This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/apaDTet_VXPuJEpWGzR380PUhnw.roa File: apaDTet_VXPuJEpWGzR380PUhnw.roa (raw, json) Hash identifier: eCEpuJCus28nvKL6QvMYZozqs1ZNpel14s0wNZ40p/o= Subject key identifier: 6A:96:83:4D:EB:7F:55:73:EE:24:4A:56:1B:34:77:F3:43:D4:86:7C Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E2A9AC8274B4136361EC77EDC0C94 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/apaDTet_VXPuJEpWGzR380PUhnw.roa Signing time: Thu 01 Jan 2026 12:17:50 +0000 ROA not before: Thu 01 Jan 2026 12:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44541 IP address blocks: 185.142.142.0/24 maxlen: 32 2a06:7a06::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:2a:9a:c8:27:4b:41:36:36:1e:c7:7e:dc:0c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a96834deb7f5573ee244a561b3477f343d4867c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4b:ab:c1:a5:e9:1d:ab:a7:02:a2:06:ea:b6: b0:a3:93:08:b9:98:ef:9c:02:0e:09:36:e3:22:69: c9:e6:92:2c:50:72:f7:66:f7:a7:e3:c2:71:df:3e: 65:bd:ce:7c:69:d1:16:82:79:55:df:8d:4b:81:20: 82:ad:8e:be:e4:d6:48:c8:0f:0c:91:30:10:3d:3a: bb:ca:2e:05:b3:de:cd:45:44:4f:4e:37:8e:40:fc: d5:65:1b:77:4e:fe:39:68:e1:73:ad:84:5c:b4:02: 74:f8:01:b3:59:13:66:15:93:9b:24:3d:47:e9:c9: 44:33:8c:1d:3d:fa:82:af:7b:21:34:8c:7b:72:30: c5:8a:02:9d:fc:0f:bb:81:5b:f9:cc:3c:b7:35:69: 3f:ad:20:67:50:b8:5e:3f:a4:bd:e5:db:4f:7c:d2: 86:a8:3a:35:bc:21:ec:2f:7b:86:88:fc:5d:03:3a: 6c:3a:17:e9:03:fe:1b:5d:e3:25:a4:21:b0:e8:c8: d2:aa:14:98:13:09:e2:1c:86:e4:14:af:d8:be:9c: 0b:6b:5f:b7:73:be:49:f5:1e:b2:85:96:d8:a5:0c: 9f:d0:bd:c6:54:93:a3:ff:e2:a6:5f:a4:ff:3e:4f: 20:52:db:c1:50:ee:97:c2:9d:67:a0:4e:fd:0c:e8: 07:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:96:83:4D:EB:7F:55:73:EE:24:4A:56:1B:34:77:F3:43:D4:86:7C X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/apaDTet_VXPuJEpWGzR380PUhnw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.142.0/24 IPv6: 2a06:7a06::/48 Signature Algorithm: sha256WithRSAEncryption 22:d4:18:ca:c8:2c:0c:cb:20:aa:d0:8c:8b:82:1a:46:fb:a8: 0e:30:1e:33:c4:b8:30:86:12:e4:6a:bd:0b:79:7a:93:c6:9c: 9d:9c:2a:ee:de:73:60:ad:e8:b2:f3:a6:36:4b:a2:3f:63:1c: f5:03:60:f3:19:c8:d1:fd:ba:66:38:a2:09:ec:fd:54:b5:41: 33:05:16:2c:b0:89:e9:59:1e:5a:8d:2e:1d:e3:37:52:2b:59: 79:d0:9f:fc:7b:a1:be:7b:98:57:39:86:2d:be:8e:87:a3:32: 14:f5:82:61:70:ed:ca:90:cd:a6:5d:28:1c:b6:74:52:e3:c4: 93:4b:dd:ae:04:0c:c9:d2:ec:c7:02:b2:a4:1e:c2:31:71:41: 0f:1a:b6:8d:33:dc:7a:f1:6b:e4:3b:83:15:d3:fc:15:f6:cf: da:a2:52:32:cd:81:b8:9e:67:0e:31:3c:90:a9:69:50:a5:82: d3:10:d1:7e:a2:82:01:8c:83:66:84:80:99:7e:65:d7:46:4d: f0:c2:e0:63:77:8d:5d:95:5f:ae:5c:55:83:92:7f:e2:b1:6f: cc:2f:01:8e:fd:55:cc:bd:d0:77:77:c4:5e:57:90:66:0d:1d: f1:eb:b1:2f:a3:f1:3c:4b:3f:a9:bc:7f:76:1a:bb:4b:b8:32: 71:26:b9:54 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5fiqayCdLQTY2Hsd+3AyUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTk2ODM0ZGViN2Y1NTczZWUyNDRhNTYxYjM0NzdmMzQzZDQ4NjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0urwaXpHaunAqIG6rawo5MIuZjv nAIOCTbjImnJ5pIsUHL3Zven48Jx3z5lvc58adEWgnlV341LgSCCrY6+5NZIyA8M kTAQPTq7yi4Fs97NRURPTjeOQPzVZRt3Tv45aOFzrYRctAJ0+AGzWRNmFZObJD1H 6clEM4wdPfqCr3shNIx7cjDFigKd/A+7gVv5zDy3NWk/rSBnULheP6S95dtPfNKG qDo1vCHsL3uGiPxdAzpsOhfpA/4bXeMlpCGw6MjSqhSYEwniHIbkFK/YvpwLa1+3 c75J9R6yhZbYpQyf0L3GVJOj/+KmX6T/Pk8gUtvBUO6Xwp1noE79DOgHLwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGqWg03rf1Vz7iRKVhs0d/ND1IZ8MB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvYXBhRFRldF9WWFB1SkVwV0d6UjM4MFBVaG53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuY6OMA8E AgACMAkDBwAqBnoGAAAwDQYJKoZIhvcNAQELBQADggEBACLUGMrILAzLIKrQjIuC Gkb7qA4wHjPEuDCGEuRqvQt5epPGnJ2cKu7ec2Ct6LLzpjZLoj9jHPUDYPMZyNH9 umY4ogns/VS1QTMFFiywielZHlqNLh3jN1IrWXnQn/x7ob57mFc5hi2+joejMhT1 gmFw7cqQzaZdKBy2dFLjxJNL3a4EDMnS7McCsqQewjFxQQ8ato0z3Hrxa+Q7gxXT /BX2z9qiUjLNgbieZw4xPJCpaVClgtMQ0X6iggGMg2aEgJl+ZddGTfDC4GN3jV2V X65cVYOSf+Kxb8wvAY79Vcy90Hd3xF5XkGYNHfHrsS+j8TxLP6m8f3Yau0u4MnEm uVQ= -----END CERTIFICATE-----Generated at Mon Jan 19 20:28:23 2026 by rpki-client