This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aTVTcaHfSKBoGEQhyNKYBwoJu-0.roa File: aTVTcaHfSKBoGEQhyNKYBwoJu-0.roa (raw, json) Hash identifier: rT/Vj6/a6YnM9d3VVAjTqdJg4CGPx8A6IhEaB6Bvdck= Subject key identifier: 69:35:53:71:A1:DF:48:A0:68:18:44:21:C8:D2:98:07:0A:09:BB:ED Certificate issuer: /CN=687c8bf222a26bf1c9c6638cc356d2835502f2d6 Certificate serial: 019B7D5C02DB486C13FE93F159F346C2978A Authority key identifier: 68:7C:8B:F2:22:A2:6B:F1:C9:C6:63:8C:C3:56:D2:83:55:02:F2:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHyL8iKia_HJxmOMw1bSg1UC8tY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aTVTcaHfSKBoGEQhyNKYBwoJu-0.roa Signing time: Fri 02 Jan 2026 06:19:00 +0000 ROA not before: Fri 02 Jan 2026 06:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204358 IP address blocks: 185.251.60.0/22 maxlen: 22 185.251.60.0/24 maxlen: 24 185.251.61.0/24 maxlen: 24 185.251.62.0/24 maxlen: 24 185.251.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.crl rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft rsync://rpki.ripe.net/repository/DEFAULT/aHyL8iKia_HJxmOMw1bSg1UC8tY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:02:db:48:6c:13:fe:93:f1:59:f3:46:c2:97:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687c8bf222a26bf1c9c6638cc356d2835502f2d6 Validity Not Before: Jan 2 06:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69355371a1df48a068184421c8d298070a09bbed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:55:db:e2:09:4d:7b:f6:5b:7a:9b:93:5d:19: 76:67:eb:19:0d:32:9d:d7:c3:25:1e:6a:8b:38:5a: 12:11:71:2f:3e:50:c6:6e:f7:63:69:4c:25:98:1c: cc:b6:db:6b:fe:69:5c:5f:a8:d5:ca:4d:1b:ca:60: 15:ed:79:36:d7:d0:84:46:d4:51:59:eb:22:36:c2: fb:a0:ad:67:b0:c5:05:39:7c:5c:45:fd:1c:5b:58: a8:b7:db:e2:e4:47:e1:ed:68:06:6b:43:94:c2:a8: 1f:93:52:f3:ce:ce:e4:b0:f4:f9:10:90:f0:1a:54: 31:43:72:82:2e:69:41:c9:4d:9e:0f:de:42:77:8d: e4:ea:2c:61:58:d7:03:a0:83:b3:d0:b0:50:6a:fb: 82:47:3a:be:12:1e:a2:5c:02:86:7a:2b:75:bc:82: a4:49:19:7c:ef:da:ae:35:bb:99:27:30:cd:cd:7a: 78:71:14:7f:b5:f8:6e:01:16:bf:09:99:15:d7:6b: ee:08:3f:6c:31:47:cc:ed:56:01:50:6d:8b:f0:39: db:54:a9:72:a2:6c:59:dc:aa:ea:bc:91:ac:d3:4e: 96:77:09:ef:de:d9:a5:17:b8:f2:91:fc:5f:8f:66: b6:63:cc:d1:a3:3c:1e:6d:7a:e6:19:27:f1:c1:63: 2e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:35:53:71:A1:DF:48:A0:68:18:44:21:C8:D2:98:07:0A:09:BB:ED X509v3 Authority Key Identifier: keyid:68:7C:8B:F2:22:A2:6B:F1:C9:C6:63:8C:C3:56:D2:83:55:02:F2:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHyL8iKia_HJxmOMw1bSg1UC8tY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aTVTcaHfSKBoGEQhyNKYBwoJu-0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.251.60.0/22 