This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/AigJOVmk91sugmvhBV28DfHr9uY.roa File: AigJOVmk91sugmvhBV28DfHr9uY.roa (raw, json) Hash identifier: FSxnVUPo9yR+90FH9HDs0WUkaZbCnvLTff3dvJ/Kgmc= Subject key identifier: 02:28:09:39:59:A4:F7:5B:2E:82:6B:E1:05:5D:BC:0D:F1:EB:F6:E6 Certificate issuer: /CN=dc899c28664ee8194a64048e46c60c6e5f190c53 Certificate serial: 019B783511DF016411B036DC56333361DF21 Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/AigJOVmk91sugmvhBV28DfHr9uY.roa Signing time: Thu 01 Jan 2026 06:18:22 +0000 ROA not before: Thu 01 Jan 2026 06:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13173 IP address blocks: 185.70.156.0/22 maxlen: 24 213.167.64.0/19 maxlen: 24 213.167.64.0/24 maxlen: 24 213.167.67.0/24 maxlen: 24 213.167.69.0/24 maxlen: 24 213.167.72.0/24 maxlen: 24 213.167.74.0/23 maxlen: 23 213.167.77.0/24 maxlen: 24 213.167.78.0/24 maxlen: 24 213.167.80.0/23 maxlen: 23 213.167.82.0/23 maxlen: 23 213.167.82.0/24 maxlen: 24 213.167.91.0/24 maxlen: 24 213.167.93.0/24 maxlen: 24 213.167.94.0/23 maxlen: 23 2a00:f180::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:11:df:01:64:11:b0:36:dc:56:33:33:61:df:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53 Validity Not Before: Jan 1 06:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0228093959a4f75b2e826be1055dbc0df1ebf6e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b7:d1:3b:f1:06:95:99:e0:fe:05:1e:a9:10: 9d:2b:d4:0a:6f:09:ca:bf:bf:7c:13:2a:f3:40:02: bf:1f:7f:e2:94:75:d8:0a:16:9c:6a:f8:7e:00:71: 7e:85:ef:5f:91:d4:2b:99:92:a8:d2:5d:05:82:9c: dc:5f:2f:38:7a:2d:81:7d:8e:18:23:fd:0c:7c:32: 59:a0:5c:e0:a0:4e:31:4a:e3:72:30:fd:85:27:e2: 4c:82:ad:16:f2:7c:de:0d:bc:a8:98:76:07:0c:78: 4f:88:b7:53:da:1d:fa:7f:d9:41:da:f7:0b:b7:36: a3:a8:28:06:1f:4d:b6:fd:b9:da:aa:33:3e:92:0b: c3:d5:2e:0a:a3:ab:0b:5b:9b:a6:97:dc:30:20:79: df:c1:97:c1:e0:06:25:8d:21:47:47:bc:dc:dd:bd: 2a:8d:7b:6a:cb:3e:f2:ba:c4:0c:3d:f7:d1:3f:0f: 0c:b2:0e:22:8b:be:04:77:e6:4a:2c:b7:9f:ef:66: 76:b8:a9:cc:c8:5e:83:e8:13:d8:3b:bb:79:4e:d0: 96:49:00:2d:4a:10:0d:23:ce:32:a8:3a:2a:c0:ba: 61:3e:76:f3:e8:95:58:57:ca:06:82:9c:4b:63:6c: a1:33:fb:f5:13:8b:e4:b2:d5:07:18:46:41:79:22: 08:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:28:09:39:59:A4:F7:5B:2E:82:6B:E1:05:5D:BC:0D:F1:EB:F6:E6 X509v3 Authority Key Identifier: keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/AigJOVmk91sugmvhBV28DfHr9uY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.70.156.0/22 