This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/aE6W_12we24MrX4UESfc-orZJK0.roa File: aE6W_12we24MrX4UESfc-orZJK0.roa (raw, json) Hash identifier: Tn+H21K97sLydc4eo5ghf77e2fc70nABLBDtYTFdsDQ= Subject key identifier: 68:4E:96:FF:5D:B0:7B:6E:0C:AD:7E:14:11:27:DC:FA:8A:D9:24:AD Certificate issuer: /CN=96d66966ffda0a5d0e131d134a79d93205c8c550 Certificate serial: 019AEDB05724185B0B2F497B73F0E51FDD6C Authority key identifier: 96:D6:69:66:FF:DA:0A:5D:0E:13:1D:13:4A:79:D9:32:05:C8:C5:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/aE6W_12we24MrX4UESfc-orZJK0.roa Signing time: Fri 05 Dec 2025 08:45:48 +0000 ROA not before: Fri 05 Dec 2025 08:45:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210545 IP address blocks: 176.102.169.0/24 maxlen: 24 176.102.170.0/24 maxlen: 24 193.25.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:b0:57:24:18:5b:0b:2f:49:7b:73:f0:e5:1f:dd:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96d66966ffda0a5d0e131d134a79d93205c8c550 Validity Not Before: Dec 5 08:45:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=684e96ff5db07b6e0cad7e141127dcfa8ad924ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e6:9b:82:de:8f:18:d9:e0:24:e1:88:f4:b5: 3b:b4:61:6e:84:21:87:c8:8b:2e:e2:ad:b0:b2:5f: d6:3e:6e:10:d6:32:c7:df:5c:01:30:d8:82:48:97: 48:30:3f:c6:ed:8e:4c:2a:0c:f6:37:d5:76:40:32: b2:e9:5f:ba:6e:ba:63:8d:00:57:e2:e3:15:94:29: c7:d1:2d:2a:b4:1b:49:08:a5:cc:76:9d:a2:3a:13: 85:d8:c7:d3:f8:99:06:39:cf:e7:c9:a0:7a:32:3e: c3:77:9d:4e:06:0b:2c:70:e7:a3:b3:34:e7:aa:fa: 0e:52:be:3a:c6:84:d2:e9:02:8c:5f:ed:0e:73:19: 1a:42:90:23:5e:17:c4:65:ad:30:45:50:a4:5e:96: 59:73:73:e9:d6:39:28:73:ea:94:40:65:ba:25:0d: 2d:98:34:5b:b5:57:5e:b3:be:07:80:f8:79:79:68: c6:e4:ef:c5:54:95:c3:00:cd:15:c5:d1:87:b4:37: 53:97:4a:8f:b5:8f:9a:e0:d2:67:ff:75:0f:4e:08: bf:5a:43:9b:c6:01:fb:f3:80:76:8e:46:e2:f5:2d: 53:b2:55:cd:48:f8:c3:49:43:6b:d4:26:7d:40:06: a9:56:00:18:ac:b0:f5:c5:18:fe:84:6b:ba:f8:da: 28:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4E:96:FF:5D:B0:7B:6E:0C:AD:7E:14:11:27:DC:FA:8A:D9:24:AD X509v3 Authority Key Identifier: keyid:96:D6:69:66:FF:DA:0A:5D:0E:13:1D:13:4A:79:D9:32:05:C8:C5:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/aE6W_12we24MrX4UESfc-orZJK0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.102.169.0-176.102.170.255 193.25.170.0/23 Signature Algorithm: sha256WithRSAEncryption 49:ef:94:7c:da:61:0b:21:1a:26:18:0b:b9:41:88:8d:c1:d5: 