This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/Aa0GysfD8EcD4bEiqtmoUK-eVV8.roa File: Aa0GysfD8EcD4bEiqtmoUK-eVV8.roa (raw, json) Hash identifier: AU77JYnyOQKBlP6fA/DR9mZ9IUbLLdZ9vaWCDV4tmXs= Subject key identifier: 01:AD:06:CA:C7:C3:F0:47:03:E1:B1:22:AA:D9:A8:50:AF:9E:55:5F Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb Certificate serial: 019B7E38C353336BD0CBC7E8EF9A219776E4 Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/Aa0GysfD8EcD4bEiqtmoUK-eVV8.roa Signing time: Fri 02 Jan 2026 10:20:07 +0000 ROA not before: Fri 02 Jan 2026 10:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216192 IP address blocks: 85.159.89.0/24 maxlen: 24 188.125.161.0/24 maxlen: 24 188.125.165.0/24 maxlen: 24 188.125.166.0/24 maxlen: 24 188.125.167.0/24 maxlen: 24 188.125.174.0/24 maxlen: 24 194.177.14.0/24 maxlen: 24 2a13:f6c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c3:53:33:6b:d0:cb:c7:e8:ef:9a:21:97:76:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb Validity Not Before: Jan 2 10:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01ad06cac7c3f04703e1b122aad9a850af9e555f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:28:58:79:ec:e5:b1:07:1d:0d:45:cc:98:5d: 39:1e:4f:bf:37:fa:7b:4e:65:bb:7b:08:00:ac:b0: 4e:19:6d:de:8a:fd:96:70:b8:e2:dc:88:df:a5:be: c3:c1:65:d0:5a:12:96:a6:32:24:17:8b:68:63:68: 14:51:7e:63:72:b0:a9:77:62:94:19:75:c4:19:b8: 75:a6:99:57:b5:d5:9f:b1:f7:4e:4f:3b:c1:10:62: 68:b0:c5:78:a9:73:12:bc:69:e5:07:95:f8:93:11: da:53:59:d5:d5:93:4d:a2:8b:33:bf:66:17:3c:68: 2c:e2:9c:76:e7:14:eb:1f:92:61:41:0e:3e:68:ec: 87:91:eb:e1:7f:a6:61:4b:f0:f5:a2:8f:63:20:36: 33:41:c7:d0:c4:27:7b:51:35:eb:3b:ca:d0:b0:a6: 34:6a:b0:db:3c:f4:43:f6:c2:6c:b0:5e:a1:e1:1f: 8c:10:3c:2f:8a:90:34:d3:ec:2c:a4:7a:f1:66:ca: 3b:aa:3a:15:cd:c7:d8:dd:b1:b5:5a:5e:52:13:4b: 2f:61:d9:d0:2e:78:8a:1c:80:9a:39:b2:db:78:16: 04:59:b4:f1:12:7e:47:3a:10:ca:91:54:e8:66:b9: 9f:c5:12:a9:ee:61:ee:de:9d:a1:91:a2:19:90:ce: e7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:AD:06:CA:C7:C3:F0:47:03:E1:B1:22:AA:D9:A8:50:AF:9E:55:5F X509v3 Authority Key Identifier: keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/Aa0GysfD8EcD4bEiqtmoUK-eVV8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.159.89.0/24 188.125.161.0/24 188.125.165.0-188.125.167.255 188.125.174.0/24 194.177.14.0/24 IPv6: 2a13:f6c0::/29 Signature Algorithm: sha256WithRSAEncryption 2f:15:50:95:ed:1c:7f:05:9f:74:0f:3a:bd:cf:d4:cb:33:49: 