This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/AqF7HFvtEK5Lt5Hq5wrwLxyWgH4.roa File: AqF7HFvtEK5Lt5Hq5wrwLxyWgH4.roa (raw, json) Hash identifier: v3aNtWqDQ+gm/l1GrT3ixYGWyI0gFiM//s2FphaPWu4= Subject key identifier: 02:A1:7B:1C:5B:ED:10:AE:4B:B7:91:EA:E7:0A:F0:2F:1C:96:80:7E Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B7759614E4F3B67321C9B7A3F8B31EFDC Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/AqF7HFvtEK5Lt5Hq5wrwLxyWgH4.roa Signing time: Thu 01 Jan 2026 02:18:24 +0000 ROA not before: Thu 01 Jan 2026 02:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60149 IP address blocks: 86.107.73.0/24 maxlen: 24 93.113.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:61:4e:4f:3b:67:32:1c:9b:7a:3f:8b:31:ef:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02a17b1c5bed10ae4bb791eae70af02f1c96807e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:52:18:e4:44:76:b0:7c:44:9f:8a:ad:d4:91: 36:34:c1:a9:10:1b:1b:9b:b0:fd:0a:e5:73:13:97: 59:10:00:d2:28:9a:d5:de:c0:ff:e6:7f:de:c1:ed: fe:98:37:ff:3b:f5:80:4c:74:51:d2:4e:42:ac:7d: 5e:d0:f9:60:39:fd:a8:19:10:02:91:a8:4d:9a:cf: cc:fb:74:62:c3:22:91:12:d8:c8:fb:86:5e:d6:28: da:b2:4f:57:34:7c:ba:76:db:df:fb:a2:ce:e0:e4: e5:1e:5b:c8:9f:b7:07:bb:ba:5e:75:15:f4:0e:fc: 96:ef:80:04:18:fc:fc:64:93:e3:40:f6:38:1b:3a: b4:18:cb:15:41:4c:31:af:e6:cd:db:4f:99:95:17: 00:e7:27:ea:4c:90:28:ad:1f:ef:57:e3:48:ea:29: 60:7f:ae:42:4d:c6:d6:f5:71:c9:3b:75:bb:a4:7a: 78:c4:60:7e:26:92:92:9b:ef:06:2e:67:24:23:85: 2e:02:33:a0:9e:ad:45:62:b3:bd:f6:68:0c:61:4b: b2:12:ad:3d:30:12:6c:d4:a4:1b:a5:f1:ce:a9:fe: 1f:46:e4:66:fd:d9:50:6d:5b:4e:68:76:ac:6b:36: df:96:1c:06:6b:e9:7d:ab:62:dc:f9:c5:c1:36:28: b3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A1:7B:1C:5B:ED:10:AE:4B:B7:91:EA:E7:0A:F0:2F:1C:96:80:7E X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/AqF7HFvtEK5Lt5Hq5wrwLxyWgH4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.107.73.0/24 93.113.126.0/24 Signature Algorithm: sha256WithRSAEncryption b0:8b:43:61:0e:85:35:bb:fa:77:d5:04:77:35:f3:1d:78:85: e9:4a:97:bb:9f:1b:6e:af:4b:47:15:de:46:b6:d1:fc:c8:6c: cd:bc:c6:41:87:cf:81:3d:5e:e8:15:c6:31:e5:39:28:3b:1c: f4:5c:6f:7f:10:1e:4c:6a:a3:7c:87:d5:b1:81:20:6b:c8:0a: 1d:26:66:eb:ba:d4:94:6b:1f:1c:e3:39:f0:55:5f:c1:c2:d8: b5:6c:5d:ce:ab:54:7e:58:19:4a:84:3b:7e:dd:b9:64:f3:91: 31:87:38:01:c8:b4:9b:fa:70:c1:2c:da:ed:c3:75:d2:2c:a9: 39:c5:df:5f:30:24:1a:0a:e2:29:5d:e8:7c:8f:40:a5:06:6d: c7:95:ca:93:55:b8:32:4e:a1:75:7a:bf:97:d5:26:8b:80:aa: ec:05:41:bc:b1:62:8a:a2:af:51:e0:a9:9e:b3:e6:ac:95:9a: 14:a8:1b:cc:db:22:bd:d9:cc:62:5d:1a:cd:cb:7f:ca:2e:22: 0e:6c:fd:e6:cb:30:73:98:8b:95:fa:ec:28:ab:6d:e7:a0:5c: 14:9a:47:49:03:c8:27:e1:2a:5b:e2:98:19:59:c2:5f:48:7f: 6f:b9:fd:e1:81:37:a9:ef:44:a5:3a:6e:b8:ef:a3:1c:4f:ce: b0:db:64:3c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3WWFOTztnMhybej+LMe/cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmExN2IxYzViZWQxMGFlNGJiNzkxZWFlNzBhZjAyZjFjOTY4MDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFIY5ER2sHxEn4qt1JE2NMGpEBsb m7D9CuVzE5dZEADSKJrV3sD/5n/ewe3+mDf/O/WATHRR0k5CrH1e0PlgOf2oGRAC kahNms/M+3RiwyKREtjI+4Ze1ijask9XNHy6dtvf+6LO4OTlHlvIn7cHu7pedRX0 DvyW74AEGPz8ZJPjQPY4Gzq0GMsVQUwxr+bN20+ZlRcA5yfqTJAorR/vV+NI6ilg f65CTcbW9XHJO3W7pHp4xGB+JpKSm+8GLmckI4UuAjOgnq1FYrO99mgMYUuyEq09 MBJs1KQbpfHOqf4fRuRm/dlQbVtOaHasazbflhwGa+l9q2Lc+cXBNiizfwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFAKhexxb7RCuS7eR6ucK8C8cloB+MB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL0FxRjdIRnZ0RUs1THQ1SHE1d3J3THh5V2dINC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABWa0kD BABdcX4wDQYJKoZIhvcNAQELBQADggEBALCLQ2EOhTW7+nfVBHc18x14helKl7uf G26vS0cV3ka20fzIbM28xkGHz4E9XugVxjHlOSg7HPRcb38QHkxqo3yH1bGBIGvI Ch0mZuu61JRrHxzjOfBVX8HC2LVsXc6rVH5YGUqEO37duWTzkTGHOAHItJv6cMEs 2u3DddIsqTnF318wJBoK4ild6HyPQKUGbceVypNVuDJOoXV6v5fVJouAquwFQbyx Yoqir1HgqZ6z5qyVmhSoG8zbIr3ZzGJdGs3Lf8ouIg5s/ebLMHOYi5X67Cirbeeg XBSaR0kDyCfhKlvimBlZwl9If2+5/eGBN6nvRKU6brjvoxxPzrDbZDw= -----END CERTIFICATE-----Generated at Sun Jan 25 14:39:26 2026 by rpki-client