This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/aYCvehhzDaZ6zP_sPJdjSHF9OP8.roa File: aYCvehhzDaZ6zP_sPJdjSHF9OP8.roa (raw, json) Hash identifier: z3HBab0mPVtmfY7BmBKNx3Gr2DM0BUCqm1oCbwpZFX4= Subject key identifier: 69:80:AF:7A:18:73:0D:A6:7A:CC:FF:EC:3C:97:63:48:71:7D:38:FF Certificate issuer: /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Certificate serial: 019B663CAB5946911F7F857B40E7647BC7D4 Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/aYCvehhzDaZ6zP_sPJdjSHF9OP8.roa Signing time: Sun 28 Dec 2025 18:33:30 +0000 ROA not before: Sun 28 Dec 2025 18:33:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205193 IP address blocks: 185.167.24.0/22 maxlen: 22 185.202.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:3c:ab:59:46:91:1f:7f:85:7b:40:e7:64:7b:c7:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Validity Not Before: Dec 28 18:33:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6980af7a18730da67accffec3c976348717d38ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:55:29:3a:37:6f:be:e5:52:4a:0b:2f:a7:40: 32:e3:03:6c:56:77:a1:fe:e7:3d:1c:e4:d4:5e:ca: 36:c9:34:53:5a:df:26:f6:b3:f6:db:a2:f1:a3:21: bc:2f:e8:d9:5f:9f:5e:90:8f:38:7f:90:9f:3d:1d: 1a:5a:27:b3:1b:8a:eb:5b:4f:3a:0c:ff:43:60:b3: f5:ca:d1:a8:b9:a1:10:91:eb:cf:b7:b1:3c:08:19: 9b:ef:fa:0a:29:71:f1:64:4e:c3:be:9d:e5:be:86: 4c:e7:87:4d:9e:37:b0:c1:61:a5:04:cf:1e:aa:2b: 7e:ed:6c:5a:24:60:78:e9:7f:b6:50:2c:9f:4b:2e: 9f:40:d5:1b:47:53:27:c5:9e:df:b8:3b:f4:f0:6a: 34:36:cc:10:5e:ac:bd:75:5d:1a:e0:b3:1b:d1:c0: f0:8d:bc:aa:24:16:6f:0d:48:c5:72:ae:6c:8c:05: 2d:6a:54:df:a1:3b:1c:c2:cd:7f:1f:40:ef:99:d2: 38:5e:cd:47:db:05:38:56:1f:35:3c:0b:e6:f4:ba: b9:4f:22:a2:8e:56:ab:f6:6b:ce:e5:20:f2:8e:6b: 36:b4:af:d0:71:c9:0f:6f:49:2e:18:9f:07:58:91: 9f:e7:ae:e0:0d:65:c8:8d:1d:fc:14:80:b7:9e:55: c0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:80:AF:7A:18:73:0D:A6:7A:CC:FF:EC:3C:97:63:48:71:7D:38:FF X509v3 Authority Key Identifier: keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/aYCvehhzDaZ6zP_sPJdjSHF9OP8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.167.24.0/22 185.202.144.0/22 Signature Algorithm: sha256WithRSAEncryption b0:fc:ea:0e:7a:b5:81:9c:0e:38:1b:fb:1a:a2:56:b8:6d:85: f1:be:a9:bf:7c:64:67:fa:b6:b9:1c:fa:b4:01:64:5f:78:f2: d4:cd:8b:b0:c6:ca:01:2c:18:04:00:20:37:5c:fa:7c:96:97: fb:fa:d3:44:3c:35:e1:7d:33:67:90:04:cd:b3:54:a9:87:69: de:58:04:63:57:f3:0f:10:65:3d:f8:6a:13:5f:62:dd:d4:2f: ef:c9:99:57:6b:95:98:98:08:38:51:09:ed:5f:e7:3e:bd:ca: d3:81:af:d6:11:f7:c7:07:43:d9:e9:20:73:9f:af:5a:dd:81: 7e:d3:3d:69:59:5d:f4:af:10:25:90:fa:57:88:55:97:d1:fc: 10:33:1c:2e:d6:e1:2b:cd:73:5e:0e:66:c5:d5:63:16:16:f7: 43:30:51:99:15:41:60:e5:df:d0:4c:0e:87:1d:80:0d:16:a4: e3:9e:56:cc:1f:a6:8e:91:68:c9:65:e0:2c:1a:03:e5:fc:1a: a8:cf:34:4f:8d:2e:c7:ce:ed:ae:64:fd:93:38:16:ec:23:bd: 71:00:4b:c0:83:3a:6c:50:4a:cd:42:12:3c:db:2d:eb:dc:a3: c5:de:b5:f6:75:42:89:29:f4:9f:25:9b:9c:16:18:8b:ca:74: 1a:80:06:9c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZtmPKtZRpEff4V7QOdke8fUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMjk4OTAwMzU1ZmRmNDI1NGMyMDgzMWYyZDdlZTNiZWM0 MjliZGIwHhcNMjUxMjI4MTgzMzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTgwYWY3YTE4NzMwZGE2N2FjY2ZmZWMzYzk3NjM0ODcxN2QzOGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFUpOjdvvuVSSgsvp0Ay4wNsVneh /uc9HOTUXso2yTRTWt8m9rP226LxoyG8L+jZX59ekI84f5CfPR0aWiezG4rrW086 DP9DYLP1ytGouaEQkevPt7E8CBmb7/oKKXHxZE7Dvp3lvoZM54dNnjewwWGlBM8e qit+7WxaJGB46X+2UCyfSy6fQNUbR1MnxZ7fuDv08Go0NswQXqy9dV0a4LMb0cDw jbyqJBZvDUjFcq5sjAUtalTfoTscws1/H0DvmdI4Xs1H2wU4Vh81PAvm9Lq5TyKi jlar9mvO5SDyjms2tK/QcckPb0kuGJ8HWJGf567gDWXIjR38FIC3nlXAQwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGmAr3oYcw2mesz/7DyXY0hxfTj/MB8GA1UdIwQY MBaAFA4piQA1X99CVMIIMfLX7jvsQpvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYt M2U0Yjc0ZGQwNThkLzEvYVlDdmVoaHpEYVo2elBfc1BKZGpTSEY5T1A4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYtM2U0Yjc0ZGQwNThk LzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuacYAwQC ucqQMA0GCSqGSIb3DQEBCwUAA4IBAQCw/OoOerWBnA44G/saola4bYXxvqm/fGRn +ra5HPq0AWRfePLUzYuwxsoBLBgEACA3XPp8lpf7+tNEPDXhfTNnkATNs1Sph2ne WARjV/MPEGU9+GoTX2Ld1C/vyZlXa5WYmAg4UQntX+c+vcrTga/WEffHB0PZ6SBz n69a3YF+0z1pWV30rxAlkPpXiFWX0fwQMxwu1uErzXNeDmbF1WMWFvdDMFGZFUFg 5d/QTA6HHYANFqTjnlbMH6aOkWjJZeAsGgPl/BqozzRPjS7Hzu2uZP2TOBbsI71x AEvAgzpsUErNQhI82y3r3KPF3rX2dUKJKfSfJZucFhiLynQagAac -----END CERTIFICATE-----Generated at Wed Dec 31 00:55:54 2025 by rpki-client