11:d9:e6:4d:bd:e6:d3:e9:e2:eb:a4:b9:56:9d:59:67:6a:10: 5d:23:44:47:bd:0d:1b:c8:70:f9:32:bb:85:e6:aa:d1:4d:e1: 95:1d:73:c1:8d:41:de:f0:d7:91:a2:86:b7:bd:f7:f3:13:67: 54:c4:86:a7:3d:bd:60:47:8a:3f:d7:c7:3c:a6:0b:e9:29:1d: d7:0d:34:b6:e4:7e:ab:16:5f:54:e5:bf:57:c3:3f:45:c0:39: 7e:c0:32:b9:54:9f:fc:37:ba:d2:7e:6e:c9:75:be:c2:97:3a: 7e:be:5e:54:b9:a6:2b:c0:1a:05:50:2f:a4:02:9e:c1:51:c8: 03:d1:95:c6:92:0b:ad:3e:92:73:2b:f4:02:9a:27:25:b3:62: 91:47:9c:ed:72:5f:cd:76:e1:0d:2b:a0:8c:ce:2a:b1:ce:08: 02:d1:0c:04:ce:fd:12:29:c3:cf:32:fe:e3:7c:3c:bc:79:0f: c1:d5:1c:6c:7b:b5:a8:b7:64:2f:b6:1e:5f:77:a1:65:aa:02: d2:72:56:df:c4:83:9f:45:12:a8:61:bd:2d:44:9d:28:8a:09: e5:6a:5e:4a:51:ee:c5:94:1e:95:0e:10:b0:d2:5d:d2:4f:70: 65:cf:ab:39 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt+OMNTM2vQy8fo75ohl3bkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NDk2OTc4MDE0MTgyNGNkMGFjYmZhNWE3ODQ2MTFlZWIw YTdkZGIwHhcNMjYwMTAyMTAyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWFkMDZjYWM3YzNmMDQ3MDNlMWIxMjJhYWQ5YTg1MGFmOWU1NTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwShYeezlsQcdDUXMmF05Hk+/N/p7 TmW7ewgArLBOGW3eiv2WcLji3Ijfpb7DwWXQWhKWpjIkF4toY2gUUX5jcrCpd2KU GXXEGbh1pplXtdWfsfdOTzvBEGJosMV4qXMSvGnlB5X4kxHaU1nV1ZNNooszv2YX PGgs4px25xTrH5JhQQ4+aOyHkevhf6ZhS/D1oo9jIDYzQcfQxCd7UTXrO8rQsKY0 arDbPPRD9sJssF6h4R+MEDwvipA00+wspHrxZso7qjoVzcfY3bG1Wl5SE0svYdnQ LniKHICaObLbeBYEWbTxEn5HOhDKkVToZrmfxRKp7mHu3p2hkaIZkM7nxQIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFAGtBsrHw/BHA+GxIqrZqFCvnlVfMB8GA1UdIwQY MBaAFIRJaXgBQYJM0Ky/paeEYR7rCn3bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEVscGVBRkJna3pRckwtbHA0UmhIdXNLZmRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lNjJmOTUtYWJiZC00MzBkLTgxNjAt MDRhYzE3ODgxYWE5LzEvQWEwR3lzZkQ4RWNENGJFaXF0bW9VSy1lVlY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9lNjJmOTUtYWJiZC00MzBkLTgxNjAtMDRhYzE3ODgxYWE5 LzEvaEVscGVBRkJna3pRckwtbHA0UmhIdXNLZmRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQAVZ9ZAwQA vH2hMAwDBAC8faUDBAO8faADBAC8fa4DBADCsQ4wDQQCAAIwBwMFAyoT9sAwDQYJ KoZIhvcNAQELBQADggEBAC8VUJXtHH8Fn3QPOr3P1MszSRHZ5k295tPp4uukuVad WWdqEF0jREe9DRvIcPkyu4XmqtFN4ZUdc8GNQd7w15Gihre99/MTZ1TEhqc9vWBH ij/XxzymC+kpHdcNNLbkfqsWX1Tlv1fDP0XAOX7AMrlUn/w3utJ+bsl1vsKXOn6+ XlS5pivAGgVQL6QCnsFRyAPRlcaSC60+knMr9AKaJyWzYpFHnO1yX8124Q0roIzO KrHOCALRDATO/RIpw88y/uN8PLx5D8HVHGx7tai3ZC+2Hl93oWWqAtJyVt/Eg59F EqhhvS1EnSiKCeVqXkpR7sWUHpUOELDSXdJPcGXPqzk= -----END CERTIFICATE-----Generated at Wed Jan 21 16:32:11 2026 by rpki-client