This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/aE8_gVmck-wD_VyyQXZL4UyhlMU.roa File: aE8_gVmck-wD_VyyQXZL4UyhlMU.roa (raw, json) Hash identifier: GaAIUgFsYTQaT7thc7zx4Q22k1Bx49GbLq0/1lvEmRM= Subject key identifier: 68:4F:3F:81:59:9C:93:EC:03:FD:5C:B2:41:76:4B:E1:4C:A1:94:C5 Certificate issuer: /CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57 Certificate serial: 019B79EBBCA119B17ACA42AF9BD07E23783E Authority key identifier: C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/aE8_gVmck-wD_VyyQXZL4UyhlMU.roa Signing time: Thu 01 Jan 2026 14:17:30 +0000 ROA not before: Thu 01 Jan 2026 14:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206063 IP address blocks: 185.39.252.0/24 maxlen: 24 185.39.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:bc:a1:19:b1:7a:ca:42:af:9b:d0:7e:23:78:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57 Validity Not Before: Jan 1 14:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=684f3f81599c93ec03fd5cb241764be14ca194c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:17:da:3a:cf:b0:41:e7:53:db:58:ff:37:2a: 5d:f5:e5:04:5a:c8:74:e2:a2:46:f0:ff:dd:fe:f7: 3e:46:31:1e:10:5f:4a:38:91:ff:7f:7f:6f:fb:c5: 27:bc:52:c1:08:22:bb:0b:37:b8:24:8f:99:9d:5a: 7b:2e:8c:4f:14:4b:06:94:22:ff:24:4f:7d:b1:02: 45:c5:00:9b:04:4c:4d:22:ac:10:1e:e8:51:a7:58: b1:61:cf:67:15:c0:eb:4c:a7:c6:a0:e2:b3:7b:8f: 67:8b:d9:29:a5:5c:32:d3:6e:e4:97:67:7c:97:a0: 04:1a:a4:e9:2f:90:1a:57:c1:76:87:7c:3e:19:16: 0c:11:4d:57:11:05:3f:7c:fc:ce:96:a7:59:b6:06: a9:22:fc:47:91:2d:28:46:54:74:a7:96:0f:be:3f: c9:60:95:fc:bb:cd:58:ae:44:76:a7:eb:18:32:fd: b7:74:ef:3f:17:26:54:cb:f8:54:00:76:fc:93:c8: 2a:d0:0e:e0:32:9f:29:10:1e:0a:a4:e9:aa:24:92: a9:98:45:11:d5:de:3b:3c:06:2a:9a:56:85:cd:f2: b4:32:50:db:6a:87:fe:e7:04:b2:8e:4c:74:99:61: c6:de:01:29:65:bf:c9:3e:86:d7:49:13:90:49:02: f5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4F:3F:81:59:9C:93:EC:03:FD:5C:B2:41:76:4B:E1:4C:A1:94:C5 X509v3 Authority Key Identifier: keyid:C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/aE8_gVmck-wD_VyyQXZL4UyhlMU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.39.252.0/24 185.39.254.0/23 Signature Algorithm: sha256WithRSAEncryption 76:e8:12:97:44:27:d7:11:8a:0e:d9:c5:22:00:7d:ba:b3:8c: f7:28:69:e3:41:95:7d:b9:f8:93:c2:45:a1:42:e7:6b:66:91: 2a:fa:86:f7:ea:c1:1a:87:59:b1:07:53:b4:55:d1:3e:61:3d: a0:76:d9:d9:78:24:53:04:e5:ca:65:eb:b6:a7:4d:06:34:3d: 7e:10:ae:7b:a2:c3:54:ab:0f:21:52:b7:73:53:2c:75:f3:85: 1c:f4:68:88:4f:4d:7d:64:0a:2e:3a:74:20:67:4e:f8:c3:1d: f2:11:00:a7:ad:9f:3f:98:38:77:25:d3:51:5c:74:dc:5b:5c: cc:93:23:d6:ed:0c:57:a8:80:6c:e5:22:68:bc:94:5c:5b:06: 60:26:d7:fd:eb:d9:51:03:9c:5b:75:36:3e:54:9a:92:cb:88: d1:ba:65:58:0e:5f:47:d7:41:13:81:5c:bc:1c:88:28:a1:b9: 85:ca:05:73:cb:19:5f:21:b1:e4:c9:a6:07:71:6c:95:90:1d: da:60:d3:2f:df:87:e9:ee:15:74:cc:e5:e9:da:3c:4d:c2:ca: af:71:2f:0d:fe:25:7c:d7:57:1c:e9:41:4e:80:0d:eb:51:19: ab:1d:2d:11:98:97:28:ca:6f:c7:8f:8d:8f:91:76:3d:fc:29: 73:67:16:d5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt567yhGbF6ykKvm9B+I3g+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5Y2QzOGQxZDFjNGEyMzA1M2NkOTk3MTYzMzE4ZDY0OWE3 YjJhNTcwHhcNMjYwMTAxMTQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODRmM2Y4MTU5OWM5M2VjMDNmZDVjYjI0MTc2NGJlMTRjYTE5NGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshfaOs+wQedT21j/Nypd9eUEWsh0 4qJG8P/d/vc+RjEeEF9KOJH/f39v+8UnvFLBCCK7Cze4JI+ZnVp7LoxPFEsGlCL/ JE99sQJFxQCbBExNIqwQHuhRp1ixYc9nFcDrTKfGoOKze49ni9kppVwy027kl2d8 l6AEGqTpL5AaV8F2h3w+GRYMEU1XEQU/fPzOlqdZtgapIvxHkS0oRlR0p5YPvj/J YJX8u81YrkR2p+sYMv23dO8/FyZUy/hUAHb8k8gq0A7gMp8pEB4KpOmqJJKpmEUR 1d47PAYqmlaFzfK0MlDbaof+5wSyjkx0mWHG3gEpZb/JPobXSROQSQL19wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGhPP4FZnJPsA/1cskF2S+FMoZTFMB8GA1UdIwQY MBaAFMnNONHRxKIwU82ZcWMxjWSaeypXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWMwNDBkSEVvakJUelpseFl6R05aSnA3S2xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yMmU0OWQtNjk1My00ZmM4LWE4OTYt YzVjMzU4ODM3YTg0LzEvYUU4X2dWbWNrLXdEX1Z5eVFYWkw0VXlobE1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8yMmU0OWQtNjk1My00ZmM4LWE4OTYtYzVjMzU4ODM3YTg0 LzEveWMwNDBkSEVvakJUelpseFl6R05aSnA3S2xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuSf8AwQB uSf+MA0GCSqGSIb3DQEBCwUAA4IBAQB26BKXRCfXEYoO2cUiAH26s4z3KGnjQZV9 ufiTwkWhQudrZpEq+ob36sEah1mxB1O0VdE+YT2gdtnZeCRTBOXKZeu2p00GND1+ EK57osNUqw8hUrdzUyx184Uc9GiIT019ZAouOnQgZ074wx3yEQCnrZ8/mDh3JdNR XHTcW1zMkyPW7QxXqIBs5SJovJRcWwZgJtf969lRA5xbdTY+VJqSy4jRumVYDl9H 10ETgVy8HIgoobmFygVzyxlfIbHkyaYHcWyVkB3aYNMv34fp7hV0zOXp2jxNwsqv cS8N/iV811cc6UFOgA3rURmrHS0RmJcoym/Hj42PkXY9/ClzZxbV -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:33 2026 by rpki-client