This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/AovjLMzZvMdo98oRLMX3UQFhYGU.roa File: AovjLMzZvMdo98oRLMX3UQFhYGU.roa (raw, json) Hash identifier: Pirq+8jQHRZFAz4jyR41JVpLGoXjS83ipQMbfBRQoac= Subject key identifier: 02:8B:E3:2C:CC:D9:BC:C7:68:F7:CA:11:2C:C5:F7:51:01:61:60:65 Certificate issuer: /CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1 Certificate serial: 019B7DCAED33694AACD26C192E5EDFA33750 Authority key identifier: 1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/AovjLMzZvMdo98oRLMX3UQFhYGU.roa Signing time: Fri 02 Jan 2026 08:20:09 +0000 ROA not before: Fri 02 Jan 2026 08:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15576 IP address blocks: 194.176.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ed:33:69:4a:ac:d2:6c:19:2e:5e:df:a3:37:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1 Validity Not Before: Jan 2 08:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=028be32cccd9bcc768f7ca112cc5f75101616065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:df:1b:28:7e:c3:62:1d:86:1e:45:b8:c0:ac: 16:f7:28:88:8d:c1:ea:77:c3:92:ab:4c:a7:30:b0: 19:fe:bf:95:26:06:77:fc:77:6e:4a:a2:5d:6f:83: ef:06:62:f5:56:85:74:de:19:ad:52:3c:81:ae:bb: c0:1a:ba:00:15:ab:44:95:2c:f4:20:42:e0:62:60: 4d:2e:4a:84:a8:9c:33:4f:c7:1a:0a:d5:1d:71:00: 46:c8:8e:f7:25:bb:82:a4:c6:2a:4f:8b:5a:12:88: e7:39:00:26:87:2a:38:4b:cf:65:b2:67:51:e9:e8: 4f:4d:b5:57:ad:ae:98:f1:d5:03:32:fd:01:0d:30: 1b:48:14:bd:1d:94:6c:af:ba:5b:8d:88:c1:4a:7e: c9:41:b8:33:5f:aa:90:fa:a5:45:96:a7:22:0a:ba: 5c:79:49:76:c5:e3:27:9d:2e:d4:0f:46:85:f6:51: 71:58:ba:98:6b:0b:51:8e:86:ab:c3:1e:46:a1:f1: 6b:b9:fe:13:f7:4f:b0:35:41:e7:f0:30:32:47:98: a8:88:e3:19:9b:3d:6c:d6:e3:de:87:c6:7f:d0:93: e5:f9:8a:14:79:8d:ca:15:66:3b:8f:c9:a0:df:d5: 78:03:4a:4c:5a:60:66:83:26:33:20:38:58:04:e8: a5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8B:E3:2C:CC:D9:BC:C7:68:F7:CA:11:2C:C5:F7:51:01:61:60:65 X509v3 Authority Key Identifier: keyid:1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/AovjLMzZvMdo98oRLMX3UQFhYGU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.176.116.0/24 Signature Algorithm: sha256WithRSAEncryption 04:b4:b9:e5:94:ba:03:7e:ce:a2:bb:80:c6:ac:eb:d2:c3:51: 05:66:0a:c4:77:70:26:54:fb:9d:5d:10:dd:45:3d:4e:b5:9a: 15:9b:34:f3:10:8d:f6:b0:d0:84:1f:35:8e:e3:51:12:d1:42: 4e:d3:5a:46:b4:0b:e1:b3:a8:18:86:c9:27:ff:81:64:80:30: 43:e5:ef:d2:fa:c8:38:61:ce:8b:a3:db:a3:35:f3:2a:97:de: c2:ca:57:80:c7:d9:88:cd:88:bf:e5:e1:e3:cd:f8:dc:31:02: 92:55:cc:1e:ca:69:99:e7:3d:87:f4:3f:f3:81:f8:f0:db:ed: b4:cc:17:d9:36:ee:af:fa:ea:9d:eb:10:30:c2:17:c6:f6:2f: ec:10:14:30:68:04:3e:ca:08:d7:02:55:45:c0:10:7d:92:1e: 93:c2:00:a3:fb:bc:5d:a7:d7:be:b8:24:0a:d7:21:30:6b:0d: 4c:eb:43:90:65:50:b5:ad:b8:01:4d:42:8f:a0:46:f2:7d:a8: c0:be:2c:e8:b6:5f:85:18:0c:8b:67:48:f3:40:31:83:49:fa: 59:0b:82:d6:b5:21:99:c2:7f:9c:5d:d8:f9:e1:94:28:aa:f0: 4e:51:3b:47:ae:26:49:f7:33:46:1e:7d:7c:22:d0:09:15:4f: ba:e5:e7:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yu0zaUqs0mwZLl7fozdQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNTM0ZDQ3YWQ4ZGI1ODk0YTVmYzkzNDJlNDU1OGY5NGU0 ZjE3ZjEwHhcNMjYwMTAyMDgyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjhiZTMyY2NjZDliY2M3NjhmN2NhMTEyY2M1Zjc1MTAxNjE2MDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0d8bKH7DYh2GHkW4wKwW9yiIjcHq d8OSq0ynMLAZ/r+VJgZ3/HduSqJdb4PvBmL1VoV03hmtUjyBrrvAGroAFatElSz0 IELgYmBNLkqEqJwzT8caCtUdcQBGyI73JbuCpMYqT4taEojnOQAmhyo4S89lsmdR 6ehPTbVXra6Y8dUDMv0BDTAbSBS9HZRsr7pbjYjBSn7JQbgzX6qQ+qVFlqciCrpc eUl2xeMnnS7UD0aF9lFxWLqYawtRjoarwx5GofFruf4T90+wNUHn8DAyR5ioiOMZ mz1s1uPeh8Z/0JPl+YoUeY3KFWY7j8mg39V4A0pMWmBmgyYzIDhYBOilawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAKL4yzM2bzHaPfKESzF91EBYWBlMB8GA1UdIwQY MBaAFBtTTUetjbWJSl/JNC5FWPlOTxfxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzFOTlI2Mk50WWxLWDhrMExrVlktVTVQRl9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82YjQwMjMtYWRlZi00ZTRkLThjZjYt MzI2Njk3MzdjNTE3LzEvQW92akxNelp2TWRvOThvUkxNWDNVUUZoWUdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi82YjQwMjMtYWRlZi00ZTRkLThjZjYtMzI2Njk3MzdjNTE3 LzEvRzFOTlI2Mk50WWxLWDhrMExrVlktVTVQRl9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrB0MA0G CSqGSIb3DQEBCwUAA4IBAQAEtLnllLoDfs6iu4DGrOvSw1EFZgrEd3AmVPudXRDd RT1OtZoVmzTzEI32sNCEHzWO41ES0UJO01pGtAvhs6gYhskn/4FkgDBD5e/S+sg4 Yc6Lo9ujNfMql97CyleAx9mIzYi/5eHjzfjcMQKSVcweymmZ5z2H9D/zgfjw2+20 zBfZNu6v+uqd6xAwwhfG9i/sEBQwaAQ+ygjXAlVFwBB9kh6TwgCj+7xdp9e+uCQK 1yEwaw1M60OQZVC1rbgBTUKPoEbyfajAvizotl+FGAyLZ0jzQDGDSfpZC4LWtSGZ wn+cXdj54ZQoqvBOUTtHriZJ9zNGHn18ItAJFU+65ecV -----END CERTIFICATE-----Generated at Mon Jan 26 19:20:12 2026 by rpki-client