This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/awAoKag6EQC4vFwh9AQojsPwV4s.roa File: awAoKag6EQC4vFwh9AQojsPwV4s.roa (raw, json) Hash identifier: mcqTVnyCntgurmN+poZ2dAvfowaVM23cV2tdxJ1jXQ8= Subject key identifier: 6B:00:28:29:A8:3A:11:00:B8:BC:5C:21:F4:04:28:8E:C3:F0:57:8B Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797DDFEDBECF1470BBA950FB01766946 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/awAoKag6EQC4vFwh9AQojsPwV4s.roa Signing time: Thu 01 Jan 2026 12:17:31 +0000 ROA not before: Thu 01 Jan 2026 12:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 89.125.40.0/21 maxlen: 21 89.125.141.0/24 maxlen: 24 89.125.164.0/24 maxlen: 24 89.125.184.0/24 maxlen: 24 167.17.32.0/21 maxlen: 21 167.17.41.0/24 maxlen: 24 167.17.42.0/23 maxlen: 23 167.17.44.0/23 maxlen: 23 167.17.46.0/24 maxlen: 24 206.245.136.0/21 maxlen: 21 206.245.144.0/21 maxlen: 21 208.123.184.0/24 maxlen: 24 208.123.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 05:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:df:ed:be:cf:14:70:bb:a9:50:fb:01:76:69:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b002829a83a1100b8bc5c21f404288ec3f0578b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b4:ba:d9:cd:9b:c1:86:a4:0e:11:79:ae:ce: 05:4b:71:65:40:4c:b4:29:17:cf:36:18:0d:84:10: ea:2b:53:5a:29:e7:65:80:b5:94:d1:3e:c3:da:ef: 04:2a:6b:7c:f4:55:21:5d:de:a9:0c:a8:45:85:4c: 8b:f4:b8:d5:50:51:69:fa:2a:93:a3:98:7a:ba:06: c3:c4:52:be:65:c7:a1:b0:80:0c:b2:79:02:d0:7e: 9d:71:ae:04:56:93:c2:55:33:bc:99:8c:c0:96:e7: e1:a0:61:29:85:38:8c:c4:3a:db:6e:c7:cd:3c:8a: b4:05:c1:8b:28:6a:92:cc:fa:09:fa:58:eb:89:eb: 0b:0d:aa:5e:60:8c:50:b6:f8:34:51:1e:22:7c:5c: 9e:b2:ea:e5:5b:3a:a2:af:00:a9:5e:78:c3:f4:38: 6c:68:21:fa:7c:4f:a9:ab:9b:47:94:79:e4:62:f6: 2c:02:e4:da:88:d6:1e:4e:04:44:85:f2:ff:f7:1b: af:bb:87:8a:d8:4d:49:6d:06:a8:7e:e5:58:0a:24: 11:ec:bc:cb:c1:65:7d:68:5a:3f:0b:91:31:31:f6: 4a:aa:f8:93:b6:09:21:0c:b4:47:a1:f2:b3:c6:c1: a0:c2:fc:4e:2b:3b:a0:ff:ff:bd:ec:fa:39:48:b1: b0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:00:28:29:A8:3A:11:00:B8:BC:5C:21:F4:04:28:8E:C3:F0:57:8B X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/awAoKag6EQC4vFwh9AQojsPwV4s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.125.40.0/21 89.125.141.0/24 89.125.164.0/24 89.125.184.0/24 167.17.32.0/21 167.17.41.0-167.17.46.255 206.245.136.0-206.245.151.255 208.123.184.0/24 208.123.186.0/24 Signature Algorithm: sha256WithRSAEncryption 06:8b:41:cc:30:61:35:e7:b7:17:db:f6:46:84:fc:f8:95:ea: ea:89:ff:89:72:a3:36:30:41:6d:3d:80:a7:8b:5c:bf:62:62: af:ce:76:41:d9:25:c8:10:42:47:42:6d:fa:30:3b:af:2c:9e: 73:15:81:60:c1:34:07:c4:5b:7f:6d:a7:a0:8b:aa:f1:41:7f: d5:53:20:31:78:a6:6e:7c:14:ec:ca:76:dd:58:ef:74:2e:f1: 4c:b8:ee:87:e9:fa:57:18:7e:54:6a:5e:8e:b6:b2:ea:c3:dd: 09:23:0e:ec:f7:5f:b5:f4:ff:fb:d1:a2:17:e2:5e:85:d0:2d: 7c:5c:96:69:6c:ad:b5:69:60:42:b5:4a:90:ed:fc:ff:18:0d: 50:de:5c:f7:cf:f6:51:71:63:d3:50:4e:0b:db:3f:3e:33:c3: df:2c:65:1d:4a:c1:32:7d:80:a7:a7:a1:b8:fa:4a:47:d2:35: d2:51:cd:e5:b3:49:b2:6f:7b:21:c1:8c:e3:71:b7:f3:61:72: 99:0a:52:e3:05:36:12:97:30:ae:26:95:eb:ff:2f:3b:a7:ae: a0:27:bf:49:30:53:b4:da:74:c1:86:f0:9d:d3:d7:c2:b5:b6: e4:89:bb:53:13:57:07:e8:c7:66:bc:6f:53:f6:1f:a8:af:21: e1:79:cf:07 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZt5fd/tvs8UcLupUPsBdmlGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjAwMjgyOWE4M2ExMTAwYjhiYzVjMjFmNDA0Mjg4ZWMzZjA1NzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbS62c2bwYakDhF5rs4FS3FlQEy0 KRfPNhgNhBDqK1NaKedlgLWU0T7D2u8EKmt89FUhXd6pDKhFhUyL9LjVUFFp+iqT o5h6ugbDxFK+ZcehsIAMsnkC0H6dca4EVpPCVTO8mYzAlufhoGEphTiMxDrbbsfN PIq0BcGLKGqSzPoJ+ljriesLDapeYIxQtvg0UR4ifFyesurlWzqirwCpXnjD9Dhs aCH6fE+pq5tHlHnkYvYsAuTaiNYeTgREhfL/9xuvu4eK2E1JbQaofuVYCiQR7LzL wWV9aFo/C5ExMfZKqviTtgkhDLRHofKzxsGgwvxOKzug//+97Po5SLGwhwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFGsAKCmoOhEAuLxcIfQEKI7D8FeLMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvYXdBb0thZzZFUUM0dkZ3aDlBUW9qc1B3VjRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQDWX0oAwQA WX2NAwQAWX2kAwQAWX24AwQDpxEgMAwDBACnESkDBACnES4wDAMEA871iAMEA871 kAMEANB7uAMEANB7ujANBgkqhkiG9w0BAQsFAAOCAQEABotBzDBhNee3F9v2RoT8 +JXq6on/iXKjNjBBbT2Ap4tcv2Jir852QdklyBBCR0Jt+jA7ryyecxWBYME0B8Rb f22noIuq8UF/1VMgMXimbnwU7Mp23VjvdC7xTLjuh+n6Vxh+VGpejray6sPdCSMO 7PdftfT/+9GiF+JehdAtfFyWaWyttWlgQrVKkO38/xgNUN5c98/2UXFj01BOC9s/ PjPD3yxlHUrBMn2Ap6ehuPpKR9I10lHN5bNJsm97IcGM43G382FymQpS4wU2Epcw riaV6/8vO6euoCe/STBTtNp0wYbwndPXwrW25Im7UxNXB+jHZrxvU/YfqK8h4XnP Bw== -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:07 2026 by rpki-client