This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/angqw-nGlqqGwVTjFIEuu4xT5yA.roa File: angqw-nGlqqGwVTjFIEuu4xT5yA.roa (raw, json) Hash identifier: YgYXRPPnKRS6It/sEF4b8AjwwB0Zk4ROK3MWdgBVRYs= Subject key identifier: 6A:78:2A:C3:E9:C6:96:AA:86:C1:54:E3:14:81:2E:BB:8C:53:E7:20 Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Certificate serial: 019B783528A695D7A6687A151B78B931DD0A Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/angqw-nGlqqGwVTjFIEuu4xT5yA.roa Signing time: Thu 01 Jan 2026 06:18:28 +0000 ROA not before: Thu 01 Jan 2026 06:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213220 IP address blocks: 203.189.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:28:a6:95:d7:a6:68:7a:15:1b:78:b9:31:dd:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Validity Not Before: Jan 1 06:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a782ac3e9c696aa86c154e314812ebb8c53e720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c8:de:f3:c8:60:44:80:6f:f8:04:68:05:57: 8f:3c:33:9a:c6:ba:5e:14:ee:fa:a3:8b:29:d1:03: 3c:f0:ae:30:d7:1f:e4:d7:a3:05:2b:3c:ae:ae:cc: 13:92:37:34:13:91:34:3d:bd:00:b2:39:6d:66:e2: b1:7f:0a:eb:c3:72:b8:02:c1:41:6f:82:87:0c:e8: b1:96:cf:b3:d5:22:a2:0c:01:69:f5:ff:e3:3f:f2: 22:80:d9:d9:5c:bd:fb:28:83:e1:b0:27:22:c4:f2: 02:a3:bb:81:46:44:b6:2e:9e:a6:a2:6c:65:3b:45: 55:16:89:87:1b:0f:99:9e:96:7f:f2:66:73:e9:ec: 96:70:a3:a3:76:58:02:46:83:83:f4:e2:87:9e:f2: c2:d1:e9:f5:8b:fb:48:10:bc:cd:41:d7:48:e1:ad: 07:b0:0e:1f:81:ab:aa:35:8f:aa:c8:aa:a4:f4:2e: d6:76:61:fb:b3:06:24:d8:4e:1c:f8:3b:1a:ed:66: 7a:82:56:60:47:85:92:9c:95:30:be:ff:dc:92:79: ac:c8:32:22:e3:97:8b:bd:11:84:99:6f:c4:cf:11: 61:a1:c5:6a:c8:f9:09:02:f9:25:c7:df:bc:d5:8b: 3e:6c:72:dd:31:af:fa:f8:d2:76:67:62:a3:30:32: c0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:78:2A:C3:E9:C6:96:AA:86:C1:54:E3:14:81:2E:BB:8C:53:E7:20 X509v3 Authority Key Identifier: keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/angqw-nGlqqGwVTjFIEuu4xT5yA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.189.233.0/24 Signature Algorithm: sha256WithRSAEncryption 97:ba:fd:b6:89:1a:de:ff:bc:64:02:2d:a5:95:f1:55:85:7e: c3:de:dc:f9:f1:bb:53:f0:ef:4f:dd:bb:0e:a0:11:0e:18:7b: 44:5a:8c:b9:05:8b:73:f6:00:d6:e3:2f:a4:ef:2c:f8:b2:11: 95:42:5e:a0:cf:39:52:78:78:19:41:75:d9:5d:51:5c:9e:c9: d7:3a:47:54:79:de:5a:a8:71:26:43:00:48:13:f1:b0:5e:4b: e7:25:97:99:70:59:5a:45:34:39:d4:85:a7:49:c4:79:c6:2a: a3:78:0c:ae:2a:50:fb:2b:39:db:54:1c:6f:0b:08:47:42:80: 1c:b1:00:c5:67:33:0d:50:bb:ee:48:d7:3d:8f:85:5d:45:fe: ca:88:69:fe:21:25:89:2e:88:57:2e:3f:31:4c:18:c5:af:4a: bd:0f:04:72:9c:83:e1:91:c7:47:af:fe:10:42:62:54:fb:ff: 72:e7:47:2a:0e:e6:23:d7:98:7e:3f:e6:ce:27:3d:3b:30:52: f6:d1:02:5c:50:83:03:1e:a7:e7:67:33:e0:c9:62:53:a7:71: 01:a8:96:8b:0a:c3:a6:b4:b4:c9:29:8d:0e:b3:65:09:e2:fc: e5:8a:a2:a1:8d:4f:03:c9:09:e5:77:54:bd:3b:a1:4d:e1:ba: 24:b1:ed:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NSimldemaHoVG3i5Md0KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1 NjU0MmQwHhcNMjYwMTAxMDYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTc4MmFjM2U5YzY5NmFhODZjMTU0ZTMxNDgxMmViYjhjNTNlNzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsje88hgRIBv+ARoBVePPDOaxrpe FO76o4sp0QM88K4w1x/k16MFKzyurswTkjc0E5E0Pb0AsjltZuKxfwrrw3K4AsFB b4KHDOixls+z1SKiDAFp9f/jP/IigNnZXL37KIPhsCcixPICo7uBRkS2Lp6momxl O0VVFomHGw+ZnpZ/8mZz6eyWcKOjdlgCRoOD9OKHnvLC0en1i/tIELzNQddI4a0H sA4fgauqNY+qyKqk9C7WdmH7swYk2E4c+Dsa7WZ6glZgR4WSnJUwvv/cknmsyDIi 45eLvRGEmW/EzxFhocVqyPkJAvklx9+81Ys+bHLdMa/6+NJ2Z2KjMDLACQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGp4KsPpxpaqhsFU4xSBLruMU+cgMB8GA1UdIwQY MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt YmQ1ZDNmMDBmYmIyLzEvYW5ncXctbkdscXFHd1ZUakZJRXV1NHhUNXlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy73pMA0G CSqGSIb3DQEBCwUAA4IBAQCXuv22iRre/7xkAi2llfFVhX7D3tz58btT8O9P3bsO oBEOGHtEWoy5BYtz9gDW4y+k7yz4shGVQl6gzzlSeHgZQXXZXVFcnsnXOkdUed5a qHEmQwBIE/GwXkvnJZeZcFlaRTQ51IWnScR5xiqjeAyuKlD7KznbVBxvCwhHQoAc sQDFZzMNULvuSNc9j4VdRf7KiGn+ISWJLohXLj8xTBjFr0q9DwRynIPhkcdHr/4Q QmJU+/9y50cqDuYj15h+P+bOJz07MFL20QJcUIMDHqfnZzPgyWJTp3EBqJaLCsOm tLTJKY0Os2UJ4vzliqKhjU8DyQnld1S9O6FN4bokse3C -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:32 2026 by rpki-client