Signature Algorithm: sha256WithRSAEncryption aa:f8:67:70:fa:2f:0a:f1:ed:bd:08:a1:f6:c2:69:e6:9c:b6: e2:12:7c:86:6f:4f:53:29:ef:4c:91:62:af:02:05:c4:12:65: 67:58:0a:68:65:79:27:a7:41:8b:9f:0f:e5:97:f9:ab:88:f2: f4:50:5c:2b:ef:a9:2c:41:34:51:78:18:8a:46:f6:71:28:98: 50:97:1d:f3:7c:ef:c9:f6:25:74:7d:68:70:75:43:09:87:70: d5:fb:50:8e:9e:c8:f3:0e:ec:8c:3d:d8:20:ee:1c:2d:b4:40: 01:34:46:0a:3e:4b:02:b6:40:d8:44:4e:0f:c5:06:a7:05:78: c1:ed:8e:2c:cd:a2:ed:82:32:fc:79:32:ef:1a:df:b1:2e:f5: 1f:91:9b:14:79:68:a6:c0:70:f6:81:74:29:21:15:c8:d6:27: f9:a0:4f:dd:d4:de:a9:72:14:64:05:20:53:e0:16:51:9d:55: 34:de:a7:c4:58:22:1b:98:19:3a:9a:7c:d3:b2:95:63:2c:05: 82:70:de:1e:81:b9:ec:8d:99:f5:e2:b2:fa:6b:3c:fa:a0:c9: 8b:b0:0c:9d:72:52:5c:e3:ff:d8:d6:29:19:87:65:14:80:26: 34:61:76:e7:b6:8e:31:9a:df:6d:26:27:6a:ed:5b:ad:ac:cf: 9e:70:f0:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XALbSGwT/pPxWfNGwpeKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4N2M4YmYyMjJhMjZiZjFjOWM2NjM4Y2MzNTZkMjgzNTUw MmYyZDYwHhcNMjYwMTAyMDYxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTM1NTM3MWExZGY0OGEwNjgxODQ0MjFjOGQyOTgwNzBhMDliYmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFXb4glNe/ZbepuTXRl2Z+sZDTKd 18MlHmqLOFoSEXEvPlDGbvdjaUwlmBzMtttr/mlcX6jVyk0bymAV7Xk219CERtRR WesiNsL7oK1nsMUFOXxcRf0cW1iot9vi5Efh7WgGa0OUwqgfk1Lzzs7ksPT5EJDw GlQxQ3KCLmlByU2eD95Cd43k6ixhWNcDoIOz0LBQavuCRzq+Eh6iXAKGeit1vIKk SRl879quNbuZJzDNzXp4cRR/tfhuARa/CZkV12vuCD9sMUfM7VYBUG2L8DnbVKly omxZ3KrqvJGs006Wdwnv3tmlF7jykfxfj2a2Y8zRozwebXrmGSfxwWMuKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGk1U3Gh30igaBhEIcjSmAcKCbvtMB8GA1UdIwQY MBaAFGh8i/IiomvxycZjjMNW0oNVAvLWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUh5TDhpS2lhX0hKeG1PTXcxYlNnMVVDOHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC82MWFlMjEtOGY2My00ZmQwLWE2YjUt ZDU3MjU1ZTI1ZmVlLzEvYVRWVGNhSGZTS0JvR0VRaHlOS1lCd29KdS0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC82MWFlMjEtOGY2My00ZmQwLWE2YjUtZDU3MjU1ZTI1ZmVl LzEvYUh5TDhpS2lhX0hKeG1PTXcxYlNnMVVDOHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufs8MA0G CSqGSIb3DQEBCwUAA4IBAQCq+Gdw+i8K8e29CKH2wmnmnLbiEnyGb09TKe9MkWKv AgXEEmVnWApoZXknp0GLnw/ll/mriPL0UFwr76ksQTRReBiKRvZxKJhQlx3zfO/J 9iV0fWhwdUMJh3DV+1COnsjzDuyMPdgg7hwttEABNEYKPksCtkDYRE4PxQanBXjB 7Y4szaLtgjL8eTLvGt+xLvUfkZsUeWimwHD2gXQpIRXI1if5oE/d1N6pchRkBSBT 4BZRnVU03qfEWCIbmBk6mnzTspVjLAWCcN4egbnsjZn14rL6azz6oMmLsAydclJc 4//Y1ikZh2UUgCY0YXbnto4xmt9tJidq7VutrM+ecPDs -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:12 2026 by rpki-client