This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/AJvahEEqtSZqRsCz5wURmumRzYc.roa File: AJvahEEqtSZqRsCz5wURmumRzYc.roa (raw, json) Hash identifier: c3wSVS47p9kC1Yvy6xlsE2dP8Wc3/54qv1aJh3wxi0s= Subject key identifier: 00:9B:DA:84:41:2A:B5:26:6A:46:C0:B3:E7:05:11:9A:E9:91:CD:87 Certificate issuer: /CN=39b8b4f04973f37cc69fb7c23468f953f149420e Certificate serial: 019B7F155091B94984C277BCD5F2CFE238A3 Authority key identifier: 39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/AJvahEEqtSZqRsCz5wURmumRzYc.roa Signing time: Fri 02 Jan 2026 14:21:01 +0000 ROA not before: Fri 02 Jan 2026 14:21:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25377 IP address blocks: 193.177.1.0/24 maxlen: 24 193.177.2.0/23 maxlen: 23 193.177.4.0/22 maxlen: 22 193.177.8.0/21 maxlen: 21 193.177.16.0/20 maxlen: 20 193.177.32.0/19 maxlen: 19 193.177.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:50:91:b9:49:84:c2:77:bc:d5:f2:cf:e2:38:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39b8b4f04973f37cc69fb7c23468f953f149420e Validity Not Before: Jan 2 14:21:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=009bda84412ab5266a46c0b3e705119ae991cd87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6b:94:6b:5d:ac:f1:89:ca:4c:da:16:e2:3b: 90:5f:3a:45:85:4f:10:e6:fa:66:ae:d8:3c:d5:0a: a0:2e:88:3a:d7:88:4c:61:c6:8c:d4:e9:00:e9:cd: 06:66:6d:cd:70:4e:fe:3e:8e:e2:fe:07:94:1b:ce: 88:fb:83:1d:99:17:d9:63:e8:7f:f8:ff:cb:d8:e8: 27:50:32:2c:83:86:ef:1d:c8:b1:58:a6:2c:88:68: 49:78:ca:7e:7d:18:cf:fd:14:9c:24:c8:1a:41:5d: 4d:d6:58:f6:21:7d:17:9f:78:79:9f:e0:8d:de:e1: 49:89:81:a4:c2:c7:e8:0e:91:63:24:77:2b:d2:5f: e3:6a:f4:ac:00:e5:8c:63:13:10:55:26:1d:a9:43: a5:69:cc:b4:11:d0:2d:41:7e:07:32:bb:d3:04:5b: f0:4b:1c:5c:e8:1a:bf:d4:42:15:e0:aa:dd:e6:c2: d8:71:89:00:cb:5a:f1:1f:1e:82:ff:da:bb:61:76: e8:41:bb:dd:97:d7:55:d1:ba:da:33:a5:95:e0:ac: 5b:a2:49:17:b7:00:12:76:52:92:2c:f3:48:03:e5: 54:b8:0e:d6:fc:75:3d:c8:96:9c:5d:82:d9:82:14: 5e:95:a6:e7:bb:40:34:1c:ea:18:cb:5e:c4:a4:4d: 54:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9B:DA:84:41:2A:B5:26:6A:46:C0:B3:E7:05:11:9A:E9:91:CD:87 X509v3 Authority Key Identifier: keyid:39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/AJvahEEqtSZqRsCz5wURmumRzYc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.177.1.0-193.177.127.255 Signature Algorithm: sha256WithRSAEncryption 5f:cb:19:6f:3e:25:00:9b:95:60:b2:99:0c:89:e2:c3:38:4e: 