213.167.64.0/19 IPv6: 2a00:f180::/32 Signature Algorithm: sha256WithRSAEncryption 81:c1:4e:4d:7c:13:97:d4:07:eb:ab:9a:9f:a3:fb:cc:15:16: d6:0b:86:a6:46:bf:4d:70:58:ff:54:54:80:3c:6e:67:66:d2: 2b:bd:33:6d:e8:26:35:82:39:c8:76:e4:02:b0:57:93:9c:be: 0a:8d:f2:85:d5:0b:0c:78:e7:62:e2:a5:14:69:a9:3a:01:ea: 3e:12:50:a8:53:50:c7:2b:44:2c:b4:80:57:2b:a4:9e:6d:34: 66:77:08:80:04:4c:1e:c4:42:35:d5:9d:a7:41:a4:ad:a2:50: 03:76:3d:7a:56:f0:45:61:75:f5:df:d3:8c:16:9c:fd:df:42: a0:a1:c6:5d:a6:5c:a5:09:53:7b:fb:e7:e4:df:9b:8e:bb:f0: 64:ac:32:22:e7:1c:92:15:72:0a:9f:c0:cc:f5:6b:99:1c:8f: 81:67:14:72:a4:a9:9e:a4:72:89:e0:9a:ef:06:07:6e:d7:8f: 5e:d0:95:d5:1a:90:d4:63:46:b2:1b:f5:2a:93:d3:f3:46:7e: 97:77:77:08:df:b1:b1:e9:c8:62:a1:56:b5:ce:63:b5:aa:23: 50:74:3b:c7:45:c1:5f:0f:5e:46:03:a7:55:56:a1:38:6f:75: a2:b2:bd:0a:24:fe:1a:7a:68:26:27:a9:33:3a:29:0c:83:6e: c7:78:d5:1d -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4NRHfAWQRsDbcVjMzYd8hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjODk5YzI4NjY0ZWU4MTk0YTY0MDQ4ZTQ2YzYwYzZlNWYx OTBjNTMwHhcNMjYwMTAxMDYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjI4MDkzOTU5YTRmNzViMmU4MjZiZTEwNTVkYmMwZGYxZWJmNmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbfRO/EGlZng/gUeqRCdK9QKbwnK v798EyrzQAK/H3/ilHXYChacavh+AHF+he9fkdQrmZKo0l0FgpzcXy84ei2BfY4Y I/0MfDJZoFzgoE4xSuNyMP2FJ+JMgq0W8nzeDbyomHYHDHhPiLdT2h36f9lB2vcL tzajqCgGH022/bnaqjM+kgvD1S4Ko6sLW5uml9wwIHnfwZfB4AYljSFHR7zc3b0q jXtqyz7yusQMPffRPw8Msg4ii74Ed+ZKLLef72Z2uKnMyF6D6BPYO7t5TtCWSQAt ShANI84yqDoqwLphPnbz6JVYV8oGgpxLY2yhM/v1E4vkstUHGEZBeSIIOQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAIoCTlZpPdbLoJr4QVdvA3x6/bmMB8GA1UdIwQY MBaAFNyJnChmTugZSmQEjkbGDG5fGQxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81NmQ2YTgtMDc1Mi00Y2JkLTg4NDUt NTJmZTEwNTEzMTI5LzEvQWlnSk9WbWs5MXN1Z212aEJWMjhEZkhyOXVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny81NmQ2YTgtMDc1Mi00Y2JkLTg4NDUtNTJmZTEwNTEzMTI5 LzEvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuUacAwQF 1adAMA0EAgACMAcDBQAqAPGAMA0GCSqGSIb3DQEBCwUAA4IBAQCBwU5NfBOX1Afr q5qfo/vMFRbWC4amRr9NcFj/VFSAPG5nZtIrvTNt6CY1gjnIduQCsFeTnL4KjfKF 1QsMeOdi4qUUaak6Aeo+ElCoU1DHK0QstIBXK6SebTRmdwiABEwexEI11Z2nQaSt olADdj16VvBFYXX139OMFpz930KgocZdplylCVN7++fk35uOu/BkrDIi5xySFXIK n8DM9WuZHI+BZxRypKmepHKJ4JrvBgdu149e0JXVGpDUY0ayG/Uqk9PzRn6Xd3cI 37Gx6chioVa1zmO1qiNQdDvHRcFfD15GA6dVVqE4b3Wisr0KJP4aemgmJ6kzOikM g27HeNUd -----END CERTIFICATE-----Generated at Mon Jan 26 06:29:09 2026 by rpki-client