This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/AUEKTW7dpfCyY0l-Yj0HVMTL-KY.roa File: AUEKTW7dpfCyY0l-Yj0HVMTL-KY.roa (raw, json) Hash identifier: V51b9cPnu3jOodKc2fR+o5Zo3IAU5wstih+aBJw2hf4= Subject key identifier: 01:41:0A:4D:6E:DD:A5:F0:B2:63:49:7E:62:3D:07:54:C4:CB:F8:A6 Certificate issuer: /CN=882fa01902f4e8c347f2116e4645da1a6b4e0962 Certificate serial: 019B7E3902E29F69991D8B0F1274DEE703DE Authority key identifier: 88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/AUEKTW7dpfCyY0l-Yj0HVMTL-KY.roa Signing time: Fri 02 Jan 2026 10:20:24 +0000 ROA not before: Fri 02 Jan 2026 10:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61964 IP address blocks: 80.244.32.0/24 maxlen: 24 80.244.33.0/24 maxlen: 24 80.244.39.0/24 maxlen: 24 185.17.202.0/24 maxlen: 24 185.199.11.0/24 maxlen: 24 2a0a:9741::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:02:e2:9f:69:99:1d:8b:0f:12:74:de:e7:03:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=882fa01902f4e8c347f2116e4645da1a6b4e0962 Validity Not Before: Jan 2 10:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01410a4d6edda5f0b263497e623d0754c4cbf8a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:89:67:2b:b9:2e:d9:c5:7f:19:e3:af:24:0c: 6d:8d:d3:14:ae:33:a5:5a:06:5c:df:13:16:f9:65: 03:8b:3a:40:34:54:27:f5:7a:4e:da:6f:c9:62:3b: 14:7d:2e:52:fa:47:0f:f0:33:08:67:25:1d:6c:1b: 0f:da:3c:b6:92:45:a1:53:37:52:de:48:8e:aa:99: 0e:b3:08:68:91:47:a2:c6:11:68:0a:e0:bb:3a:e3: 1d:a8:6e:b2:4d:3e:db:1d:68:f8:dc:9d:44:47:13: 72:d0:31:94:8a:e9:c6:ff:9b:12:0a:43:87:3c:b4: b0:83:6d:12:4f:82:50:41:a9:b8:14:f8:45:9c:f9: b3:c5:66:dd:3a:09:ba:9b:f8:aa:1e:46:20:52:26: 8f:a5:4e:26:86:a7:17:5c:53:b4:05:ea:f4:12:34: 3e:e0:67:d0:79:23:a0:e4:32:c3:36:e7:93:81:0d: ab:1b:36:18:f7:71:34:cc:42:c6:04:dd:30:1b:79: 71:42:47:97:40:c0:58:dd:12:38:46:df:f2:92:d0: 07:7d:0a:98:89:54:03:c4:ec:ef:a3:37:a9:fa:1b: 53:b0:0f:0a:4c:79:74:bb:61:1b:2a:e1:00:d6:67: fc:77:3b:77:3b:ca:38:84:d6:c9:8e:e8:fc:ed:ce: a5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:41:0A:4D:6E:DD:A5:F0:B2:63:49:7E:62:3D:07:54:C4:CB:F8:A6 X509v3 Authority Key Identifier: keyid:88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/AUEKTW7dpfCyY0l-Yj0HVMTL-KY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.244.32.0/23 80.244.39.0/24 185.17.202.0/24 185.199.11.0/24 IPv6: 2a0a:9741::/32 Signature Algorithm: sha256WithRSAEncryption 1a:fc:f6:99:fb:22:84:ec:eb:b6:77:79:b9:df:c8:1e:1a:69: