This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/aa2Z_aSbNPyZ2UsmfSQtTJhHn_4.roa File: aa2Z_aSbNPyZ2UsmfSQtTJhHn_4.roa (raw, json) Hash identifier: FtDK49Ysh1r9A0NZdb70mTg5pImu9NrACPcmS/OHayk= Subject key identifier: 69:AD:99:FD:A4:9B:34:FC:99:D9:4B:26:7D:24:2D:4C:98:47:9F:FE Certificate issuer: /CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa Certificate serial: 019B7DCAB6643B83085D43E945162B3CB1FD Authority key identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/aa2Z_aSbNPyZ2UsmfSQtTJhHn_4.roa Signing time: Fri 02 Jan 2026 08:19:55 +0000 ROA not before: Fri 02 Jan 2026 08:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6453 IP address blocks: 193.103.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:b6:64:3b:83:08:5d:43:e9:45:16:2b:3c:b1:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa Validity Not Before: Jan 2 08:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69ad99fda49b34fc99d94b267d242d4c98479ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9a:00:c2:89:8c:55:6d:30:40:18:67:db:26: f4:67:fa:49:9c:c9:e1:96:7e:c8:e6:1a:33:2e:96: 90:62:f5:71:d9:e3:3e:ae:bc:3e:e7:c8:87:be:6a: 00:d7:5a:a7:50:a5:c0:5b:99:b8:49:dd:75:41:7a: c2:e2:59:fc:fd:a5:60:d0:bc:56:04:fe:eb:56:be: 6e:74:e4:95:15:ba:e6:5e:bd:58:94:8d:52:67:63: 38:79:58:af:72:79:ec:2c:e5:70:28:0a:55:28:a9: 6b:d0:0b:68:31:41:8b:75:62:02:7b:5e:67:6c:cc: b5:df:df:c6:04:60:dc:63:58:24:68:59:fa:d3:4d: 6b:b9:aa:62:39:84:fb:c1:58:ac:0c:00:99:12:3f: 03:d3:7a:1c:1a:9e:98:9c:3c:67:ea:ba:30:9b:2a: 50:68:a9:02:20:8a:77:80:6b:76:07:f2:a8:8a:4f: 32:fd:0b:79:5b:ee:11:a7:62:91:ac:58:38:91:09: dc:72:b7:20:4d:7a:f5:75:8d:aa:00:a5:10:b2:47: 41:ab:bf:0e:4d:4d:d9:05:e8:26:01:bd:74:a1:28: 04:87:ed:6a:21:70:d0:da:e1:0c:b8:11:50:01:b6: 5d:ed:a7:95:f0:4d:c8:2b:42:7f:aa:fd:94:96:51: d9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AD:99:FD:A4:9B:34:FC:99:D9:4B:26:7D:24:2D:4C:98:47:9F:FE X509v3 Authority Key Identifier: keyid:AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/aa2Z_aSbNPyZ2UsmfSQtTJhHn_4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.103.193.0/24 Signature Algorithm: sha256WithRSAEncryption 58:2e:1e:5a:d1:c8:09:e3:a3:6a:ed:e8:6d:80:a2:ce:9a:cd: 4d:66:fc:ae:48:d8:27:7f:85:1b:76:68:36:1a:9c:b8:ba:d5: 16:7d:8d:92:0a:a5:a5:d1:e0:8c:91:d8:7a:5d:31:1d:c6:74: 98:5c:cc:ca:28:7d:31:6a:cc:1f:c2:56:85:51:99:ea:df:e8: c2:75:3b:97:40:82:59:96:67:9e:fa:5c:6f:dd:c6:f5:82:6f: ba:67:b9:ff:f6:24:23:be:ba:ab:74:0e:34:86:3f:02:3b:7e: 66:f9:20:43:28:98:1e:76:64:28:72:b7:9e:bd:68:d7:07:af: 9c:96:35:21:69:c7:31:0e:5a:c8:6b:48:17:76:b8:d9:60:52: c7:42:56:cb:78:d0:3d:26:5f:1d:72:54:21:81:36:1f:1e:4a: c1:f5:db:5f:f3:95:73:80:7b:e2:c5:c0:5c:a6:b0:77:17:6f: 5b:07:ef:0d:9b:ca:fb:3d:54:75:9e:9f:2a:96:0a:c2:9b:37: 43:9d:57:97:8f:b7:d8:d1:a0:88:1e:4d:90:85:0b:eb:d3:b4: 22:0c:62:c5:3f:03:c6:76:c1:ef:1a:63:dc:60:ea:58:83:fc: 36:ab:73:34:bd:d3:61:b4:2a:00:43:78:25:24:2c:37:05:4f: e9:1b:fc:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yrZkO4MIXUPpRRYrPLH9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNjY0YjkyNGU0ZWEwMjdjMWMzYTA3NzBkZjFmZjgwYjFk NTY4ZmEwHhcNMjYwMTAyMDgxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWFkOTlmZGE0OWIzNGZjOTlkOTRiMjY3ZDI0MmQ0Yzk4NDc5ZmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5oAwomMVW0wQBhn2yb0Z/pJnMnh ln7I5hozLpaQYvVx2eM+rrw+58iHvmoA11qnUKXAW5m4Sd11QXrC4ln8/aVg0LxW BP7rVr5udOSVFbrmXr1YlI1SZ2M4eVivcnnsLOVwKApVKKlr0AtoMUGLdWICe15n bMy139/GBGDcY1gkaFn6001ruapiOYT7wVisDACZEj8D03ocGp6YnDxn6rowmypQ aKkCIIp3gGt2B/Koik8y/Qt5W+4Rp2KRrFg4kQnccrcgTXr1dY2qAKUQskdBq78O TU3ZBegmAb10oSgEh+1qIXDQ2uEMuBFQAbZd7aeV8E3IK0J/qv2UllHZfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGmtmf2kmzT8mdlLJn0kLUyYR5/+MB8GA1UdIwQY MBaAFK5mS5JOTqAnwcOgdw3x/4Cx1Wj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm1aTGtrNU9vQ2ZCdzZCM0RmSF9nTEhWYVBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9lMmY4NDYtODU4Mi00MDkzLWFlOTMt MDRjNTM5N2ZlNWY4LzEvYWEyWl9hU2JOUHlaMlVzbWZTUXRUSmhIbl80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9lMmY4NDYtODU4Mi00MDkzLWFlOTMtMDRjNTM5N2ZlNWY4 LzEvcm1aTGtrNU9vQ2ZCdzZCM0RmSF9nTEhWYVBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWfBMA0G CSqGSIb3DQEBCwUAA4IBAQBYLh5a0cgJ46Nq7ehtgKLOms1NZvyuSNgnf4Ubdmg2 Gpy4utUWfY2SCqWl0eCMkdh6XTEdxnSYXMzKKH0xaswfwlaFUZnq3+jCdTuXQIJZ lmee+lxv3cb1gm+6Z7n/9iQjvrqrdA40hj8CO35m+SBDKJgedmQocreevWjXB6+c ljUhaccxDlrIa0gXdrjZYFLHQlbLeNA9Jl8dclQhgTYfHkrB9dtf85VzgHvixcBc prB3F29bB+8Nm8r7PVR1np8qlgrCmzdDnVeXj7fY0aCIHk2QhQvr07QiDGLFPwPG dsHvGmPcYOpYg/w2q3M0vdNhtCoAQ3glJCw3BU/pG/zQ -----END CERTIFICATE-----Generated at Wed Jan 21 14:30:37 2026 by rpki-client