This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/aF7Fo61ARbfY3WCMykxFMZf-unI.roa File: aF7Fo61ARbfY3WCMykxFMZf-unI.roa (raw, json) Hash identifier: mq0b7oZuWEbUNwXpwzKZdx4ZOZCDCH66xKYzqJWE62c= Subject key identifier: 68:5E:C5:A3:AD:40:45:B7:D8:DD:60:8C:CA:4C:45:31:97:FE:BA:72 Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 019B77C66B1215768B400AC1549CE6858569 Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/aF7Fo61ARbfY3WCMykxFMZf-unI.roa Signing time: Thu 01 Jan 2026 04:17:30 +0000 ROA not before: Thu 01 Jan 2026 04:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4766 IP address blocks: 141.98.150.0/24 maxlen: 24 212.66.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:6b:12:15:76:8b:40:0a:c1:54:9c:e6:85:85:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: Jan 1 04:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=685ec5a3ad4045b7d8dd608cca4c453197feba72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c2:6f:f5:cf:3b:a6:dc:41:d2:c0:37:6a:80: 4e:ef:45:4d:92:b5:2a:ac:f0:59:9d:61:10:d8:ce: b7:b1:b3:fa:77:5b:2d:3e:bf:04:9b:5a:b0:a0:9e: f2:82:56:01:8d:e8:fd:25:5e:66:4b:f5:8c:ae:e1: fe:89:c8:ec:19:d6:c2:c1:79:58:ba:2f:c5:54:16: cc:76:01:fa:81:b3:bc:28:d3:e5:52:83:6b:94:ff: 5b:6c:d8:d6:a2:8f:0c:ca:a4:7b:7b:20:e6:41:78: 13:2b:12:9c:50:53:c2:00:11:f8:89:80:b7:43:90: 2a:be:b0:e5:17:ea:93:4e:c5:c9:9d:fb:8e:d8:2a: 3e:1d:d9:cd:c9:c7:7a:00:06:b3:2d:de:38:11:0e: ae:fb:d4:29:d8:1d:0f:86:0d:1c:76:87:51:54:2f: fb:de:aa:66:a7:03:3b:04:6c:3d:00:7c:83:3d:86: ed:c0:92:e5:d3:91:69:9f:cc:93:32:52:d3:d8:92: e2:f3:f6:ec:a5:48:d1:30:7f:bb:3a:9b:c9:8d:0a: 07:ad:ae:01:4e:60:ae:7b:15:e7:6a:66:ec:b4:f4: 14:86:13:46:90:db:b3:9e:c9:a9:65:bb:d0:2e:fc: e0:d3:c1:37:59:75:ca:68:19:cd:54:52:fd:9b:aa: 62:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5E:C5:A3:AD:40:45:B7:D8:DD:60:8C:CA:4C:45:31:97:FE:BA:72 X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/aF7Fo61ARbfY3WCMykxFMZf-unI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.150.0/24 212.66.49.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:7c:f3:4c:4d:89:53:f7:01:fd:28:89:c1:5f:73:e0:9c:91: 95:00:91:d9:8f:ed:13:c2:8e:64:1d:73:d5:1e:69:61:42:8d: 82:ee:45:e6:8d:c6:df:64:25:91:20:3a:55:2b:6b:f0:69:6c: 96:b3:df:26:87:68:98:73:ad:df:50:0c:76:6e:10:58:8b:73: 03:56:63:ee:96:07:6d:b4:c4:d7:86:6a:e3:a1:67:6d:5c:53: 65:29:c5:b0:6f:d1:79:58:10:bc:c4:66:4b:32:6e:cd:ce:57: 85:8e:de:63:40:ab:c1:b7:4e:2d:1e:dc:27:f9:ba:59:ec:4d: 3f:48:6a:6d:b5:b3:6a:4b:f9:78:cd:a0:81:13:6e:7a:44:91: da:c8:29:05:08:ea:80:0b:6d:9d:81:fb:12:bc:b2:96:3b:cc: e1:d3:51:a4:78:c1:a7:33:cb:cb:97:9a:12:26:1d:1e:de:fd: 6a:d0:a1:e5:4c:c4:66:8a:0f:76:1c:8d:8a:a0:96:33:9c:93: 8a:a9:d2:45:9f:cf:87:85:54:cb:53:06:ec:46:9e:6f:17:37: f2:e7:43:31:18:a6:da:5a:ac:cf:3f:5a:8f:44:26:42:54:cf: 0d:0f:b8:ae:f2:23:49:d0:0c:19:16:fd:d8:2f:d1:ae:7c:01: 90:36:10:c0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xmsSFXaLQArBVJzmhYVpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjYwMTAxMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODVlYzVhM2FkNDA0NWI3ZDhkZDYwOGNjYTRjNDUzMTk3ZmViYTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8Jv9c87ptxB0sA3aoBO70VNkrUq rPBZnWEQ2M63sbP6d1stPr8Em1qwoJ7yglYBjej9JV5mS/WMruH+icjsGdbCwXlY ui/FVBbMdgH6gbO8KNPlUoNrlP9bbNjWoo8MyqR7eyDmQXgTKxKcUFPCABH4iYC3 Q5AqvrDlF+qTTsXJnfuO2Co+HdnNycd6AAazLd44EQ6u+9Qp2B0Phg0cdodRVC/7 3qpmpwM7BGw9AHyDPYbtwJLl05Fpn8yTMlLT2JLi8/bspUjRMH+7OpvJjQoHra4B TmCuexXnambstPQUhhNGkNuznsmpZbvQLvzg08E3WXXKaBnNVFL9m6piqQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGhexaOtQEW32N1gjMpMRTGX/rpyMB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEvYUY3Rm82MUFSYmZZM1dDTXlreEZNWmYtdW5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjWKWAwQA 1EIxMA0GCSqGSIb3DQEBCwUAA4IBAQCNfPNMTYlT9wH9KInBX3PgnJGVAJHZj+0T wo5kHXPVHmlhQo2C7kXmjcbfZCWRIDpVK2vwaWyWs98mh2iYc63fUAx2bhBYi3MD VmPulgdttMTXhmrjoWdtXFNlKcWwb9F5WBC8xGZLMm7NzleFjt5jQKvBt04tHtwn +bpZ7E0/SGpttbNqS/l4zaCBE256RJHayCkFCOqAC22dgfsSvLKWO8zh01GkeMGn M8vLl5oSJh0e3v1q0KHlTMRmig92HI2KoJYznJOKqdJFn8+HhVTLUwbsRp5vFzfy 50MxGKbaWqzPP1qPRCZCVM8ND7iu8iNJ0AwZFv3YL9GufAGQNhDA -----END CERTIFICATE-----Generated at Mon Jan 19 11:29:53 2026 by rpki-client