This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/Ao4MbaZG9c-QguWfgi3_65omXS8.roa File: Ao4MbaZG9c-QguWfgi3_65omXS8.roa (raw, json) Hash identifier: S3ppKNcefv9jQMNAYTBjG6T2ZcBIubvshiWmN6cEp/8= Subject key identifier: 02:8E:0C:6D:A6:46:F5:CF:90:82:E5:9F:82:2D:FF:EB:9A:26:5D:2F Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Certificate serial: 019B7A5BA1C9AA23395E8B3A9BA2D22FE18D Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/Ao4MbaZG9c-QguWfgi3_65omXS8.roa Signing time: Thu 01 Jan 2026 16:19:44 +0000 ROA not before: Thu 01 Jan 2026 16:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60729 IP address blocks: 185.177.207.0/24 maxlen: 24 2a0a:4587:2010::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:a1:c9:aa:23:39:5e:8b:3a:9b:a2:d2:2f:e1:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Validity Not Before: Jan 1 16:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=028e0c6da646f5cf9082e59f822dffeb9a265d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6f:07:70:73:f2:d5:19:19:68:13:72:ba:00: de:2e:7a:09:e3:56:9f:80:25:38:54:51:53:cb:1d: ae:e4:5a:49:a1:5e:4d:e2:f0:09:74:4c:fb:64:ec: 04:86:8d:ac:6e:b6:aa:9f:a3:b5:21:04:f7:55:dd: 17:8a:e6:a0:2d:5c:24:c8:af:59:3d:30:b1:73:ac: 73:e0:43:7c:e3:6d:6c:3b:20:29:fb:41:94:0d:0e: 1c:ac:ff:df:35:bc:2e:f0:09:04:9f:dd:00:18:2a: 1f:65:e4:36:0d:19:45:05:65:a8:1e:4d:3c:3d:75: cd:f4:4e:1e:5f:d0:3f:18:3e:ce:82:ae:83:a5:40: 6d:55:d2:3f:c2:28:51:39:53:aa:e4:36:c6:da:f7: 10:22:e9:7d:ce:eb:da:f1:9b:a3:7e:da:24:cf:5f: 39:7e:cb:32:e6:3c:56:c8:2b:de:d5:ba:39:a5:47: f9:f2:5c:28:2d:f2:9c:21:39:26:25:4a:8c:56:34: d6:47:91:11:5e:db:a3:ba:8d:f1:94:b9:59:98:21: f4:e1:c8:e6:0c:94:b7:3c:4a:93:ce:91:c9:cb:fb: b9:3e:f6:24:21:3e:d3:29:c7:4a:14:1f:52:a6:11: 21:c0:41:74:17:a7:77:ef:5d:65:ed:36:84:d5:6e: 4e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8E:0C:6D:A6:46:F5:CF:90:82:E5:9F:82:2D:FF:EB:9A:26:5D:2F X509v3 Authority Key Identifier: keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/Ao4MbaZG9c-QguWfgi3_65omXS8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.177.207.0/24 IPv6: 2a0a:4587:2010::/46 Signature Algorithm: sha256WithRSAEncryption 46:ec:cf:c1:83:dc:9a:c4:22:c2:d8:4d:12:5c:c8:38:c0:a1: bb:6f:8a:12:43:a3:e6:16:d3:27:e0:fc:1d:5e:65:5f:3f:6a: 4b:42:37:fb:62:e2:61:62:01:74:ed:b6:b9:85:77:19:01:5b: f8:a3:7c:da:98:9f:ef:b1:13:79:12:dd:49:9d:c1:16:7f:a8: b7:ed:12:f3:2a:00:46:50:e5:66:6e:7e:67:cd:4f:6e:00:24: d8:14:2f:8f:ea:3d:c5:a2:6e:5e:b7:62:3d:69:3e:2f:ba:a8: 72:9d:fb:04:f5:9e:7e:a2:6b:a7:4b:4b:4a:f8:16:98:9d:07: ee:cb:2a:a2:1c:b9:96:34:39:df:2f:b8:fd:5d:e1:9a:44:db: c7:40:52:28:46:aa:a5:fd:05:a0:79:c5:f4:dd:f6:8d:a9:d5: 81:ec:42:90:00:4e:15:b9:24:8d:71:0f:53:17:1f:a3:cb:03: d9:42:7c:7a:25:90:7c:c4:9c:46:55:8c:93:3e:bb:9c:71:7c: 6d:b4:0e:05:45:75:64:9c:7b:2d:b3:30:ba:ed:94:e6:6d:b9: f9:8b:27:a1:99:a4:a4:4b:62:64:b4:57:10:00:08:de:4b:38: 9b:9d:e2:11:9b:49:13:7d:12:65:fd:1f:fe:a6:37:55:8a:6c: 23:74:ab:31 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZt6W6HJqiM5Xos6m6LSL+GNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTk2NjY2NGVjOTZlZGJkMTJlOGU4MmU5NDBiZmI5ZmFl YzEwNWUwHhcNMjYwMTAxMTYxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjhlMGM2ZGE2NDZmNWNmOTA4MmU1OWY4MjJkZmZlYjlhMjY1ZDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2m8HcHPy1RkZaBNyugDeLnoJ41af gCU4VFFTyx2u5FpJoV5N4vAJdEz7ZOwEho2sbraqn6O1IQT3Vd0XiuagLVwkyK9Z PTCxc6xz4EN8421sOyAp+0GUDQ4crP/fNbwu8AkEn90AGCofZeQ2DRlFBWWoHk08 PXXN9E4eX9A/GD7Ogq6DpUBtVdI/wihROVOq5DbG2vcQIul9zuva8Zujftokz185 fssy5jxWyCve1bo5pUf58lwoLfKcITkmJUqMVjTWR5ERXtujuo3xlLlZmCH04cjm DJS3PEqTzpHJy/u5PvYkIT7TKcdKFB9SphEhwEF0F6d3711l7TaE1W5OdQIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFAKODG2mRvXPkILln4It/+uaJl0vMB8GA1UdIwQY MBaAFPipZmZOyW7b0S6OgulAv7n67BBeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LbG1aazdKYnR2UkxvNkM2VUNfdWZyc0VGNC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1 LTM4MjM1NWZjMmZmMS8xL0FvNE1iYVpHOWMtUWd1V2ZnaTNfNjVvbVhTOC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1LTM4MjM1NWZjMmZm MS8xLzEtS2xtWms3SmJ0dlJMbzZDNlVDX3VmcnNFRjQuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAC5sc8w DwQCAAIwCQMHAioKRYcgEDANBgkqhkiG9w0BAQsFAAOCAQEARuzPwYPcmsQiwthN ElzIOMChu2+KEkOj5hbTJ+D8HV5lXz9qS0I3+2LiYWIBdO22uYV3GQFb+KN82pif 77ETeRLdSZ3BFn+ot+0S8yoARlDlZm5+Z81PbgAk2BQvj+o9xaJuXrdiPWk+L7qo cp37BPWefqJrp0tLSvgWmJ0H7ssqohy5ljQ53y+4/V3hmkTbx0BSKEaqpf0FoHnF 9N32janVgexCkABOFbkkjXEPUxcfo8sD2UJ8eiWQfMScRlWMkz67nHF8bbQOBUV1 ZJx7LbMwuu2U5m25+YsnoZmkpEtiZLRXEAAI3ks4m53iEZtJE30SZf0f/qY3VYps I3SrMQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:42 2026 by rpki-client