This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/aa_Ih40uXAh0-lxd_NEnkgo8RkM.roa File: aa_Ih40uXAh0-lxd_NEnkgo8RkM.roa (raw, json) Hash identifier: IsNtMxhCoZd3uDk+IlQLd9P/14atA6ZCxyrxERfEdJQ= Subject key identifier: 69:AF:C8:87:8D:2E:5C:08:74:FA:5C:5D:FC:D1:27:92:0A:3C:46:43 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84C55FB7CF45F7B75219D976811991 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/aa_Ih40uXAh0-lxd_NEnkgo8RkM.roa Signing time: Fri 02 Jan 2026 16:22:46 +0000 ROA not before: Fri 02 Jan 2026 16:22:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56387 IP address blocks: 93.171.7.0/24 maxlen: 24 93.171.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:c5:5f:b7:cf:45:f7:b7:52:19:d9:76:81:19:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69afc8878d2e5c0874fa5c5dfcd127920a3c4643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2f:ce:a2:b1:77:9c:b1:90:6f:ec:ca:05:41: 33:2b:3e:e9:3c:a9:0c:e1:be:83:07:40:93:f8:8f: 0d:24:7c:07:59:87:43:ff:ff:fe:42:93:3a:d8:1b: 11:b1:a0:27:2e:86:68:0e:32:42:8f:54:a1:fd:3f: 87:61:04:00:cc:19:d1:85:51:31:a9:11:3c:7e:af: d7:bd:1f:ad:b3:53:a0:ca:91:74:68:ba:70:ba:9f: f8:04:a6:54:60:b7:9e:9e:d9:a6:66:6b:00:a8:c9: a1:e6:c5:d5:97:50:bc:de:a3:c2:30:d0:bf:13:e1: db:c8:02:b0:9b:4b:fe:dd:ed:14:67:48:20:ef:72: a4:5d:25:6b:06:c6:46:56:f3:6a:5d:8d:92:0c:af: 89:ce:26:a9:51:3e:6c:d0:2c:68:ae:44:63:53:eb: 0a:4c:fb:06:97:dd:df:2e:71:a3:36:35:38:c8:a4: ee:6f:b0:cd:49:0c:dc:1e:6c:37:47:13:3a:7f:72: f1:be:22:d0:5b:e6:7c:2b:7a:0e:fa:be:d6:93:98: 13:3b:1c:9b:3c:8b:9d:9d:4b:47:55:ce:cc:5a:5b: 23:f2:01:01:b3:07:90:b1:7a:3f:79:cf:72:2c:db: f0:78:d0:c3:00:d6:a2:aa:c8:80:0d:b9:6e:4b:cd: a9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AF:C8:87:8D:2E:5C:08:74:FA:5C:5D:FC:D1:27:92:0A:3C:46:43 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/aa_Ih40uXAh0-lxd_NEnkgo8RkM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.171.7.0-93.171.9.255 Signature Algorithm: sha256WithRSAEncryption 8d:c1:0b:d8:91:a0:e7:60:be:a7:5c:00:77:a7:da:6e:fa:12: f3:2c:c7:fc:28:40:60:4e:5c:4d:74:fb:f4:d4:83:64:56:c1: 75:ac:f1:06:3d:e8:17:9d:17:42:6d:5f:3a:80:25:1c:95:33: d8:db:ab:b5:cb:87:d9:82:bd:69:9a:01:54:a5:ad:a4:60:4d: 96:48:78:64:d5:a2:9a:bb:78:94:2f:cc:e9:e3:4c:e6:34:cb: c4:e0:f4:ed:ed:34:de:bb:05:ec:92:64:4c:26:ce:80:3a:77: da:8e:3e:63:c3:1b:24:e5:1e:08:cd:ca:23:f3:f6:e7:b2:36: 87:8b:69:54:8c:88:68:28:3e:d8:8d:a4:bc:7f:ee:74:50:f8: de:ae:27:b5:47:90:0c:43:8f:7d:a7:c4:0b:c2:8e:81:ee:07: 68:ed:1c:1a:79:89:64:c8:3a:03:af:54:c0:47:c7:7e:53:00: 47:27:72:ad:42:8e:65:22:9a:6b:bb:b2:a0:0a:ff:3c:38:45: 15:6a:0f:04:18:a9:f7:d9:93:6a:a6:d3:29:38:98:25:c0:89: 41:44:d1:b9:da:00:54:e6:21:d8:93:2a:c7:da:80:17:16:7a: 6a:9a:2f:3d:59:c5:50:1a:39:e0:66:39:ab:aa:cf:89:82:a5: 12:03:cd:54 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/hMVft89F97dSGdl2gRmRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWFmYzg4NzhkMmU1YzA4NzRmYTVjNWRmY2QxMjc5MjBhM2M0NjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC/OorF3nLGQb+zKBUEzKz7pPKkM 4b6DB0CT+I8NJHwHWYdD///+QpM62BsRsaAnLoZoDjJCj1Sh/T+HYQQAzBnRhVEx qRE8fq/XvR+ts1OgypF0aLpwup/4BKZUYLeentmmZmsAqMmh5sXVl1C83qPCMNC/ E+HbyAKwm0v+3e0UZ0gg73KkXSVrBsZGVvNqXY2SDK+JziapUT5s0CxorkRjU+sK TPsGl93fLnGjNjU4yKTub7DNSQzcHmw3RxM6f3LxviLQW+Z8K3oO+r7Wk5gTOxyb PIudnUtHVc7MWlsj8gEBsweQsXo/ec9yLNvweNDDANaiqsiADbluS82puQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGmvyIeNLlwIdPpcXfzRJ5IKPEZDMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvYWFfSWg0MHVYQWgwLWx4ZF9ORW5rZ284UmtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABdqwcD BAFdqwgwDQYJKoZIhvcNAQELBQADggEBAI3BC9iRoOdgvqdcAHen2m76EvMsx/wo QGBOXE10+/TUg2RWwXWs8QY96BedF0JtXzqAJRyVM9jbq7XLh9mCvWmaAVSlraRg TZZIeGTVopq7eJQvzOnjTOY0y8Tg9O3tNN67BeySZEwmzoA6d9qOPmPDGyTlHgjN yiPz9ueyNoeLaVSMiGgoPtiNpLx/7nRQ+N6uJ7VHkAxDj32nxAvCjoHuB2jtHBp5 iWTIOgOvVMBHx35TAEcncq1CjmUimmu7sqAK/zw4RRVqDwQYqffZk2qm0yk4mCXA iUFE0bnaAFTmIdiTKsfagBcWemqaLz1ZxVAaOeBmOauqz4mCpRIDzVQ= -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:00 2026 by rpki-client