This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f3c7ba-01cd-4df4-b87a-b228345c3b6d/1/AaT-fL5JWKGrOL8GvEvZO5K_kg8.roa File: AaT-fL5JWKGrOL8GvEvZO5K_kg8.roa (raw, json) Hash identifier: jfOg1jyji1rFCzF9opIEWmOgvVGmxRn37HA911nURHY= Subject key identifier: 01:A4:FE:7C:BE:49:58:A1:AB:38:BF:06:BC:4B:D9:3B:92:BF:92:0F Certificate issuer: /CN=995ed129ab2f510f68bbc8b3fcf1c9a1ee7eddef Certificate serial: 019BC5E18DAAAC94E984E2C48D2853DC1334 Authority key identifier: 99:5E:D1:29:AB:2F:51:0F:68:BB:C8:B3:FC:F1:C9:A1:EE:7E:DD:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mV7RKasvUQ9ou8iz_PHJoe5-3e8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/f3c7ba-01cd-4df4-b87a-b228345c3b6d/1/AaT-fL5JWKGrOL8GvEvZO5K_kg8.roa Signing time: Fri 16 Jan 2026 08:17:31 +0000 ROA not before: Fri 16 Jan 2026 08:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48111 IP address blocks: 185.142.180.0/23 maxlen: 23 2a07:2ec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/f3c7ba-01cd-4df4-b87a-b228345c3b6d/1/mV7RKasvUQ9ou8iz_PHJoe5-3e8.crl rsync://rpki.ripe.net/repository/DEFAULT/08/f3c7ba-01cd-4df4-b87a-b228345c3b6d/1/mV7RKasvUQ9ou8iz_PHJoe5-3e8.mft rsync://rpki.ripe.net/repository/DEFAULT/mV7RKasvUQ9ou8iz_PHJoe5-3e8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c5:e1:8d:aa:ac:94:e9:84:e2:c4:8d:28:53:dc:13:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995ed129ab2f510f68bbc8b3fcf1c9a1ee7eddef Validity Not Before: Jan 16 08:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01a4fe7cbe4958a1ab38bf06bc4bd93b92bf920f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3b:8c:f7:87:4b:7a:67:f0:9d:e1:50:c0:0e: 3d:82:06:1a:d4:47:cd:5a:00:92:65:3f:16:92:17: 5e:43:17:ef:76:dd:c8:7e:fb:e1:aa:cd:d4:4f:80: fb:fc:8e:06:73:1b:be:ca:f8:f8:45:f2:b9:5a:8d: 6f:7f:af:88:a5:fa:dd:3f:72:5b:6f:c2:51:a2:7b: 1e:07:92:62:f9:d2:22:df:1d:63:24:6c:0e:75:5b: cd:77:94:fb:18:77:16:11:e8:72:7d:b9:fc:28:a7: 26:62:11:82:b8:5e:c3:95:2d:31:e4:ab:ad:7f:ff: 9c:3a:50:d7:66:5f:d9:95:6e:13:7f:0b:96:8b:47: c2:d1:21:78:2c:78:1a:62:91:f7:c5:2e:84:33:ed: 6f:81:d2:42:07:84:78:47:01:e5:bd:f1:a5:b9:3a: 4a:6e:b9:15:21:d4:4d:d4:af:35:16:80:f5:2a:ca: 27:9d:d5:cd:75:80:0f:96:b6:50:50:4e:4a:f0:74: e5:a5:fb:3a:98:57:c8:b6:2e:a4:4d:18:46:e1:3d: e9:02:ee:b0:94:aa:3a:e8:74:4a:52:39:22:04:5b: 01:f9:6d:6d:18:b1:f1:e2:6c:0f:93:d2:ab:ac:23: 74:3c:47:46:be:10:24:d6:2c:8c:a8:49:09:af:1e: 66:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A4:FE:7C:BE:49:58:A1:AB:38:BF:06:BC:4B:D9:3B:92:BF:92:0F X509v3 Authority Key Identifier: keyid:99:5E:D1:29:AB:2F:51:0F:68:BB:C8:B3:FC:F1:C9:A1:EE:7E:DD:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mV7RKasvUQ9ou8iz_PHJoe5-3e8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f3c7ba-01cd-4df4-b87a-b228345c3b6d/1/AaT-fL5JWKGrOL8GvEvZO5K_kg8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f3c7ba-01cd-4df4-b87a-b228345c3b6d/1/mV7RKasvUQ9ou8iz_PHJoe5-3e8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.180.0/23 