This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/aiiRtiYyMK2pR69dLCHHrDF9gJE.roa File: aiiRtiYyMK2pR69dLCHHrDF9gJE.roa (raw, json) Hash identifier: GHDYFSzrpoLIOpX6iS/EkCdY5TaFBOcxhHWzm9AoCPo= Subject key identifier: 6A:28:91:B6:26:32:30:AD:A9:47:AF:5D:2C:21:C7:AC:31:7D:80:91 Certificate issuer: /CN=39f873cd3939203c778a8eaaf1683e9464ac3400 Certificate serial: 019B7C7FF9CB831904B2644D4BA790D4B1E7 Authority key identifier: 39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/aiiRtiYyMK2pR69dLCHHrDF9gJE.roa Signing time: Fri 02 Jan 2026 02:18:40 +0000 ROA not before: Fri 02 Jan 2026 02:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23338 IP address blocks: 194.32.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:f9:cb:83:19:04:b2:64:4d:4b:a7:90:d4:b1:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39f873cd3939203c778a8eaaf1683e9464ac3400 Validity Not Before: Jan 2 02:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a2891b6263230ada947af5d2c21c7ac317d8091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8e:cd:b6:1b:a5:46:82:58:4f:b5:46:c6:86: 5e:6b:e4:72:2f:fd:00:5c:de:4c:25:b0:a5:ff:3b: fe:d4:01:c8:d4:ed:5d:4d:76:f0:51:c0:fe:f7:38: 03:46:bf:ef:86:f2:69:c1:1c:16:75:3c:cb:0b:ea: bc:3b:ca:a5:0e:e7:bc:df:87:f7:8c:60:a7:a3:26: 95:b5:0c:a7:3f:ef:38:13:b6:a4:2f:4c:4d:71:00: cc:07:0f:f6:79:54:31:a5:45:0d:60:05:fb:1e:d4: 7d:2a:46:fe:01:85:c2:cf:4d:5e:ca:46:0b:21:5c: d8:6c:be:82:29:f4:fc:c3:ae:72:5b:34:16:9d:9b: 15:2a:93:43:f3:5a:3a:98:5b:1a:39:f0:c5:00:d3: 05:fb:bb:e3:33:0d:72:44:d0:b1:df:50:f4:d3:54: ab:30:68:7c:04:99:e6:fa:0d:fb:29:fd:9a:2e:18: f7:4f:9c:58:87:f1:bc:4c:71:d1:28:88:31:19:4f: 17:55:1a:68:31:59:6f:d1:96:db:80:75:a4:55:a7: de:f5:d7:ae:1f:0d:3c:13:d2:7a:30:b2:02:62:c7: 51:00:25:0b:b6:73:03:fa:5b:e2:33:24:a3:6f:bd: 06:8f:34:02:92:57:8b:f1:ba:1d:29:51:b3:be:11: 20:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:28:91:B6:26:32:30:AD:A9:47:AF:5D:2C:21:C7:AC:31:7D:80:91 X509v3 Authority Key Identifier: keyid:39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/aiiRtiYyMK2pR69dLCHHrDF9gJE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.32.80.0/24 Signature Algorithm: sha256WithRSAEncryption 80:b2:3e:33:ce:a4:f5:4b:c5:a4:8c:4f:4e:47:2e:90:f2:90: 7d:a7:5c:30:c6:27:4d:3c:97:22:2a:9f:80:7e:7a:50:40:8b: cb:b1:7f:b3:15:36:1b:e3:5f:fd:da:17:f4:54:a0:54:81:91: 0d:7b:f6:2b:b3:5b:ff:68:65:5c:07:5d:24:32:a9:2a:9a:28: 66:b4:ff:aa:00:c8:08:4a:57:01:0c:4f:c1:0e:6e:80:9b:45: d0:4f:24:6d:db:10:e4:4f:72:e6:18:dd:76:e3:ca:d3:21:02: d5:d9:7f:41:95:dc:60:4c:af:a4:5a:67:e3:2b:2d:ec:78:0f: f5:72:8c:ae:34:c7:25:89:70:87:3c:77:83:f9:0a:ad:fc:f6: d8:3f:0b:8d:5b:7d:31:b3:60:99:bf:b1:52:3c:ec:f4:7e:1e: 65:91:c1:dd:0e:b8:9a:c5:b3:e4:71:05:cc:86:ec:d2:18:d6: 01:6b:0f:61:0f:55:e9:75:e2:7e:b0:c3:cd:fb:d6:e5:f2:b8: 8a:5b:2d:89:f9:95:ba:84:e4:ed:97:30:b0:fe:49:d2:be:bd: 62:a4:ef:e0:bc:e9:aa:1d:c3:4c:cb:68:ce:b6:7a:33:62:76: 56:b5:58:c2:95:83:b1:82:2b:d8:78:b5:29:0d:c6:37:8e:6f: 51:0f:03:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f/nLgxkEsmRNS6eQ1LHnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5Zjg3M2NkMzkzOTIwM2M3NzhhOGVhYWYxNjgzZTk0NjRh YzM0MDAwHhcNMjYwMTAyMDIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTI4OTFiNjI2MzIzMGFkYTk0N2FmNWQyYzIxYzdhYzMxN2Q4MDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI7NthulRoJYT7VGxoZea+RyL/0A XN5MJbCl/zv+1AHI1O1dTXbwUcD+9zgDRr/vhvJpwRwWdTzLC+q8O8qlDue834f3 jGCnoyaVtQynP+84E7akL0xNcQDMBw/2eVQxpUUNYAX7HtR9Kkb+AYXCz01eykYL IVzYbL6CKfT8w65yWzQWnZsVKpND81o6mFsaOfDFANMF+7vjMw1yRNCx31D001Sr MGh8BJnm+g37Kf2aLhj3T5xYh/G8THHRKIgxGU8XVRpoMVlv0ZbbgHWkVafe9deu Hw08E9J6MLICYsdRACULtnMD+lviMySjb70GjzQCkleL8bodKVGzvhEgtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGookbYmMjCtqUevXSwhx6wxfYCRMB8GA1UdIwQY MBaAFDn4c805OSA8d4qOqvFoPpRkrDQAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2ZoenpUazVJRHgzaW82cThXZy1sR1NzTkFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85MGU5MjMtMmYyZC00MDg2LTgxOWMt NGU2NTViNWI2NDI3LzEvYWlpUnRpWXlNSzJwUjY5ZExDSEhyREY5Z0pFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi85MGU5MjMtMmYyZC00MDg2LTgxOWMtNGU2NTViNWI2NDI3 LzEvT2ZoenpUazVJRHgzaW82cThXZy1sR1NzTkFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiBQMA0G CSqGSIb3DQEBCwUAA4IBAQCAsj4zzqT1S8WkjE9ORy6Q8pB9p1wwxidNPJciKp+A fnpQQIvLsX+zFTYb41/92hf0VKBUgZENe/Yrs1v/aGVcB10kMqkqmihmtP+qAMgI SlcBDE/BDm6Am0XQTyRt2xDkT3LmGN1248rTIQLV2X9BldxgTK+kWmfjKy3seA/1 coyuNMcliXCHPHeD+Qqt/PbYPwuNW30xs2CZv7FSPOz0fh5lkcHdDriaxbPkcQXM huzSGNYBaw9hD1XpdeJ+sMPN+9bl8riKWy2J+ZW6hOTtlzCw/knSvr1ipO/gvOmq HcNMy2jOtnozYnZWtVjClYOxgivYeLUpDcY3jm9RDwMo -----END CERTIFICATE-----Generated at Mon Jan 12 01:03:56 2026 by rpki-client