This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/AUxe3iOnW0R9FRzl8aepQlk_j-s.roa File: AUxe3iOnW0R9FRzl8aepQlk_j-s.roa (raw, json) Hash identifier: F/5QY2qH/5oxR7eNEMu85fTdScF+CggMDUwObVNbh98= Subject key identifier: 01:4C:5E:DE:23:A7:5B:44:7D:15:1C:E5:F1:A7:A9:42:59:3F:8F:EB Certificate issuer: /CN=93b474d05571df3d44f63cca21b40b6e12c392d9 Certificate serial: 019B79EC97D6EF5411D42D4A01B51FEC4DF4 Authority key identifier: 93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/AUxe3iOnW0R9FRzl8aepQlk_j-s.roa Signing time: Thu 01 Jan 2026 14:18:27 +0000 ROA not before: Thu 01 Jan 2026 14:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33925 IP address blocks: 31.14.8.0/24 maxlen: 24 193.189.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:97:d6:ef:54:11:d4:2d:4a:01:b5:1f:ec:4d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93b474d05571df3d44f63cca21b40b6e12c392d9 Validity Not Before: Jan 1 14:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=014c5ede23a75b447d151ce5f1a7a942593f8feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b6:03:d4:7f:7d:20:8b:2c:65:6a:be:21:2d: ba:2e:7b:7c:e6:33:47:32:d5:b4:91:2c:04:7b:f5: ed:86:bc:42:ca:f4:54:b2:a6:cb:ec:fc:b6:de:15: e5:2a:16:6b:87:44:68:8a:46:5f:e8:7d:52:46:bb: 79:16:fa:4a:80:db:e0:be:34:e0:ae:7d:c6:a8:05: 04:44:e2:f9:bb:98:9c:35:7e:c7:f3:80:9d:d3:b1: 55:5e:1d:cd:01:6e:5c:f0:9f:5e:43:da:a0:6a:ca: a8:be:a0:d0:38:9e:3e:16:22:1c:bc:5b:ee:5c:94: 4f:05:a8:36:ed:36:02:92:ed:a0:d8:8d:c8:03:18: 0d:a7:4d:d8:e1:7b:07:4b:5a:ce:07:7b:2c:fa:7d: d2:d0:3f:fa:ab:c1:e4:c2:c9:80:92:33:dd:41:93: 94:07:b9:e1:fc:fe:c1:96:55:93:2f:31:b9:9f:cf: b2:6a:3b:08:e5:4b:a3:31:c8:0d:e5:19:8c:64:f1: 28:77:18:78:d8:a3:90:4d:9e:dd:4e:9b:ef:e3:ad: 64:a6:78:fe:a6:03:8e:fb:59:36:72:f6:d1:70:1a: 2d:ef:f1:f5:e5:4f:cb:a8:87:ca:54:a0:3a:30:48: 90:fe:86:06:e9:5a:24:24:a0:4a:1c:69:2e:86:02: 87:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:4C:5E:DE:23:A7:5B:44:7D:15:1C:E5:F1:A7:A9:42:59:3F:8F:EB X509v3 Authority Key Identifier: keyid:93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/AUxe3iOnW0R9FRzl8aepQlk_j-s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.8.0/24 193.189.98.