IPv6: 2a07:2ec0::/32 Signature Algorithm: sha256WithRSAEncryption 54:f6:2c:8a:26:d1:e9:f7:56:a5:04:00:f8:2c:70:04:48:91: f2:6a:47:9d:3d:0d:9e:fd:ce:37:8b:54:89:bd:d9:96:e2:76: 4e:6c:f2:86:a9:84:54:2f:19:52:95:34:0a:a7:cb:f5:f2:b0: e0:2d:a5:50:61:4c:97:df:d2:9c:f2:11:bd:a3:2f:a5:24:2a: ef:1e:e5:6c:2b:56:9c:f9:ee:d2:2d:8c:74:85:49:b3:20:a5: 88:b7:8b:5f:5c:0a:6d:04:93:0a:be:c6:7c:c1:22:db:e8:dc: cc:65:53:f4:68:02:25:a4:4f:c6:b7:87:ea:29:59:fe:10:f5: de:6c:26:4b:3d:d7:90:36:55:00:e3:d0:ca:47:45:a3:02:04: 2c:16:db:8b:1f:e9:12:79:a8:65:6e:96:f3:09:7e:59:5e:ca: 2e:0a:4e:1b:6e:a5:67:0e:41:a3:58:4d:19:9b:48:b5:4d:67: 2a:77:18:ad:ea:f2:53:1b:89:cf:ba:e3:73:32:fb:07:78:4f: 7c:03:89:cf:e6:1d:cb:a5:07:2e:d2:f4:0f:44:e2:6e:20:50: 58:a4:b2:c6:3f:4c:1e:91:81:2a:75:dd:5d:5f:6e:ca:b7:3e: 5a:7f:81:65:f6:af:b2:83:45:78:93:09:51:c5:e2:3d:b7:ca: ee:59:58:c8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZvF4Y2qrJTphOLEjShT3BM0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5NWVkMTI5YWIyZjUxMGY2OGJiYzhiM2ZjZjFjOWExZWU3 ZWRkZWYwHhcNMjYwMTE2MDgxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWE0ZmU3Y2JlNDk1OGExYWIzOGJmMDZiYzRiZDkzYjkyYmY5MjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTuM94dLemfwneFQwA49ggYa1EfN WgCSZT8WkhdeQxfvdt3Ifvvhqs3UT4D7/I4Gcxu+yvj4RfK5Wo1vf6+IpfrdP3Jb b8JRonseB5Ji+dIi3x1jJGwOdVvNd5T7GHcWEehyfbn8KKcmYhGCuF7DlS0x5Kut f/+cOlDXZl/ZlW4TfwuWi0fC0SF4LHgaYpH3xS6EM+1vgdJCB4R4RwHlvfGluTpK brkVIdRN1K81FoD1KsonndXNdYAPlrZQUE5K8HTlpfs6mFfIti6kTRhG4T3pAu6w lKo66HRKUjkiBFsB+W1tGLHx4mwPk9KrrCN0PEdGvhAk1iyMqEkJrx5mPwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAGk/ny+SVihqzi/BrxL2TuSv5IPMB8GA1UdIwQY MBaAFJle0SmrL1EPaLvIs/zxyaHuft3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVY3Ukthc3ZVUTlvdThpel9QSEpvZTUtM2U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9mM2M3YmEtMDFjZC00ZGY0LWI4N2Et YjIyODM0NWMzYjZkLzEvQWFULWZMNUpXS0dyT0w4R3ZFdlpPNUtfa2c4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9mM2M3YmEtMDFjZC00ZGY0LWI4N2EtYjIyODM0NWMzYjZk LzEvbVY3Ukthc3ZVUTlvdThpel9QSEpvZTUtM2U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuY60MA0E AgACMAcDBQAqBy7AMA0GCSqGSIb3DQEBCwUAA4IBAQBU9iyKJtHp91alBAD4LHAE SJHyakedPQ2e/c43i1SJvdmW4nZObPKGqYRULxlSlTQKp8v18rDgLaVQYUyX39Kc 8hG9oy+lJCrvHuVsK1ac+e7SLYx0hUmzIKWIt4tfXAptBJMKvsZ8wSLb6NzMZVP0 aAIlpE/Gt4fqKVn+EPXebCZLPdeQNlUA49DKR0WjAgQsFtuLH+kSeahlbpbzCX5Z XsouCk4bbqVnDkGjWE0Zm0i1TWcqdxit6vJTG4nPuuNzMvsHeE98A4nP5h3LpQcu 0vQPROJuIFBYpLLGP0wekYEqdd1dX27Ktz5af4Fl9q+yg0V4kwlRxeI9t8ruWVjI -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:24 2026 by rpki-client