This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/AJnTsJ9Hsdz9FRUZmoA2pnIaA0k.roa File: AJnTsJ9Hsdz9FRUZmoA2pnIaA0k.roa (raw, json) Hash identifier: aMrXNnfsfrFl0TcjMNjetoIVnMeF1PUboeHt3ruERME= Subject key identifier: 00:99:D3:B0:9F:47:B1:DC:FD:15:15:19:9A:80:36:A6:72:1A:03:49 Certificate issuer: /CN=da0589dce63981870a1850906c8c2d1d96740096 Certificate serial: 019B7A5B77C239CE808E66F92DE331905273 Authority key identifier: DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/AJnTsJ9Hsdz9FRUZmoA2pnIaA0k.roa Signing time: Thu 01 Jan 2026 16:19:33 +0000 ROA not before: Thu 01 Jan 2026 16:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203532 IP address blocks: 31.43.174.0/23 maxlen: 23 31.43.174.0/24 maxlen: 24 31.43.175.0/24 maxlen: 24 177.222.64.0/19 maxlen: 19 177.222.64.0/20 maxlen: 20 177.222.64.0/21 maxlen: 21 177.222.72.0/21 maxlen: 21 177.222.80.0/22 maxlen: 22 177.222.84.0/22 maxlen: 22 177.222.88.0/24 maxlen: 24 177.222.89.0/24 maxlen: 24 177.222.90.0/24 maxlen: 24 177.222.91.0/24 maxlen: 24 177.222.92.0/24 maxlen: 24 2a13:7500::/36 maxlen: 36 2a13:7500::/48 maxlen: 48 2a13:7500:200::/40 maxlen: 40 2a13:7500:241::/48 maxlen: 48 2a13:7500:242::/48 maxlen: 48 2a13:7500:248::/48 maxlen: 48 2a13:7500:320::/44 maxlen: 44 2a13:7500:8100::/44 maxlen: 44 2a13:7500:8100::/48 maxlen: 48 2a13:7500:8101::/48 maxlen: 48 2a13:7500:8102::/48 maxlen: 48 2a13:7500:8103::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:77:c2:39:ce:80:8e:66:f9:2d:e3:31:90:52:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0589dce63981870a1850906c8c2d1d96740096 Validity Not Before: Jan 1 16:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0099d3b09f47b1dcfd1515199a8036a6721a0349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:61:3a:bb:ef:22:c3:9e:70:d1:bf:ff:6a:d8: 75:64:75:97:ae:cf:af:c4:45:ab:c0:84:78:e4:a7: 65:19:83:6c:43:d4:45:9c:d7:21:8a:54:09:fe:bb: 88:ba:a5:9a:25:eb:d9:f6:38:d1:79:28:59:08:ea: de:b0:37:03:55:a7:ef:b9:82:c3:fb:93:51:a8:7c: cd:90:49:68:14:ea:0e:b3:69:d2:72:33:db:63:40: 5a:6e:f1:05:37:38:fd:18:60:fe:7d:12:43:c7:23: 22:eb:9d:f7:52:0b:b1:92:59:d9:a7:f8:40:89:48: ec:24:61:b9:e0:89:07:36:7f:45:96:dc:2f:00:0f: ee:a3:27:8d:da:87:86:22:0b:60:60:3d:2f:99:71: 38:e8:dd:f2:63:75:2a:ad:06:1d:3d:99:f8:f2:dc: b1:fb:a7:4c:23:70:b0:cb:95:a3:9c:37:b7:41:f6: fb:d6:f0:5f:4d:26:6f:e5:de:ca:24:9d:24:97:98: 38:90:f6:05:cf:83:f8:73:3e:aa:43:8b:17:72:e7: 27:8d:92:86:4d:be:52:10:ff:0d:c8:2f:af:2f:11: 1f:e0:b7:51:27:e4:6c:4a:1e:24:43:f9:5b:3d:05: db:31:a9:c2:4d:80:3b:5b:b5:b8:5a:97:3a:ce:2f: 48:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:99:D3:B0:9F:47:B1:DC:FD:15:15:19:9A:80:36:A6:72:1A:03:49 X509v3 Authority Key Identifier: