This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/AVErlpP2VhysTwGtrB64czf3NqI.roa File: AVErlpP2VhysTwGtrB64czf3NqI.roa (raw, json) Hash identifier: UMyN7o51qi8PMB0e1ciRLYkKAE3KUtpoBs5v/wpa8yo= Subject key identifier: 01:51:2B:96:93:F6:56:1C:AC:4F:01:AD:AC:1E:B8:73:37:F7:36:A2 Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Certificate serial: 019B7DCA2D3F77AF3900A9926A8ADCE61BB3 Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/AVErlpP2VhysTwGtrB64czf3NqI.roa Signing time: Fri 02 Jan 2026 08:19:20 +0000 ROA not before: Fri 02 Jan 2026 08:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39001 IP address blocks: 85.140.32.0/21 maxlen: 21 85.140.64.0/21 maxlen: 21 85.140.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:2d:3f:77:af:39:00:a9:92:6a:8a:dc:e6:1b:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Validity Not Before: Jan 2 08:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01512b9693f6561cac4f01adac1eb87337f736a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a6:0e:f1:a6:e5:5b:1d:52:07:da:20:f3:4e: 96:9e:d7:02:5f:6d:6b:3c:fb:ce:5a:34:39:c3:78: b5:d4:82:49:31:2d:8e:c0:41:4d:1f:5e:70:50:50: a4:a7:19:61:65:54:94:5c:8d:11:5c:99:bf:a4:8f: 65:3f:ea:9c:d9:93:0b:91:db:3e:7b:9d:cc:b7:a0: 87:3f:3c:29:46:47:72:ab:72:05:31:71:29:85:41: f8:b3:72:72:19:62:6e:fa:d3:28:2e:ce:ec:dc:99: b7:a6:03:fd:40:a4:f3:e7:f1:73:4b:53:87:8a:af: c6:51:c4:69:f8:ca:b2:08:82:04:5e:6b:d6:17:3f: ae:25:ff:fb:e1:3e:23:7b:08:fd:7a:6a:29:de:23: a4:aa:e2:1f:3e:2c:02:4c:58:57:8f:9a:6f:0d:b3: d8:56:a1:f9:6c:16:b3:63:84:47:91:43:ce:fb:b2: ea:89:60:4b:d3:55:a2:c5:41:82:8c:89:88:13:80: 3e:07:a1:f7:90:7e:2d:b7:3e:7c:38:99:66:31:9d: b4:60:b4:69:c0:fe:d1:5e:18:cb:0f:e0:9f:6d:b3: 0f:07:a0:5a:27:ca:d5:7c:3d:af:31:3b:1c:36:c9: 04:6d:61:c6:cd:bc:a6:cd:0e:5a:55:e4:68:39:3c: 67:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:51:2B:96:93:F6:56:1C:AC:4F:01:AD:AC:1E:B8:73:37:F7:36:A2 X509v3 Authority Key Identifier: keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/AVErlpP2VhysTwGtrB64czf3NqI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.140.32.0/21 85.140.64.0/21 85.140.80.0/21 Signature Algorithm: sha256WithRSAEncryption 3d:3f:67:30:e8:88:64:82:21:7c:8a:3f:83:99:07:97:b2:b2: dd:8b:a5:85:4f:2d:2c:b2:67:17:2d:a9:f7:95:18:f4:f4:d9: 20:7c:32:5b:5a:47:b7:24:62:9e:a7:05:4e:92:29:e9:01:61: 4b:93:f9:66:fc:d8:ad:7e:11:5b:c0:15:ca:3c:38:fe:9d:33: 0b:20:36:c8:d3:52:3b:bd:75:34:81:65:1a:45:71:be:84:65: 63:f7:0a:2c:a6:01:be:16:43:91:a3:54:fc:e0:51:d9:02:7a: 5a:5f:b5:ea:17:c8:26:8e:e1:6e:fd:f9:f5:8c:41:27:d1:b0: 39:e9:d7:7a:d6:19:0b:20:c4:13:a4:60:87:0f:58:6e:14:e7: 76:e3:c3:b1:72:a7:6b:3c:46:e5:ad:ef:64:f1:b4:3b:79:57: 60:ce:09:87:d2:33:f8:30:83:d1:52:76:14:2d:50:b3:27:23: 83:74:ec:cd:5d:c0:83:14:b9:63:61:23:9b:a8:50:62:59:de: 7c:30:f4:c3:1c:4e:a7:11:f6:f6:bc:2c:b9:15:bb:3c:a6:ba: 9c:18:b6:e0:ed:78:02:87:cb:08:43:cb:a8:23:34:c0:3c:46: cf:94:ee:3a:4e:02:a1:0d:eb:eb:34:86:9c:c4:2e:27:2f:a8: c9:9c:cb:de -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9yi0/d685AKmSaorc5huzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl NmI3ZTUwHhcNMjYwMTAyMDgxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTUxMmI5NjkzZjY1NjFjYWM0ZjAxYWRhYzFlYjg3MzM3ZjczNmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKYO8ablWx1SB9og806WntcCX21r PPvOWjQ5w3i11IJJMS2OwEFNH15wUFCkpxlhZVSUXI0RXJm/pI9lP+qc2ZMLkds+ e53Mt6CHPzwpRkdyq3IFMXEphUH4s3JyGWJu+tMoLs7s3Jm3pgP9QKTz5/FzS1OH iq/GUcRp+MqyCIIEXmvWFz+uJf/74T4jewj9emop3iOkquIfPiwCTFhXj5pvDbPY VqH5bBazY4RHkUPO+7LqiWBL01WixUGCjImIE4A+B6H3kH4ttz58OJlmMZ20YLRp wP7RXhjLD+CfbbMPB6BaJ8rVfD2vMTscNskEbWHGzbymzQ5aVeRoOTxngQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAFRK5aT9lYcrE8BraweuHM39zaiMB8GA1UdIwQY MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt NDI4NDU4Njc5Y2U0LzEvQVZFcmxwUDJWaHlzVHdHdHJCNjRjemYzTnFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0 LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDVYwgAwQD VYxAAwQDVYxQMA0GCSqGSIb3DQEBCwUAA4IBAQA9P2cw6IhkgiF8ij+DmQeXsrLd i6WFTy0ssmcXLan3lRj09NkgfDJbWke3JGKepwVOkinpAWFLk/lm/NitfhFbwBXK PDj+nTMLIDbI01I7vXU0gWUaRXG+hGVj9wospgG+FkORo1T84FHZAnpaX7XqF8gm juFu/fn1jEEn0bA56dd61hkLIMQTpGCHD1huFOd248OxcqdrPEblre9k8bQ7eVdg zgmH0jP4MIPRUnYULVCzJyODdOzNXcCDFLljYSObqFBiWd58MPTDHE6nEfb2vCy5 Fbs8prqcGLbg7XgCh8sIQ8uoIzTAPEbPlO46TgKhDevrNIacxC4nL6jJnMve -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:23 2026 by rpki-client