This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/Ajd0L8XQdcyvJF9_JDszHwb-ypM.roa File: Ajd0L8XQdcyvJF9_JDszHwb-ypM.roa (raw, json) Hash identifier: JhIrWGN9lZ7WVHOAnXcV9RrmyiG8gnQ8alzgC7IHdko= Subject key identifier: 02:37:74:2F:C5:D0:75:CC:AF:24:5F:7F:24:3B:33:1F:06:FE:CA:93 Certificate issuer: /CN=0d026a518947dd5bd3981ed0669c11c5621d0475 Certificate serial: 019B7D5BF62F2F587FBCC39899C9434DED2D Authority key identifier: 0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/Ajd0L8XQdcyvJF9_JDszHwb-ypM.roa Signing time: Fri 02 Jan 2026 06:18:57 +0000 ROA not before: Fri 02 Jan 2026 06:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62364 IP address blocks: 193.39.4.0/23 maxlen: 23 193.39.4.0/24 maxlen: 24 193.39.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:f6:2f:2f:58:7f:bc:c3:98:99:c9:43:4d:ed:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d026a518947dd5bd3981ed0669c11c5621d0475 Validity Not Before: Jan 2 06:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0237742fc5d075ccaf245f7f243b331f06feca93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:53:30:43:98:c6:9b:e0:53:1e:d5:1c:da:fc: 85:f3:af:5f:96:7c:47:89:1a:b1:9b:c6:f3:be:81: 24:86:32:34:d9:e6:67:34:b1:bd:93:29:31:76:0d: 20:d9:f7:2f:92:7e:69:a7:20:83:b5:ae:1d:d0:41: 7e:c4:5a:8d:b4:80:7b:96:84:2e:35:e8:39:86:ee: e1:3c:16:bf:19:fe:41:92:2c:86:8e:40:ff:37:c3: 7b:3a:fc:fb:70:ba:b8:09:7f:b2:6e:e8:f8:5d:77: 24:f5:72:6f:f6:4c:95:e3:84:65:78:6c:19:bc:ae: 3c:79:68:86:63:a6:de:c1:c0:45:66:ab:3f:86:ef: dc:64:48:c5:36:2f:29:77:79:1c:f2:92:d9:9f:18: a0:54:3e:13:55:c3:2f:33:3b:19:cd:9a:4b:61:72: 81:87:1e:67:0a:32:7c:d3:a9:08:ff:f4:fa:07:33: 06:0a:52:62:32:7f:0a:54:06:98:d7:c5:6a:e1:a6: 41:19:83:56:cd:66:a8:c3:36:89:e2:57:62:67:69: c5:44:81:5c:f3:9f:de:b5:af:f1:8d:2c:f7:2f:2e: fc:78:ae:3d:a8:9a:a4:93:de:f2:9a:9b:e6:14:9c: ad:8a:c7:48:2a:63:56:38:3f:ad:70:9f:f1:70:fc: 22:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:37:74:2F:C5:D0:75:CC:AF:24:5F:7F:24:3B:33:1F:06:FE:CA:93 X509v3 Authority Key Identifier: keyid:0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/Ajd0L8XQdcyvJF9_JDszHwb-ypM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.39.4.0/23 Signature Algorithm: sha256WithRSAEncryption b3:6d:87:52:f0:68:18:47:65:04:91:0c:8c:d0:02:20:e0:3e: a4:fe:c3:fb:1c:cc:7a:15:e5:9e:c4:89:e1:d9:c9:ec:47:fe: 6b:d2:af:c7:b7:d5:65:a1:a7:06:4d:cd:b2:a0:fe:c9:ba:2c: 2f:90:31:ee:64:d6:c9:61:f4:45:4d:43:14:81:36:2a:aa:aa: 41:2a:43:97:56:25:f1:2e:ed:e9:20:50:e7:60:76:55:10:f7: 83:02:f8:a5:3e:68:a7:70:ed:a9:cf:dc:6a:27:ee:e6:f4:8a: 18:93:35:4e:b3:39:de:e6:1a:9a:73:24:95:0a:ff:ee:81:30: aa:75:1c:3d:76:0f:70:2c:34:2b:17:87:e5:fb:38:f0:08:69: e9:24:2a:c7:67:07:e5:26:29:1c:b9:db:7b:2b:4b:e8:6d:01: f8:e8:fa:21:9b:fb:14:04:88:0d:4d:4e:15:b6:22:20:08:1a: 9b:ef:4d:6b:d6:a0:bd:d4:b5:c9:81:a6:a7:cb:24:94:1d:79: d3:7a:aa:10:70:0b:47:55:73:a9:a7:e2:ad:7a:b2:c7:71:cd: d5:f1:07:9b:4b:42:b9:71:05:80:60:a3:b7:09:c5:45:62:fe: 01:27:e2:7e:6a:12:c6:81:a9:97:6c:a2:9b:d6:cf:38:e8:8d: 5f:6e:44:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W/YvL1h/vMOYmclDTe0tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMDI2YTUxODk0N2RkNWJkMzk4MWVkMDY2OWMxMWM1NjIx ZDA0NzUwHhcNMjYwMTAyMDYxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjM3NzQyZmM1ZDA3NWNjYWYyNDVmN2YyNDNiMzMxZjA2ZmVjYTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FMwQ5jGm+BTHtUc2vyF869flnxH iRqxm8bzvoEkhjI02eZnNLG9kykxdg0g2fcvkn5ppyCDta4d0EF+xFqNtIB7loQu Neg5hu7hPBa/Gf5BkiyGjkD/N8N7Ovz7cLq4CX+ybuj4XXck9XJv9kyV44RleGwZ vK48eWiGY6bewcBFZqs/hu/cZEjFNi8pd3kc8pLZnxigVD4TVcMvMzsZzZpLYXKB hx5nCjJ806kI//T6BzMGClJiMn8KVAaY18Vq4aZBGYNWzWaowzaJ4ldiZ2nFRIFc 85/eta/xjSz3Ly78eK49qJqkk97ympvmFJytisdIKmNWOD+tcJ/xcPwiPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAI3dC/F0HXMryRffyQ7Mx8G/sqTMB8GA1UdIwQY MBaAFA0CalGJR91b05ge0GacEcViHQR1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFFKcVVZbEgzVnZUbUI3UVpwd1J4V0lkQkhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80MTdhNDMtNTVlOS00NjI2LTk5YzUt MjVjYjA5MmY1Y2FjLzEvQWpkMEw4WFFkY3l2SkY5X0pEc3pId2IteXBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My80MTdhNDMtNTVlOS00NjI2LTk5YzUtMjVjYjA5MmY1Y2Fj LzEvRFFKcVVZbEgzVnZUbUI3UVpwd1J4V0lkQkhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwScEMA0G CSqGSIb3DQEBCwUAA4IBAQCzbYdS8GgYR2UEkQyM0AIg4D6k/sP7HMx6FeWexInh 2cnsR/5r0q/Ht9VloacGTc2yoP7JuiwvkDHuZNbJYfRFTUMUgTYqqqpBKkOXViXx Lu3pIFDnYHZVEPeDAvilPmincO2pz9xqJ+7m9IoYkzVOszne5hqacySVCv/ugTCq dRw9dg9wLDQrF4fl+zjwCGnpJCrHZwflJikcudt7K0vobQH46Pohm/sUBIgNTU4V tiIgCBqb701r1qC91LXJgaanyySUHXnTeqoQcAtHVXOpp+KterLHcc3V8QebS0K5 cQWAYKO3CcVFYv4BJ+J+ahLGgamXbKKb1s846I1fbkRQ -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:18 2026 by rpki-client