This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/AEmrEvTl5nZilDd5lyZaWGwH9Rk.roa File: AEmrEvTl5nZilDd5lyZaWGwH9Rk.roa (raw, json) Hash identifier: PtBxNCrF8QX0P315dOs4ZmrXEvyhJt7cb+0UMIIHYW4= Subject key identifier: 00:49:AB:12:F4:E5:E6:76:62:94:37:79:97:26:5A:58:6C:07:F5:19 Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Certificate serial: 019B8E52067166D57FB75370CCF38044472C Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/AEmrEvTl5nZilDd5lyZaWGwH9Rk.roa Signing time: Mon 05 Jan 2026 13:21:38 +0000 ROA not before: Mon 05 Jan 2026 13:21:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208161 IP address blocks: 87.248.130.0/24 maxlen: 24 87.248.131.0/24 maxlen: 24 87.248.133.0/24 maxlen: 24 87.248.137.0/24 maxlen: 24 87.248.138.0/24 maxlen: 24 87.248.139.0/24 maxlen: 24 87.248.143.0/24 maxlen: 24 87.248.145.0/24 maxlen: 24 87.248.150.0/24 maxlen: 24 87.248.151.0/24 maxlen: 24 87.248.152.0/24 maxlen: 24 87.248.153.0/24 maxlen: 24 87.248.155.0/24 maxlen: 24 87.248.156.0/24 maxlen: 24 194.60.230.0/24 maxlen: 24 194.60.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8e:52:06:71:66:d5:7f:b7:53:70:cc:f3:80:44:47:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Validity Not Before: Jan 5 13:21:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0049ab12f4e5e6766294377997265a586c07f519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b3:68:83:af:db:84:c9:d6:7d:5e:b2:93:d6: f8:0f:b2:e3:07:a1:62:2a:47:97:e4:47:9a:7a:db: 73:f8:52:6a:3e:f7:fb:3d:eb:ee:15:55:0f:f4:7b: f2:85:06:f3:58:f6:51:42:6a:39:aa:b4:af:32:f6: a9:a2:68:01:56:f8:8c:d3:09:e4:ac:16:12:3d:13: 14:bf:cd:01:05:e8:75:15:ca:24:62:05:35:7a:85: 0a:45:6a:ff:cf:8a:b7:a8:26:2f:57:9d:08:96:0f: 4e:9a:5c:fc:19:c4:9e:63:c3:0b:54:ad:a7:0e:c2: 13:6b:9b:f4:77:58:f0:af:9e:b3:69:6b:5e:be:ce: 05:48:5d:50:67:c8:ad:0e:fd:f3:0b:ad:9c:df:15: 1c:f9:e7:fd:ee:b6:fc:b1:8a:35:d3:bc:cf:b1:f1: f3:23:35:f5:c0:a5:96:22:e9:8f:02:58:ea:7e:b1: 66:1e:ea:f7:8f:b6:c1:45:ba:ee:5e:85:a5:07:44: 39:a5:53:80:27:01:b5:6e:1a:26:0c:f6:e2:49:76: d8:11:9c:48:ae:8d:27:1b:40:67:30:d3:a1:1f:c7: 60:25:ae:66:0c:61:fd:01:3f:df:92:79:5b:37:9b: 6d:61:f5:7d:07:66:f5:0a:b8:fe:c3:78:bb:58:16: c8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:49:AB:12:F4:E5:E6:76:62:94:37:79:97:26:5A:58:6C:07:F5:19 X509v3 Authority Key Identifier: keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/AEmrEvTl5nZilDd5lyZaWGwH9Rk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.248.130.0/23 87.248.133.0/24 87.248.137.0-87.248.139.255 87.248.143.0/24 87.248.145.0/24 87.248.150.0-87.248.153.255 87.248.155.0-87.248.156.255 194.60.230.