This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/AOuKaEFuAus3hz3w0WC3j7I2mqc.roa File: AOuKaEFuAus3hz3w0WC3j7I2mqc.roa (raw, json) Hash identifier: YMOsepey7pZcM4gw70d5HgYaXkzZjfvaKQx2Aill38c= Subject key identifier: 00:EB:8A:68:41:6E:02:EB:37:87:3D:F0:D1:60:B7:8F:B2:36:9A:A7 Certificate issuer: /CN=8aaf78b69774a55507deabf8c4c96942e9ef0d20 Certificate serial: 019B7834AD07AC58D3ACC40088F788526A93 Authority key identifier: 8A:AF:78:B6:97:74:A5:55:07:DE:AB:F8:C4:C9:69:42:E9:EF:0D:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/AOuKaEFuAus3hz3w0WC3j7I2mqc.roa Signing time: Thu 01 Jan 2026 06:17:56 +0000 ROA not before: Thu 01 Jan 2026 06:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8735 IP address blocks: 193.227.203.0/24 maxlen: 24 194.59.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ad:07:ac:58:d3:ac:c4:00:88:f7:88:52:6a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8aaf78b69774a55507deabf8c4c96942e9ef0d20 Validity Not Before: Jan 1 06:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00eb8a68416e02eb37873df0d160b78fb2369aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6f:7f:da:62:b3:01:09:6e:5b:ab:19:59:b9: 94:25:fd:b0:1b:be:5a:0d:2a:c3:4c:7a:06:1b:72: 7b:aa:9b:91:f6:8c:61:6c:e9:91:9a:2b:7b:73:e5: 13:5a:8c:57:51:11:2f:1f:b5:62:41:6d:dd:e8:2f: fb:5b:5b:85:a5:2e:b8:2e:4f:ba:02:14:a7:88:b4: d6:f1:2a:ea:e1:d0:88:60:01:c2:d9:ad:65:76:4b: 34:d0:5e:65:c4:fb:3f:60:e1:73:88:a9:fc:54:26: f4:6d:c3:9d:b7:48:46:92:92:ae:2d:ff:fa:fa:c2: c4:4c:68:24:6d:c7:8e:bc:e8:45:c1:46:32:80:ba: be:18:2e:f5:0e:61:6a:5a:7d:e4:a2:6d:1f:3b:e0: dd:47:87:63:ba:17:db:dc:bf:e0:ac:c7:e9:4b:e6: 45:b1:89:a5:21:3f:28:97:c6:0d:14:19:ce:41:de: d3:0b:e1:a8:1b:c1:fc:ef:f0:15:ad:7f:fb:b3:d0: 6b:64:d2:9f:41:a7:78:d3:cc:41:fa:c3:03:37:66: 4b:c6:93:8c:ab:4d:cc:43:f4:9c:41:c5:95:64:3f: ca:64:0c:2d:b0:13:75:90:f1:d3:ff:cb:f0:9b:3a: 3b:0e:bb:3e:04:74:20:ef:5d:ae:64:87:db:d2:b6: 87:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EB:8A:68:41:6E:02:EB:37:87:3D:F0:D1:60:B7:8F:B2:36:9A:A7 X509v3 Authority Key Identifier: keyid:8A:AF:78:B6:97:74:A5:55:07:DE:AB:F8:C4:C9:69:42:E9:EF:0D:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/AOuKaEFuAus3hz3w0WC3j7I2mqc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.227.203.0/24 194.59.45.0/24 Signature Algorithm: sha256WithRSAEncryption 36:d3:cd:f2:18:02:35:35:ab:4b:f2:78:2d:f5:be:b3:65:db: 