This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/aUwOJz1_8xGpGppZa0lsadJv3hs.roa File: aUwOJz1_8xGpGppZa0lsadJv3hs.roa (raw, json) Hash identifier: Ju3Jc0UBRNp4Rw/2xtAsoL3fCJnRzaLDL/zh6uadGRE= Subject key identifier: 69:4C:0E:27:3D:7F:F3:11:A9:1A:9A:59:6B:49:6C:69:D2:6F:DE:1B Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14C6A9D40F22D0A10DC9EB914F913D Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/aUwOJz1_8xGpGppZa0lsadJv3hs.roa Signing time: Fri 02 Jan 2026 14:20:26 +0000 ROA not before: Fri 02 Jan 2026 14:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397630 IP address blocks: 194.231.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:c6:a9:d4:0f:22:d0:a1:0d:c9:eb:91:4f:91:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=694c0e273d7ff311a91a9a596b496c69d26fde1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ed:b7:b0:ea:6e:3e:0e:62:76:b7:c0:12:39: 13:b0:6b:31:d4:93:79:10:2b:86:fb:8f:72:0d:18: 62:c4:97:5e:08:b8:ba:7b:53:17:26:4f:27:9b:a1: 5a:6d:8a:05:fb:4f:05:a7:cd:c2:3f:7f:49:9d:f6: de:2f:cf:f6:90:a8:4c:73:76:76:44:61:5a:22:91: b3:35:6c:cc:71:92:d2:23:12:cf:76:95:4b:57:51: 55:bb:a8:eb:94:98:c7:ec:39:41:66:ff:25:88:d8: f8:c4:cc:64:e7:f6:a5:85:0a:bb:12:af:d2:7a:cc: 8d:bb:ee:47:16:1a:32:39:66:ff:d1:a9:0e:4b:a0: e3:60:28:dd:c2:ae:66:ae:cc:35:88:00:6b:a4:ce: 71:a4:07:b4:ea:4e:80:77:77:91:ba:8f:3d:45:0b: 89:6d:57:df:11:cb:b5:ce:1e:da:98:19:23:26:70: 00:f8:a2:ba:51:d0:17:59:bf:17:88:98:67:95:8c: 3b:56:12:8f:0c:a7:06:30:a7:6b:83:a7:67:f0:84: 29:75:37:fa:76:c8:ca:4b:95:cc:5e:f6:a5:30:f8: 28:b6:f0:0b:63:2d:a5:30:44:f1:a3:20:11:fe:cb: 3a:a3:a6:44:3b:8a:2d:20:be:a0:e5:33:92:3c:f7: f6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:4C:0E:27:3D:7F:F3:11:A9:1A:9A:59:6B:49:6C:69:D2:6F:DE:1B X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/aUwOJz1_8xGpGppZa0lsadJv3hs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.231.155.0/24 Signature Algorithm: sha256WithRSAEncryption de:b4:c8:3c:91:66:4c:a5:ab:9b:a3:66:03:64:70:2f:ec:a7: 8b:f7:46:c6:9e:2d:9f:46:6d:cf:9e:4a:ed:b1:4b:99:b4:f6: 33:2d:ae:69:13:c3:6a:d4:8f:97:8f:8e:f9:3a:66:d4:69:12: 44:56:a8:44:03:91:0d:db:ab:e4:ac:66:16:33:9e:d0:a5:0b: 4d:2e:ef:da:c1:86:ff:e9:43:4e:f0:cb:67:8c:23:87:88:24: 1b:cf:6a:80:df:0c:69:0a:7e:2f:cb:2b:67:db:d7:db:b2:1d: 33:80:45:a1:99:38:08:c9:17:f5:53:be:b8:db:06:48:ef:4e: 4b:a9:09:b0:94:0d:97:7c:dd:ae:2a:a6:bc:0c:10:40:c9:ed: 2c:59:3b:0d:13:8d:df:a0:b3:8c:d1:ee:7e:66:91:45:01:38: e1:76:cd:8f:25:0c:ef:31:5c:30:e4:9a:59:6e:c5:2d:d9:11: 0b:09:6f:9e:e4:7f:2d:5f:36:05:b3:f3:ee:30:f7:0a:8d:05: bd:6a:2d:a2:fd:fb:27:11:86:42:a9:91:60:6b:a9:c2:2c:e4: 71:1c:fb:e3:a9:40:73:65:f3:de:3a:f7:b3:d6:df:4e:6b:76: cc:cf:8e:e1:40:6f:b3:bc:32:30:0f:cc:25:c6:03:75:1e:a5: 9b:15:ac:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FMap1A8i0KENyeuRT5E9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTRjMGUyNzNkN2ZmMzExYTkxYTlhNTk2YjQ5NmM2OWQyNmZkZTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzO23sOpuPg5idrfAEjkTsGsx1JN5 ECuG+49yDRhixJdeCLi6e1MXJk8nm6FabYoF+08Fp83CP39JnfbeL8/2kKhMc3Z2 RGFaIpGzNWzMcZLSIxLPdpVLV1FVu6jrlJjH7DlBZv8liNj4xMxk5/alhQq7Eq/S esyNu+5HFhoyOWb/0akOS6DjYCjdwq5mrsw1iABrpM5xpAe06k6Ad3eRuo89RQuJ bVffEcu1zh7amBkjJnAA+KK6UdAXWb8XiJhnlYw7VhKPDKcGMKdrg6dn8IQpdTf6 dsjKS5XMXvalMPgotvALYy2lMETxoyAR/ss6o6ZEO4otIL6g5TOSPPf23wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGlMDic9f/MRqRqaWWtJbGnSb94bMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvYVV3T0p6MV84eEdwR3BwWmEwbHNhZEp2M2hzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwuebMA0G CSqGSIb3DQEBCwUAA4IBAQDetMg8kWZMpaubo2YDZHAv7KeL90bGni2fRm3Pnkrt sUuZtPYzLa5pE8Nq1I+Xj475OmbUaRJEVqhEA5EN26vkrGYWM57QpQtNLu/awYb/ 6UNO8MtnjCOHiCQbz2qA3wxpCn4vyytn29fbsh0zgEWhmTgIyRf1U7642wZI705L qQmwlA2XfN2uKqa8DBBAye0sWTsNE43foLOM0e5+ZpFFATjhds2PJQzvMVww5JpZ bsUt2RELCW+e5H8tXzYFs/PuMPcKjQW9ai2i/fsnEYZCqZFga6nCLORxHPvjqUBz ZfPeOvez1t9Oa3bMz47hQG+zvDIwD8wlxgN1HqWbFayW -----END CERTIFICATE-----Generated at Mon Jan 19 22:33:27 2026 by rpki-client