This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/AOE7GyBGrmftauw_FLZ2z9IT9yE.roa File: AOE7GyBGrmftauw_FLZ2z9IT9yE.roa (raw, json) Hash identifier: 9LJ+WOv6I5qzD26iv0/TZIduJ20/cM1RipilAZxEDNA= Subject key identifier: 00:E1:3B:1B:20:46:AE:67:ED:6A:EC:3F:14:B6:76:CF:D2:13:F7:21 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F854F63CE265AF2B81E9A107BD65CF5 Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/AOE7GyBGrmftauw_FLZ2z9IT9yE.roa Signing time: Fri 02 Jan 2026 16:23:21 +0000 ROA not before: Fri 02 Jan 2026 16:23:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209982 IP address blocks: 194.35.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:4f:63:ce:26:5a:f2:b8:1e:9a:10:7b:d6:5c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00e13b1b2046ae67ed6aec3f14b676cfd213f721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2e:21:b1:9f:09:af:cc:73:37:11:98:de:0f: 13:0d:5a:af:b0:7a:4f:3e:4d:51:e6:eb:af:88:ae: eb:0f:61:fb:f5:de:21:32:f4:ff:e5:59:92:56:7a: 6d:93:70:24:16:96:83:26:03:70:75:52:0b:81:63: 2c:c1:4d:4b:c2:44:a3:26:68:8e:08:57:56:c5:ba: a3:b0:83:6d:3d:24:3e:7a:29:7d:9f:96:77:5a:e1: 4b:0c:6a:78:56:9a:5e:9d:66:a6:42:54:39:17:63: d6:d5:ca:3f:40:70:c9:31:f6:06:33:92:a9:89:90: dc:30:29:df:a1:bf:e3:8c:67:95:21:2f:e1:cc:da: 9e:cc:96:5f:0b:2f:c7:18:bb:3a:bb:34:01:b5:09: 2f:69:09:22:c2:29:e0:67:e9:e4:3b:3d:3a:55:b7: 31:ef:0e:f3:14:13:fa:6e:b7:15:41:72:fb:ff:ec: 67:ec:4b:de:61:c2:57:df:3c:80:cc:f4:5e:1f:2d: 1e:71:1e:9f:f5:89:c5:52:c7:fa:bb:33:fc:b4:e2: e5:4e:26:a0:b0:29:5f:7b:6c:27:64:e9:30:25:a6: 22:a6:c4:52:08:1b:ee:78:39:93:a6:0d:e4:2d:bc: 45:4f:70:4e:e0:8c:f4:cb:c3:28:08:84:f1:a1:41: 6f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E1:3B:1B:20:46:AE:67:ED:6A:EC:3F:14:B6:76:CF:D2:13:F7:21 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/AOE7GyBGrmftauw_FLZ2z9IT9yE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.35.52.0/22 Signature Algorithm: sha256WithRSAEncryption 03:a9:0e:b6:e1:0e:74:d8:ec:20:13:b5:2c:42:cf:b0:22:ad: 3e:b7:33:c8:c2:20:c5:2d:9b:f0:94:31:bc:6e:10:1f:bb:00: 9a:a4:11:84:a5:56:7b:47:f9:3c:a8:98:36:b0:9c:7f:b2:09: 82:8f:47:68:ef:fc:07:62:38:c7:7b:8b:25:ef:fd:e2:f8:85: ba:ba:e9:49:7e:2c:07:8b:ff:e3:e6:3c:52:93:0a:4a:51:04: 4c:ce:1e:14:e1:f4:bc:82:ed:64:29:44:e3:a3:b3:b9:7a:c9: f3:26:07:4f:34:75:9f:2e:39:e1:a6:b4:46:71:13:6b:4d:57: 6f:41:ae:4f:25:25:08:c7:8d:83:95:50:74:7e:ce:c9:11:b2: 9a:0e:40:ff:3b:b3:9c:9a:a2:3e:77:b8:aa:74:d8:6b:14:48: 2e:dd:a0:aa:7e:6e:fe:6f:2b:2c:f1:35:4c:df:a0:52:87:b6: 4f:51:c0:69:c1:52:d5:5e:94:c8:04:78:35:cf:e7:51:c9:17: 4c:ff:b5:8c:d7:34:18:3c:47:44:b2:e4:d1:31:5b:36:8a:0e: 9e:be:91:5e:97:98:3e:6d:14:34:4f:88:cb:f3:9a:4b:3e:52: 73:d1:54:5c:55:3a:b0:b0:4c:da:0f:4c:bc:05:93:0a:f7:13: 4c:72:a5:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hU9jziZa8rgemhB71lz1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGUxM2IxYjIwNDZhZTY3ZWQ2YWVjM2YxNGI2NzZjZmQyMTNmNzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2S4hsZ8Jr8xzNxGY3g8TDVqvsHpP Pk1R5uuviK7rD2H79d4hMvT/5VmSVnptk3AkFpaDJgNwdVILgWMswU1LwkSjJmiO CFdWxbqjsINtPSQ+eil9n5Z3WuFLDGp4VppenWamQlQ5F2PW1co/QHDJMfYGM5Kp iZDcMCnfob/jjGeVIS/hzNqezJZfCy/HGLs6uzQBtQkvaQkiwingZ+nkOz06Vbcx 7w7zFBP6brcVQXL7/+xn7EveYcJX3zyAzPReHy0ecR6f9YnFUsf6uzP8tOLlTiag sClfe2wnZOkwJaYipsRSCBvueDmTpg3kLbxFT3BO4Iz0y8MoCITxoUFvaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFADhOxsgRq5n7WrsPxS2ds/SE/chMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvQU9FN0d5QkdybWZ0YXV3X0ZMWjJ6OUlUOXlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwiM0MA0G CSqGSIb3DQEBCwUAA4IBAQADqQ624Q502OwgE7UsQs+wIq0+tzPIwiDFLZvwlDG8 bhAfuwCapBGEpVZ7R/k8qJg2sJx/sgmCj0do7/wHYjjHe4sl7/3i+IW6uulJfiwH i//j5jxSkwpKUQRMzh4U4fS8gu1kKUTjo7O5esnzJgdPNHWfLjnhprRGcRNrTVdv Qa5PJSUIx42DlVB0fs7JEbKaDkD/O7OcmqI+d7iqdNhrFEgu3aCqfm7+byss8TVM 36BSh7ZPUcBpwVLVXpTIBHg1z+dRyRdM/7WM1zQYPEdEsuTRMVs2ig6evpFel5g+ bRQ0T4jL85pLPlJz0VRcVTqwsEzaD0y8BZMK9xNMcqWe -----END CERTIFICATE-----Generated at Mon Jan 26 01:42:50 2026 by rpki-client