This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/AoMLPhZExe6a-acTOonY5G6p87o.roa File: AoMLPhZExe6a-acTOonY5G6p87o.roa (raw, json) Hash identifier: GlOEB6CrWza06BRV4TlREAMAdwdF9KjOr3x10SdKDlg= Subject key identifier: 02:83:0B:3E:16:44:C5:EE:9A:F9:A7:13:3A:89:D8:E4:6E:A9:F3:BA Certificate issuer: /CN=da90d04bf57fa4868e69997c83b3ad771fd50a9d Certificate serial: 019B7C809ED3F86CDB753B9F6E0637E82102 Authority key identifier: DA:90:D0:4B:F5:7F:A4:86:8E:69:99:7C:83:B3:AD:77:1F:D5:0A:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pDQS_V_pIaOaZl8g7Otdx_VCp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/AoMLPhZExe6a-acTOonY5G6p87o.roa Signing time: Fri 02 Jan 2026 02:19:22 +0000 ROA not before: Fri 02 Jan 2026 02:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210939 IP address blocks: 185.237.124.0/22 maxlen: 22 2a11:9700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft rsync://rpki.ripe.net/repository/DEFAULT/2pDQS_V_pIaOaZl8g7Otdx_VCp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:9e:d3:f8:6c:db:75:3b:9f:6e:06:37:e8:21:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da90d04bf57fa4868e69997c83b3ad771fd50a9d Validity Not Before: Jan 2 02:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02830b3e1644c5ee9af9a7133a89d8e46ea9f3ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2e:e6:ef:6a:c9:c2:a1:05:c2:6b:21:4c:94: 3a:0a:4c:f0:9f:b7:99:f4:55:e3:c8:a1:5a:42:b1: 21:29:5d:13:7f:c4:7a:79:b4:3d:29:7e:57:da:bc: 24:8a:cc:18:86:c2:2f:fd:db:db:9d:c0:9a:4c:b3: 0c:61:d6:32:d8:a2:b0:3b:ad:18:47:a5:45:24:fc: 94:74:2c:a8:01:9a:a9:6a:04:6a:54:a7:fc:9a:dc: 46:09:fb:d3:6d:d1:94:f8:cd:a3:d0:9f:18:3c:a1: 0c:6c:d0:50:e0:50:8f:93:f7:99:6c:0f:a0:60:28: 54:94:63:95:28:e3:a2:86:d8:59:bc:5a:18:f7:06: 82:75:bc:7b:80:0a:a8:9b:1a:86:29:2f:d4:ea:3f: b8:9b:15:b2:a5:92:7a:d4:14:9d:35:da:08:87:a3: 22:4d:b0:d2:2d:66:10:ae:46:25:f1:b6:d7:66:ed: 77:c0:88:d3:ed:c2:8c:38:17:2c:95:3a:16:f7:c4: 6c:35:29:f8:0a:2b:64:fe:2f:e3:59:b2:9b:bf:09: 1a:2e:ec:f8:cc:74:9c:4d:2b:28:48:b7:e6:c7:d0: 1f:b6:59:6e:51:ba:ac:22:c5:b4:e9:d8:98:b9:d1: 3a:2d:b4:d0:45:45:49:d8:3f:ef:a3:97:3e:b6:5d: 98:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:83:0B:3E:16:44:C5:EE:9A:F9:A7:13:3A:89:D8:E4:6E:A9:F3:BA X509v3 Authority Key Identifier: keyid:DA:90:D0:4B:F5:7F:A4:86:8E:69:99:7C:83:B3:AD:77:1F:D5:0A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pDQS_V_pIaOaZl8g7Otdx_VCp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/AoMLPhZExe6a-acTOonY5G6p87o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.237.124.0/22 IPv6: 