This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/AoZyCGmwWYOvTcBoBxppvgjx5wI.roa File: AoZyCGmwWYOvTcBoBxppvgjx5wI.roa (raw, json) Hash identifier: JjEnLVWUXr5ybK4HzaNHUGz7wgv3mVaZHLhSRwmw5kY= Subject key identifier: 02:86:72:08:69:B0:59:83:AF:4D:C0:68:07:1A:69:BE:08:F1:E7:02 Certificate issuer: /CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5 Certificate serial: 019B7CEE2749F55F31763FF970A2ADDBD282 Authority key identifier: 22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/AoZyCGmwWYOvTcBoBxppvgjx5wI.roa Signing time: Fri 02 Jan 2026 04:19:00 +0000 ROA not before: Fri 02 Jan 2026 04:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204818 IP address blocks: 193.218.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:27:49:f5:5f:31:76:3f:f9:70:a2:ad:db:d2:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5 Validity Not Before: Jan 2 04:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0286720869b05983af4dc068071a69be08f1e702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e8:d6:99:18:0a:e9:f1:08:05:9d:79:b7:7f: 4a:9c:0e:be:df:f0:b4:92:e0:67:f9:e1:18:b9:7f: 74:5a:8a:3f:88:77:a8:e2:6f:fc:f8:ea:68:ea:d3: f2:aa:b5:3e:e9:91:0e:10:ec:ae:cc:66:ec:56:a0: e1:22:d7:e2:6a:8f:55:d1:cb:44:3d:34:60:d6:4d: 7c:6a:24:71:a5:c7:0e:1c:48:d7:07:b0:29:a9:b0: 04:20:6b:00:33:17:65:d7:e4:52:9e:64:e2:f1:e9: b5:75:84:71:4c:e1:0d:63:c3:89:f4:9e:62:65:ee: fd:95:dd:dd:b2:3b:cf:93:1c:9d:fa:2b:e1:02:28: 09:9e:36:b6:36:a6:4e:ec:df:12:a7:bd:c2:24:23: c8:ca:3b:ce:77:42:80:c4:5f:d0:18:a5:32:3d:da: 46:b4:6f:5b:82:29:3b:74:f5:fd:38:ed:e8:43:67: 0a:04:3c:0b:47:63:42:32:bd:6e:bf:a7:d9:27:b3: 4d:b0:38:df:6d:a6:fe:f0:cb:8a:4e:d5:f5:cd:22: 9d:1c:6c:3f:f8:6a:dd:50:be:69:0a:de:86:d2:32: 60:3d:f7:ff:6e:15:97:3f:74:ff:f6:f2:3f:0f:cb: 9a:aa:39:7e:5d:5e:b2:0d:72:0d:92:7d:ee:08:5b: a3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:86:72:08:69:B0:59:83:AF:4D:C0:68:07:1A:69:BE:08:F1:E7:02 X509v3 Authority Key Identifier: keyid:22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/AoZyCGmwWYOvTcBoBxppvgjx5wI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.218.120.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:f1:68:1c:47:38:69:45:61:ff:cf:9f:d6:d9:74:85:28:3d: 3a:59:7d:7f:fa:09:5d:59:99:ba:b1:fb:88:6d:94:af:69:89: 55:75:7c:da:88:86:73:d6:08:86:58:89:bc:3f:8b:ee:a4:17: 8f:7e:f3:4a:74:fd:09:ff:c1:6c:c2:b2:8f:ba:2b:61:92:77: f4:a2:ed:59:46:b7:11:63:c9:45:c9:19:5d:1b:a8:14:56:4e: b4:17:4f:48:09:f5:dd:78:37:e4:84:fa:8e:de:94:9e:3d:b8: 46:c2:4d:bc:7c:d1:e1:f9:15:34:51:31:8f:3c:ab:fe:c9:79: 23:00:48:27:76:30:4c:d8:f0:71:d2:c4:12:95:77:17:4c:bd: f2:07:7d:b9:19:c4:37:66:e9:fc:a0:32:2c:82:c5:85:0e:d6: 1a:28:76:29:80:92:43:8a:af:99:f9:2a:8c:ac:b2:76:ed:00: 42:d7:53:7e:99:70:d4:bb:e0:02:61:59:95:af:c2:0d:9f:b2: f8:60:ca:dd:6b:c5:60:3e:5c:20:47:c0:78:f8:bc:68:5f:4c: f1:3e:b0:e6:bd:f0:7f:49:49:cb:1a:31:0f:45:87:f0:ad:33: 01:a0:16:a2:92:cc:02:65:8d:7b:58:d0:05:fa:7e:a6:88:ea: 36:e6:f6:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87idJ9V8xdj/5cKKt29KCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZWViMjQyZmIwYWZhYTAzN2Q5Y2FmNTYwNGM2NTg3ZTQw ZGUzYjUwHhcNMjYwMTAyMDQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjg2NzIwODY5YjA1OTgzYWY0ZGMwNjgwNzFhNjliZTA4ZjFlNzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyejWmRgK6fEIBZ15t39KnA6+3/C0 kuBn+eEYuX90Woo/iHeo4m/8+Opo6tPyqrU+6ZEOEOyuzGbsVqDhItfiao9V0ctE PTRg1k18aiRxpccOHEjXB7ApqbAEIGsAMxdl1+RSnmTi8em1dYRxTOENY8OJ9J5i Ze79ld3dsjvPkxyd+ivhAigJnja2NqZO7N8Sp73CJCPIyjvOd0KAxF/QGKUyPdpG tG9bgik7dPX9OO3oQ2cKBDwLR2NCMr1uv6fZJ7NNsDjfbab+8MuKTtX1zSKdHGw/ +GrdUL5pCt6G0jJgPff/bhWXP3T/9vI/D8uaqjl+XV6yDXINkn3uCFuj7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAKGcghpsFmDr03AaAcaab4I8ecCMB8GA1UdIwQY MBaAFCLuskL7CvqgN9nK9WBMZYfkDeO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXU2eVF2c0stcUEzMmNyMVlFeGxoLVFONDdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mZDYyYzAtZTVkYi00ZDk0LWJhMGYt MjUxNTYyZjAwZmM1LzEvQW9aeUNHbXdXWU92VGNCb0J4cHB2Z2p4NXdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9mZDYyYzAtZTVkYi00ZDk0LWJhMGYtMjUxNTYyZjAwZmM1 LzEvSXU2eVF2c0stcUEzMmNyMVlFeGxoLVFONDdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwdp4MA0G CSqGSIb3DQEBCwUAA4IBAQCK8WgcRzhpRWH/z5/W2XSFKD06WX1/+gldWZm6sfuI bZSvaYlVdXzaiIZz1giGWIm8P4vupBePfvNKdP0J/8FswrKPuithknf0ou1ZRrcR Y8lFyRldG6gUVk60F09ICfXdeDfkhPqO3pSePbhGwk28fNHh+RU0UTGPPKv+yXkj AEgndjBM2PBx0sQSlXcXTL3yB325GcQ3Zun8oDIsgsWFDtYaKHYpgJJDiq+Z+SqM rLJ27QBC11N+mXDUu+ACYVmVr8INn7L4YMrda8VgPlwgR8B4+LxoX0zxPrDmvfB/ SUnLGjEPRYfwrTMBoBaikswCZY17WNAF+n6miOo25vaP -----END CERTIFICATE-----Generated at Sun Jan 25 15:01:11 2026 by rpki-client