This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/aAz2084YN5AIEG28w26S7CIam4E.roa File: aAz2084YN5AIEG28w26S7CIam4E.roa (raw, json) Hash identifier: aLh2/I7u2RUBoHwMQV1fEF1N56viK2J9i2I4M3Pdo98= Subject key identifier: 68:0C:F6:D3:CE:18:37:90:08:10:6D:BC:C3:6E:92:EC:22:1A:9B:81 Certificate issuer: /CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040 Certificate serial: 019B7834B53E55BADE5398B43BB5D7934B33 Authority key identifier: D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/aAz2084YN5AIEG28w26S7CIam4E.roa Signing time: Thu 01 Jan 2026 06:17:58 +0000 ROA not before: Thu 01 Jan 2026 06:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13074 IP address blocks: 192.118.70.0/24 maxlen: 24 192.118.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b5:3e:55:ba:de:53:98:b4:3b:b5:d7:93:4b:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040 Validity Not Before: Jan 1 06:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=680cf6d3ce18379008106dbcc36e92ec221a9b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4f:36:c9:10:30:85:87:14:f0:9d:3c:d1:d0: 88:be:55:3d:13:6d:ed:51:60:7b:fa:7b:6b:e5:c7: b7:7d:52:55:19:f1:22:83:52:91:4b:27:54:32:13: 34:cc:60:78:7b:a1:ee:56:76:d0:88:73:5b:67:61: cf:a8:08:53:44:be:ba:66:b8:75:76:08:a1:19:3b: 07:e9:90:dc:6a:91:e5:b5:89:54:89:48:56:81:c8: db:89:cb:a5:bd:30:d9:4e:60:57:b9:33:a2:8d:0e: 2c:77:ce:53:48:70:92:dc:b4:27:f7:5a:93:7e:3b: 63:11:c6:ed:0e:d4:88:1d:3e:75:2c:29:e3:6d:73: 08:f7:9a:98:62:3a:27:c6:db:11:ae:e9:91:ef:2a: 7d:b1:23:b2:bb:c1:56:66:85:60:0d:c0:87:65:99: 3e:90:27:65:2a:71:40:69:9d:79:48:56:6d:5b:d5: 09:cf:97:eb:a3:e9:cc:27:5f:41:80:db:3b:6e:97: 0a:fd:43:97:3e:76:0a:03:43:32:77:7f:19:85:08: 42:7c:e7:dc:1c:fb:55:82:3a:76:0d:54:b8:d1:4e: 52:7f:81:d4:8a:7f:05:ab:8a:9b:4d:91:c8:6e:c5: 02:9a:53:44:01:bf:cb:fc:63:a7:11:18:a8:e3:74: c3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0C:F6:D3:CE:18:37:90:08:10:6D:BC:C3:6E:92:EC:22:1A:9B:81 X509v3 Authority Key Identifier: keyid:D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/aAz2084YN5AIEG28w26S7CIam4E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.118.70.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:4d:08:ab:be:ff:b3:e9:bc:0c:97:08:fb:a1:15:ec:e3:dd: 18:90:cd:21:19:c1:f4:e7:e9:68:de:5f:26:91:f0:ec:e2:06: 09:f7:2c:18:d7:90:fc:c8:c5:6f:e1:fd:cf:b0:13:c9:a2:51: 41:26:37:0f:88:e5:26:a7:8c:2e:b8:7a:e2:7a:a1:9c:97:21: cc:f5:65:70:c0:eb:8c:15:62:39:2a:c5:af:3f:2e:c0:50:9e: 11:8e:99:a7:b7:16:91:91:04:ac:4d:d6:e6:bb:b3:e3:35:8d: 5c:ff:5e:9c:4e:2d:df:9a:ea:1c:86:47:06:c7:6b:55:7d:e1: 58:4a:71:dd:31:5a:f9:9d:ab:a4:40:5a:a0:bb:14:01:d9:bc: 17:17:10:89:d5:e2:fc:fe:8f:30:66:7e:6b:73:36:07:b8:7c: dc:66:76:b0:0c:39:34:45:a4:1d:2e:cf:a1:45:5b:2a:c1:c9: cb:52:74:cf:51:3f:1b:e9:a3:5d:86:27:65:87:97:05:66:4b: c2:54:42:e9:ef:c3:82:f5:f4:79:15:87:5b:7f:e9:63:a4:e2: 2a:d7:5a:83:e2:4c:aa:11:da:6d:d5:a0:93:fb:f7:3a:42:65: fa:2e:ea:82:e3:9d:34:f0:39:f8:d9:75:31:1f:a1:ae:87:01: 3e:47:83:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NLU+VbreU5i0O7XXk0szMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYzFkNWZkNGUyMGFkZTVmMTFiNjZhZmIxMGE1NGM4ZmZl NGIwNDAwHhcNMjYwMTAxMDYxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODBjZjZkM2NlMTgzNzkwMDgxMDZkYmNjMzZlOTJlYzIyMWE5YjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2k82yRAwhYcU8J080dCIvlU9E23t UWB7+ntr5ce3fVJVGfEig1KRSydUMhM0zGB4e6HuVnbQiHNbZ2HPqAhTRL66Zrh1 dgihGTsH6ZDcapHltYlUiUhWgcjbiculvTDZTmBXuTOijQ4sd85TSHCS3LQn91qT fjtjEcbtDtSIHT51LCnjbXMI95qYYjonxtsRrumR7yp9sSOyu8FWZoVgDcCHZZk+ kCdlKnFAaZ15SFZtW9UJz5fro+nMJ19BgNs7bpcK/UOXPnYKA0Myd38ZhQhCfOfc HPtVgjp2DVS40U5Sf4HUin8Fq4qbTZHIbsUCmlNEAb/L/GOnERio43TDqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGgM9tPOGDeQCBBtvMNukuwiGpuBMB8GA1UdIwQY MBaAFNLB1f1OIK3l8Rtmr7EKVMj/5LBAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHNIVl9VNGdyZVh4RzJhdnNRcFV5UF9rc0VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC84NjEzYWQtNGY1Zi00NWZkLTg3OTkt YTA5YTg3NWY1OTAzLzEvYUF6MjA4NFlONUFJRUcyOHcyNlM3Q0lhbTRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC84NjEzYWQtNGY1Zi00NWZkLTg3OTktYTA5YTg3NWY1OTAz LzEvMHNIVl9VNGdyZVh4RzJhdnNRcFV5UF9rc0VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwHZGMA0G CSqGSIb3DQEBCwUAA4IBAQBLTQirvv+z6bwMlwj7oRXs490YkM0hGcH05+lo3l8m kfDs4gYJ9ywY15D8yMVv4f3PsBPJolFBJjcPiOUmp4wuuHrieqGclyHM9WVwwOuM FWI5KsWvPy7AUJ4RjpmntxaRkQSsTdbmu7PjNY1c/16cTi3fmuochkcGx2tVfeFY SnHdMVr5naukQFqguxQB2bwXFxCJ1eL8/o8wZn5rczYHuHzcZnawDDk0RaQdLs+h RVsqwcnLUnTPUT8b6aNdhidlh5cFZkvCVELp78OC9fR5FYdbf+ljpOIq11qD4kyq Edpt1aCT+/c6QmX6LuqC45008Dn42XUxH6GuhwE+R4Ml -----END CERTIFICATE-----Generated at Fri Jan 9 18:06:31 2026 by rpki-client