This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ASpe4BSfFpLYPUvlRgvOZHS0KoA.roa File: ASpe4BSfFpLYPUvlRgvOZHS0KoA.roa (raw, json) Hash identifier: tgLnG2tPBq3B0CI4A4Dy4tzCuuwOr/3LIPhSkDRIxSQ= Subject key identifier: 01:2A:5E:E0:14:9F:16:92:D8:3D:4B:E5:46:0B:CE:64:74:B4:2A:80 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797DF224F16A6E9870396CD2013694D2 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ASpe4BSfFpLYPUvlRgvOZHS0KoA.roa Signing time: Thu 01 Jan 2026 12:17:35 +0000 ROA not before: Thu 01 Jan 2026 12:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60647 IP address blocks: 86.105.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:f2:24:f1:6a:6e:98:70:39:6c:d2:01:36:94:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=012a5ee0149f1692d83d4be5460bce6474b42a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0b:f9:94:ef:d1:c2:d2:1d:79:90:ad:4a:87: 9c:78:2c:e1:48:5b:8e:dd:44:76:d7:48:2f:8d:48: 40:a2:55:96:a4:a5:84:92:91:ab:05:6a:fa:98:62: 8f:3d:fd:bd:30:05:47:54:ce:15:d9:02:8b:f0:63: 0c:77:81:98:38:64:2a:e9:a0:8b:f7:02:6d:d0:6f: e7:94:9e:db:c6:6c:80:11:f5:5a:dc:39:ca:ab:ff: 2a:6a:1d:91:54:3b:b9:7d:18:e1:88:b1:c4:ed:34: 15:af:3f:83:a7:cb:bd:88:35:32:69:3e:ba:fe:1d: 00:9b:50:3c:ee:db:34:59:03:d3:f2:9b:b3:e8:da: 2a:e6:b6:fc:fd:f8:10:15:33:47:e7:4e:06:01:9e: f1:68:54:18:01:b4:9a:d4:55:bd:31:86:16:e6:04: 3b:aa:90:bf:e9:89:98:37:a9:ab:ff:dc:e7:c1:af: a3:34:8a:cf:34:86:0c:e9:1f:f7:82:20:ea:fc:b5: 09:71:5e:dd:d4:02:da:a7:23:32:36:1b:6f:9e:70: 3d:2c:9f:c2:44:30:d7:8d:1e:e5:6d:a1:7b:16:4e: 67:2a:dc:cc:1a:8c:e8:bd:8c:35:f2:41:75:ad:eb: 23:c8:06:2a:f6:31:46:0a:68:a7:50:fc:57:39:18: b3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2A:5E:E0:14:9F:16:92:D8:3D:4B:E5:46:0B:CE:64:74:B4:2A:80 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ASpe4BSfFpLYPUvlRgvOZHS0KoA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.105.4.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:79:5f:f3:19:e2:10:03:4b:2c:06:e1:57:df:9f:a5:0b:42: 99:fc:b2:c8:97:b9:f8:4b:d9:b3:ce:4b:4b:7f:82:a1:fd:2a: 66:c9:05:6a:a0:f1:f4:ce:7b:ae:5d:e1:0a:66:da:c6:4b:f9: 58:2d:56:75:9e:6c:5b:97:f0:53:2d:33:8e:9b:26:03:ae:bc: c2:93:7b:71:f8:05:24:26:09:d6:00:ff:0b:59:ef:57:a1:d6: 38:a3:ef:f4:89:49:15:2d:fd:c4:3a:1b:89:66:96:24:a9:be: 49:9a:3c:57:e4:2c:b3:3d:cd:5a:07:1d:c0:e6:91:40:e9:4f: 53:e8:6e:b3:fc:a4:c3:86:77:30:b4:4e:4a:68:a6:bc:8e:54: 59:57:84:22:cd:98:c7:a5:4c:35:13:4b:3c:e2:b2:05:f4:cb: 99:8a:09:10:ff:ea:1b:bb:f7:06:74:14:23:89:8b:05:c8:08: 6b:9f:f1:91:ff:02:bf:af:98:b6:40:f3:55:95:12:c5:4c:44: 97:3b:7e:9e:cf:58:6f:5e:88:f8:61:4d:36:e8:b0:96:8c:32: 86:52:af:f9:70:3c:23:f6:9a:5e:d2:fe:09:9e:6d:e1:f1:20: ad:9d:17:0e:1b:f1:9a:a1:0b:c7:3e:fc:1a:e2:7f:89:0f:3a: 63:62:5d:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ffIk8WpumHA5bNIBNpTSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTJhNWVlMDE0OWYxNjkyZDgzZDRiZTU0NjBiY2U2NDc0YjQyYTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Qv5lO/RwtIdeZCtSoeceCzhSFuO 3UR210gvjUhAolWWpKWEkpGrBWr6mGKPPf29MAVHVM4V2QKL8GMMd4GYOGQq6aCL 9wJt0G/nlJ7bxmyAEfVa3DnKq/8qah2RVDu5fRjhiLHE7TQVrz+Dp8u9iDUyaT66 /h0Am1A87ts0WQPT8puz6Noq5rb8/fgQFTNH504GAZ7xaFQYAbSa1FW9MYYW5gQ7 qpC/6YmYN6mr/9znwa+jNIrPNIYM6R/3giDq/LUJcV7d1ALapyMyNhtvnnA9LJ/C RDDXjR7lbaF7Fk5nKtzMGozovYw18kF1resjyAYq9jFGCminUPxXORizJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAEqXuAUnxaS2D1L5UYLzmR0tCqAMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvQVNwZTRCU2ZGcExZUFV2bFJndk9aSFMwS29BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVmkEMA0G CSqGSIb3DQEBCwUAA4IBAQB8eV/zGeIQA0ssBuFX35+lC0KZ/LLIl7n4S9mzzktL f4Kh/SpmyQVqoPH0znuuXeEKZtrGS/lYLVZ1nmxbl/BTLTOOmyYDrrzCk3tx+AUk JgnWAP8LWe9XodY4o+/0iUkVLf3EOhuJZpYkqb5JmjxX5CyzPc1aBx3A5pFA6U9T 6G6z/KTDhncwtE5KaKa8jlRZV4QizZjHpUw1E0s84rIF9MuZigkQ/+obu/cGdBQj iYsFyAhrn/GR/wK/r5i2QPNVlRLFTESXO36ez1hvXoj4YU026LCWjDKGUq/5cDwj 9ppe0v4Jnm3h8SCtnRcOG/GaoQvHPvwa4n+JDzpjYl1K -----END CERTIFICATE-----Generated at Mon Jan 19 14:40:15 2026 by rpki-client