This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/AjQ9aGrRgiCSMlcEOaQOc1QG7FA.roa File: AjQ9aGrRgiCSMlcEOaQOc1QG7FA.roa (raw, json) Hash identifier: gcQqIdjRrwkMqVcdcn63V2cLzw0R6xsBAxjOG/G39YM= Subject key identifier: 02:34:3D:68:6A:D1:82:20:92:32:57:04:39:A4:0E:73:54:06:EC:50 Certificate issuer: /CN=3fb78cd1a310c99d6377140e528aa3e6e0dcab9f Certificate serial: 019B76EAF2DA6B83E882C9A87BFB8F255F79 Authority key identifier: 3F:B7:8C:D1:A3:10:C9:9D:63:77:14:0E:52:8A:A3:E6:E0:DC:AB:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/AjQ9aGrRgiCSMlcEOaQOc1QG7FA.roa Signing time: Thu 01 Jan 2026 00:17:47 +0000 ROA not before: Thu 01 Jan 2026 00:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39803 IP address blocks: 194.102.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f2:da:6b:83:e8:82:c9:a8:7b:fb:8f:25:5f:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fb78cd1a310c99d6377140e528aa3e6e0dcab9f Validity Not Before: Jan 1 00:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02343d686ad182209232570439a40e735406ec50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:16:96:f3:e4:e2:0d:91:c1:73:e2:49:7f:8d: 4d:e0:c7:8a:84:d0:68:20:3a:e8:75:4d:22:8d:8e: c5:b5:91:d2:9f:cb:0c:a4:58:e7:80:d9:c8:24:61: 65:66:01:3e:36:54:ef:62:2a:ee:47:99:70:0e:29: 75:97:75:d9:7d:b9:e7:d1:66:ca:c0:ae:f9:9e:75: 60:dc:0f:de:42:af:92:8f:42:3d:9c:fb:ad:4c:fc: 9e:bd:8a:e2:2d:89:4d:e8:b4:8a:9f:50:5f:9c:56: e9:c4:16:26:2b:9b:f6:09:dc:14:78:88:0f:c5:1c: ed:5f:6f:1d:75:ec:ae:8b:fa:cf:eb:d4:1e:ef:9f: 51:b3:94:54:71:a3:ed:83:7d:1e:b5:a5:1a:96:5a: bf:51:5a:5f:77:04:41:66:c4:17:29:e0:f9:ff:80: 8e:cf:e2:4a:db:19:46:e4:8b:b8:18:25:e2:0b:43: 5d:61:ec:00:83:2d:c4:c7:c8:d7:45:99:3f:88:a6: e2:ec:27:9e:42:d4:04:47:01:f1:08:ab:d9:86:46: 93:26:a2:bd:cd:46:9e:ab:06:ec:3a:33:34:c9:57: 12:a2:93:a3:0c:01:86:a6:e8:c2:95:b6:39:88:3e: e9:32:20:05:ef:59:09:8f:80:ae:26:81:6f:b3:a1: aa:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:34:3D:68:6A:D1:82:20:92:32:57:04:39:A4:0E:73:54:06:EC:50 X509v3 Authority Key Identifier: keyid:3F:B7:8C:D1:A3:10:C9:9D:63:77:14:0E:52:8A:A3:E6:E0:DC:AB:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/AjQ9aGrRgiCSMlcEOaQOc1QG7FA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.102.100.0/24 Signature Algorithm: sha256WithRSAEncryption 79:ca:b5:e0:19:94:ab:51:4b:2e:40:85:e4:72:18:a2:4d:9c: cc:9a:15:71:12:ea:e8:79:41:48:83:a4:2a:5b:f5:cc:05:8b: 