This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/Ae57O12AoGSXg6OjRfpvqk40IWY.roa File: Ae57O12AoGSXg6OjRfpvqk40IWY.roa (raw, json) Hash identifier: jqB4zbEQVsVqha6FZMRqBv2gE+Oo/oekXl882sDWeVU= Subject key identifier: 01:EE:7B:3B:5D:80:A0:64:97:83:A3:A3:45:FA:6F:AA:4E:34:21:66 Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019B7E3895B2E41E414A346139EB0A54553E Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/Ae57O12AoGSXg6OjRfpvqk40IWY.roa Signing time: Fri 02 Jan 2026 10:19:56 +0000 ROA not before: Fri 02 Jan 2026 10:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40999 IP address blocks: 83.125.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:95:b2:e4:1e:41:4a:34:61:39:eb:0a:54:55:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Jan 2 10:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01ee7b3b5d80a0649783a3a345fa6faa4e342166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:16:30:f9:8e:b2:74:bf:09:cf:50:c3:91:b0: fe:98:ce:28:42:20:1d:80:ee:74:0f:6f:a1:4a:b8: ab:79:f0:c1:5f:f3:94:a1:f4:ec:d2:92:b0:17:55: 5d:52:f1:ad:96:ac:78:88:d5:87:dc:34:28:eb:e1: 2e:c5:69:30:e7:33:31:cd:f2:cc:2c:43:aa:f7:4c: e3:87:a2:67:af:a6:28:74:0c:45:eb:03:d0:57:19: 87:64:5e:ff:b8:50:4e:bc:82:fe:01:b8:02:6a:5f: ef:13:3a:24:2e:94:01:54:f4:f5:0e:87:84:70:bc: 7d:b7:86:07:7a:79:a0:a6:82:b8:d4:f3:41:37:46: 6f:5e:2d:a3:fb:21:5f:46:e6:65:2a:f2:65:67:d6: e5:db:f1:49:8e:ba:b9:35:21:0b:b1:ca:fc:ae:f4: 96:61:88:22:85:1c:be:1d:6c:81:f8:e7:33:03:76: 91:f6:6c:f3:c8:53:51:43:bc:39:2b:f4:a7:21:bf: db:75:f9:87:47:aa:fc:20:7a:55:f1:04:60:e0:2c: b0:77:3d:17:de:53:c4:6a:f9:8c:d9:2c:5d:2e:56: 38:09:4a:c4:c5:51:ba:88:65:04:cc:46:51:11:8c: 77:59:bb:65:c4:9f:94:c8:4f:c4:e8:e9:53:77:20: aa:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EE:7B:3B:5D:80:A0:64:97:83:A3:A3:45:FA:6F:AA:4E:34:21:66 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/Ae57O12AoGSXg6OjRfpvqk40IWY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.125.8.0/22 Signature Algorithm: sha256WithRSAEncryption 12:b7:32:1c:d7:d6:15:28:94:a7:b2:07:cf:b2:a1:61:fe:b8: 37:20:60:ad:b1:bd:a5:d0:03:15:bc:39:47:e6:9b:6a:1b:b3: 15:d2:3e:f3:7a:66:ca:db:b7:64:ff:11:7c:8d:e4:4b:2f:f4: 33:2a:9e:12:d4:09:7b:3e:53:0c:51:1a:c7:c3:86:87:6f:3e: 06:59:0c:e8:4e:03:64:9d:3d:5f:b9:78:b8:89:9f:cc:47:9c: bc:33:b7:84:2e:8b:a3:72:06:9b:95:48:81:8a:5a:06:ad:8e: 24:d7:9f:f8:9f:21:f1:e6:7c:f6:0d:69:14:62:a3:e6:be:77: ee:77:4d:b0:b5:fc:9d:93:d8:24:de:9c:72:bb:f7:14:8d:ca: 93:d3:b2:a2:d0:fe:ed:1b:72:08:82:c5:03:a4:ac:3e:65:81: 52:a9:69:b5:97:c2:f0:88:d6:73:98:42:b8:ba:31:0f:77:fa: cb:45:57:ca:35:4c:36:d0:f3:9a:a4:9c:93:13:94:12:3d:21: d9:2a:2e:d9:c4:15:51:9c:aa:c5:fd:ac:10:dd:a5:d5:a7:08: 47:05:d2:c5:f9:98:84:c1:ff:47:64:0b:84:c4:70:76:16:b3: bf:84:51:34:e7:63:82:1e:44:9a:dc:df:c1:17:fb:d5:8f:e4: 5a:94:e9:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJWy5B5BSjRhOesKVFU+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwMTAyMTAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWVlN2IzYjVkODBhMDY0OTc4M2EzYTM0NWZhNmZhYTRlMzQyMTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hYw+Y6ydL8Jz1DDkbD+mM4oQiAd gO50D2+hSrirefDBX/OUofTs0pKwF1VdUvGtlqx4iNWH3DQo6+EuxWkw5zMxzfLM LEOq90zjh6Jnr6YodAxF6wPQVxmHZF7/uFBOvIL+AbgCal/vEzokLpQBVPT1DoeE cLx9t4YHenmgpoK41PNBN0ZvXi2j+yFfRuZlKvJlZ9bl2/FJjrq5NSELscr8rvSW YYgihRy+HWyB+OczA3aR9mzzyFNRQ7w5K/SnIb/bdfmHR6r8IHpV8QRg4Cywdz0X 3lPEavmM2SxdLlY4CUrExVG6iGUEzEZREYx3WbtlxJ+UyE/E6OlTdyCq5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAHueztdgKBkl4Ojo0X6b6pONCFmMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvQWU1N08xMkFvR1NYZzZPalJmcHZxazQwSVdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU30IMA0G CSqGSIb3DQEBCwUAA4IBAQAStzIc19YVKJSnsgfPsqFh/rg3IGCtsb2l0AMVvDlH 5ptqG7MV0j7zembK27dk/xF8jeRLL/QzKp4S1Al7PlMMURrHw4aHbz4GWQzoTgNk nT1fuXi4iZ/MR5y8M7eELoujcgablUiBiloGrY4k15/4nyHx5nz2DWkUYqPmvnfu d02wtfydk9gk3pxyu/cUjcqT07Ki0P7tG3IIgsUDpKw+ZYFSqWm1l8LwiNZzmEK4 ujEPd/rLRVfKNUw20POapJyTE5QSPSHZKi7ZxBVRnKrF/awQ3aXVpwhHBdLF+ZiE wf9HZAuExHB2FrO/hFE052OCHkSa3N/BF/vVj+RalOkp -----END CERTIFICATE-----Generated at Thu Feb 5 13:56:11 2026 by rpki-client