92:19:4a:8c:9e:04:2d:16:c5:3c:1c:82:89:9b:55:0c:4c:16: f7:a7:e8:f7:c2:89:88:87:56:79:05:b4:07:af:dd:46:8d:e6: da:2f:4e:66:24:9e:74:6e:1e:65:b4:68:ba:a6:3b:e4:a8:ca: e5:b7:8e:71:89:34:63:c2:d6:62:eb:4c:1a:bb:26:3b:4d:bb: 1b:53:66:1e:f6:82:1b:4b:9b:16:5b:fe:3a:31:5b:d5:98:5c: 3a:09:4b:a9:70:0d:5a:23:40:df:97:bf:77:15:8a:c6:9e:e8: e6:03:82:35:2c:8d:45:18:96:98:3a:97:6a:a2:16:b8:57:0d: f3:99:9b:fd:12:b2:c1:11:d7:4d:dd:fc:16:0d:8f:e0:a5:0f: 4c:c8:87:2b:04:0c:56:f4:1f:0d:02:42:c6:80:96:15:f5:8d: f0:7e:de:43:35:61:a1:1e:18:b6:46:82:76:e6:31:0c:fb:e1: 8b:6f:03:65:3b:f3:0e:ca:fd:48:d6:71:0d:34:ac:67:b1:c1: 3e:a4:d3:d4:97:fd:ee:c5:1b:27:83:4b:ad:87:31:75:81:23: 54:d5:0e:1f:45:eb:97:cb:d9:d7:b9:f1:06:f0:3a:83:df:5e: d9:21:c9:3d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/FVCRuUmEwne81fLP4jijMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YjhiNGYwNDk3M2YzN2NjNjlmYjdjMjM0NjhmOTUzZjE0 OTQyMGUwHhcNMjYwMTAyMTQyMTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDliZGE4NDQxMmFiNTI2NmE0NmMwYjNlNzA1MTE5YWU5OTFjZDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWuUa12s8YnKTNoW4juQXzpFhU8Q 5vpmrtg81QqgLog614hMYcaM1OkA6c0GZm3NcE7+Po7i/geUG86I+4MdmRfZY+h/ +P/L2OgnUDIsg4bvHcixWKYsiGhJeMp+fRjP/RScJMgaQV1N1lj2IX0Xn3h5n+CN 3uFJiYGkwsfoDpFjJHcr0l/javSsAOWMYxMQVSYdqUOlacy0EdAtQX4HMrvTBFvw Sxxc6Bq/1EIV4Krd5sLYcYkAy1rxHx6C/9q7YXboQbvdl9dV0braM6WV4KxbokkX twASdlKSLPNIA+VUuA7W/HU9yJacXYLZghRelabnu0A0HOoYy17EpE1UkwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFACb2oRBKrUmakbAs+cFEZrpkc2HMB8GA1UdIwQY MBaAFDm4tPBJc/N8xp+3wjRo+VPxSUIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2JpMDhFbHo4M3pHbjdmQ05HajVVX0ZKUWc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi84YWNjNGItZTBhMi00ZDIxLWI4NjQt OTkwMzA3ZDIwM2M4LzEvQUp2YWhFRXF0U1pxUnNDejV3VVJtdW1SelljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi84YWNjNGItZTBhMi00ZDIxLWI4NjQtOTkwMzA3ZDIwM2M4 LzEvT2JpMDhFbHo4M3pHbjdmQ05HajVVX0ZKUWc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADBsQED BAfBsQAwDQYJKoZIhvcNAQELBQADggEBAF/LGW8+JQCblWCymQyJ4sM4TpIZSoye BC0WxTwcgombVQxMFven6PfCiYiHVnkFtAev3UaN5tovTmYknnRuHmW0aLqmO+So yuW3jnGJNGPC1mLrTBq7JjtNuxtTZh72ghtLmxZb/joxW9WYXDoJS6lwDVojQN+X v3cVisae6OYDgjUsjUUYlpg6l2qiFrhXDfOZm/0SssER103d/BYNj+ClD0zIhysE DFb0Hw0CQsaAlhX1jfB+3kM1YaEeGLZGgnbmMQz74YtvA2U78w7K/UjWcQ00rGex wT6k09SX/e7FGyeDS62HMXWBI1TVDh9F65fL2de58QbwOoPfXtkhyT0= -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:23 2026 by rpki-client