This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/AAWvDfwb2jQSUWa9BYHOOcjPqc8.roa File: AAWvDfwb2jQSUWa9BYHOOcjPqc8.roa (raw, json) Hash identifier: TG2n+ec91o1/npZ11uH5oNK4E3sR3ZKcNMfWgBS+6WU= Subject key identifier: 00:05:AF:0D:FC:1B:DA:34:12:51:66:BD:05:81:CE:39:C8:CF:A9:CF Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b Certificate serial: 019B79ED452479027E5A2B0BD719129323F6 Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/AAWvDfwb2jQSUWa9BYHOOcjPqc8.roa Signing time: Thu 01 Jan 2026 14:19:11 +0000 ROA not before: Thu 01 Jan 2026 14:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208287 IP address blocks: 103.83.86.0/24 maxlen: 24 103.83.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:45:24:79:02:7e:5a:2b:0b:d7:19:12:93:23:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b Validity Not Before: Jan 1 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0005af0dfc1bda34125166bd0581ce39c8cfa9cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fb:a6:b4:c8:19:9c:8e:6e:5e:a1:18:a0:4a: 68:54:9b:a2:41:b2:2b:b5:57:f0:75:dd:99:f4:b9: 79:c1:42:89:5b:51:c8:28:75:f9:92:f5:34:57:84: 37:46:1f:e7:ce:ce:8d:da:59:6d:1c:f1:09:66:ed: 99:5e:15:31:55:cf:3d:d6:c1:39:b5:99:78:1b:04: 5c:1e:3f:5d:39:3f:5f:85:44:b9:d8:cc:c5:ef:db: c8:e5:52:99:07:83:3a:9b:48:9d:ea:8e:8f:55:b7: c8:79:c9:1d:c1:88:30:17:a1:ce:e4:5a:19:6a:9d: 49:0c:dc:92:00:02:3e:d2:82:de:c6:55:f6:0b:58: 3c:aa:69:c1:04:45:f5:27:22:f5:61:da:0b:e6:b3: 94:2e:2b:1a:0a:09:2d:4d:b7:80:19:b7:38:4a:07: d8:f7:ef:93:f0:80:8a:6b:dc:47:6c:90:3c:1a:a0: be:c5:f4:03:10:e9:f6:ff:f1:59:9c:1e:12:83:13: 01:04:ca:b4:7e:2f:ad:55:a7:0e:e2:36:20:ff:b8: 44:e1:10:65:6f:dd:c1:d9:92:f7:86:69:79:7f:01: 42:4d:94:34:cf:94:69:f3:1a:34:2c:ee:13:83:23: 5f:11:a1:fd:fe:7d:e9:81:04:73:fb:31:6c:bb:cb: d3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:05:AF:0D:FC:1B:DA:34:12:51:66:BD:05:81:CE:39:C8:CF:A9:CF X509v3 Authority Key Identifier: keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/AAWvDfwb2jQSUWa9BYHOOcjPqc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.83.86.0/23 Signature Algorithm: sha256WithRSAEncryption 74:4e:05:7e:2e:8e:1f:b2:43:9a:52:e2:d1:ca:a1:7a:51:5b: dc:6f:20:b2:06:39:4c:cc:eb:56:5a:61:4f:36:2c:21:13:ec: 00:2c:b9:37:f8:d5:05:e0:fd:13:db:67:4a:35:f4:67:d3:9d: 18:4c:61:55:03:08:7a:d5:20:31:d1:30:84:84:63:04:49:73: 2a:de:b6:34:40:5d:29:3b:10:73:47:89:51:32:f4:19:20:ec: 16:56:9e:9e:13:d7:94:a3:26:85:57:2b:6d:56:78:81:1d:4e: d2:10:d3:5d:0d:9d:8b:67:ad:fe:0c:47:53:9a:dc:85:ea:0b: c9:34:49:2c:24:9c:a1:ab:85:c1:91:e1:eb:e5:43:7a:66:24: 0a:f5:dd:b0:65:d2:2a:5d:e1:10:7e:e1:22:3e:bc:59:f6:44: 52:e0:2a:28:a7:f1:c8:76:b1:f8:7a:5e:37:58:94:f3:e3:64: d6:09:a6:5e:16:b8:c3:1f:5d:83:49:d0:76:4a:d3:a7:3e:b6: 19:c1:80:5d:80:a7:78:3a:94:cc:30:57:ec:f1:30:07:c5:23: 9a:d6:2c:fd:a9:16:60:9c:07:23:31:5e:f0:16:6b:0b:ea:69: b8:53:23:3c:79:31:cf:ba:94:13:83:12:0a:73:61:b4:fc:64: 0e:d4:04:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57UUkeQJ+WisL1xkSkyP2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz ZWRmNGIwHhcNMjYwMTAxMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDA1YWYwZGZjMWJkYTM0MTI1MTY2YmQwNTgxY2UzOWM4Y2ZhOWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PumtMgZnI5uXqEYoEpoVJuiQbIr tVfwdd2Z9Ll5wUKJW1HIKHX5kvU0V4Q3Rh/nzs6N2lltHPEJZu2ZXhUxVc891sE5 tZl4GwRcHj9dOT9fhUS52MzF79vI5VKZB4M6m0id6o6PVbfIeckdwYgwF6HO5FoZ ap1JDNySAAI+0oLexlX2C1g8qmnBBEX1JyL1YdoL5rOULisaCgktTbeAGbc4SgfY 9++T8ICKa9xHbJA8GqC+xfQDEOn2//FZnB4SgxMBBMq0fi+tVacO4jYg/7hE4RBl b93B2ZL3hml5fwFCTZQ0z5Rp8xo0LO4TgyNfEaH9/n3pgQRz+zFsu8vTsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAAFrw38G9o0ElFmvQWBzjnIz6nPMB8GA1UdIwQY MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt OTQ0OTk1N2ZkNWE1LzEvQUFXdkRmd2IyalFTVVdhOUJZSE9PY2pQcWM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1 LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ1NWMA0G CSqGSIb3DQEBCwUAA4IBAQB0TgV+Lo4fskOaUuLRyqF6UVvcbyCyBjlMzOtWWmFP NiwhE+wALLk3+NUF4P0T22dKNfRn050YTGFVAwh61SAx0TCEhGMESXMq3rY0QF0p OxBzR4lRMvQZIOwWVp6eE9eUoyaFVyttVniBHU7SENNdDZ2LZ63+DEdTmtyF6gvJ NEksJJyhq4XBkeHr5UN6ZiQK9d2wZdIqXeEQfuEiPrxZ9kRS4Coop/HIdrH4el43 WJTz42TWCaZeFrjDH12DSdB2StOnPrYZwYBdgKd4OpTMMFfs8TAHxSOa1iz9qRZg nAcjMV7wFmsL6mm4UyM8eTHPupQTgxIKc2G0/GQO1ATp -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:29 2026 by rpki-client