This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/aRuatR-K8nQ9ZXL9FpjwSLceO4A.roa File: aRuatR-K8nQ9ZXL9FpjwSLceO4A.roa (raw, json) Hash identifier: Vt5YWGyW9wbAPKP7kNgM97gFfWqXrRoxA2e6gMj6LNc= Subject key identifier: 69:1B:9A:B5:1F:8A:F2:74:3D:65:72:FD:16:98:F0:48:B7:1E:3B:80 Certificate issuer: /CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890 Certificate serial: 019B7E37CD2C06C6F98B8C82E08739A6FC5E Authority key identifier: 63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/aRuatR-K8nQ9ZXL9FpjwSLceO4A.roa Signing time: Fri 02 Jan 2026 10:19:04 +0000 ROA not before: Fri 02 Jan 2026 10:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39257 IP address blocks: 109.197.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:cd:2c:06:c6:f9:8b:8c:82:e0:87:39:a6:fc:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890 Validity Not Before: Jan 2 10:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=691b9ab51f8af2743d6572fd1698f048b71e3b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e4:2f:2a:0f:6a:22:8f:82:6c:89:e2:c0:c5: 6e:34:ef:e9:72:9e:92:1d:d9:3c:a6:d1:da:40:f7: e0:0d:d9:6b:59:bd:5b:91:eb:d2:17:39:61:50:e5: 6e:d4:0d:dc:99:48:37:3a:b1:4f:14:3c:30:44:d4: 25:56:94:aa:e6:a8:3d:62:1f:ac:a6:ba:0f:6c:d8: a3:33:90:3e:b4:af:e6:ac:ba:71:5f:a0:ce:6d:f3: 42:14:47:7f:11:8f:63:73:e0:89:a3:98:df:89:5c: 59:62:12:34:0e:3f:d1:cc:a2:e2:2e:0c:72:92:c5: 0b:fb:cb:30:f7:7b:67:6c:db:c1:55:35:bd:72:9e: 71:c4:58:3c:fa:8a:69:38:f9:3c:25:83:6c:70:52: 81:f3:d3:b3:e6:f0:df:2e:1a:d3:41:ea:36:b9:ff: 1c:a3:c7:c5:67:af:26:83:4d:21:b5:31:4b:d5:ec: 24:f4:34:7c:2e:6a:92:2b:81:a8:c7:e6:89:66:11: bd:25:41:bb:df:c7:50:ce:9f:a4:19:0c:c6:8e:ab: e9:b0:60:17:7a:70:38:8c:82:26:f8:4d:f9:55:dd: e5:d8:e9:b7:71:57:5f:9b:8e:d7:2c:20:84:33:22: b5:e5:b5:eb:8f:c2:4f:cc:e3:0a:ab:bf:65:d3:51: 46:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1B:9A:B5:1F:8A:F2:74:3D:65:72:FD:16:98:F0:48:B7:1E:3B:80 X509v3 Authority Key Identifier: keyid:63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/aRuatR-K8nQ9ZXL9FpjwSLceO4A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.197.165.0/24 Signature Algorithm: sha256WithRSAEncryption 20:3d:14:61:7d:29:69:c0:da:34:f3:ed:d0:5c:72:9e:8d:4d: 4c:41:6f:62:f0:71:21:01:24:1e:9c:b3:a3:46:56:e3:46:82: 18:0b:3a:75:15:6a:9b:ab:70:82:50:0c:0e:7c:18:a5:39:15: b3:33:39:d7:18:b5:f7:e0:b2:df:7c:9d:13:1a:c5:ad:83:2b: f1:58:33:50:c3:da:c8:40:ad:35:37:ff:a2:d6:0f:83:e0:50: 0f:76:ec:1a:6b:d6:8d:18:84:4c:a3:93:d6:2a:ad:f4:b7:57: 24:cd:e3:b8:c4:65:f5:b4:35:d5:13:05:f2:b1:d2:98:90:bf: 0f:46:0f:20:2b:fc:db:04:55:10:15:60:ab:6f:6e:fc:b5:91: 4b:95:38:7c:23:74:bf:b4:b1:ac:a5:aa:2d:e1:70:2d:10:e4: 47:2b:51:88:bb:a9:7b:b4:3c:ea:22:49:c5:5d:dd:43:21:9c: b0:96:3c:0e:3c:24:d3:ec:61:1c:d2:0e:78:52:30:e4:6a:a9: 0b:ce:95:43:c5:1b:2b:f4:b5:64:a7:81:5c:29:70:22:76:56: 20:60:98:54:ae:67:db:dd:1f:18:42:dd:d1:d7:3b:48:4d:ca: 19:18:b0:87:30:ad:a6:1f:b2:02:d3:d8:8a:ef:34:d6:c2:f5: 55:f5:af:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N80sBsb5i4yC4Ic5pvxeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzOGM4M2Y5YTNhM2QyMTYwYTAxNzhjYTE5Y2NiNDNhMGQy ZjE4OTAwHhcNMjYwMTAyMTAxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTFiOWFiNTFmOGFmMjc0M2Q2NTcyZmQxNjk4ZjA0OGI3MWUzYjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eQvKg9qIo+CbIniwMVuNO/pcp6S Hdk8ptHaQPfgDdlrWb1bkevSFzlhUOVu1A3cmUg3OrFPFDwwRNQlVpSq5qg9Yh+s proPbNijM5A+tK/mrLpxX6DObfNCFEd/EY9jc+CJo5jfiVxZYhI0Dj/RzKLiLgxy ksUL+8sw93tnbNvBVTW9cp5xxFg8+oppOPk8JYNscFKB89Oz5vDfLhrTQeo2uf8c o8fFZ68mg00htTFL1ewk9DR8LmqSK4Gox+aJZhG9JUG738dQzp+kGQzGjqvpsGAX enA4jIIm+E35Vd3l2Om3cVdfm47XLCCEMyK15bXrj8JPzOMKq79l01FGeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGkbmrUfivJ0PWVy/RaY8Ei3HjuAMB8GA1UdIwQY MBaAFGOMg/mjo9IWCgF4yhnMtDoNLxiQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTR5RC1hT2owaFlLQVhqS0djeTBPZzB2R0pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jYzNjMjgtN2IxMy00MzQzLWFmMzct MjU1NTBiYTI5MTI3LzEvYVJ1YXRSLUs4blE5WlhMOUZwandTTGNlTzRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jYzNjMjgtN2IxMy00MzQzLWFmMzctMjU1NTBiYTI5MTI3 LzEvWTR5RC1hT2owaFlLQVhqS0djeTBPZzB2R0pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbcWlMA0G CSqGSIb3DQEBCwUAA4IBAQAgPRRhfSlpwNo08+3QXHKejU1MQW9i8HEhASQenLOj RlbjRoIYCzp1FWqbq3CCUAwOfBilORWzMznXGLX34LLffJ0TGsWtgyvxWDNQw9rI QK01N/+i1g+D4FAPduwaa9aNGIRMo5PWKq30t1ckzeO4xGX1tDXVEwXysdKYkL8P Rg8gK/zbBFUQFWCrb278tZFLlTh8I3S/tLGspaot4XAtEORHK1GIu6l7tDzqIknF Xd1DIZywljwOPCTT7GEc0g54UjDkaqkLzpVDxRsr9LVkp4FcKXAidlYgYJhUrmfb 3R8YQt3R1ztITcoZGLCHMK2mH7IC09iK7zTWwvVV9a9r -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:26 2026 by rpki-client