This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/ajNgz3i4R4z9MoH7g9Gh2FsCAiM.roa File: ajNgz3i4R4z9MoH7g9Gh2FsCAiM.roa (raw, json) Hash identifier: ak7eVyyVkmWQATGl9IjiTOWOerTXTRW7k0wkBuX7rhg= Subject key identifier: 6A:33:60:CF:78:B8:47:8C:FD:32:81:FB:83:D1:A1:D8:5B:02:02:23 Certificate issuer: /CN=75ab408aa9f71a81e883f8d14965f773538b5a40 Certificate serial: 019B797EE573679E303EE939ABE022C16F50 Authority key identifier: 75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/ajNgz3i4R4z9MoH7g9Gh2FsCAiM.roa Signing time: Thu 01 Jan 2026 12:18:38 +0000 ROA not before: Thu 01 Jan 2026 12:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2116 IP address blocks: 193.160.160.0/20 maxlen: 20 193.160.164.0/22 maxlen: 22 193.160.166.0/24 maxlen: 24 193.160.167.0/24 maxlen: 24 193.160.168.0/24 maxlen: 24 193.160.169.0/24 maxlen: 24 193.160.170.0/23 maxlen: 23 193.160.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e5:73:67:9e:30:3e:e9:39:ab:e0:22:c1:6f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75ab408aa9f71a81e883f8d14965f773538b5a40 Validity Not Before: Jan 1 12:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a3360cf78b8478cfd3281fb83d1a1d85b020223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6b:74:29:3e:b9:07:0e:90:86:52:0b:e4:95: 43:2c:3a:c3:72:8f:64:e8:c0:30:63:93:39:db:99: 64:0b:e4:29:89:e5:22:d5:56:68:43:f5:fc:07:4a: c2:f7:06:89:0a:30:eb:80:88:74:26:d0:2b:cf:50: 22:aa:d6:32:c1:cb:28:fc:ad:40:4a:08:0c:8b:89: c3:32:51:5b:d3:ee:60:43:52:62:14:e0:f1:61:db: 06:11:c0:b9:95:7e:e4:5f:b2:ab:b2:10:12:10:b0: 89:e9:f2:ae:05:f9:09:5c:a5:23:4b:eb:bb:91:b4: cf:32:43:aa:c8:ae:be:a2:0b:b2:e3:b3:8e:60:6d: 8e:e6:21:ae:42:a4:cc:1f:46:73:f3:de:ba:f4:ec: 9e:62:46:35:46:da:72:0e:1f:ba:71:2c:c3:0a:e6: 1e:b7:48:c7:26:95:06:5f:5d:28:56:50:83:d2:a5: 43:41:de:25:21:bc:66:29:fc:f2:34:59:d7:09:df: 7b:8e:89:1d:39:ca:85:a9:07:72:73:9c:8d:59:e9: 6d:17:1e:b6:0d:aa:11:a9:d9:44:93:4e:a1:a9:59: 23:df:77:24:e0:ef:e4:da:e7:19:53:ed:a0:48:21: 4d:a9:f1:61:b6:96:6b:3d:ed:a8:e0:76:20:8e:15: b8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:33:60:CF:78:B8:47:8C:FD:32:81:FB:83:D1:A1:D8:5B:02:02:23 X509v3 Authority Key Identifier: keyid:75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/ajNgz3i4R4z9MoH7g9Gh2FsCAiM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.160.160.0/20 Signature Algorithm: sha256WithRSAEncryption 0d:59:87:49:14:d6:ee:b5:98:7e:05:44:92:1d:e1:16:07:69: