This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/aQDw7Mo9EKwcZxqOVfhx0_yZdp4.roa File: aQDw7Mo9EKwcZxqOVfhx0_yZdp4.roa (raw, json) Hash identifier: ZuwT0G21oBkcWxGxdz/rJk2/q4wyN7jfVVKKPfYFCII= Subject key identifier: 69:00:F0:EC:CA:3D:10:AC:1C:67:1A:8E:55:F8:71:D3:FC:99:76:9E Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84 Certificate serial: 019B7E37209C4E7F6A352B1F4B0D019F535B Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/aQDw7Mo9EKwcZxqOVfhx0_yZdp4.roa Signing time: Fri 02 Jan 2026 10:18:20 +0000 ROA not before: Fri 02 Jan 2026 10:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200687 IP address blocks: 93.179.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:20:9c:4e:7f:6a:35:2b:1f:4b:0d:01:9f:53:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84 Validity Not Before: Jan 2 10:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6900f0ecca3d10ac1c671a8e55f871d3fc99769e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d2:2d:02:77:49:12:76:df:17:bb:e2:46:e9: aa:3e:6d:5c:0e:8e:35:62:f1:8c:aa:37:85:07:ed: 07:89:f7:d8:d2:d3:76:33:8e:f6:da:9f:b7:fb:00: 48:57:a0:02:e8:d2:d3:8e:29:bb:12:9d:7c:a6:0c: 62:a8:c9:d1:49:01:af:73:69:b9:b8:6b:2d:10:f8: 35:16:fa:d0:47:bb:e6:d7:91:6f:2e:43:63:7d:04: ad:51:02:17:8a:dc:7a:e5:28:30:bc:f9:03:9d:17: ab:72:bc:ab:6e:3f:4c:ee:35:43:11:e8:99:9f:dc: 00:f7:1f:05:da:12:41:36:9e:c2:96:34:de:d1:94: de:21:0e:24:84:54:d4:32:9f:bc:bb:ac:cb:97:95: 00:1d:cf:3b:6f:cc:29:2b:ed:c5:41:b9:6a:40:c3: bd:1a:94:a4:98:2f:5a:f0:fc:59:7a:2a:40:97:89: b5:4d:b4:f6:a3:1c:7a:39:3c:0d:9a:ea:02:5b:26: 51:d1:23:aa:bb:29:e0:9b:e7:9a:1b:d2:4b:ae:6d: 5e:15:17:8a:90:5f:dc:ea:0b:12:72:7c:d2:fd:6a: 1d:3d:89:83:1b:fb:17:5d:22:42:96:d9:69:e9:04: 92:68:9d:c2:00:30:b4:fa:01:74:ce:93:59:d9:3c: 7c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:00:F0:EC:CA:3D:10:AC:1C:67:1A:8E:55:F8:71:D3:FC:99:76:9E X509v3 Authority Key Identifier: keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/aQDw7Mo9EKwcZxqOVfhx0_yZdp4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.179.92.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:f1:5a:2d:32:59:09:9c:a7:db:43:02:5a:e4:8c:57:cb:0e: f5:05:ab:db:e9:e5:cf:47:ff:a6:cd:e2:a9:46:84:a0:16:4e: 76:d5:ec:68:c4:bb:3f:5e:cd:63:cf:f9:0e:b6:60:66:ec:b3: 36:89:c3:ef:40:53:ac:4d:69:01:e5:fb:d9:41:e7:f9:cd:43: 13:b1:82:8e:a8:e7:b7:1d:1a:eb:aa:c5:fa:07:23:95:34:5e: 67:cc:28:64:0a:4b:61:a4:b4:5f:47:91:a8:6f:12:29:1c:55: 12:11:99:62:85:b3:94:9a:1c:3d:4d:9a:70:a6:74:a2:44:b8: 76:be:f6:6d:28:3d:05:5c:ab:6e:e0:56:68:c7:4f:ed:1c:be: 18:ce:d9:17:fa:97:c7:58:a9:be:b9:c9:06:34:43:82:1b:29: 19:25:20:40:06:08:48:02:bd:59:32:8a:d8:8c:40:34:8b:da: b2:08:e2:48:38:4f:bf:a2:f7:ef:59:57:5d:b1:55:e5:d6:a4: 94:a2:dd:3b:b1:a9:33:80:02:83:ba:57:28:18:aa:72:b1:2c: 44:f6:be:c6:a5:42:75:05:9f:37:15:0f:5d:1d:bc:14:8b:83: 82:9d:d3:dd:f0:0e:12:82:eb:69:74:68:ab:f3:1a:71:c6:70: 73:b8:6c:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+NyCcTn9qNSsfSw0Bn1NbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy OWZmODQwHhcNMjYwMTAyMTAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTAwZjBlY2NhM2QxMGFjMWM2NzFhOGU1NWY4NzFkM2ZjOTk3NjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29ItAndJEnbfF7viRumqPm1cDo41 YvGMqjeFB+0HiffY0tN2M4722p+3+wBIV6AC6NLTjim7Ep18pgxiqMnRSQGvc2m5 uGstEPg1FvrQR7vm15FvLkNjfQStUQIXitx65SgwvPkDnRercryrbj9M7jVDEeiZ n9wA9x8F2hJBNp7CljTe0ZTeIQ4khFTUMp+8u6zLl5UAHc87b8wpK+3FQblqQMO9 GpSkmC9a8PxZeipAl4m1TbT2oxx6OTwNmuoCWyZR0SOquyngm+eaG9JLrm1eFReK kF/c6gsScnzS/WodPYmDG/sXXSJCltlp6QSSaJ3CADC0+gF0zpNZ2Tx80QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGkA8OzKPRCsHGcajlX4cdP8mXaeMB8GA1UdIwQY MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt MjhmYzc3OTY3NzYzLzEvYVFEdzdNbzlFS3djWnhxT1ZmaHgwX3laZHA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXbNcMA0G CSqGSIb3DQEBCwUAA4IBAQAO8VotMlkJnKfbQwJa5IxXyw71Bavb6eXPR/+mzeKp RoSgFk521exoxLs/Xs1jz/kOtmBm7LM2icPvQFOsTWkB5fvZQef5zUMTsYKOqOe3 HRrrqsX6ByOVNF5nzChkCkthpLRfR5GobxIpHFUSEZlihbOUmhw9TZpwpnSiRLh2 vvZtKD0FXKtu4FZox0/tHL4YztkX+pfHWKm+uckGNEOCGykZJSBABghIAr1ZMorY jEA0i9qyCOJIOE+/ovfvWVddsVXl1qSUot07sakzgAKDulcoGKpysSxE9r7GpUJ1 BZ83FQ9dHbwUi4OCndPd8A4SgutpdGir8xpxxnBzuGzm -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:52 2026 by rpki-client