2e:b7:a1:76:37:95:0f:a2:9f:35:02:b9:5c:5c:18:90:81:6b: 94:c2:72:0b:12:c8:fc:ad:99:5a:8b:fa:49:d6:18:35:a7:d0: df:c1:2c:76:a0:4d:d3:18:65:9f:de:ce:53:98:eb:7f:1e:16: 7d:1d:02:51:ad:49:24:97:68:29:d6:25:8a:45:5c:b2:0b:1d: 7d:ff:8c:51:92:31:cf:a2:7d:9b:5c:25:5e:56:e9:99:93:ce: da:d2:af:c6:90:8b:47:61:6c:1f:63:78:3e:0f:59:46:53:82: fc:f6:9c:f6:ad:52:39:5e:01:21:68:4b:fd:da:aa:d8:31:22: bc:d4:8c:fd:f0:9b:e2:e7:8f:29:0f:50:c3:7d:21:f6:c8:30: 96:15:1f:a7:ff:b1:4f:bd:5d:c2:3a:d1:03:67:a2:d2:47:1e: 6f:11:84:97:05:c0:dd:90:42:22:de:d4:91:be:f7:24:cc:3d: 54:06:a6:b7:ce:0b:6c:69:16:10:9d:d6:08:c6:ac:9f:e0:54: b0:b8:95:0e:fb:00:10:ae:d6:2a:9e:a0:1a:67:96:a2:a5:9c: 57:f8:22:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26vLaa4Pogsmoe/uPJV95MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmYjc4Y2QxYTMxMGM5OWQ2Mzc3MTQwZTUyOGFhM2U2ZTBk Y2FiOWYwHhcNMjYwMTAxMDAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjM0M2Q2ODZhZDE4MjIwOTIzMjU3MDQzOWE0MGU3MzU0MDZlYzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxaW8+TiDZHBc+JJf41N4MeKhNBo IDrodU0ijY7FtZHSn8sMpFjngNnIJGFlZgE+NlTvYiruR5lwDil1l3XZfbnn0WbK wK75nnVg3A/eQq+Sj0I9nPutTPyevYriLYlN6LSKn1BfnFbpxBYmK5v2CdwUeIgP xRztX28ddeyui/rP69Qe759Rs5RUcaPtg30etaUallq/UVpfdwRBZsQXKeD5/4CO z+JK2xlG5Iu4GCXiC0NdYewAgy3Ex8jXRZk/iKbi7CeeQtQERwHxCKvZhkaTJqK9 zUaeqwbsOjM0yVcSopOjDAGGpujClbY5iD7pMiAF71kJj4CuJoFvs6GqAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAI0PWhq0YIgkjJXBDmkDnNUBuxQMB8GA1UdIwQY MBaAFD+3jNGjEMmdY3cUDlKKo+bg3KufMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDdlTTBhTVF5WjFqZHhRT1VvcWo1dURjcTU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zMjNjM2YtYWFiMy00Njg0LTgxYzct YzU4MTUxMThlNTJmLzEvQWpROWFHclJnaUNTTWxjRU9hUU9jMVFHN0ZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8zMjNjM2YtYWFiMy00Njg0LTgxYzctYzU4MTUxMThlNTJm LzEvUDdlTTBhTVF5WjFqZHhRT1VvcWo1dURjcTU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmZkMA0G CSqGSIb3DQEBCwUAA4IBAQB5yrXgGZSrUUsuQIXkchiiTZzMmhVxEuroeUFIg6Qq W/XMBYsut6F2N5UPop81ArlcXBiQgWuUwnILEsj8rZlai/pJ1hg1p9DfwSx2oE3T GGWf3s5TmOt/HhZ9HQJRrUkkl2gp1iWKRVyyCx19/4xRkjHPon2bXCVeVumZk87a 0q/GkItHYWwfY3g+D1lGU4L89pz2rVI5XgEhaEv92qrYMSK81Iz98Jvi548pD1DD fSH2yDCWFR+n/7FPvV3COtEDZ6LSRx5vEYSXBcDdkEIi3tSRvvckzD1UBqa3zgts aRYQndYIxqyf4FSwuJUO+wAQrtYqnqAaZ5aipZxX+CJu -----END CERTIFICATE-----Generated at Tue Feb 10 08:38:43 2026 by rpki-client