This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/AoOT9bGlJWd-TIRNHpKTWvzqPSY.roa File: AoOT9bGlJWd-TIRNHpKTWvzqPSY.roa (raw, json) Hash identifier: Zi71VPuABO0kIOBrih/loFOATBl1klL+p6nG7AFF/d0= Subject key identifier: 02:83:93:F5:B1:A5:25:67:7E:4C:84:4D:1E:92:93:5A:FC:EA:3D:26 Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea Certificate serial: 019B7C12A444E257EB31656E59DA0EEA9733 Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/AoOT9bGlJWd-TIRNHpKTWvzqPSY.roa Signing time: Fri 02 Jan 2026 00:19:15 +0000 ROA not before: Fri 02 Jan 2026 00:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205686 IP address blocks: 213.190.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:a4:44:e2:57:eb:31:65:6e:59:da:0e:ea:97:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea Validity Not Before: Jan 2 00:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=028393f5b1a525677e4c844d1e92935afcea3d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a8:a1:4c:27:ae:01:a3:e8:0a:22:7f:af:2c: 3e:95:9f:b7:07:c6:ce:98:fd:8f:8e:d3:60:34:5f: 19:07:fe:d1:f0:5b:35:ee:a8:5b:ce:cd:db:3f:57: 50:78:1d:f7:8c:89:44:7c:57:dc:33:fd:80:bf:7b: f4:17:24:ab:df:21:b8:65:d3:d4:e7:2d:88:47:ef: 7f:57:16:82:bb:fb:cd:10:f7:92:e4:bd:94:6b:9b: 08:bd:aa:83:8d:54:cd:19:fa:92:32:a5:f7:f0:49: 07:14:ba:bf:36:fe:24:7d:1c:c7:ca:be:80:ec:22: 82:5c:6f:73:2f:df:e8:f8:10:55:15:6c:14:cc:fc: a8:6f:82:db:1f:f4:e3:cb:9d:44:73:f2:3f:bf:c4: e3:36:76:5a:a2:0b:c5:09:05:03:fc:9b:25:a7:59: f6:e6:47:91:03:6d:7f:4a:3e:e8:57:8b:c6:bc:8c: 4b:6e:7e:8f:0e:08:1f:0d:1f:33:8e:1d:ed:22:0c: 60:7b:60:5c:1b:a9:c4:d7:67:3f:45:fe:93:11:76: 7a:aa:02:82:94:c8:6a:d7:c0:4a:89:e6:a9:d0:ca: 27:cd:32:8c:d5:f0:22:b1:94:77:9f:43:65:ac:d9: 03:03:8f:ca:97:df:e4:61:bf:77:6f:e7:31:a1:f2: 6c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:83:93:F5:B1:A5:25:67:7E:4C:84:4D:1E:92:93:5A:FC:EA:3D:26 X509v3 Authority Key Identifier: keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/AoOT9bGlJWd-TIRNHpKTWvzqPSY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.190.34.0/24 Signature Algorithm: sha256WithRSAEncryption 03:3b:3c:94:47:06:79:c8:57:9d:56:c6:7d:51:b3:3a:0f:1b: 4b:ec:c3:21:18:8a:9c:7c:9e:83:6d:b4:78:27:96:81:25:c2: e7:a7:7f:6d:f8:3f:34:5f:f8:73:8f:75:62:db:68:cb:70:59: c1:0d:07:b3:69:4c:ab:e5:f3:ec:f5:95:90:59:6b:8f:dc:25: 33:9e:ab:d5:5f:69:82:77:76:91:b5:3e:12:81:24:ef:c3:be: 09:de:92:d1:da:37:3f:04:60:ab:1d:50:7b:5f:88:5d:4c:05: 70:9d:8c:2d:9a:5c:1d:ab:73:d6:58:fb:9c:b4:e1:63:f6:bd: be:cd:ac:08:da:81:72:71:08:99:42:5a:d4:54:e9:86:12:61: c4:8e:63:38:56:e6:a0:11:b7:f2:25:9e:9a:ff:db:0e:26:00: a8:9e:ea:52:e9:82:07:8c:ee:74:8b:f9:90:3f:0d:aa:de:97: 2d:f9:51:c3:1c:de:e8:06:a6:7d:06:ad:2b:07:a1:b5:6c:e2: 1e:33:9a:b5:1e:20:ef:10:d8:83:67:06:7e:a6:55:d2:2f:79: da:99:e6:91:ca:f4:bd:0f:37:ee:86:c3:87:0c:86:5a:b2:4e: 65:93:0d:ac:99:d8:d9:93:57:ea:1d:bb:e4:33:af:2b:d7:4a: 13:41:64:b0 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8EqRE4lfrMWVuWdoO6pczMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOTg3MjQ0NjExYjUyMzA1MzY3NDRiNmE4OWYwNDRmMzJm NDYyZWEwHhcNMjYwMTAyMDAxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjgzOTNmNWIxYTUyNTY3N2U0Yzg0NGQxZTkyOTM1YWZjZWEzZDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6ihTCeuAaPoCiJ/ryw+lZ+3B8bO mP2PjtNgNF8ZB/7R8Fs17qhbzs3bP1dQeB33jIlEfFfcM/2Av3v0FySr3yG4ZdPU 5y2IR+9/VxaCu/vNEPeS5L2Ua5sIvaqDjVTNGfqSMqX38EkHFLq/Nv4kfRzHyr6A 7CKCXG9zL9/o+BBVFWwUzPyob4LbH/Tjy51Ec/I/v8TjNnZaogvFCQUD/Jslp1n2 5keRA21/Sj7oV4vGvIxLbn6PDggfDR8zjh3tIgxge2BcG6nE12c/Rf6TEXZ6qgKC lMhq18BKieap0MonzTKM1fAisZR3n0NlrNkDA4/Kl9/kYb93b+cxofJsuwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFAKDk/WxpSVnfkyETR6Sk1r86j0mMB8GA1UdIwQY MBaAFPuYckRhG1IwU2dEtqifBE8y9GLqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS01aHlSR0ViVWpCVFowUzJxSjhFVHpMMFl1by5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAw LWJlNTgzMmQ1ZjdhYS8xL0FvT1Q5YkdsSldkLVRJUk5IcEtUV3Z6cVBTWS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAwLWJlNTgzMmQ1Zjdh YS8xLzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADVviIw DQYJKoZIhvcNAQELBQADggEBAAM7PJRHBnnIV51Wxn1RszoPG0vswyEYipx8noNt tHgnloElwuenf234PzRf+HOPdWLbaMtwWcENB7NpTKvl8+z1lZBZa4/cJTOeq9Vf aYJ3dpG1PhKBJO/DvgnektHaNz8EYKsdUHtfiF1MBXCdjC2aXB2rc9ZY+5y04WP2 vb7NrAjagXJxCJlCWtRU6YYSYcSOYzhW5qARt/Ilnpr/2w4mAKie6lLpggeM7nSL +ZA/Darely35UcMc3ugGpn0GrSsHobVs4h4zmrUeIO8Q2INnBn6mVdIvedqZ5pHK 9L0PN+6Gw4cMhlqyTmWTDayZ2NmTV+odu+QzryvXShNBZLA= -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:06 2026 by rpki-client