This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aruL415l7JLu9wjiSfM6WzF8CfU.roa File: aruL415l7JLu9wjiSfM6WzF8CfU.roa (raw, json) Hash identifier: lX0WJMGXqmf75Qpzff+5YIIgSi0o3ScjriOLhh1W06M= Subject key identifier: 6A:BB:8B:E3:5E:65:EC:92:EE:F7:08:E2:49:F3:3A:5B:31:7C:09:F5 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019A7D4BE736FB6525CC3840B134CB415121 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aruL415l7JLu9wjiSfM6WzF8CfU.roa Signing time: Thu 13 Nov 2025 12:58:37 +0000 ROA not before: Thu 13 Nov 2025 12:58:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41745 IP address blocks: 95.215.8.0/24 maxlen: 24 193.124.33.0/24 maxlen: 24 194.87.35.0/24 maxlen: 24 194.87.62.0/24 maxlen: 24 194.87.191.0/24 maxlen: 24 194.87.219.0/24 maxlen: 24 194.87.252.0/24 maxlen: 24 195.58.50.0/24 maxlen: 24 195.133.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:40:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:4b:e7:36:fb:65:25:cc:38:40:b1:34:cb:41:51:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Nov 13 12:58:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6abb8be35e65ec92eef708e249f33a5b317c09f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ca:9c:0f:d2:e0:6c:40:a9:79:72:38:83:7a: b1:9a:46:28:01:73:7f:7c:6a:33:50:62:e1:10:30: 82:56:f6:de:68:64:e0:bd:00:9b:42:1a:91:83:11: a0:a9:c9:d3:94:d4:23:09:9d:99:c3:1a:db:25:c2: 61:fb:06:87:5f:00:c4:cf:d4:a5:e5:c6:aa:97:f6: 82:39:0c:06:ce:e9:f5:47:c6:ed:5d:6a:21:72:8d: 3b:b5:ae:70:0a:55:83:e9:4b:df:fa:7e:f5:bd:02: 79:5e:92:ad:6d:3f:bf:ca:a2:e9:32:59:3b:ae:dc: 92:95:49:08:9f:3b:75:d6:94:31:ba:45:84:01:aa: 78:27:2a:82:05:9b:72:63:08:ed:d7:45:dd:f6:97: 55:22:bd:a3:b1:ab:72:6d:1f:92:d6:56:bb:fc:d2: 9d:61:28:f2:7d:eb:60:06:db:52:3b:b6:d9:9c:3d: c3:01:c1:5f:a2:09:d4:fb:44:11:5f:4e:61:13:7d: 2b:9a:77:44:57:18:1e:41:0b:60:ab:fc:49:6a:80: 5b:5f:d1:43:4d:89:93:45:17:de:e2:7c:33:cc:27: fa:d3:1f:12:f5:ce:01:31:7a:d1:e9:e8:58:b9:c8: 70:fa:6c:7c:eb:9c:7c:75:02:5e:67:fb:f2:90:6b: 7a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:BB:8B:E3:5E:65:EC:92:EE:F7:08:E2:49:F3:3A:5B:31:7C:09:F5 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aruL415l7JLu9wjiSfM6WzF8CfU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.215.8.0/24 193.124.33.0/24 194.87.35.0/24 194.87.62.0/24 194.87.191.0/24 194.87.219.0/24 194.87.252.0/24 195.58.50.0/24 195.133.75.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:23:e5:f6:ba:71:a9:88:be:80:2a:65:01:d4:a4:77:59:f8: 30:3c:9a:7a:7f:79:a7:2f:7c:1d:d2:ba:8f:60:f7:a8:a7:a1: 34:27:8b:c1:3f:4c:7a:71:e7:4e:fa:aa:ab:10:f7:a1:0f:48: e9:f7:63:b6:c8:64:ca:80:8c:3e:5c:91:7e:a4:36:73:99:ae: 3f:65:ee:72:7e:b1:a3:d2:dc:cf:f7:75:71:d9:97:21:b2:96: 66:ae:5e:1e:ef:69:84:a0:22:f7:e0:27:d9:fe:af:0e:73:af: 5b:57:43:02:ca:ab:15:25:ac:32:78:4b:a7:7e:d6:3c:71:cb: 71:ee:a1:41:4f:2d:f4:f6:0c:f0:7e:29:fd:bc:31:00:6f:f9: d4:7b:de:2c:f6:09:00:56:46:38:d0:37:02:60:11:47:de:b8: 2f:7e:95:e9:f2:01:a1:63:11:de:23:4e:78:a7:96:11:27:e3: c9:19:98:5a:90:da:c4:af:a7:7f:5f:26:f3:b9:5d:dd:28:b1: aa:5c:79:29:fd:9f:53:5b:aa:4a:56:ec:8e:cf:b2:e6:f0:1a: 88:5b:cd:b9:5a:76:2d:76:9d:47:a5:00:ce:12:3a:34:d1:f4: 4e:37:57:49:98:10:b9:13:d8:a7:56:00:96:b5:d2:d5:3a:dc: a3:cf:21:2d -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZp9S+c2+2UlzDhAsTTLQVEhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjUxMTEzMTI1ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWJiOGJlMzVlNjVlYzkyZWVmNzA4ZTI0OWYzM2E1YjMxN2MwOWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMqcD9LgbECpeXI4g3qxmkYoAXN/ fGozUGLhEDCCVvbeaGTgvQCbQhqRgxGgqcnTlNQjCZ2ZwxrbJcJh+waHXwDEz9Sl 5caql/aCOQwGzun1R8btXWohco07ta5wClWD6Uvf+n71vQJ5XpKtbT+/yqLpMlk7 rtySlUkInzt11pQxukWEAap4JyqCBZtyYwjt10Xd9pdVIr2jsatybR+S1la7/NKd YSjyfetgBttSO7bZnD3DAcFfognU+0QRX05hE30rmndEVxgeQQtgq/xJaoBbX9FD TYmTRRfe4nwzzCf60x8S9c4BMXrR6ehYuchw+mx865x8dQJeZ/vykGt6kwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFGq7i+NeZeyS7vcI4knzOlsxfAn1MB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvYXJ1TDQxNWw3Skx1OXdqaVNmTTZXekY4Q2ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAX9cIAwQA wXwhAwQAwlcjAwQAwlc+AwQAwle/AwQAwlfbAwQAwlf8AwQAwzoyAwQAw4VLMA0G CSqGSIb3DQEBCwUAA4IBAQB7I+X2unGpiL6AKmUB1KR3WfgwPJp6f3mnL3wd0rqP YPeop6E0J4vBP0x6cedO+qqrEPehD0jp92O2yGTKgIw+XJF+pDZzma4/Ze5yfrGj 0tzP93Vx2ZchspZmrl4e72mEoCL34CfZ/q8Oc69bV0MCyqsVJawyeEunftY8cctx 7qFBTy309gzwfin9vDEAb/nUe94s9gkAVkY40DcCYBFH3rgvfpXp8gGhYxHeI054 p5YRJ+PJGZhakNrEr6d/XybzuV3dKLGqXHkp/Z9TW6pKVuyOz7Lm8BqIW825WnYt dp1HpQDOEjo00fRON1dJmBC5E9inVgCWtdLVOtyjzyEt -----END CERTIFICATE-----Generated at Fri Dec 5 16:35:45 2025 by rpki-client