This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/AAGe3xmEMwYBz4LTjNkftsQYcRI.roa File: AAGe3xmEMwYBz4LTjNkftsQYcRI.roa (raw, json) Hash identifier: H5MxTJchHq7g/9ds3SqpFphxMksUvLoDhqXB21YaWzg= Subject key identifier: 00:01:9E:DF:19:84:33:06:01:CF:82:D3:8C:D9:1F:B6:C4:18:71:12 Certificate issuer: /CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa Certificate serial: 019B7AC7B3435E1DA77009C4DBE9BD3CDEA6 Authority key identifier: 02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/AAGe3xmEMwYBz4LTjNkftsQYcRI.roa Signing time: Thu 01 Jan 2026 18:17:46 +0000 ROA not before: Thu 01 Jan 2026 18:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197889 IP address blocks: 193.110.83.0/24 maxlen: 24 2a11:440::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:b3:43:5e:1d:a7:70:09:c4:db:e9:bd:3c:de:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa Validity Not Before: Jan 1 18:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00019edf1984330601cf82d38cd91fb6c4187112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:52:7d:0a:17:e2:9a:88:c9:84:2b:cd:20:39: 14:83:b4:99:66:6c:b2:8c:fe:e8:f4:7c:5e:e2:a1: 1e:3a:95:8b:5d:05:84:c5:73:31:20:8f:c1:8e:2f: 9a:84:79:ca:00:a4:99:4f:58:cb:28:c8:be:8d:6d: 6e:91:ae:d3:bf:40:10:aa:ef:e0:9e:b4:38:2c:3a: e9:50:3a:be:40:83:ad:05:6e:2e:33:9f:8d:cb:ce: 4c:e4:94:60:9c:96:ea:98:18:ce:6e:98:13:5d:fb: 22:2e:81:17:92:7d:54:97:a5:f1:b9:16:69:97:50: 55:02:3a:56:fc:43:28:4a:76:e0:98:68:2a:e0:26: 2c:88:a6:02:ce:80:a0:ee:8f:bb:6c:65:16:dd:52: 43:9e:3a:ab:e5:b0:04:7e:e3:8d:28:2c:04:71:22: 89:00:a5:d7:b5:77:67:31:39:ee:64:e0:2e:ae:ea: 99:58:2d:c0:cb:a6:a2:5e:ae:69:3a:58:14:62:63: 02:25:e4:c4:e7:8c:d0:ad:b3:09:ad:3f:d8:5e:f4: b5:e5:c4:24:d7:b8:b7:82:5b:5c:83:34:c3:6c:33: f4:58:6e:ec:f5:ae:6b:3f:cd:d8:89:80:4c:8b:3c: 00:e4:cd:cc:c4:17:98:98:8b:28:77:65:12:3a:59: d8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:01:9E:DF:19:84:33:06:01:CF:82:D3:8C:D9:1F:B6:C4:18:71:12 X509v3 Authority Key Identifier: keyid:02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/AAGe3xmEMwYBz4LTjNkftsQYcRI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.110.83.0/24 IPv6: 2a11:440::/32 Signature Algorithm: sha256WithRSAEncryption 45:b7:29:f6:05:0d:dc:6c:b3:8a:27:35:36:b4:c3:17:d8:8f: 5a:0d:a1:1f:b7:6c:67:12:94:e5:2e:ca:de:6e:ed:f9:8f:2b: 51:93:bb:25:84:b4:98:87:7a:4a:5d:52:3e:d7:0e:4e:0b:85: 48:1d:a8:1e:fb:44:5d:a9:65:77:f0:de:51:3c:13:ea:43:f7: d0:60:aa:99:2b:57:4e:c4:7f:30:3e:38:5b:a8:1f:17:be:94: 00:5f:85:36:b4:a0:19:cc:b8:d8:0d:13:2f:ff:19:67:c9:83: a2:af:73:e8:24:e9:8d:2a:09:76:41:d1:ba:da:85:b2:86:41: d2:d0:2e:59:9c:c2:6f:3c:05:c0:94:c3:87:81:f8:b7:7f:c0: ef:ed:de:8f:f8:65:8e:0d:1a:08:86:8a:6f:89:5a:9c:78:54: df:e2:98:c0:ba:55:87:68:e3:30:36:a9:f7:21:7b:64:82:ff: 45:4b:46:ea:1f:10:9f:cd:7f:20:c5:ee:2b:ed:9e:a5:1b:b5: 3e:60:7f:71:ba:aa:39:7d:95:33:ef:ab:00:38:a0:7e:8d:8b: a3:d0:ed:f7:92:65:e7:4f:a6:69:ef:2f:50:ca:69:52:33:57: e4:1c:32:4a:0d:be:10:bf:f9:f8:de:99:c1:70:1f:9a:4e:15: d1:47:c0:f8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6x7NDXh2ncAnE2+m9PN6mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMWFiM2RkMjJjMzMzYTc5YjZmZjMwYWFiN2YyZTAzNmZj MzcwYWEwHhcNMjYwMTAxMTgxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDAxOWVkZjE5ODQzMzA2MDFjZjgyZDM4Y2Q5MWZiNmM0MTg3MTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1J9ChfimojJhCvNIDkUg7SZZmyy jP7o9Hxe4qEeOpWLXQWExXMxII/Bji+ahHnKAKSZT1jLKMi+jW1uka7Tv0AQqu/g nrQ4LDrpUDq+QIOtBW4uM5+Ny85M5JRgnJbqmBjObpgTXfsiLoEXkn1Ul6XxuRZp l1BVAjpW/EMoSnbgmGgq4CYsiKYCzoCg7o+7bGUW3VJDnjqr5bAEfuONKCwEcSKJ AKXXtXdnMTnuZOAuruqZWC3Ay6aiXq5pOlgUYmMCJeTE54zQrbMJrT/YXvS15cQk 17i3gltcgzTDbDP0WG7s9a5rP83YiYBMizwA5M3MxBeYmIsod2USOlnYLwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAABnt8ZhDMGAc+C04zZH7bEGHESMB8GA1UdIwQY MBaAFAIas90iwzOnm2/zCqt/LgNvw3CqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWhxejNTTERNNmViYl9NS3EzOHVBMl9EY0tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMGZiYjYtZGVhMi00YzdiLWFmYWQt NGFjZWM2NDc1NzJkLzEvQUFHZTN4bUVNd1lCejRMVGpOa2Z0c1FZY1JJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMGZiYjYtZGVhMi00YzdiLWFmYWQtNGFjZWM2NDc1NzJk LzEvQWhxejNTTERNNmViYl9NS3EzOHVBMl9EY0tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwW5TMA0E AgACMAcDBQAqEQRAMA0GCSqGSIb3DQEBCwUAA4IBAQBFtyn2BQ3cbLOKJzU2tMMX 2I9aDaEft2xnEpTlLsrebu35jytRk7slhLSYh3pKXVI+1w5OC4VIHage+0RdqWV3 8N5RPBPqQ/fQYKqZK1dOxH8wPjhbqB8XvpQAX4U2tKAZzLjYDRMv/xlnyYOir3Po JOmNKgl2QdG62oWyhkHS0C5ZnMJvPAXAlMOHgfi3f8Dv7d6P+GWODRoIhopviVqc eFTf4pjAulWHaOMwNqn3IXtkgv9FS0bqHxCfzX8gxe4r7Z6lG7U+YH9xuqo5fZUz 76sAOKB+jYuj0O33kmXnT6Zp7y9QymlSM1fkHDJKDb4Qv/n43pnBcB+aThXRR8D4 -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:03 2026 by rpki-client