45:f7:65:c2:d4:2c:f9:bc:6e:05:7b:9b:61:33:17:82:68:09: 87:c5:87:14:38:45:ed:3e:62:af:77:bb:7c:93:0d:ff:6e:ee: cb:54:60:10:8c:42:4b:1a:91:f0:7d:83:24:e5:0a:02:da:0d: 52:18:d8:14:d7:79:e0:16:82:35:15:0f:3e:92:b1:1b:07:e3: a4:ea:a8:93:41:06:b1:d3:6e:f2:37:d6:d8:d1:1e:e2:e2:76: f9:b3:d9:35:fa:5f:99:39:67:de:0a:bc:b1:38:24:f6:f8:ed: ce:f5:8b:9f:8a:97:13:04:ad:8e:ad:40:68:54:93:4f:32:e9: bd:4b:03:41:b6:ff:06:9e:0d:f2:ca:5d:b7:74:eb:4a:72:24: ac:55:cf:a0:43:e6:18:c2:0a:b4:8f:e7:f5:45:cf:54:c0:71: 6c:4c:93:15:b3:d8:b6:de:c8:5c:a5:69:02:c4:c5:61:20:f9: b3:ba:e6:56:d6:1b:d0:93:d3:b9:09:13:f5:1a:b5:73:95:57: ba:f3:56:3c:79:b3:9a:4f:08:54:12:af:c6:81:eb:65:54:70: 26:08:a9:be:c1:c1:5c:5b:be:a7:33:dc:c8:3d:7a:ee:0d:fc: af:c4:24:59 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZrtsFckGFsLL0l7c/DlH91sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZDY2OTY2ZmZkYTBhNWQwZTEzMWQxMzRhNzlkOTMyMDVj OGM1NTAwHhcNMjUxMjA1MDg0NTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODRlOTZmZjVkYjA3YjZlMGNhZDdlMTQxMTI3ZGNmYThhZDkyNGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+abgt6PGNngJOGI9LU7tGFuhCGH yIsu4q2wsl/WPm4Q1jLH31wBMNiCSJdIMD/G7Y5MKgz2N9V2QDKy6V+6brpjjQBX 4uMVlCnH0S0qtBtJCKXMdp2iOhOF2MfT+JkGOc/nyaB6Mj7Dd51OBgsscOejszTn qvoOUr46xoTS6QKMX+0OcxkaQpAjXhfEZa0wRVCkXpZZc3Pp1jkoc+qUQGW6JQ0t mDRbtVdes74HgPh5eWjG5O/FVJXDAM0VxdGHtDdTl0qPtY+a4NJn/3UPTgi/WkOb xgH784B2jkbi9S1TslXNSPjDSUNr1CZ9QAapVgAYrLD1xRj+hGu6+NooQQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFGhOlv9dsHtuDK1+FBEn3PqK2SStMB8GA1UdIwQY MBaAFJbWaWb/2gpdDhMdE0p52TIFyMVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHRacFp2X2FDbDBPRXgwVFNublpNZ1hJeFZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi81YjQ0MjYtYTI2Ni00M2NlLWE5ZTYt YjBlNjA1OGQ0ZGQ3LzEvYUU2V18xMndlMjRNclg0VUVTZmMtb3JaSkswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi81YjQ0MjYtYTI2Ni00M2NlLWE5ZTYtYjBlNjA1OGQ0ZGQ3 LzEvbHRacFp2X2FDbDBPRXgwVFNublpNZ1hJeFZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACwZqkD BACwZqoDBAHBGaowDQYJKoZIhvcNAQELBQADggEBAEnvlHzaYQshGiYYC7lBiI3B 1UX3ZcLULPm8bgV7m2EzF4JoCYfFhxQ4Re0+Yq93u3yTDf9u7stUYBCMQksakfB9 gyTlCgLaDVIY2BTXeeAWgjUVDz6SsRsH46TqqJNBBrHTbvI31tjRHuLidvmz2TX6 X5k5Z94KvLE4JPb47c71i5+KlxMErY6tQGhUk08y6b1LA0G2/waeDfLKXbd060py JKxVz6BD5hjCCrSP5/VFz1TAcWxMkxWz2LbeyFylaQLExWEg+bO65lbWG9CT07kJ E/UatXOVV7rzVjx5s5pPCFQSr8aB62VUcCYIqb7BwVxbvqcz3Mg9eu4N/K/EJFk= -----END CERTIFICATE-----Generated at Sat Dec 6 12:54:04 2025 by rpki-client