keyid:DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/AJnTsJ9Hsdz9FRUZmoA2pnIaA0k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.43.174.0/23 177.222.64.0/19 IPv6: 2a13:7500::/36 2a13:7500:8100::/44 Signature Algorithm: sha256WithRSAEncryption 87:c6:99:0a:18:8d:0b:3d:5e:66:3b:2c:6f:38:51:06:68:12: 2c:76:e7:09:43:11:92:01:e2:66:d8:44:60:3f:71:ed:28:c9: d9:2b:1e:22:55:00:b2:94:f5:e3:78:d9:ba:3d:78:a4:ee:35: 44:8b:3d:ed:2f:c4:53:18:3a:07:b5:50:72:e1:b3:ea:cb:43: d2:83:eb:0c:36:96:f0:8f:7a:23:47:e3:ec:24:f2:b5:d2:df: 86:5f:22:33:c1:69:bb:82:76:5d:86:ed:fa:e8:8d:b1:4a:1d: b9:1e:85:a4:fc:13:28:92:88:dd:9a:0e:50:fe:85:5b:50:e5: 05:35:5f:c8:43:61:97:78:da:53:f0:3a:a6:fb:82:46:c9:b2: 31:6d:c5:87:8e:78:59:27:1f:d2:1d:6a:81:1d:b4:45:c3:28: ec:9d:a2:41:86:29:09:e9:5c:2e:42:ec:7d:74:45:3c:5c:6f: a6:e9:f4:6c:b8:72:88:09:cc:3e:c0:3a:d0:11:fe:19:38:d6: bf:02:d7:f2:cd:90:73:33:66:1b:7d:a5:cd:45:bb:80:06:0c: b6:94:20:6a:4a:20:d6:a0:06:6b:ff:d6:54:4a:25:df:b0:36: 25:57:fc:66:78:ac:dd:11:4c:1f:75:01:98:64:cd:02:e1:71: 98:be:36:0f -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt6W3fCOc6Ajmb5LeMxkFJzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMDU4OWRjZTYzOTgxODcwYTE4NTA5MDZjOGMyZDFkOTY3 NDAwOTYwHhcNMjYwMTAxMTYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDk5ZDNiMDlmNDdiMWRjZmQxNTE1MTk5YTgwMzZhNjcyMWEwMzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmE6u+8iw55w0b//ath1ZHWXrs+v xEWrwIR45KdlGYNsQ9RFnNchilQJ/ruIuqWaJevZ9jjReShZCOresDcDVafvuYLD +5NRqHzNkEloFOoOs2nScjPbY0BabvEFNzj9GGD+fRJDxyMi6533UguxklnZp/hA iUjsJGG54IkHNn9FltwvAA/uoyeN2oeGIgtgYD0vmXE46N3yY3UqrQYdPZn48tyx +6dMI3Cwy5WjnDe3Qfb71vBfTSZv5d7KJJ0kl5g4kPYFz4P4cz6qQ4sXcucnjZKG Tb5SEP8NyC+vLxEf4LdRJ+RsSh4kQ/lbPQXbManCTYA7W7W4Wpc6zi9IiwIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFACZ07CfR7Hc/RUVGZqANqZyGgNJMB8GA1UdIwQY MBaAFNoFidzmOYGHChhQkGyMLR2WdACWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdXSjNPWTVnWWNLR0ZDUWJJd3RIWlowQUpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82MzI2YmItYmEzMy00MzM5LWI4YzYt MTRlM2MyMDE3OTY5LzEvQUpuVHNKOUhzZHo5RlJVWm1vQTJwbklhQTBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC82MzI2YmItYmEzMy00MzM5LWI4YzYtMTRlM2MyMDE3OTY5 LzEvMmdXSjNPWTVnWWNLR0ZDUWJJd3RIWlowQUpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTASBAIAATAMAwQBHyuuAwQF sd5AMBcEAgACMBEDBgQqE3UAAAMHBCoTdQCBADANBgkqhkiG9w0BAQsFAAOCAQEA h8aZChiNCz1eZjssbzhRBmgSLHbnCUMRkgHiZthEYD9x7SjJ2SseIlUAspT143jZ uj14pO41RIs97S/EUxg6B7VQcuGz6stD0oPrDDaW8I96I0fj7CTytdLfhl8iM8Fp u4J2XYbt+uiNsUoduR6FpPwTKJKI3ZoOUP6FW1DlBTVfyENhl3jaU/A6pvuCRsmy MW3Fh454WScf0h1qgR20RcMo7J2iQYYpCelcLkLsfXRFPFxvpun0bLhyiAnMPsA6 0BH+GTjWvwLX8s2QczNmG32lzUW7gAYMtpQgakog1qAGa//WVEol37A2JVf8Znis 3RFMH3UBmGTNAuFxmL42Dw== -----END CERTIFICATE-----Generated at Mon Jan 26 02:07:36 2026 by rpki-client