81:0f:7b:f2:ac:1e:3e:c2:22:73:39:12:37:3c:82:fb:14:b4: 0f:bc:c4:f7:cb:da:c7:17:fd:0c:ab:d0:e1:07:da:13:69:6e: 7c:fd:c5:ad:f2:59:ce:ae:0a:85:17:95:26:c3:c6:c9:c6:97: 0c:e3:c2:55:bb:25:d5:02:9e:20:2a:85:83:40:86:c1:11:6b: cb:5b:9d:81:9c:7d:35:1c:b6:43:44:7d:b8:5b:b9:da:9e:fd: 6a:f2:f1:39:38:90:1d:3d:03:44:1d:79:63:95:6b:40:d7:25: 3f:47:94:fd:93:3d:61:b6:79:7b:91:02:f1:09:4d:0a:cb:e6: 92:af:ac:e9:94:a7:a9:3b:96:09:36:6c:2b:3f:cc:5b:3b:d5: fa:c8:15:d8:1f:ff:20:0d:bf:78:d5:bd:e5:bb:e9:1a:3a:49: 5e:39:18:b4:10:1d:04:ef:f8:3d:f3:2d:65:98:47:9c:94:36: 47:43:89:07:b4:68:b6:2e:68:4d:bc:0c:56:e6:4c:b3:13:42: 82:b6:08:11:e9:ef:1e:2d:9b:e1:04:6e:f6:6e:d7:11:eb:eb: 1e:f1:27:92:cb:82:0d:13:f8:75:4f:6a:e3:b0:01:ab:3b:62: 26:d5:f2:c7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NK0HrFjTrMQAiPeIUmqTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYWY3OGI2OTc3NGE1NTUwN2RlYWJmOGM0Yzk2OTQyZTll ZjBkMjAwHhcNMjYwMTAxMDYxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGViOGE2ODQxNmUwMmViMzc4NzNkZjBkMTYwYjc4ZmIyMzY5YWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG9/2mKzAQluW6sZWbmUJf2wG75a DSrDTHoGG3J7qpuR9oxhbOmRmit7c+UTWoxXUREvH7ViQW3d6C/7W1uFpS64Lk+6 AhSniLTW8Srq4dCIYAHC2a1ldks00F5lxPs/YOFziKn8VCb0bcOdt0hGkpKuLf/6 +sLETGgkbceOvOhFwUYygLq+GC71DmFqWn3kom0fO+DdR4djuhfb3L/grMfpS+ZF sYmlIT8ol8YNFBnOQd7TC+GoG8H87/AVrX/7s9BrZNKfQad408xB+sMDN2ZLxpOM q03MQ/ScQcWVZD/KZAwtsBN1kPHT/8vwmzo7Drs+BHQg712uZIfb0raHwwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFADrimhBbgLrN4c98NFgt4+yNpqnMB8GA1UdIwQY MBaAFIqveLaXdKVVB96r+MTJaULp7w0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXE5NHRwZDBwVlVIM3F2NHhNbHBRdW52RFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS83OTczOTAtODFkNC00YzVkLWFiNzEt NzA4ODU2OGM1MWMwLzEvQU91S2FFRnVBdXMzaHozdzBXQzNqN0kybXFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS83OTczOTAtODFkNC00YzVkLWFiNzEtNzA4ODU2OGM1MWMw LzEvaXE5NHRwZDBwVlVIM3F2NHhNbHBRdW52RFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwePLAwQA wjstMA0GCSqGSIb3DQEBCwUAA4IBAQA2083yGAI1NatL8ngt9b6zZduBD3vyrB4+ wiJzORI3PIL7FLQPvMT3y9rHF/0Mq9DhB9oTaW58/cWt8lnOrgqFF5Umw8bJxpcM 48JVuyXVAp4gKoWDQIbBEWvLW52BnH01HLZDRH24W7nanv1q8vE5OJAdPQNEHXlj lWtA1yU/R5T9kz1htnl7kQLxCU0Ky+aSr6zplKepO5YJNmwrP8xbO9X6yBXYH/8g Db941b3lu+kaOkleORi0EB0E7/g98y1lmEeclDZHQ4kHtGi2LmhNvAxW5kyzE0KC tggR6e8eLZvhBG72btcR6+se8SeSy4INE/h1T2rjsAGrO2Im1fLH -----END CERTIFICATE-----Generated at Mon Jan 26 02:07:18 2026 by rpki-client