This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/aJedP80vMINu1NAowpUIlCicd7A.roa File: aJedP80vMINu1NAowpUIlCicd7A.roa (raw, json) Hash identifier: xNb3NKZjro39aj2cJlh+Qm4X9UDfgL/pDQnE2wrTJ84= Subject key identifier: 68:97:9D:3F:CD:2F:30:83:6E:D4:D0:28:C2:95:08:94:28:9C:77:B0 Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b Certificate serial: 019B78356335932D6C884E4005622E7D793F Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/aJedP80vMINu1NAowpUIlCicd7A.roa Signing time: Thu 01 Jan 2026 06:18:43 +0000 ROA not before: Thu 01 Jan 2026 06:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203974 IP address blocks: 193.56.24.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:63:35:93:2d:6c:88:4e:40:05:62:2e:7d:79:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b Validity Not Before: Jan 1 06:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68979d3fcd2f30836ed4d028c2950894289c77b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:01:35:3e:e6:f7:b8:ef:1f:d2:f4:46:8d:23: 43:47:73:d9:99:ea:a5:08:31:c7:b5:a6:13:80:45: 9a:d7:8a:26:b6:5b:df:22:99:0e:f9:d2:f7:77:de: c9:3d:6b:c4:16:7b:8a:ba:1e:30:c7:66:cb:3d:d9: 03:75:ef:05:8d:86:7d:0a:df:e4:b1:2e:d2:7e:33: bd:4c:cb:a2:2b:3d:87:ce:fc:66:d7:0a:e5:e6:79: 84:01:67:cd:ab:95:f5:0f:f8:b1:8a:e6:22:48:5a: a5:40:a5:eb:ea:ae:61:d9:c6:fa:01:15:73:c0:c9: 6b:3f:86:30:24:5f:14:47:a2:88:94:61:d5:4d:bd: 76:12:5d:8c:29:ba:2c:4f:94:e6:17:34:ef:bb:19: 46:06:f9:01:de:cd:2d:e1:98:c8:74:db:55:0c:47: 1d:ad:7a:a3:50:c6:69:9c:fd:7a:19:01:95:7f:72: 42:91:be:2f:bf:80:62:99:1f:89:e7:91:31:77:05: f5:ee:87:17:f0:f2:68:6e:0d:5a:ac:c7:17:9e:90: 0e:ef:46:80:95:38:7f:66:e4:a8:43:00:8a:2c:a6: 0f:c2:4c:f3:af:66:85:40:1c:bf:6d:be:d4:44:a5: dd:61:d8:da:44:26:2b:3f:34:5d:51:e1:6b:c3:8e: 97:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:97:9D:3F:CD:2F:30:83:6E:D4:D0:28:C2:95:08:94:28:9C:77:B0 X509v3 Authority Key Identifier: keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/aJedP80vMINu1NAowpUIlCicd7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.56.24.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:23:99:eb:aa:97:1b:f4:55:e3:89:04:dd:86:6f:0b:31:4a: 73:3c:06:65:8f:71:4b:9b:e9:a2:05:2d:ee:30:88:11:a6:18: 2e:66:a3:86:86:17:a0:bc:d1:b8:97:b3:71:04:99:5a:28:94: 14:19:3e:a4:56:6a:b4:ab:b1:2a:06:42:af:16:d7:ac:11:fb: 5a:1b:60:f2:c2:cf:93:8c:26:40:86:f4:74:3e:79:0e:69:ba: be:c1:bc:fa:1c:3b:b3:13:63:2e:2a:39:8e:58:c2:1e:49:c0: e2:bc:33:23:b1:f7:e2:2e:2f:3c:b0:80:30:73:0c:6d:92:78: 09:0e:41:2c:69:1e:1f:be:20:e3:1b:91:31:95:17:10:20:60: 2f:7d:0d:f0:57:25:fa:6f:62:e4:05:c1:17:7f:ef:3e:6b:70: 23:cd:26:8b:3e:01:e8:34:50:a2:10:75:fe:ed:d0:23:de:09: 96:df:d2:ed:be:14:4a:e9:04:64:a5:24:2e:58:40:24:c3:e6: 44:6b:cd:98:64:18:10:43:3a:5f:21:d6:6c:08:41:73:0c:67: 7d:58:ff:f3:fd:23:86:ec:1e:70:12:e0:fa:01:00:96:33:20: dc:73:a1:11:e4:03:e9:1a:f6:f6:5a:f0:12:17:21:f0:93:6a: 62:e3:c1:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NWM1ky1siE5ABWIufXk/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl NzczNWIwHhcNMjYwMTAxMDYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODk3OWQzZmNkMmYzMDgzNmVkNGQwMjhjMjk1MDg5NDI4OWM3N2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwE1Pub3uO8f0vRGjSNDR3PZmeql CDHHtaYTgEWa14omtlvfIpkO+dL3d97JPWvEFnuKuh4wx2bLPdkDde8FjYZ9Ct/k sS7SfjO9TMuiKz2Hzvxm1wrl5nmEAWfNq5X1D/ixiuYiSFqlQKXr6q5h2cb6ARVz wMlrP4YwJF8UR6KIlGHVTb12El2MKbosT5TmFzTvuxlGBvkB3s0t4ZjIdNtVDEcd rXqjUMZpnP16GQGVf3JCkb4vv4BimR+J55ExdwX17ocX8PJobg1arMcXnpAO70aA lTh/ZuSoQwCKLKYPwkzzr2aFQBy/bb7URKXdYdjaRCYrPzRdUeFrw46XgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGiXnT/NLzCDbtTQKMKVCJQonHewMB8GA1UdIwQY MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt ZWVkZDk0ZWMxMjhjLzEvYUplZFA4MHZNSU51MU5Bb3dwVUlsQ2ljZDdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwTgYMA0G CSqGSIb3DQEBCwUAA4IBAQBqI5nrqpcb9FXjiQTdhm8LMUpzPAZlj3FLm+miBS3u MIgRphguZqOGhhegvNG4l7NxBJlaKJQUGT6kVmq0q7EqBkKvFtesEftaG2Dyws+T jCZAhvR0PnkOabq+wbz6HDuzE2MuKjmOWMIeScDivDMjsffiLi88sIAwcwxtkngJ DkEsaR4fviDjG5ExlRcQIGAvfQ3wVyX6b2LkBcEXf+8+a3AjzSaLPgHoNFCiEHX+ 7dAj3gmW39LtvhRK6QRkpSQuWEAkw+ZEa82YZBgQQzpfIdZsCEFzDGd9WP/z/SOG 7B5wEuD6AQCWMyDcc6ER5APpGvb2WvASFyHwk2pi48GL -----END CERTIFICATE-----Generated at Fri Jan 2 11:34:15 2026 by rpki-client