f8:bf:08:b6:50:a7:8e:e8:ca:75:31:f0:62:c0:e1:f9:6a:92: c5:60:da:33:11:52:bd:b7:0a:7c:9e:1e:24:b1:e6:fb:2a:f5: 49:c7:91:6c:a4:7a:5e:97:02:58:e9:5e:30:1e:0d:d9:29:e2: c9:d8:b6:f3:e4:32:d0:74:dd:e1:b2:c4:96:19:34:95:84:10: db:ca:8b:e4:37:49:86:94:51:82:e4:fa:f2:4d:61:08:69:4d: d0:15:94:af:c2:73:a7:e8:8f:cb:ff:6f:c8:1d:40:cc:a6:33: d3:ab:e9:c1:0f:93:4d:26:4e:7d:70:14:d2:3f:97:90:a8:53: 99:3c:6b:83:d9:c5:84:13:b0:8f:f3:13:f8:05:7e:cd:6f:23: 77:c6:75:6c:ac:c1:35:84:20:46:87:3c:0d:82:0a:8c:3d:e9: 1a:83:9a:df:df:f0:ce:19:0b:53:9c:fe:3f:23:bc:70:ae:45: ca:4a:3d:1a:d5:a6:48:39:37:e0:a2:bb:c9:9f:b1:c7:d8:dc: ac:66:0a:fb:5b:1d:a9:e4:80:d9:8f:ca:de:52:ef:90:ae:7b: 75:2b:31:08:6e:7a:14:7b:24:3b:75:8b:d8:e9:34:aa:22:14: 19:43:b0:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fuVzZ54wPuk5q+AiwW9QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YWI0MDhhYTlmNzFhODFlODgzZjhkMTQ5NjVmNzczNTM4 YjVhNDAwHhcNMjYwMTAxMTIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTMzNjBjZjc4Yjg0NzhjZmQzMjgxZmI4M2QxYTFkODViMDIwMjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2t0KT65Bw6QhlIL5JVDLDrDco9k 6MAwY5M525lkC+QpieUi1VZoQ/X8B0rC9waJCjDrgIh0JtArz1AiqtYywcso/K1A SggMi4nDMlFb0+5gQ1JiFODxYdsGEcC5lX7kX7KrshASELCJ6fKuBfkJXKUjS+u7 kbTPMkOqyK6+oguy47OOYG2O5iGuQqTMH0Zz89669OyeYkY1RtpyDh+6cSzDCuYe t0jHJpUGX10oVlCD0qVDQd4lIbxmKfzyNFnXCd97jokdOcqFqQdyc5yNWeltFx62 DaoRqdlEk06hqVkj33ck4O/k2ucZU+2gSCFNqfFhtpZrPe2o4HYgjhW4qwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGozYM94uEeM/TKB+4PRodhbAgIjMB8GA1UdIwQY MBaAFHWrQIqp9xqB6IP40Ull93NTi1pAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGF0QWlxbjNHb0hvZ19qUlNXWDNjMU9MV2tBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85ZGI0MWEtOGYxYy00NmM1LWEyZTEt OGUyM2IwMjZjNmI1LzEvYWpOZ3ozaTRSNHo5TW9IN2c5R2gyRnNDQWlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni85ZGI0MWEtOGYxYy00NmM1LWEyZTEtOGUyM2IwMjZjNmI1 LzEvZGF0QWlxbjNHb0hvZ19qUlNXWDNjMU9MV2tBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwaCgMA0G CSqGSIb3DQEBCwUAA4IBAQANWYdJFNbutZh+BUSSHeEWB2n4vwi2UKeO6Mp1MfBi wOH5apLFYNozEVK9twp8nh4kseb7KvVJx5FspHpelwJY6V4wHg3ZKeLJ2Lbz5DLQ dN3hssSWGTSVhBDbyovkN0mGlFGC5PryTWEIaU3QFZSvwnOn6I/L/2/IHUDMpjPT q+nBD5NNJk59cBTSP5eQqFOZPGuD2cWEE7CP8xP4BX7NbyN3xnVsrME1hCBGhzwN ggqMPekag5rf3/DOGQtTnP4/I7xwrkXKSj0a1aZIOTfgorvJn7HH2NysZgr7Wx2p 5IDZj8reUu+Qrnt1KzEIbnoUeyQ7dYvY6TSqIhQZQ7BT -----END CERTIFICATE-----Generated at Mon Jan 26 16:57:21 2026 by rpki-client