This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/aieeYAXcHf6iZv5A5jAAy7zNKfU.roa
File: aieeYAXcHf6iZv5A5jAAy7zNKfU.roa (raw, json)
Hash identifier: +Mh/5aHvThjQydJerYwnqxyvk8cU5lJddJlC7wDae6g=
Subject key identifier: 6A:27:9E:60:05:DC:1D:FE:A2:66:FE:40:E6:30:00:CB:BC:CD:29:F5
Certificate issuer: /CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Certificate serial: 019B7A5ADEDDE8B61CAEBDFDB0D75DB30D03
Authority key identifier: 02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/aieeYAXcHf6iZv5A5jAAy7zNKfU.roa
Signing time: Thu 01 Jan 2026 16:18:54 +0000
ROA not before: Thu 01 Jan 2026 16:18:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208731
IP address blocks: 147.78.192.0/23 maxlen: 24
147.78.192.0/24 maxlen: 24
147.78.193.0/24 maxlen: 24
185.42.161.0/24 maxlen: 24
185.203.112.0/24 maxlen: 24
2a0f:98c0::/29 maxlen: 48
2a0f:98c0:d::/48 maxlen: 48
2a0f:98c0:12::/48 maxlen: 48
2a0f:98c0:13::/48 maxlen: 48
2a0f:98c0:14::/48 maxlen: 48
2a0f:98c0:15::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:de:dd:e8:b6:1c:ae:bd:fd:b0:d7:5d:b3:0d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Validity
Not Before: Jan 1 16:18:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a279e6005dc1dfea266fe40e63000cbbccd29f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:b1:4d:c5:3d:98:2d:d2:6c:a9:ac:04:33:
a4:4b:cc:d3:5b:e9:ce:6c:49:d0:9f:58:a7:ca:cf:
10:ce:60:be:40:89:c5:72:da:56:03:47:b6:af:21:
8a:90:c6:26:3c:ff:1f:7e:a0:74:42:cc:30:09:f3:
24:85:1c:e5:ab:e9:9a:d9:e7:10:7b:d8:d2:4a:57:
53:ef:d1:34:60:2b:d7:17:6b:94:ff:43:5d:ac:6d:
35:f9:42:82:a7:32:09:6b:d9:9d:6d:a9:9f:40:7a:
9a:f3:cd:81:81:ac:00:60:30:ee:ab:ec:c0:56:d3:
81:23:f9:50:87:20:d5:8b:2f:da:4f:75:49:5d:f6:
35:ca:b6:d9:2e:b4:97:fd:7f:7f:48:a8:93:d2:6a:
52:ac:5a:ee:8b:59:6e:23:cf:57:1e:fe:49:fa:db:
69:21:a6:02:35:34:e0:cb:f1:6d:40:5f:43:82:43:
43:8c:db:2b:43:37:8f:c3:57:0a:1a:1d:f8:90:18:
15:42:4d:ad:99:a4:60:31:59:1a:1b:9b:dc:bd:40:
da:67:43:1b:2a:a7:a5:a1:c2:89:37:1e:4e:3d:78:
49:b3:8e:86:36:16:47:a8:fa:8a:ce:f0:18:00:34:
69:a0:43:5e:7f:25:73:95:49:7c:29:98:a8:f7:56:
43:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:27:9E:60:05:DC:1D:FE:A2:66:FE:40:E6:30:00:CB:BC:CD:29:F5
X509v3 Authority Key Identifier:
keyid:02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/aieeYAXcHf6iZv5A5jAAy7zNKfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.192.0/23
185.42.161.0/24
185.203.112.0/24
IPv6:
2a0f:98c0::/29
Signature Algorithm: sha256WithRSAEncryption
69:57:35:d4:ee:42:2c:2c:8c:f6:72:0c:64:63:26:d1:35:ad:
97:91:a4:51:88:2d:3c:97:64:be:62:aa:6d:8e:5b:81:77:66:
31:99:db:25:c7:65:9b:6f:8d:65:b6:0d:64:5f:0c:c0:90:75:
3b:06:7e:22:f7:a5:dd:40:5f:93:8b:7f:8f:aa:70:d9:4e:67:
b5:02:64:ed:c6:b6:ec:1d:6c:f7:2a:b8:f4:40:41:50:dc:d9:
5e:17:03:25:83:c4:9a:2b:2b:30:d6:21:5c:a9:22:4a:ea:41:
e9:14:f9:0f:58:77:f5:50:9a:7b:2d:25:e9:cb:cc:0f:c6:1b:
78:38:b9:c6:44:13:df:06:77:98:f1:c1:ee:14:b0:46:16:4f:
6a:99:7c:27:5d:8d:bb:fe:3b:75:70:d3:f8:76:91:e3:02:b3:
79:dc:44:43:68:d9:32:20:72:b4:6a:ce:19:77:02:ed:7c:76:
4a:9f:b1:35:cc:ee:6b:c5:fd:fe:85:b2:5e:7d:70:ea:8e:74:
91:6f:a1:99:11:70:9d:4f:be:46:50:aa:b6:f3:f6:22:60:3c:
96:f4:a9:e4:33:b7:cb:e6:99:27:87:87:50:d6:f1:7a:18:7a:
73:86:93:46:df:f5:7c:08:ed:86:af:52:a0:79:ba:24:26:52:
f7:b6:b4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:13:16 2026 by rpki-client