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:4c:1c:86:59:ed:ba:3c:73:b3:2c:0a:b1:27:c5:f6:2a:a1: 90:bc:45:18:09:b1:b2:0b:ea:ae:c0:d8:96:13:b9:ce:79:2c: 7f:7b:16:cd:68:36:63:d9:ff:5d:6a:ad:a3:1c:0b:0b:99:b4: bc:cf:36:3c:45:12:89:8f:1a:93:db:4c:9d:89:74:5d:89:fc: e3:34:e5:19:03:24:4f:59:e6:4b:5a:59:1b:ba:a9:19:39:3a: 9d:75:96:43:1d:17:1c:7d:af:a4:65:48:c3:a8:9b:03:0a:b1: 9f:1c:05:cd:c7:05:28:00:b0:d7:f3:ad:e3:ed:38:1e:a3:27: 11:06:b6:c9:c1:47:7d:05:30:14:52:4d:04:e4:a8:ce:bb:52: ed:03:63:09:f5:6f:ed:ef:99:c0:20:6b:d6:f6:18:ce:16:9c: c1:4b:86:18:b5:fd:9c:24:08:27:7d:e1:2b:b4:de:0f:94:89: 4f:09:6f:35:f1:76:e2:c5:f5:d6:5b:84:07:36:36:e9:66:04: cb:e2:b5:9c:97:c1:0f:0a:0f:ed:ad:3a:5f:17:36:6e:84:a3: d6:d5:a0:66:21:c9:ad:8a:9b:bf:4d:6b:8f:a2:ac:c5:94:6c: dd:4d:e6:89:27:20:ee:3b:4c:f7:90:e0:08:0c:7a:ab:58:1a: d7:ac:0c:01 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57JfW71QR1C1KAbUf7E30MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYjQ3NGQwNTU3MWRmM2Q0NGY2M2NjYTIxYjQwYjZlMTJj MzkyZDkwHhcNMjYwMTAxMTQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTRjNWVkZTIzYTc1YjQ0N2QxNTFjZTVmMWE3YTk0MjU5M2Y4ZmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LYD1H99IIssZWq+IS26Lnt85jNH MtW0kSwEe/XthrxCyvRUsqbL7Py23hXlKhZrh0RoikZf6H1SRrt5FvpKgNvgvjTg rn3GqAUEROL5u5icNX7H84Cd07FVXh3NAW5c8J9eQ9qgasqovqDQOJ4+FiIcvFvu XJRPBag27TYCku2g2I3IAxgNp03Y4XsHS1rOB3ss+n3S0D/6q8HkwsmAkjPdQZOU B7nh/P7BllWTLzG5n8+yajsI5UujMcgN5RmMZPEodxh42KOQTZ7dTpvv461kpnj+ pgOO+1k2cvbRcBot7/H15U/LqIfKVKA6MEiQ/oYG6VokJKBKHGkuhgKH2wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAFMXt4jp1tEfRUc5fGnqUJZP4/rMB8GA1UdIwQY MBaAFJO0dNBVcd89RPY8yiG0C24Sw5LZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazdSMDBGVngzejFFOWp6S0liUUxiaExEa3RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84ZGE2MjQtMzFjNS00NTA5LWJjNWEt MjA0OWY2YWJmZDlkLzEvQVV4ZTNpT25XMFI5RlJ6bDhhZXBRbGtfai1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84ZGE2MjQtMzFjNS00NTA5LWJjNWEtMjA0OWY2YWJmZDlk LzEvazdSMDBGVngzejFFOWp6S0liUUxiaExEa3RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHw4IAwQB wb1iMA0GCSqGSIb3DQEBCwUAA4IBAQCLTByGWe26PHOzLAqxJ8X2KqGQvEUYCbGy C+quwNiWE7nOeSx/exbNaDZj2f9daq2jHAsLmbS8zzY8RRKJjxqT20ydiXRdifzj NOUZAyRPWeZLWlkbuqkZOTqddZZDHRccfa+kZUjDqJsDCrGfHAXNxwUoALDX863j 7TgeoycRBrbJwUd9BTAUUk0E5KjOu1LtA2MJ9W/t75nAIGvW9hjOFpzBS4YYtf2c JAgnfeErtN4PlIlPCW818XbixfXWW4QHNjbpZgTL4rWcl8EPCg/trTpfFzZuhKPW 1aBmIcmtipu/TWuPoqzFlGzdTeaJJyDuO0z3kOAIDHqrWBrXrAwB -----END CERTIFICATE-----Generated at Sun Jan 25 20:50:19 2026 by rpki-client