This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/AENYJALANSjKlBoltdKemnCFKjs.roa
File: AENYJALANSjKlBoltdKemnCFKjs.roa (raw, json)
Hash identifier: s2OVjDuX6iIGr8lYPRWiO+GCWriVBdcRjsgW+JAkKFY=
Subject key identifier: 00:43:58:24:02:C0:35:28:CA:94:1A:25:B5:D2:9E:9A:70:85:2A:3B
Certificate issuer: /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Certificate serial: 019B7C122D5A012EF834DAB69599D4E84424
Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/AENYJALANSjKlBoltdKemnCFKjs.roa
Signing time: Fri 02 Jan 2026 00:18:44 +0000
ROA not before: Fri 02 Jan 2026 00:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213334
IP address blocks: 193.176.81.0/24 maxlen: 24
193.176.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:2d:5a:01:2e:f8:34:da:b6:95:99:d4:e8:44:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Validity
Not Before: Jan 2 00:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0043582402c03528ca941a25b5d29e9a70852a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:26:5d:37:f0:59:08:da:3b:f6:ac:5a:27:af:
08:21:c7:8f:49:e5:2d:d0:90:f0:a8:d2:80:e5:e9:
6f:e5:5a:03:4b:f7:f6:79:dc:00:84:f1:f1:a5:28:
cd:52:61:4f:af:82:25:30:db:b5:57:5e:94:15:3f:
84:ea:59:69:58:5b:2c:4e:c4:08:ad:12:01:64:4c:
d7:31:f6:aa:d1:cf:fd:71:ec:e3:62:3c:29:a3:e4:
09:5b:47:f4:cb:fc:34:3c:b4:87:9a:70:c5:1a:7e:
14:32:73:0a:46:92:bf:a3:f3:5d:ed:b2:d0:85:fa:
44:42:b0:a5:c0:8a:b3:b6:8d:1d:ee:04:cb:fa:78:
3f:27:d2:e4:8e:4e:bc:1e:2d:fe:07:93:87:b0:c2:
ef:7e:95:d9:71:41:0f:3a:95:eb:cf:42:df:7e:22:
1b:b9:23:fa:a1:1e:f1:fd:b7:19:b0:5d:3f:a7:1c:
25:38:dd:35:87:f1:25:49:8b:01:ad:9e:a3:df:bb:
ce:fb:0c:d1:a0:4b:f9:e8:da:dd:8f:0a:a8:58:f7:
d5:f8:31:51:1c:90:1c:28:b0:b9:ee:dc:38:b5:f4:
ed:13:fb:b9:3e:07:41:3c:ec:de:e9:3e:1c:9f:db:
14:f0:30:c2:08:5d:f0:7c:87:48:89:cf:c3:79:cf:
31:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:43:58:24:02:C0:35:28:CA:94:1A:25:B5:D2:9E:9A:70:85:2A:3B
X509v3 Authority Key Identifier:
keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/AENYJALANSjKlBoltdKemnCFKjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.81.0-193.176.82.255
Signature Algorithm: sha256WithRSAEncryption
14:52:1a:79:ba:e2:77:0c:22:7a:b5:af:23:12:d8:79:23:f8:
8b:e4:eb:2c:b6:78:c0:cf:30:ff:a1:cb:db:dd:83:c4:b7:fe:
fc:89:bb:db:d2:ad:d8:da:17:65:65:5f:16:49:91:a0:43:52:
39:a6:78:10:05:14:24:7d:36:8d:d9:1f:55:ee:c4:29:85:21:
ce:67:7b:d4:e3:d4:44:96:04:38:16:c4:45:35:5c:75:f4:8c:
c0:c9:6e:1e:fa:e2:6b:45:3d:d4:8f:fb:e6:d8:e2:1c:f3:e3:
78:25:91:32:dd:10:04:b3:ad:40:8d:a7:92:b5:e9:73:b2:f7:
8e:ed:cb:75:3a:8f:05:e1:96:88:c7:ea:50:c3:24:79:09:8b:
92:ef:02:47:de:8e:87:17:6c:07:99:20:fb:d8:3a:ee:8f:0f:
99:28:4d:b3:7f:2c:d6:6b:08:6a:f7:18:ec:45:f2:af:de:49:
f3:9c:7e:c9:ad:5f:43:ed:dc:41:8d:4a:48:34:20:56:cf:fc:
bb:18:65:e8:d9:93:67:3d:88:41:db:1a:d5:c7:27:3d:4d:d1:
e0:a8:c0:1d:8c:67:35:ee:56:ef:6f:e4:b4:7c:06:67:3e:3b:
75:e5:57:b6:ec:c9:ea:95:9d:f0:16:c2:5f:9a:c2:70:49:cf:
09:0b:1b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:24:52 2026 by rpki-client