This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/aON68VTwskogSIwfK0by-nZp_Rg.roa File: aON68VTwskogSIwfK0by-nZp_Rg.roa (raw, json) Hash identifier: dkh8/Wbv+HTgUBFM4ZbuS+fZuVAjLH6qIB6RVSRMT9M= Subject key identifier: 68:E3:7A:F1:54:F0:B2:4A:20:48:8C:1F:2B:46:F2:FA:76:69:FD:18 Certificate issuer: /CN=7404e16f333d89650c6613ac6c95d348dc4b7950 Certificate serial: 019B7FF2B587555CF6BEAB8489E8782FA74A Authority key identifier: 74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/aON68VTwskogSIwfK0by-nZp_Rg.roa Signing time: Fri 02 Jan 2026 18:22:51 +0000 ROA not before: Fri 02 Jan 2026 18:22:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210976 IP address blocks: 185.11.134.0/24 maxlen: 24 185.11.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:b5:87:55:5c:f6:be:ab:84:89:e8:78:2f:a7:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7404e16f333d89650c6613ac6c95d348dc4b7950 Validity Not Before: Jan 2 18:22:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68e37af154f0b24a20488c1f2b46f2fa7669fd18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e5:fd:65:66:1b:04:2f:3b:e3:63:80:3d:7c: 0b:86:70:74:58:f0:87:ae:ee:38:9d:d5:06:ed:e2: 5a:3b:b4:16:f1:46:2c:9c:a7:5d:ba:43:b7:65:6e: 21:74:75:6a:41:9d:dc:a8:43:fa:a8:a5:0e:71:70: 36:f7:06:fd:d9:41:61:6d:b6:da:51:bc:c5:37:cd: f4:eb:d7:b9:78:75:4a:a5:8e:f9:a4:b0:b7:99:64: 0c:f0:19:c1:59:88:ad:18:58:1b:67:43:a7:26:93: c4:a1:82:0d:bc:6e:fd:a6:df:0c:56:c1:f0:47:2f: 68:af:98:0e:33:10:30:a1:fd:89:ff:d2:51:4e:5a: e5:4a:2e:cc:f5:c4:8f:03:e0:a0:f7:86:da:cc:e1: 77:21:76:51:c0:58:15:16:c0:dc:23:b0:69:04:38: f0:20:76:8f:9f:19:dd:df:52:e3:b4:a1:25:21:3f: 0f:54:d3:6e:ee:28:16:89:9d:cb:b0:94:a8:b8:3e: e3:74:1f:3d:e7:33:50:df:69:5b:4b:22:6c:bf:ba: 10:8e:b8:ec:61:ab:40:3b:dc:74:8b:70:7d:97:16: e1:90:80:7d:b5:28:f4:37:2e:21:f4:d2:98:47:ac: 46:9e:64:18:7b:ff:73:9c:e5:ad:be:05:74:ab:3b: 2a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E3:7A:F1:54:F0:B2:4A:20:48:8C:1F:2B:46:F2:FA:76:69:FD:18 X509v3 Authority Key Identifier: keyid:74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/aON68VTwskogSIwfK0by-nZp_Rg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.11.134.0/23 Signature Algorithm: sha256WithRSAEncryption 72:f3:7e:7a:86:c5:63:b7:9f:a3:e7:ab:9a:21:b7:96:80:f7: 12:c5:d2:6d:de:8d:fe:23:ed:b8:f4:91:67:b9:8b:6f:f4:cd: 