This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/AuAubJ6IQiR1AaCyKFFOYLvuk5c.roa File: AuAubJ6IQiR1AaCyKFFOYLvuk5c.roa (raw, json) Hash identifier: Vto7ZpDuL9YOcUjK4xehLrBvtIDW8BU1nnENLEOymf4= Subject key identifier: 02:E0:2E:6C:9E:88:42:24:75:01:A0:B2:28:51:4E:60:BB:EE:93:97 Certificate issuer: /CN=3c1affe59d58621d945b897fe6b7947d562529b8 Certificate serial: 019B797F21AF3156B8DC7EC37CD75E9B253D Authority key identifier: 3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/AuAubJ6IQiR1AaCyKFFOYLvuk5c.roa Signing time: Thu 01 Jan 2026 12:18:53 +0000 ROA not before: Thu 01 Jan 2026 12:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12843 IP address blocks: 185.60.57.0/24 maxlen: 24 2a0e:3200::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:21:af:31:56:b8:dc:7e:c3:7c:d7:5e:9b:25:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1affe59d58621d945b897fe6b7947d562529b8 Validity Not Before: Jan 1 12:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02e02e6c9e8842247501a0b228514e60bbee9397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7f:32:a9:0f:6d:29:69:77:5b:b5:17:93:c5: c0:c3:74:bc:74:43:0e:31:77:99:d5:17:c8:e6:58: 2a:fe:de:21:65:b3:ca:55:49:d8:9c:0f:0f:00:fa: b4:8e:c7:bc:e1:49:ea:82:b4:1b:1b:67:59:26:d1: 72:69:13:a9:67:d9:6b:eb:c1:9b:72:84:07:d2:cd: 07:8e:8a:5a:2b:e7:7e:ea:9e:4b:d4:b6:23:d1:ec: b4:0f:84:10:43:0d:a5:a8:1e:e6:cf:1d:42:21:80: cd:88:0d:4e:87:d6:18:99:8e:2a:61:ca:3a:2d:e7: 1c:53:af:41:14:bc:77:7a:83:36:f2:46:60:b1:31: 2b:77:cd:b3:28:03:d0:c6:11:fa:4d:94:d5:15:79: 7d:aa:00:86:93:8d:76:59:d5:83:10:a2:66:e1:ce: d2:1f:d6:64:a3:2f:df:3a:a9:89:1b:0c:0a:3b:48: 18:0f:c5:f4:5f:6c:62:0a:fc:df:35:d6:79:d0:4d: 6c:6c:69:7a:40:11:60:27:0e:00:eb:e0:4b:d0:28: 72:b0:7c:ed:7c:df:df:ea:1b:89:0b:11:95:ca:82: 22:c6:86:20:d2:04:fd:e3:49:94:bc:5d:9d:62:90: 42:eb:16:cc:11:ee:71:18:d6:cd:a1:cf:0f:f5:77: 5e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E0:2E:6C:9E:88:42:24:75:01:A0:B2:28:51:4E:60:BB:EE:93:97 X509v3 Authority Key Identifier: keyid:3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/AuAubJ6IQiR1AaCyKFFOYLvuk5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.57.0/24 IPv6: 2a0e:3200::/29 Signature Algorithm: sha256WithRSAEncryption bb:bd:24:35:02:b5:57:33:75:0e:19:21:f2:3c:14:7f:01:d7: 3f:9f:9b:0e:c8:16:99:ad:3d:59:98:de:18:09:5b:e5:d4:8d: 9e:8c:8c:89:45:19:73:0d:ce:4a:d2:91:cc:df:75:f3:4e:5b: 