This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/a8TJt2aulUTAwXgy16sRbNyfXr8.roa File: a8TJt2aulUTAwXgy16sRbNyfXr8.roa (raw, json) Hash identifier: tBtH99QMKjJnlGV23+W6NtAMP0SBV9FfAh6GK1v5vA4= Subject key identifier: 6B:C4:C9:B7:66:AE:95:44:C0:C1:78:32:D7:AB:11:6C:DC:9F:5E:BF Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Certificate serial: 019AEE0620D785A9C9A6174EDBA79D7DE6EF Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/a8TJt2aulUTAwXgy16sRbNyfXr8.roa Signing time: Fri 05 Dec 2025 10:19:30 +0000 ROA not before: Fri 05 Dec 2025 10:19:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39811 IP address blocks: 85.140.127.0/24 maxlen: 24 213.87.96.0/24 maxlen: 24 213.87.97.0/24 maxlen: 24 213.87.98.0/23 maxlen: 23 213.87.100.0/24 maxlen: 24 213.87.101.0/24 maxlen: 24 213.87.102.0/24 maxlen: 24 213.87.103.0/24 maxlen: 24 213.87.104.0/24 maxlen: 24 213.87.105.0/24 maxlen: 24 213.87.106.0/23 maxlen: 23 213.87.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 07:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:06:20:d7:85:a9:c9:a6:17:4e:db:a7:9d:7d:e6:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Validity Not Before: Dec 5 10:19:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6bc4c9b766ae9544c0c17832d7ab116cdc9f5ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:12:00:df:69:3b:f7:c9:97:a5:e9:fc:3f:d7: 1f:ea:3a:5c:b2:8a:fc:77:89:07:a4:03:cc:48:47: 9a:eb:cf:e6:a7:4f:cc:41:5d:a1:1a:e3:df:88:80: 37:ed:e5:9b:a3:7a:7d:e7:ed:93:8f:a6:d7:f6:b2: a6:28:6c:93:b8:2c:36:42:1d:78:a9:5c:9b:c5:76: eb:3d:9b:37:cd:76:1d:34:66:7b:7e:a6:b2:00:ab: 2c:a1:33:08:55:b3:09:40:ef:c2:61:77:92:b5:4a: 55:5b:64:59:35:c1:72:65:03:3d:3b:f2:d9:d2:d2: 05:03:a9:29:31:f3:31:25:d9:f8:1b:aa:74:71:6b: 00:ca:5f:1d:7b:65:c7:45:4a:62:2c:6a:4d:63:60: 2e:e7:79:26:a8:1d:fb:0a:f2:3e:e5:8b:dc:a0:b3: 82:11:7e:92:1e:b5:a8:aa:89:04:90:eb:26:45:da: b8:77:8b:b8:72:a6:ba:2e:aa:cc:ef:20:3d:30:fd: b5:ec:34:8a:ad:fb:d4:3c:e2:a2:96:cb:ba:7e:15: 83:57:c6:c1:af:7b:de:68:b8:87:b1:ac:12:10:c0: 9a:8f:45:3d:0c:8e:3c:c1:cb:b5:9e:73:1f:c1:e5: 0c:ca:bd:1e:62:b3:f3:c9:a4:02:bb:47:80:5d:1a: b6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C4:C9:B7:66:AE:95:44:C0:C1:78:32:D7:AB:11:6C:DC:9F:5E:BF X509v3 Authority Key Identifier: keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/a8TJt2aulUTAwXgy16sRbNyfXr8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.140.127.0/24 213.87.96.0-213.87.107.255 213.87.246.0/24 Signature Algorithm: sha256WithRSAEncryption 16:f0:f9:8a:6b:75:95:24:2c:50:07:5f:c3:fa:75:fa:cf:54: 1b:b1:9d:d6:56:98:fd:62:44:24:dd:6b:a5:17:4f:ad:ca:4a: 7d:47:a0:02:94:05:d0:24:2e:31:98:56:3d:9b:20:8e:8d:9f: 20:1e:71:a1:7a:2a:b1:05:22:7e:9c:69:cd:16:d2:01:99:06: eb:c8:cb:8f:c3:ad:77:a4:c8:a4:2c:c8:68:01:aa:20:d1:bd: 32:10:7c:c2:db:19:c7:1d:c9:82:40:49:65:bb:f5:12:f3:b1: 90:1f:ba:da:fb:43:51:2c:fd:8c:61:69:4b:e7:ed:2e:15:4b: a0:8a:6b:a4:0a:78:98:48:70:43:65:74:48:81:0c:0b:2c:94: d3:b3:ba:bd:90:fe:f8:33:d3:8c:21:b4:19:15:70:05:65:06: 0c:54:73:0b:6a:f4:02:eb:ec:67:8a:d3:40:32:8c:2f:73:54: 36:7e:e6:ae:21:d1:36:d7:44:2c:c2:c2:34:e4:a6:2d:d9:b7: d2:dd:82:76:0d:df:b8:1b:88:e3:15:f3:92:53:23:07:da:68: be:37:c0:63:1b:1e:0b:39:e3:86:c4:a8:c3:8e:22:a8:55:e8: 18:98:95:14:42:e0:28:70:57:63:1c:20:15:01:1d:d0:4f:e9: 70:d7:05:0f -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZruBiDXhanJphdO26edfebvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl NmI3ZTUwHhcNMjUxMjA1MTAxOTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmM0YzliNzY2YWU5NTQ0YzBjMTc4MzJkN2FiMTE2Y2RjOWY1ZWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohIA32k798mXpen8P9cf6jpcsor8 d4kHpAPMSEea68/mp0/MQV2hGuPfiIA37eWbo3p95+2Tj6bX9rKmKGyTuCw2Qh14 qVybxXbrPZs3zXYdNGZ7fqayAKssoTMIVbMJQO/CYXeStUpVW2RZNcFyZQM9O/LZ 0tIFA6kpMfMxJdn4G6p0cWsAyl8de2XHRUpiLGpNY2Au53kmqB37CvI+5YvcoLOC EX6SHrWoqokEkOsmRdq4d4u4cqa6LqrM7yA9MP217DSKrfvUPOKilsu6fhWDV8bB r3veaLiHsawSEMCaj0U9DI48wcu1nnMfweUMyr0eYrPzyaQCu0eAXRq2awIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFGvEybdmrpVEwMF4MterEWzcn16/MB8GA1UdIwQY MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt NDI4NDU4Njc5Y2U0LzEvYThUSnQyYXVsVVRBd1hneTE2c1JiTnlmWHI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0 LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAVYx/MAwD BAXVV2ADBALVV2gDBADVV/YwDQYJKoZIhvcNAQELBQADggEBABbw+YprdZUkLFAH X8P6dfrPVBuxndZWmP1iRCTda6UXT63KSn1HoAKUBdAkLjGYVj2bII6NnyAecaF6 KrEFIn6cac0W0gGZBuvIy4/DrXekyKQsyGgBqiDRvTIQfMLbGccdyYJASWW79RLz sZAfutr7Q1Es/YxhaUvn7S4VS6CKa6QKeJhIcENldEiBDAsslNOzur2Q/vgz04wh tBkVcAVlBgxUcwtq9ALr7GeK00AyjC9zVDZ+5q4h0TbXRCzCwjTkpi3Zt9LdgnYN 37gbiOMV85JTIwfaaL43wGMbHgs544bEqMOOIqhV6BiYlRRC4ChwV2McIBUBHdBP 6XDXBQ8= -----END CERTIFICATE-----Generated at Sat Dec 13 12:57:18 2025 by rpki-client