35:db:b3:75:cf:77:e4:e2:ee:be:75:62:d6:74:34:db:07:7a: 78:5e:2a:5e:28:17:d1:62:fe:61:85:a5:c1:73:bf:f5:d7:00: fe:cc:6a:ef:b5:b4:53:12:39:8c:9e:ba:66:b9:3e:86:a7:f8: 18:6f:32:8e:31:c7:14:fd:85:e6:f1:71:85:6f:5e:71:97:38: 34:a4:83:bb:88:dc:b5:4f:a4:d7:4d:46:54:14:c3:61:1a:99: 92:65:a0:79:68:c9:7d:24:7d:d7:b7:24:59:83:37:d8:54:2a: ce:80:6c:1a:41:b0:fc:85:08:8f:a9:75:5e:da:3d:59:15:fa: 59:47:89:2e:73:8b:c8:cb:ab:0d:16:fe:d6:a3:39:6c:0c:d5: 2d:f3:67:f2:e5:a0:37:4e:ac:80:cc:e9:12:1a:cf:d2:a4:e8: a7:47:2d:96:5c:42:e4:b1:53:fe:8c:d5:48:72:20:ff:5a:e8: 36:19:6f:e7:e1:45:d7:eb:ec:9d:c9:b0:ad:94:f4:73:6c:cd: 75:f1:bd:fe:d6:ca:7d:4c:9e:37:a7:99:76:7e:a9:a5:4f:5c: c4:33:64:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8rWHVVz2vquEieh4L6dKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MDRlMTZmMzMzZDg5NjUwYzY2MTNhYzZjOTVkMzQ4ZGM0 Yjc5NTAwHhcNMjYwMTAyMTgyMjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGUzN2FmMTU0ZjBiMjRhMjA0ODhjMWYyYjQ2ZjJmYTc2NjlmZDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+X9ZWYbBC8742OAPXwLhnB0WPCH ru44ndUG7eJaO7QW8UYsnKddukO3ZW4hdHVqQZ3cqEP6qKUOcXA29wb92UFhbbba UbzFN83069e5eHVKpY75pLC3mWQM8BnBWYitGFgbZ0OnJpPEoYINvG79pt8MVsHw Ry9or5gOMxAwof2J/9JRTlrlSi7M9cSPA+Cg94bazOF3IXZRwFgVFsDcI7BpBDjw IHaPnxnd31LjtKElIT8PVNNu7igWiZ3LsJSouD7jdB895zNQ32lbSyJsv7oQjrjs YatAO9x0i3B9lxbhkIB9tSj0Ny4h9NKYR6xGnmQYe/9znOWtvgV0qzsq/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGjjevFU8LJKIEiMHytG8vp2af0YMB8GA1UdIwQY MBaAFHQE4W8zPYllDGYTrGyV00jcS3lQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEFUaGJ6TTlpV1VNWmhPc2JKWFRTTnhMZVZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xNTMyYzYtYTJmNS00OGU2LWIwMzct MThjNWViZWYyN2E4LzEvYU9ONjhWVHdza29nU0l3ZkswYnktblpwX1JnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xNTMyYzYtYTJmNS00OGU2LWIwMzctMThjNWViZWYyN2E4 LzEvZEFUaGJ6TTlpV1VNWmhPc2JKWFRTTnhMZVZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuQuGMA0G CSqGSIb3DQEBCwUAA4IBAQBy8356hsVjt5+j56uaIbeWgPcSxdJt3o3+I+249JFn uYtv9M0127N1z3fk4u6+dWLWdDTbB3p4XipeKBfRYv5hhaXBc7/11wD+zGrvtbRT EjmMnrpmuT6Gp/gYbzKOMccU/YXm8XGFb15xlzg0pIO7iNy1T6TXTUZUFMNhGpmS ZaB5aMl9JH3XtyRZgzfYVCrOgGwaQbD8hQiPqXVe2j1ZFfpZR4kuc4vIy6sNFv7W ozlsDNUt82fy5aA3TqyAzOkSGs/SpOinRy2WXELksVP+jNVIciD/Wug2GW/n4UXX 6+ydybCtlPRzbM118b3+1sp9TJ43p5l2fqmlT1zEM2To -----END CERTIFICATE-----Generated at Wed Jan 21 11:15:50 2026 by rpki-client