This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/AAbaveMWu6ZvYBBAf53Y67hJ2fM.roa File: AAbaveMWu6ZvYBBAf53Y67hJ2fM.roa (raw, json) Hash identifier: PYrSQPf2OSXM7Gp0VwXCg0G4HEl6VTqsTDAfhxhlhM8= Subject key identifier: 00:06:DA:BD:E3:16:BB:A6:6F:60:10:40:7F:9D:D8:EB:B8:49:D9:F3 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAC65B92BCCE12D91EC3AEBBA1F1E4 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/AAbaveMWu6ZvYBBAf53Y67hJ2fM.roa Signing time: Thu 01 Jan 2026 00:17:36 +0000 ROA not before: Thu 01 Jan 2026 00:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 141968 IP address blocks: 45.66.153.0/24 maxlen: 24 85.209.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c6:5b:92:bc:ce:12:d9:1e:c3:ae:bb:a1:f1:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0006dabde316bba66f6010407f9dd8ebb849d9f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a1:94:ec:66:36:80:c8:56:47:0b:a3:39:ce: b9:50:2e:18:1c:dc:03:3a:c5:1c:11:0d:b6:8b:cc: 71:40:56:46:68:8a:37:b7:86:68:a4:19:1a:fd:ea: 10:f8:87:f4:ea:95:26:7c:29:22:15:f0:cb:82:dc: cb:9e:9c:43:31:a6:e0:31:5f:d1:b3:b2:6a:bc:90: 59:a0:08:c9:9f:f5:57:ae:a5:17:93:52:32:1e:55: 16:12:f4:d2:ce:0e:aa:6c:bf:b4:cd:35:c5:85:fe: ff:4b:3d:26:81:37:fa:d7:78:48:ac:0e:30:66:fa: 7b:25:06:31:eb:5f:3d:8e:d2:d1:80:52:e1:ae:48: 60:16:d8:1e:aa:89:84:b1:3f:d7:68:44:d0:b9:b0: 92:3c:39:de:46:6c:16:60:2d:b0:0f:cf:f6:63:42: d7:99:0f:7d:81:19:6a:09:64:3e:38:ca:2c:48:a9: 89:8c:53:9b:f5:76:23:7a:cf:79:93:03:dd:82:df: 99:b0:4a:33:0e:ac:90:56:fd:66:46:a8:08:15:ee: f5:7a:90:82:85:38:2c:13:c7:e6:01:27:e6:43:ec: c7:dc:ea:8b:01:7f:c5:b5:94:67:85:59:6a:67:0a: ff:f9:32:87:9c:08:d5:85:39:9f:46:bb:07:c6:f1: 5e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:06:DA:BD:E3:16:BB:A6:6F:60:10:40:7F:9D:D8:EB:B8:49:D9:F3 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/AAbaveMWu6ZvYBBAf53Y67hJ2fM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.153.0/24 85.209.163.0/24 Signature Algorithm: sha256WithRSAEncryption bc:09:3c:8d:e8:e3:23:10:f3:e6:b9:ab:49:9e:c0:02:22:49: 0e:7d:63:9b:9c:bd:47:9f:bb:6b:92:c4:71:43:45:e2:39:de: c2:a7:44:5f:e2:c0:be:1c:74:dc:c2:b2:f5:b8:c4:1d:ce:a0: 48:b1:f5:ef:0e:bc:a1:76:12:4a:e2:36:07:54:9e:b3:52:a8: 2b:b3:c4:c2:64:6f:f0:f2:73:38:17:0c:1b:0a:85:7a:74:3c: f6:d5:f6:2b:85:a0:9d:51:91:4d:46:dd:cc:bd:e1:78:34:53: 1a:72:07:db:8a:54:4f:20:33:b0:f8:a2:5a:87:e3:c3:e2:c4: 9c:68:ab:03:03:17:67:59:c1:b3:c4:77:be:99:a6:2e:3d:d8: fd:36:e7:50:64:b4:f7:19:c5:53:3e:8c:85:5a:fa:74:ce:6f: 01:62:d2:81:fe:f2:37:1b:54:e3:a8:43:3e:f9:ba:52:95:de: a9:79:74:9a:8a:63:64:dc:d1:10:a1:be:48:93:53:10:54:b9: e3:ee:da:c3:16:36:20:b3:c4:b7:6f:9c:27:61:25:1c:71:92: 28:54:c0:19:c5:1a:70:fd:22:88:29:b7:7e:36:34:ab:28:dc: 42:43:ca:54:15:dc:08:98:d9:96:ec:17:2d:5b:f6:61:9a:3c: 03:91:05:fc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26sZbkrzOEtkew667ofHkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDA2ZGFiZGUzMTZiYmE2NmY2MDEwNDA3ZjlkZDhlYmI4NDlkOWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqGU7GY2gMhWRwujOc65UC4YHNwD OsUcEQ22i8xxQFZGaIo3t4ZopBka/eoQ+If06pUmfCkiFfDLgtzLnpxDMabgMV/R s7JqvJBZoAjJn/VXrqUXk1IyHlUWEvTSzg6qbL+0zTXFhf7/Sz0mgTf613hIrA4w Zvp7JQYx6189jtLRgFLhrkhgFtgeqomEsT/XaETQubCSPDneRmwWYC2wD8/2Y0LX mQ99gRlqCWQ+OMosSKmJjFOb9XYjes95kwPdgt+ZsEozDqyQVv1mRqgIFe71epCC hTgsE8fmASfmQ+zH3OqLAX/FtZRnhVlqZwr/+TKHnAjVhTmfRrsHxvFeyQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAAG2r3jFrumb2AQQH+d2Ou4SdnzMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvQUFiYXZlTVd1Nlp2WUJCQWY1M1k2N2hKMmZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALUKZAwQA VdGjMA0GCSqGSIb3DQEBCwUAA4IBAQC8CTyN6OMjEPPmuatJnsACIkkOfWObnL1H n7trksRxQ0XiOd7Cp0Rf4sC+HHTcwrL1uMQdzqBIsfXvDryhdhJK4jYHVJ6zUqgr s8TCZG/w8nM4FwwbCoV6dDz21fYrhaCdUZFNRt3MveF4NFMacgfbilRPIDOw+KJa h+PD4sScaKsDAxdnWcGzxHe+maYuPdj9NudQZLT3GcVTPoyFWvp0zm8BYtKB/vI3 G1TjqEM++bpSld6peXSaimNk3NEQob5Ik1MQVLnj7trDFjYgs8S3b5wnYSUccZIo VMAZxRpw/SKIKbd+NjSrKNxCQ8pUFdwImNmW7BctW/ZhmjwDkQX8 -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:43 2026 by rpki-client