2a11:9700::/32 Signature Algorithm: sha256WithRSAEncryption 72:65:7f:c5:7e:97:7d:fa:a2:b4:0f:02:d9:74:e2:c7:19:0b: 8b:f5:10:01:8a:61:22:79:74:5e:95:88:5f:99:df:39:83:51: 15:d1:ce:1d:f9:70:4d:6e:2b:7b:05:49:42:2d:9d:ac:e0:0e: 5e:c2:a1:5a:82:b5:35:11:0e:00:9a:75:e0:0b:2e:8f:95:ce: 23:49:b0:bb:68:69:ad:48:53:a4:57:1c:9f:61:4f:40:6d:f2: 84:38:b7:97:40:56:cb:4b:4a:fd:0a:61:59:fb:b3:cd:8b:86: 73:2a:a5:78:6f:d2:40:ff:88:44:be:ab:cb:6a:e4:b0:39:66: 01:de:f0:c9:91:c3:9c:b3:d7:d3:4d:5d:af:58:4c:00:59:71: d4:27:b8:bf:d8:93:d0:a0:b9:f6:43:3f:d2:c3:15:10:49:a9: 1b:e7:ea:12:56:5c:b2:9a:aa:71:6c:02:68:7e:8d:98:59:35: 3f:f0:e4:60:e8:6e:aa:93:98:13:c2:88:1c:e6:a0:56:c8:4f: 14:a5:05:8c:03:bf:b7:13:0f:80:e1:ab:c6:bd:6e:93:14:d8: 67:d1:9f:0d:b0:43:57:68:5c:41:a5:96:7d:5d:18:2a:a1:d3: ce:cc:d8:e9:2e:7e:7c:76:0f:14:66:ca:7b:5f:6b:aa:34:c3: d4:95:e1:b9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gJ7T+GzbdTufbgY36CECMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOTBkMDRiZjU3ZmE0ODY4ZTY5OTk3YzgzYjNhZDc3MWZk NTBhOWQwHhcNMjYwMTAyMDIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjgzMGIzZTE2NDRjNWVlOWFmOWE3MTMzYTg5ZDhlNDZlYTlmM2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy7m72rJwqEFwmshTJQ6Ckzwn7eZ 9FXjyKFaQrEhKV0Tf8R6ebQ9KX5X2rwkiswYhsIv/dvbncCaTLMMYdYy2KKwO60Y R6VFJPyUdCyoAZqpagRqVKf8mtxGCfvTbdGU+M2j0J8YPKEMbNBQ4FCPk/eZbA+g YChUlGOVKOOihthZvFoY9waCdbx7gAqomxqGKS/U6j+4mxWypZJ61BSdNdoIh6Mi TbDSLWYQrkYl8bbXZu13wIjT7cKMOBcslToW98RsNSn4Citk/i/jWbKbvwkaLuz4 zHScTSsoSLfmx9AftlluUbqsIsW06diYudE6LbTQRUVJ2D/vo5c+tl2YjQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAKDCz4WRMXumvmnEzqJ2ORuqfO6MB8GA1UdIwQY MBaAFNqQ0Ev1f6SGjmmZfIOzrXcf1QqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnBEUVNfVl9wSWFPYVpsOGc3T3RkeF9WQ3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80ZDI1NDUtYTdkNS00NjVjLTk2MTgt NTFhZDljMzgyYThkLzEvQW9NTFBoWkV4ZTZhLWFjVE9vblk1RzZwODdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC80ZDI1NDUtYTdkNS00NjVjLTk2MTgtNTFhZDljMzgyYThk LzEvMnBEUVNfVl9wSWFPYVpsOGc3T3RkeF9WQ3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCue18MA0E AgACMAcDBQAqEZcAMA0GCSqGSIb3DQEBCwUAA4IBAQByZX/Ffpd9+qK0DwLZdOLH GQuL9RABimEieXRelYhfmd85g1EV0c4d+XBNbit7BUlCLZ2s4A5ewqFagrU1EQ4A mnXgCy6Plc4jSbC7aGmtSFOkVxyfYU9AbfKEOLeXQFbLS0r9CmFZ+7PNi4ZzKqV4 b9JA/4hEvqvLauSwOWYB3vDJkcOcs9fTTV2vWEwAWXHUJ7i/2JPQoLn2Qz/SwxUQ Sakb5+oSVlyymqpxbAJofo2YWTU/8ORg6G6qk5gTwogc5qBWyE8UpQWMA7+3Ew+A 4avGvW6TFNhn0Z8NsENXaFxBpZZ9XRgqodPOzNjpLn58dg8UZsp7X2uqNMPUleG5 -----END CERTIFICATE-----Generated at Mon Feb 9 22:14:58 2026 by rpki-client