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:2f:6f:6a:44:ab:84:19:44:b4:c1:f7:dd:48:b2:67:33:2f: 52:8b:ea:12:69:37:da:41:25:fc:eb:45:2a:18:27:d5:81:a4: 20:a5:25:c4:d8:ff:18:3f:11:48:7c:2d:ad:9a:59:f7:48:ee: 2b:aa:d5:87:36:dc:67:a1:f7:76:73:01:3f:1f:a4:5e:15:65: 77:35:0b:d3:3b:9f:e1:32:74:4a:25:53:18:1c:8d:ff:82:c4: 62:dc:91:55:42:b8:85:e5:c3:98:b6:6a:5e:4c:c5:0d:84:98: 4f:99:a0:2d:5e:08:3d:4b:a8:44:90:5e:ee:f0:bb:6b:97:ea: 14:04:6a:30:a5:3a:c1:93:95:84:99:b2:a0:bd:56:96:49:df: ac:03:fe:8f:28:75:eb:9d:51:98:a9:58:70:01:06:91:3b:73: b2:f0:fa:e8:66:2f:46:85:30:a4:28:0f:ab:03:63:e2:73:c9: e8:83:74:8b:9a:b7:ce:dd:9c:5b:ab:36:54:ec:94:ba:4e:91: 4b:ca:cc:dd:84:11:d1:7a:12:42:5f:13:c2:92:62:d8:6a:09: 0e:f4:c9:83:62:d6:c9:16:54:af:a5:37:d8:44:e1:eb:82:c4: 54:01:f6:df:cf:26:b9:cf:dc:af:72:af:33:4c:16:b7:d7:24: bd:9b:84:2e -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZuOUgZxZtV/t1NwzPOAREcsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy ZmM4YjQwHhcNMjYwMTA1MTMyMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDQ5YWIxMmY0ZTVlNjc2NjI5NDM3Nzk5NzI2NWE1ODZjMDdmNTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrNog6/bhMnWfV6yk9b4D7LjB6Fi KkeX5Eeaettz+FJqPvf7PevuFVUP9HvyhQbzWPZRQmo5qrSvMvapomgBVviM0wnk rBYSPRMUv80BBeh1FcokYgU1eoUKRWr/z4q3qCYvV50Ilg9Omlz8GcSeY8MLVK2n DsITa5v0d1jwr56zaWtevs4FSF1QZ8itDv3zC62c3xUc+ef97rb8sYo107zPsfHz IzX1wKWWIumPAljqfrFmHur3j7bBRbruXoWlB0Q5pVOAJwG1bhomDPbiSXbYEZxI ro0nG0BnMNOhH8dgJa5mDGH9AT/fknlbN5ttYfV9B2b1Crj+w3i7WBbIqQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFABJqxL05eZ2YpQ3eZcmWlhsB/UZMB8GA1UdIwQY MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct ZDNiMzhjZTlkYzM0LzEvQUVtckV2VGw1blppbERkNWx5WmFXR3dIOVJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0 LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQBV/iCAwQA V/iFMAwDBABX+IkDBAJX+IgDBABX+I8DBABX+JEwDAMEAVf4lgMEAVf4mDAMAwQA V/ibAwQAV/icAwQBwjzmMA0GCSqGSIb3DQEBCwUAA4IBAQBdL29qRKuEGUS0wffd SLJnMy9Si+oSaTfaQSX860UqGCfVgaQgpSXE2P8YPxFIfC2tmln3SO4rqtWHNtxn ofd2cwE/H6ReFWV3NQvTO5/hMnRKJVMYHI3/gsRi3JFVQriF5cOYtmpeTMUNhJhP maAtXgg9S6hEkF7u8Ltrl+oUBGowpTrBk5WEmbKgvVaWSd+sA/6PKHXrnVGYqVhw AQaRO3Oy8ProZi9GhTCkKA+rA2Pic8nog3SLmrfO3ZxbqzZU7JS6TpFLyszdhBHR ehJCXxPCkmLYagkO9MmDYtbJFlSvpTfYROHrgsRUAfbfzya5z9yvcq8zTBa31yS9 m4Qu -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:52 2026 by rpki-client