This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/AjYgA83fEMBqjUVh5HogDvcF4y8.roa File: AjYgA83fEMBqjUVh5HogDvcF4y8.roa (raw, json) Hash identifier: HmdReTlwO7q9dM9EymrF4uah3KgbjfgTzrb6znj83rY= Subject key identifier: 02:36:20:03:CD:DF:10:C0:6A:8D:45:61:E4:7A:20:0E:F7:05:E3:2F Certificate issuer: /CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1 Certificate serial: 019B7C8053D1CF73E058AB32A39F2F5D4FB1 Authority key identifier: 16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/AjYgA83fEMBqjUVh5HogDvcF4y8.roa Signing time: Fri 02 Jan 2026 02:19:03 +0000 ROA not before: Fri 02 Jan 2026 02:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 155.45.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:53:d1:cf:73:e0:58:ab:32:a3:9f:2f:5d:4f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1 Validity Not Before: Jan 2 02:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02362003cddf10c06a8d4561e47a200ef705e32f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ef:67:b2:50:ea:64:c1:6c:b6:75:af:15:85: b5:76:fc:10:b8:4f:cd:a4:9f:eb:67:e8:09:2a:6d: 3b:e6:1c:db:ab:11:90:9a:e7:da:15:c8:7f:54:4c: d0:86:2a:81:7d:bc:0c:6e:4e:be:97:8f:41:4f:30: 52:9a:97:b2:09:03:36:14:88:b1:74:95:57:17:08: 77:ef:d2:1d:d6:c4:72:9f:26:23:5d:44:5f:76:51: 91:64:72:83:83:f8:bf:9e:b1:3a:94:cc:90:5d:b7: fe:ea:68:a4:48:be:35:d4:a9:c5:b6:f0:e1:b1:05: e1:02:5a:fc:68:eb:c9:ee:7a:23:99:5b:b6:59:8e: 55:dd:c2:9e:fc:f2:1d:66:51:6d:43:97:da:42:81: 6e:ec:0c:6e:e7:ad:b5:8e:7b:d2:0f:63:c8:46:59: dd:b8:f3:5a:f2:5a:d0:de:d1:72:c2:32:29:20:f5: 31:1d:70:63:e7:74:11:84:0c:21:5a:96:47:ba:cc: a4:60:23:f9:78:21:58:e7:ca:2c:c2:09:8a:d4:22: 6a:9c:78:24:e2:6f:66:fb:53:db:22:41:e4:17:c8: 56:15:9a:ff:80:f3:8e:85:c3:84:32:d6:08:cd:bb: 94:db:de:60:c2:ab:8a:3d:2d:4e:41:96:39:ef:21: 6e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:36:20:03:CD:DF:10:C0:6A:8D:45:61:E4:7A:20:0E:F7:05:E3:2F X509v3 Authority Key Identifier: keyid:16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/AjYgA83fEMBqjUVh5HogDvcF4y8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.45.249.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:3d:6b:0e:a5:76:97:5e:32:0b:70:66:0a:a1:30:b4:a4:0e: 53:e7:86:56:7f:af:19:04:ca:6d:b7:78:8d:be:8e:20:79:74: cc:d6:87:68:ef:39:25:2b:f5:19:ce:97:a7:4e:35:3b:47:28: a4:5a:a3:cd:39:81:83:f3:ce:79:49:a7:35:ff:be:27:75:26: 4a:4a:5a:e8:f5:02:11:48:b3:d4:ca:27:d9:8d:a0:83:70:39: cb:3a:2b:29:78:40:ba:aa:00:33:7d:d1:c0:ac:de:1e:c4:cb: a7:f4:c9:26:a4:79:f2:9a:c3:c0:e2:73:80:64:e0:36:19:82: b5:a2:cc:7c:73:69:33:36:4b:3c:20:bf:46:52:73:0b:fb:97: 55:4d:5e:b0:c7:c7:25:18:9c:30:20:38:b0:b7:ea:12:91:be: f6:a3:fb:78:d2:ee:c3:2f:bf:6a:64:e6:5f:c8:30:a2:47:67: c7:fd:30:08:a4:f0:6b:51:6b:1e:84:9c:76:a4:13:d0:c7:99: 9f:b7:7a:07:db:24:2c:ba:2e:63:d0:b0:8d:65:0e:a6:1d:8d: 27:97:0d:8a:aa:c6:40:3f:a2:dc:16:82:74:8f:cc:53:49:c0: 68:f6:69:0e:00:d8:75:de:b0:f5:c2:0e:36:f2:23:76:f4:a0: 0c:9e:1c:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gFPRz3PgWKsyo58vXU+xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2Y2RlMTM5YWUwNTczYjBhNGRkYTkzZTc3YjU3ZmYyN2Y5 YmViYTEwHhcNMjYwMTAyMDIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjM2MjAwM2NkZGYxMGMwNmE4ZDQ1NjFlNDdhMjAwZWY3MDVlMzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+9nslDqZMFstnWvFYW1dvwQuE/N pJ/rZ+gJKm075hzbqxGQmufaFch/VEzQhiqBfbwMbk6+l49BTzBSmpeyCQM2FIix dJVXFwh379Id1sRynyYjXURfdlGRZHKDg/i/nrE6lMyQXbf+6mikSL411KnFtvDh sQXhAlr8aOvJ7nojmVu2WY5V3cKe/PIdZlFtQ5faQoFu7Axu5621jnvSD2PIRlnd uPNa8lrQ3tFywjIpIPUxHXBj53QRhAwhWpZHusykYCP5eCFY58oswgmK1CJqnHgk 4m9m+1PbIkHkF8hWFZr/gPOOhcOEMtYIzbuU295gwquKPS1OQZY57yFuuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAI2IAPN3xDAao1FYeR6IA73BeMvMB8GA1UdIwQY MBaAFBbN4TmuBXOwpN2pPne1f/J/m+uhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnMzaE9hNEZjN0NrM2FrLWQ3Vl84bi1iNjZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zYzAyZjYtN2M0MS00OWJiLWI5ZGUt YjY5ZGNlNzU0N2ExLzEvQWpZZ0E4M2ZFTUJxalVWaDVIb2dEdmNGNHk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8zYzAyZjYtN2M0MS00OWJiLWI5ZGUtYjY5ZGNlNzU0N2Ex LzEvRnMzaE9hNEZjN0NrM2FrLWQ3Vl84bi1iNjZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmy35MA0G CSqGSIb3DQEBCwUAA4IBAQAPPWsOpXaXXjILcGYKoTC0pA5T54ZWf68ZBMptt3iN vo4geXTM1odo7zklK/UZzpenTjU7RyikWqPNOYGD8855Sac1/74ndSZKSlro9QIR SLPUyifZjaCDcDnLOispeEC6qgAzfdHArN4exMun9MkmpHnymsPA4nOAZOA2GYK1 osx8c2kzNks8IL9GUnML+5dVTV6wx8clGJwwIDiwt+oSkb72o/t40u7DL79qZOZf yDCiR2fH/TAIpPBrUWsehJx2pBPQx5mft3oH2yQsui5j0LCNZQ6mHY0nlw2KqsZA P6LcFoJ0j8xTScBo9mkOANh13rD1wg428iN29KAMnhz8 -----END CERTIFICATE-----Generated at Wed Jan 7 22:29:40 2026 by rpki-client