This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/Aj9g_m6CfaASGCr3QyqhACN1wEY.roa File: Aj9g_m6CfaASGCr3QyqhACN1wEY.roa (raw, json) Hash identifier: +gKJiI8OTdXPQarnhMH7udASgSEq+BKd5szYHIlrvmo= Subject key identifier: 02:3F:60:FE:6E:82:7D:A0:12:18:2A:F7:43:2A:A1:00:23:75:C0:46 Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 019AA198560387DD9B80E8AFD2B707A0EA8F Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/Aj9g_m6CfaASGCr3QyqhACN1wEY.roa Signing time: Thu 20 Nov 2025 14:08:26 +0000 ROA not before: Thu 20 Nov 2025 14:08:26 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204029 IP address blocks: 94.188.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a1:98:56:03:87:dd:9b:80:e8:af:d2:b7:07:a0:ea:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Nov 20 14:08:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=023f60fe6e827da012182af7432aa1002375c046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5a:66:08:41:2d:4b:c8:c5:a9:ff:11:d4:47: 61:f3:45:a2:56:58:6b:32:9c:18:91:bb:6f:8a:97: 58:ed:30:7c:50:55:5b:ed:e8:e2:6f:5d:9e:52:a5: 47:fe:e9:9f:6d:bd:8a:7d:2e:51:b7:a5:f5:67:29: 37:ac:4a:14:74:64:af:99:46:a6:eb:c2:39:e3:10: 3c:3e:42:ea:a0:a7:1c:92:d8:a6:15:7e:f8:35:f9: 12:db:00:69:ac:97:e6:98:a0:23:7f:f0:bf:a7:c9: 21:83:b0:50:16:cf:f6:c7:0c:64:8a:61:e9:76:92: 4c:b1:d6:79:01:75:a0:70:a1:95:8d:18:35:d9:74: 11:93:bc:a3:56:f6:6d:7c:22:d2:d3:c1:2d:78:d2: c3:7e:2c:29:fd:c8:b5:c0:1a:df:9a:1c:ad:fc:37: f6:42:58:83:6c:09:1c:bf:70:82:36:ba:9b:76:51: 94:1b:cb:51:6f:e0:bf:4a:f9:d7:c9:3a:bb:e6:e1: be:c7:02:e2:7a:18:92:e4:32:25:34:dd:2f:27:0d: e7:e1:c8:75:13:57:19:86:63:55:24:80:dd:72:9d: 4f:2e:35:9f:6e:7f:60:3c:6d:2a:a2:5b:71:bb:bc: fd:d8:2e:cb:86:da:b0:b3:cf:b5:ad:b4:3a:44:93: 1e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3F:60:FE:6E:82:7D:A0:12:18:2A:F7:43:2A:A1:00:23:75:C0:46 X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/Aj9g_m6CfaASGCr3QyqhACN1wEY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.188.134.0/24 Signature Algorithm: sha256WithRSAEncryption 16:da:b2:43:99:5d:64:a3:72:0d:16:33:4e:62:38:60:8b:8c: 16:0a:fc:a1:52:29:1a:2b:6b:6f:64:8f:a6:e9:c1:90:4f:d3: 08:92:b7:1b:99:6a:59:f2:a2:1b:14:df:73:c0:a5:38:59:d4: 29:3d:96:30:f0:4c:a3:22:e8:12:70:0d:b4:5f:4d:ee:82:a7: c4:72:94:be:61:7c:5d:7a:43:80:16:8d:99:d6:fd:3e:28:70: 80:a3:2a:7b:e0:e0:6c:f8:2a:13:9b:0c:29:eb:52:8d:50:b8: 4e:77:8b:13:b6:11:c8:c9:02:1f:80:69:49:17:4f:2a:e7:8c: 87:42:a7:64:0b:65:0f:19:84:27:a5:78:e8:21:0a:69:03:58: a9:1f:b7:be:bd:45:80:bf:ea:98:42:24:3c:d4:79:3a:5a:10: 69:79:b5:d6:74:de:03:78:30:27:5a:70:15:94:d6:c1:ad:dd: ca:8f:a7:f9:41:be:16:55:68:46:e0:68:0a:ce:21:ec:88:a4: 6c:b4:65:31:c1:c1:b2:e3:62:19:bc:5c:50:a1:a1:a8:51:0c: 74:02:78:1e:93:a4:46:5a:b4:b7:84:5e:d6:18:b3:66:39:1c: 20:3e:db:18:e5:31:b3:2f:ac:17:c1:a2:13:5d:25:47:1c:9b: 1c:e2:95:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqhmFYDh92bgOiv0rcHoOqPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjUxMTIwMTQwODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjNmNjBmZTZlODI3ZGEwMTIxODJhZjc0MzJhYTEwMDIzNzVjMDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFpmCEEtS8jFqf8R1Edh80WiVlhr MpwYkbtvipdY7TB8UFVb7ejib12eUqVH/umfbb2KfS5Rt6X1Zyk3rEoUdGSvmUam 68I54xA8PkLqoKccktimFX74NfkS2wBprJfmmKAjf/C/p8khg7BQFs/2xwxkimHp dpJMsdZ5AXWgcKGVjRg12XQRk7yjVvZtfCLS08EteNLDfiwp/ci1wBrfmhyt/Df2 QliDbAkcv3CCNrqbdlGUG8tRb+C/SvnXyTq75uG+xwLiehiS5DIlNN0vJw3n4ch1 E1cZhmNVJIDdcp1PLjWfbn9gPG0qoltxu7z92C7Lhtqws8+1rbQ6RJMekwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAI/YP5ugn2gEhgq90MqoQAjdcBGMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvQWo5Z19tNkNmYUFTR0NyM1F5cWhBQ04xd0VZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXryGMA0G CSqGSIb3DQEBCwUAA4IBAQAW2rJDmV1ko3INFjNOYjhgi4wWCvyhUikaK2tvZI+m 6cGQT9MIkrcbmWpZ8qIbFN9zwKU4WdQpPZYw8EyjIugScA20X03ugqfEcpS+YXxd ekOAFo2Z1v0+KHCAoyp74OBs+CoTmwwp61KNULhOd4sTthHIyQIfgGlJF08q54yH QqdkC2UPGYQnpXjoIQppA1ipH7e+vUWAv+qYQiQ81Hk6WhBpebXWdN4DeDAnWnAV lNbBrd3Kj6f5Qb4WVWhG4GgKziHsiKRstGUxwcGy42IZvFxQoaGoUQx0Angek6RG WrS3hF7WGLNmORwgPtsY5TGzL6wXwaITXSVHHJsc4pW7 -----END CERTIFICATE-----Generated at Sat Dec 6 18:21:56 2025 by rpki-client