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AeZNmdBli6p5iSm_RUpgpjLrcC0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.35.16.0/24 Signature Algorithm: sha256WithRSAEncryption 94:36:b3:c1:4a:28:b1:4e:f1:9c:b3:e9:28:e5:7c:4b:53:ff: ac:a1:25:e3:ae:e1:e4:88:9f:ce:5b:81:bb:76:ca:28:86:e5: b1:a6:35:66:cf:95:37:22:db:c2:e0:63:b8:3c:87:9b:69:a0: 15:48:b4:65:a3:58:e7:4e:6e:cc:59:2a:a4:7e:f0:5d:71:34: 92:35:32:b2:4e:04:8b:f5:30:7d:f5:0b:ea:71:ee:2e:ad:ec: 95:18:bc:ca:03:e3:fd:a9:5a:47:17:c7:1e:59:b5:b7:88:9e: 3f:e2:59:18:97:0f:a2:e0:f5:b4:c6:ec:62:55:2b:1b:9c:d7: 9d:42:10:aa:ab:a7:97:d1:69:44:c7:3b:b9:11:00:f7:ba:66: 6a:42:16:06:41:60:87:0d:c5:f3:8d:6f:c8:9f:de:02:ba:2e: f9:7a:6c:df:50:9e:55:8d:52:ba:73:7c:f4:86:80:23:6c:34: 76:14:d8:88:08:c2:2c:2b:07:85:95:6c:26:b6:1b:94:0c:61: 63:fc:5e:dd:1d:89:77:8a:e1:0e:b5:f7:dc:15:37:6c:e7:6a: 72:00:00:80:71:b2:5e:34:d5:28:95:58:f6:b1:d9:3e:84:76: 08:97:1b:ec:49:98:62:be:a1:18:ac:11:64:76:51:cc:3f:a0: 8f:00:1a:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oxXcswPlnWUY2m+T4EFMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWU2NGQ5OWQwNjU4YmFhNzk4OTI5YmY0NTRhNjBhNjMyZWI3MDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33k3F1+RA6EyaZsUU33rbrwlKbdF h0iABAN1nAWLjSYB/TFoLZVKA573n22qFOC5o3XG87fAKZ6Gy9bVyNDUL8F5HslB QukrWgEcGKgZldJnboNmuR6LjTrDGd0Np1tQVdYEYFRbmpPIa9cgT2dBFmJM2kiE m8QhtsypaeuRgkx1IT1MOa8wEvkpvTKniYeOYJXID8hfGE8K7ijUZyFD2X00gRxR Nk5TJ3/y6xdFQwKrUwszOh41lrpDKf05POeK22tYh6tjkl/8EKbt5MpnFG0RaR+z 3Sdf7ft+0TkghvhL4/sG4NcL0FVsPViLejZ0P0aTeShgvKc+eS+g9lycXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAHmTZnQZYuqeYkpv0VKYKYy63AtMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvQWVaTm1kQmxpNnA1aVNtX1JVcGdwakxyY0MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSMQMA0G CSqGSIb3DQEBCwUAA4IBAQCUNrPBSiixTvGcs+ko5XxLU/+soSXjruHkiJ/OW4G7 dsoohuWxpjVmz5U3ItvC4GO4PIebaaAVSLRlo1jnTm7MWSqkfvBdcTSSNTKyTgSL 9TB99Qvqce4ureyVGLzKA+P9qVpHF8ceWbW3iJ4/4lkYlw+i4PW0xuxiVSsbnNed QhCqq6eX0WlExzu5EQD3umZqQhYGQWCHDcXzjW/In94Cui75emzfUJ5VjVK6c3z0 hoAjbDR2FNiICMIsKweFlWwmthuUDGFj/F7dHYl3iuEOtffcFTds52pyAACAcbJe NNUolVj2sdk+hHYIlxvsSZhivqEYrBFkdlHMP6CPABpN -----END CERTIFICATE-----Generated at Fri Jan 2 12:03:26 2026 by rpki-client