0c:b9:3f:b5:4b:28:39:a6:99:56:7f:84:89:fe:ec:15:0c:d0: f1:af:46:8f:0e:3d:6a:fa:7a:27:ec:01:21:07:ac:22:fc:40: 92:d6:73:fe:6a:89:b8:14:85:45:44:0b:9e:a9:74:25:c9:4d: 85:42:80:40:a1:cb:85:ad:25:59:5f:ca:cb:41:1f:d9:29:bd: 37:6b:7f:85:18:14:01:12:00:92:8c:a4:52:4c:3f:96:92:30: f9:38:bc:0f:c4:3e:d2:92:d5:18:b4:2a:6e:d5:f0:3b:68:a4: ee:ab:da:11:42:e2:5e:9e:d4:8f:6c:a8:39:7b:b2:4f:5f:12: 4c:bd:4a:2c:58:73:d9:ae:fe:25:b4:8b:7d:86:ef:58:fb:ba: 26:51:4c:0f:34:1d:f3:8a:96:d6:a7:2c:a0:08:99:0f:22:dd: 48:85:f5:dd:c2:0a:0b:92:ad:ab:3f:df:e0:eb:bc:b3:78:c9: a2:77:43:28:41:9b:7a:12:d4:29:89:2f:43:0e:60:8e:12:49: 54:5f:e8:1d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fyGvMVa43H7DfNdemyU9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMWFmZmU1OWQ1ODYyMWQ5NDViODk3ZmU2Yjc5NDdkNTYy NTI5YjgwHhcNMjYwMTAxMTIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmUwMmU2YzllODg0MjI0NzUwMWEwYjIyODUxNGU2MGJiZWU5Mzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX8yqQ9tKWl3W7UXk8XAw3S8dEMO MXeZ1RfI5lgq/t4hZbPKVUnYnA8PAPq0jse84UnqgrQbG2dZJtFyaROpZ9lr68Gb coQH0s0HjopaK+d+6p5L1LYj0ey0D4QQQw2lqB7mzx1CIYDNiA1Oh9YYmY4qYco6 LeccU69BFLx3eoM28kZgsTErd82zKAPQxhH6TZTVFXl9qgCGk412WdWDEKJm4c7S H9Zkoy/fOqmJGwwKO0gYD8X0X2xiCvzfNdZ50E1sbGl6QBFgJw4A6+BL0ChysHzt fN/f6huJCxGVyoIixoYg0gT940mUvF2dYpBC6xbMEe5xGNbNoc8P9Xde8wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFALgLmyeiEIkdQGgsihRTmC77pOXMB8GA1UdIwQY MBaAFDwa/+WdWGIdlFuJf+a3lH1WJSm4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEJyXzVaMVlZaDJVVzRsXzVyZVVmVllsS2JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lZTk1OGMtYzhjOC00NDdiLTgyOWEt MWRmNGNmZDdhYjc3LzEvQXVBdWJKNklRaVIxQWFDeUtGRk9ZTHZ1azVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9lZTk1OGMtYzhjOC00NDdiLTgyOWEtMWRmNGNmZDdhYjc3 LzEvUEJyXzVaMVlZaDJVVzRsXzVyZVVmVllsS2JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuTw5MA0E AgACMAcDBQMqDjIAMA0GCSqGSIb3DQEBCwUAA4IBAQC7vSQ1ArVXM3UOGSHyPBR/ Adc/n5sOyBaZrT1ZmN4YCVvl1I2ejIyJRRlzDc5K0pHM33XzTlsMuT+1Syg5pplW f4SJ/uwVDNDxr0aPDj1q+non7AEhB6wi/ECS1nP+aom4FIVFRAueqXQlyU2FQoBA ocuFrSVZX8rLQR/ZKb03a3+FGBQBEgCSjKRSTD+WkjD5OLwPxD7SktUYtCpu1fA7 aKTuq9oRQuJentSPbKg5e7JPXxJMvUosWHPZrv4ltIt9hu9Y+7omUUwPNB3zipbW pyygCJkPIt1IhfXdwgoLkq2rP9/g67yzeMmid0MoQZt6EtQpiS9DDmCOEklUX+gd -----END CERTIFICATE-----Generated at Mon Jan 26 19:33:32 2026 by rpki-client