This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/aq077HDVuYpFz4tohOgQZVXtR0I.roa File: aq077HDVuYpFz4tohOgQZVXtR0I.roa (raw, json) Hash identifier: lmR3p1MzRx0IGSbTUTZO/Vwf3/td5VWtWsrVAx4InFM= Subject key identifier: 6A:AD:3B:EC:70:D5:B9:8A:45:CF:8B:68:84:E8:10:65:55:ED:47:42 Certificate issuer: /CN=494a8565276b4a251ba573dd6d5f5f878238ebd2 Certificate serial: 019B7C12A9BE3F31F4A063BAB199683DD7DC Authority key identifier: 49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/aq077HDVuYpFz4tohOgQZVXtR0I.roa Signing time: Fri 02 Jan 2026 00:19:16 +0000 ROA not before: Fri 02 Jan 2026 00:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211607 IP address blocks: 193.3.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:a9:be:3f:31:f4:a0:63:ba:b1:99:68:3d:d7:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=494a8565276b4a251ba573dd6d5f5f878238ebd2 Validity Not Before: Jan 2 00:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6aad3bec70d5b98a45cf8b6884e8106555ed4742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:af:0e:f0:76:13:eb:0f:bf:56:7b:6b:30:c6: 48:a9:11:f3:26:7f:07:96:ef:52:7f:d5:3e:01:7d: de:8b:6c:be:d1:60:c4:61:b9:1f:43:2c:f7:cb:90: 41:e8:cb:55:ba:db:ae:a7:7b:78:04:6a:87:8f:28: 46:33:47:44:80:38:9c:5d:49:17:04:55:18:48:83: 47:62:8d:35:79:cf:c5:b0:5c:c8:7a:7f:e8:72:db: 9f:6a:c3:f2:c4:d5:00:3e:98:5d:f6:a1:7a:3f:c5: d4:48:78:4f:76:8e:ba:7b:b0:c1:ff:9c:20:d5:ce: a3:84:fb:b6:52:1e:d7:38:4a:56:7a:39:e1:17:c6: 63:9c:6f:47:8e:77:d5:d0:c8:bc:07:82:a3:6c:07: 40:54:53:51:19:d8:7a:c3:f7:64:24:f6:fd:12:da: 4c:8a:fa:5d:06:50:7c:bb:ef:86:25:72:29:18:44: 98:57:47:54:f6:4e:dd:d3:ca:fc:4b:24:82:ed:10: 51:ab:0e:a2:59:b5:60:f6:e4:7e:bc:e8:a3:b8:9e: 4d:0a:8a:da:f7:11:6e:ac:05:5e:0e:02:a1:9a:3b: e6:88:eb:25:10:cf:64:e0:78:65:7f:16:d5:d0:6b: 59:f6:40:ca:ae:4d:69:c4:21:e9:d0:4b:3d:41:1f: b4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:AD:3B:EC:70:D5:B9:8A:45:CF:8B:68:84:E8:10:65:55:ED:47:42 X509v3 Authority Key Identifier: keyid:49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/aq077HDVuYpFz4tohOgQZVXtR0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.3.53.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:80:cb:be:0d:bf:de:e8:95:63:66:a8:82:74:58:40:48:ce: 80:93:20:94:24:c2:f5:73:1f:6e:a5:22:7d:71:75:b5:c5:4a: 4a:91:05:96:b4:d8:f5:7b:00:f7:01:5d:d2:40:db:32:a0:bc: b4:35:71:47:f3:8b:32:a9:17:6e:7a:42:32:77:73:c2:0d:c6: bc:0f:52:dd:19:40:f8:79:ba:7f:fd:56:3a:a6:2b:3f:14:cb: dd:a7:e5:19:cd:43:42:fa:62:47:0e:cc:fc:f2:e7:e0:51:2e: 8e:ea:3f:33:45:50:f5:e9:46:c0:06:b7:96:8a:25:19:69:6b: d1:dc:58:7f:22:2f:5f:c9:97:4b:20:10:eb:65:ec:85:2a:64: 70:70:40:0a:a1:33:14:33:1e:61:bd:78:ae:71:3b:a1:98:c2: d6:92:89:79:a2:14:cd:a5:93:94:98:52:46:07:b0:87:44:c6: 40:ad:63:47:45:5f:02:4b:23:d5:f2:08:a4:fc:f9:a4:38:cc: 20:00:2c:bc:14:66:58:78:dc:6a:3a:0c:8a:f6:ef:8a:79:f6: 6b:b3:2b:1a:66:38:b7:d8:3b:be:bb:a4:8f:76:12:a6:d2:7f: 63:ca:8d:e6:1b:31:cf:a5:42:61:4b:9c:43:70:5c:8d:c4:4d: d3:32:45:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Eqm+PzH0oGO6sZloPdfcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NGE4NTY1Mjc2YjRhMjUxYmE1NzNkZDZkNWY1Zjg3ODIz OGViZDIwHhcNMjYwMTAyMDAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWFkM2JlYzcwZDViOThhNDVjZjhiNjg4NGU4MTA2NTU1ZWQ0NzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt68O8HYT6w+/VntrMMZIqRHzJn8H lu9Sf9U+AX3ei2y+0WDEYbkfQyz3y5BB6MtVutuup3t4BGqHjyhGM0dEgDicXUkX BFUYSINHYo01ec/FsFzIen/octufasPyxNUAPphd9qF6P8XUSHhPdo66e7DB/5wg 1c6jhPu2Uh7XOEpWejnhF8ZjnG9HjnfV0Mi8B4KjbAdAVFNRGdh6w/dkJPb9EtpM ivpdBlB8u++GJXIpGESYV0dU9k7d08r8SySC7RBRqw6iWbVg9uR+vOijuJ5NCora 9xFurAVeDgKhmjvmiOslEM9k4HhlfxbV0GtZ9kDKrk1pxCHp0Es9QR+0jQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGqtO+xw1bmKRc+LaIToEGVV7UdCMB8GA1UdIwQY MBaAFElKhWUna0olG6Vz3W1fX4eCOOvSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1VxRlpTZHJTaVVicFhQZGJWOWZoNEk0NjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xOGEyZmQtMTVmNS00M2U2LWI3ODYt YzZkOWY5MTViZDhiLzEvYXEwNzdIRFZ1WXBGejR0b2hPZ1FaVlh0UjBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xOGEyZmQtMTVmNS00M2U2LWI3ODYtYzZkOWY5MTViZDhi LzEvU1VxRlpTZHJTaVVicFhQZGJWOWZoNEk0NjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQM1MA0G CSqGSIb3DQEBCwUAA4IBAQAbgMu+Db/e6JVjZqiCdFhASM6AkyCUJML1cx9upSJ9 cXW1xUpKkQWWtNj1ewD3AV3SQNsyoLy0NXFH84syqRduekIyd3PCDca8D1LdGUD4 ebp//VY6pis/FMvdp+UZzUNC+mJHDsz88ufgUS6O6j8zRVD16UbABreWiiUZaWvR 3Fh/Ii9fyZdLIBDrZeyFKmRwcEAKoTMUMx5hvXiucTuhmMLWkol5ohTNpZOUmFJG B7CHRMZArWNHRV8CSyPV8gik/PmkOMwgACy8FGZYeNxqOgyK9u+KefZrsysaZji3 2Du+u6SPdhKm0n9jyo3mGzHPpUJhS5xDcFyNxE3TMkVX -----END CERTIFICATE-----Generated at Mon Jan 26 03:09:03 2026 by rpki-client