f0:4c:2c:66:9b:eb:82:5d:4b:b9:d5:d2:42:12:67:95:ff:41: bb:14:2e:03:9e:58:96:57:12:cd:04:61:14:c9:30:f3:27:80: f7:20:82:9a:6b:3d:9b:da:00:2d:bb:5a:7d:a6:2d:93:35:e9: 45:dc:38:c1:ae:5a:25:26:6c:2f:63:d6:c5:52:e3:2e:ac:ac: 66:bb:b1:2a:8e:3c:86:0a:97:0c:f9:c3:b5:74:10:83:3a:77: 19:cb:8f:0e:15:07:ea:99:c2:85:ec:ca:f5:70:75:55:f0:8e: 10:3a:bd:05:d2:68:1e:52:3f:b2:0c:9d:ee:a0:4d:1d:76:fc: 35:f5:68:2f:11:61:63:90:1f:01:36:c0:64:58:f1:de:38:bb: 98:f0:2b:22:85:05:44:76:11:63:23:fe:1b:22:65:e0:7e:28: 06:0b:c6:b8:7c:6f:52:9e:14:f1:00:ec:47:12:6d:d6:29:c0: 49:cb:7d:bf:38:4d:dd:93:e4:3b:03:42:77:fd:4d:8d:14:d5: 35:a7:c5:b2:e3:16:a4:56:ea:07:93:51:76:7a:9c:96:ba:bb: 72:be:2e:db:29:3b:90:3a:f8:ed:aa:18:94:89:65:d8:eb:9d: 34:bd:e4:fc -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt+OQLin2mZHYsPEnTe5wPeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MmZhMDE5MDJmNGU4YzM0N2YyMTE2ZTQ2NDVkYTFhNmI0 ZTA5NjIwHhcNMjYwMTAyMTAyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTQxMGE0ZDZlZGRhNWYwYjI2MzQ5N2U2MjNkMDc1NGM0Y2JmOGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYlnK7ku2cV/GeOvJAxtjdMUrjOl WgZc3xMW+WUDizpANFQn9XpO2m/JYjsUfS5S+kcP8DMIZyUdbBsP2jy2kkWhUzdS 3kiOqpkOswhokUeixhFoCuC7OuMdqG6yTT7bHWj43J1ERxNy0DGUiunG/5sSCkOH PLSwg20ST4JQQam4FPhFnPmzxWbdOgm6m/iqHkYgUiaPpU4mhqcXXFO0Ber0EjQ+ 4GfQeSOg5DLDNueTgQ2rGzYY93E0zELGBN0wG3lxQkeXQMBY3RI4Rt/yktAHfQqY iVQDxOzvozep+htTsA8KTHl0u2EbKuEA1mf8dzt3O8o4hNbJjuj87c6lkQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFAFBCk1u3aXwsmNJfmI9B1TEy/imMB8GA1UdIwQY MBaAFIgvoBkC9OjDR/IRbkZF2hprTgliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUMtZ0dRTDA2TU5IOGhGdVJrWGFHbXRPQ1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9lYzA5ODEtZDY4Mi00ZjdiLWIyMTAt NWMyZDI2NTcwNWUwLzEvQVVFS1RXN2RwZkN5WTBsLVlqMEhWTVRMLUtZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9lYzA5ODEtZDY4Mi00ZjdiLWIyMTAtNWMyZDI2NTcwNWUw LzEvaUMtZ0dRTDA2TU5IOGhGdVJrWGFHbXRPQ1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBUPQgAwQA UPQnAwQAuRHKAwQAuccLMA0EAgACMAcDBQAqCpdBMA0GCSqGSIb3DQEBCwUAA4IB AQAa/PaZ+yKE7Ou2d3m538geGmnwTCxmm+uCXUu51dJCEmeV/0G7FC4DnliWVxLN BGEUyTDzJ4D3IIKaaz2b2gAtu1p9pi2TNelF3DjBrlolJmwvY9bFUuMurKxmu7Eq jjyGCpcM+cO1dBCDOncZy48OFQfqmcKF7Mr1cHVV8I4QOr0F0mgeUj+yDJ3uoE0d dvw19WgvEWFjkB8BNsBkWPHeOLuY8CsihQVEdhFjI/4bImXgfigGC8a4fG9SnhTx AOxHEm3WKcBJy32/OE3dk+Q7A0J3/U2NFNU1p8Wy4xakVuoHk1F2epyWurtyvi7b KTuQOvjtqhiUiWXY6500veT8 -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:47 2026 by rpki-client