This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/AUGH_CwYiYaZGGttYc65bbu7h_Y.roa File: AUGH_CwYiYaZGGttYc65bbu7h_Y.roa (raw, json) Hash identifier: yyf9m14tYOkRSdaaykdyhxSpA3bPid4GpOATaCEm3IM= Subject key identifier: 01:41:87:FC:2C:18:89:86:99:18:6B:6D:61:CE:B9:6D:BB:BB:87:F6 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7DA7591B2542C8BA44EA56E6F0B61AFD Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/AUGH_CwYiYaZGGttYc65bbu7h_Y.roa Signing time: Fri 02 Jan 2026 07:41:17 +0000 ROA not before: Fri 02 Jan 2026 07:41:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 188.240.73.0/24 maxlen: 24 193.19.108.0/24 maxlen: 24 194.242.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 23:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:a7:59:1b:25:42:c8:ba:44:ea:56:e6:f0:b6:1a:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 07:41:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=014187fc2c18898699186b6d61ceb96dbbbb87f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1d:48:ad:f1:5e:3f:e8:cc:2c:21:41:76:dd: 4a:58:42:50:26:02:f2:1e:d9:61:00:91:da:90:b2: 61:ee:8e:9f:b0:6f:09:b7:dd:dc:a2:dd:f3:9e:3c: 64:2c:00:f6:86:e3:d7:4d:33:8b:2c:75:14:89:83: e3:79:64:39:c8:d5:a4:09:8a:94:78:33:9d:c0:f2: 62:38:9a:cd:e8:7c:a9:8b:79:b2:34:97:f7:6b:24: 89:7e:c6:38:99:a8:3e:b1:0d:8b:83:fb:ab:04:5f: f6:7b:48:8e:ec:84:4c:52:a2:b0:bd:85:7a:28:e6: 3b:30:39:72:3c:cb:c0:1e:61:c2:96:c4:69:6a:b8: 7a:5d:74:57:1b:4f:2e:8f:f4:7c:7b:12:c4:37:86: 04:c4:d7:1c:f4:94:9a:96:58:7f:71:b9:d6:8a:24: 00:25:cf:c4:b0:8e:b6:9f:0d:e9:8f:85:1c:44:e2: cb:f5:92:ed:05:56:d7:1d:2e:00:dc:62:6e:b4:86: 0d:eb:6f:41:4d:46:47:c8:30:db:58:a1:1d:09:b9: 5e:06:f8:7a:2a:7d:42:88:cd:b4:ca:bd:6e:6d:26: af:f2:1a:88:1f:a4:84:11:1e:80:9b:e5:72:02:02: 7b:69:a2:db:c6:7f:c0:90:90:74:aa:a7:2d:f9:e7: fb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:41:87:FC:2C:18:89:86:99:18:6B:6D:61:CE:B9:6D:BB:BB:87:F6 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/AUGH_CwYiYaZGGttYc65bbu7h_Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.240.73.0/24 193.19.108.0/24 194.242.2.0/24 Signature Algorithm: sha256WithRSAEncryption 43:5b:2f:32:c0:4c:64:0b:e3:e5:26:ab:3a:27:15:77:db:18: 9a:7f:51:46:46:39:b7:d4:3b:75:b2:47:cb:66:72:38:55:a3: 42:ce:27:7a:76:20:86:6f:08:48:8a:49:c5:c8:ac:f6:85:98: 10:82:03:f9:cb:e6:28:ec:fe:f6:c2:5e:e3:94:ca:e6:95:b1: 5d:fd:a4:45:ed:a1:fa:80:6a:b7:3b:c2:16:09:64:53:4a:3f: 2a:b4:3c:a6:9c:e7:13:9c:f4:53:a3:eb:bd:eb:cd:05:c7:10: ac:16:35:9f:b2:0c:71:e5:61:2b:20:d6:e3:22:96:e8:ba:7f: 94:a3:36:72:d1:e3:e8:63:61:59:ce:21:57:5e:6f:a3:bc:9a: 5b:66:6d:75:5c:5e:eb:56:0c:62:6c:ac:c7:e3:7f:86:dc:88: 26:16:41:73:60:73:26:6c:ea:9a:d7:a4:ea:d3:b3:c9:75:fb: 50:9a:e5:b1:e3:63:37:83:8f:44:c1:b3:33:50:29:0d:39:28: 87:4f:7b:9e:5f:c8:54:30:52:04:9c:2f:c4:1e:ce:25:4c:dd: 8c:ab:f6:b9:3a:4f:08:87:d5:7e:66:c3:19:93:27:35:8d:2f: af:b1:b5:f4:e6:fa:4c:09:97:bd:c2:0b:c4:44:b5:a3:c8:06: 95:0a:4b:8e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9p1kbJULIukTqVubwthr9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDc0MTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTQxODdmYzJjMTg4OTg2OTkxODZiNmQ2MWNlYjk2ZGJiYmI4N2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4R1IrfFeP+jMLCFBdt1KWEJQJgLy HtlhAJHakLJh7o6fsG8Jt93cot3znjxkLAD2huPXTTOLLHUUiYPjeWQ5yNWkCYqU eDOdwPJiOJrN6Hypi3myNJf3aySJfsY4mag+sQ2Lg/urBF/2e0iO7IRMUqKwvYV6 KOY7MDlyPMvAHmHClsRparh6XXRXG08uj/R8exLEN4YExNcc9JSallh/cbnWiiQA Jc/EsI62nw3pj4UcROLL9ZLtBVbXHS4A3GJutIYN629BTUZHyDDbWKEdCbleBvh6 Kn1CiM20yr1ubSav8hqIH6SEER6Am+VyAgJ7aaLbxn/AkJB0qqct+ef7hwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAFBh/wsGImGmRhrbWHOuW27u4f2MB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvQVVHSF9Dd1lpWWFaR0d0dFljNjViYnU3aF9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAvPBJAwQA wRNsAwQAwvICMA0GCSqGSIb3DQEBCwUAA4IBAQBDWy8ywExkC+PlJqs6JxV32xia f1FGRjm31Dt1skfLZnI4VaNCzid6diCGbwhIiknFyKz2hZgQggP5y+Yo7P72wl7j lMrmlbFd/aRF7aH6gGq3O8IWCWRTSj8qtDymnOcTnPRTo+u9680FxxCsFjWfsgxx 5WErINbjIpboun+UozZy0ePoY2FZziFXXm+jvJpbZm11XF7rVgxibKzH43+G3Igm FkFzYHMmbOqa16Tq07PJdftQmuWx42M3g49EwbMzUCkNOSiHT3ueX8hUMFIEnC/E Hs4lTN2Mq/a5Ok8Ih9V+ZsMZkyc1jS+vsbX05vpMCZe9wgvERLWjyAaVCkuO -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:45 2026 by rpki-client