This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/aZAulIKVvXbN8omq0JhX_jGTQpQ.roa File: aZAulIKVvXbN8omq0JhX_jGTQpQ.roa (raw, json) Hash identifier: a1Ep0d4JmHuZC92VG94ayoNuXL+o7ITThTyrhPBbaU4= Subject key identifier: 69:90:2E:94:82:95:BD:76:CD:F2:89:AA:D0:98:57:FE:31:93:42:94 Certificate issuer: /CN=320b24a740f2e61632050adc146c1ee6a3e686c5 Certificate serial: 019B7C121A24102D8D48BCED7164CC074F95 Authority key identifier: 32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/aZAulIKVvXbN8omq0JhX_jGTQpQ.roa Signing time: Fri 02 Jan 2026 00:18:39 +0000 ROA not before: Fri 02 Jan 2026 00:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208995 IP address blocks: 92.240.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:1a:24:10:2d:8d:48:bc:ed:71:64:cc:07:4f:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=320b24a740f2e61632050adc146c1ee6a3e686c5 Validity Not Before: Jan 2 00:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69902e948295bd76cdf289aad09857fe31934294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d1:f6:99:b5:fe:a4:18:b7:73:db:30:73:52: 2e:d9:3e:1c:15:a0:c6:18:72:ba:5a:05:7f:11:9c: b5:a0:29:33:10:de:6f:f4:89:22:62:f0:1b:bd:6c: da:f2:7d:30:ed:6d:4a:ab:a1:c5:1e:77:25:ab:75: 2a:6d:ad:2b:48:c4:26:b1:c0:18:e3:a7:d1:66:69: 50:4d:0c:d1:5a:3b:63:7a:34:5d:d6:05:aa:73:cf: ba:f4:c9:05:68:bf:89:dc:85:d9:76:4d:7f:8f:33: 56:9d:2c:23:61:96:30:b2:77:aa:fc:8c:f2:e4:cf: 43:aa:b1:00:4c:82:48:26:8e:18:fc:6e:65:11:7d: a6:6b:80:d4:3d:4d:d8:8f:6b:5e:7c:fd:cf:0c:a2: fe:b6:6a:aa:a7:c9:bd:cc:c9:3d:23:bc:9e:e4:3f: 0e:8f:df:d5:ba:83:f9:8f:48:8d:1f:67:52:23:9f: ce:86:cd:5f:ce:79:e7:c5:06:76:0f:fb:e1:35:d1: 80:26:b6:36:a7:ba:82:e7:f2:04:99:e5:78:bd:97: b6:df:2e:f5:9d:71:d4:a8:4c:9d:63:7e:1d:f0:9a: 05:a7:a5:e7:18:ae:eb:34:61:11:0e:99:cf:88:63: 9a:09:d8:bd:ea:8e:47:27:c1:1d:fc:df:e5:02:7e: c9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:90:2E:94:82:95:BD:76:CD:F2:89:AA:D0:98:57:FE:31:93:42:94 X509v3 Authority Key Identifier: keyid:32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/aZAulIKVvXbN8omq0JhX_jGTQpQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.240.88.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:e3:e6:fc:e0:7d:bd:90:1e:2f:19:9d:87:21:5f:36:96:e8: 63:e2:e1:91:e6:bd:76:b1:74:60:89:e9:1d:f1:e2:7f:a7:e8: 17:47:eb:7a:9d:92:2f:0a:54:f7:0c:cb:48:b9:b1:3a:69:9a: 55:32:4b:d6:50:e3:75:bb:29:cc:6c:fe:f1:bc:db:b7:2d:9d: 5f:95:a5:ef:40:53:56:49:c6:9a:c3:ab:a8:30:29:f7:2b:c2: a9:c1:c6:2e:bf:11:5a:79:52:6e:f9:20:d8:3a:b6:82:7f:ec: 73:f5:29:40:42:f9:6d:b5:a6:f8:56:db:27:18:0c:97:6b:bb: 68:e8:9e:5b:ca:21:28:b2:da:a6:43:63:b6:e3:88:4d:86:f5: 79:08:69:4f:25:ec:23:9f:d2:a5:2e:63:a1:f9:db:c8:c4:69: 19:c4:f0:70:92:a6:cc:57:b7:cd:87:a9:12:45:a7:35:6b:f2: f2:4f:62:9d:b9:05:59:01:a3:f7:f8:d6:80:a1:b7:f9:bd:92: 22:ae:0d:2e:93:f3:71:1a:72:83:c8:ed:5d:f1:92:b1:aa:97: bf:f8:c6:d5:5d:79:5c:fd:c7:3e:91:f4:e3:84:92:d1:d4:05: 4a:cd:a9:57:9a:68:90:84:79:9a:92:6e:75:69:eb:2b:65:43: ac:0a:e6:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EhokEC2NSLztcWTMB0+VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMGIyNGE3NDBmMmU2MTYzMjA1MGFkYzE0NmMxZWU2YTNl Njg2YzUwHhcNMjYwMTAyMDAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTkwMmU5NDgyOTViZDc2Y2RmMjg5YWFkMDk4NTdmZTMxOTM0Mjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dH2mbX+pBi3c9swc1Iu2T4cFaDG GHK6WgV/EZy1oCkzEN5v9IkiYvAbvWza8n0w7W1Kq6HFHnclq3Uqba0rSMQmscAY 46fRZmlQTQzRWjtjejRd1gWqc8+69MkFaL+J3IXZdk1/jzNWnSwjYZYwsneq/Izy 5M9DqrEATIJIJo4Y/G5lEX2ma4DUPU3Yj2tefP3PDKL+tmqqp8m9zMk9I7ye5D8O j9/VuoP5j0iNH2dSI5/Ohs1fznnnxQZ2D/vhNdGAJrY2p7qC5/IEmeV4vZe23y71 nXHUqEydY34d8JoFp6XnGK7rNGERDpnPiGOaCdi96o5HJ8Ed/N/lAn7JmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGmQLpSClb12zfKJqtCYV/4xk0KUMB8GA1UdIwQY MBaAFDILJKdA8uYWMgUK3BRsHuaj5obFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWdza3AwRHk1aFl5QlFyY0ZHd2U1cVBtaHNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85YzI3ZTQtZDdiMS00M2MxLWEzOGYt OTQ5MTRmNWRkYjNjLzEvYVpBdWxJS1Z2WGJOOG9tcTBKaFhfakdUUXBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy85YzI3ZTQtZDdiMS00M2MxLWEzOGYtOTQ5MTRmNWRkYjNj LzEvTWdza3AwRHk1aFl5QlFyY0ZHd2U1cVBtaHNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXPBYMA0G CSqGSIb3DQEBCwUAA4IBAQCM4+b84H29kB4vGZ2HIV82luhj4uGR5r12sXRgiekd 8eJ/p+gXR+t6nZIvClT3DMtIubE6aZpVMkvWUON1uynMbP7xvNu3LZ1flaXvQFNW Scaaw6uoMCn3K8KpwcYuvxFaeVJu+SDYOraCf+xz9SlAQvlttab4VtsnGAyXa7to 6J5byiEostqmQ2O244hNhvV5CGlPJewjn9KlLmOh+dvIxGkZxPBwkqbMV7fNh6kS Rac1a/LyT2KduQVZAaP3+NaAobf5vZIirg0uk/NxGnKDyO1d8ZKxqpe/+MbVXXlc /cc+kfTjhJLR1AVKzalXmmiQhHmakm51aesrZUOsCuYM -----END CERTIFICATE-----Generated at Tue Jan 20 09:41:01 2026 by rpki-client