This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/aVsHGtWZhZ-JjyN_a-C8xGuRXdU.roa File: aVsHGtWZhZ-JjyN_a-C8xGuRXdU.roa (raw, json) Hash identifier: 2CuFc4vVlwTqLaWvwvMaSHaDQsKrWlR1Flh9/F4Ne6Q= Subject key identifier: 69:5B:07:1A:D5:99:85:9F:89:8F:23:7F:6B:E0:BC:C4:6B:91:5D:D5 Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba Certificate serial: 019B7EA666C01943D57CAA5E71B9DD12F91F Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/aVsHGtWZhZ-JjyN_a-C8xGuRXdU.roa Signing time: Fri 02 Jan 2026 12:19:53 +0000 ROA not before: Fri 02 Jan 2026 12:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44234 IP address blocks: 213.215.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:66:c0:19:43:d5:7c:aa:5e:71:b9:dd:12:f9:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba Validity Not Before: Jan 2 12:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=695b071ad599859f898f237f6be0bcc46b915dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:72:8f:3b:ac:87:17:9d:8f:04:9c:f0:4e:68: d7:5d:99:5c:75:13:22:f6:c0:d6:24:11:2e:a8:bb: db:32:19:45:f0:e0:77:12:57:e5:52:af:bb:7f:a4: 93:e1:b6:23:78:bf:d1:64:82:4f:d4:6b:fe:49:3a: 0d:b5:72:2c:24:70:82:2c:1a:94:66:e3:d4:78:c0: 8d:85:b6:b9:34:7b:bd:5c:cc:64:8b:14:da:d0:b7: b7:2a:de:0b:48:e3:9a:b2:ee:d0:6c:a2:19:51:34: 9d:ce:9f:83:6d:6b:cd:bd:e0:a5:6b:c7:75:e9:83: bb:5f:16:af:9d:89:64:46:8f:c2:39:dc:b7:0c:9c: 6b:bf:c4:ba:b2:8e:1c:e0:3b:9f:bc:f0:10:b5:28: e4:30:4d:69:61:8b:e3:aa:da:b2:36:3f:58:16:f8: 27:f4:a1:8b:74:a9:44:f3:6e:6b:8e:c2:52:4e:6d: e0:f7:03:f5:af:de:2e:e3:44:bf:02:62:3d:cd:4b: 14:43:87:73:f6:9c:62:f7:f3:35:71:24:e2:f7:2b: 3e:c1:63:89:80:2d:0d:60:04:7a:44:13:cb:17:5a: 09:b0:e4:91:93:c8:94:46:a1:dd:ae:f2:dc:6c:f1: b2:8d:be:6d:93:7d:68:95:a7:9e:0a:37:6b:12:81: a1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:5B:07:1A:D5:99:85:9F:89:8F:23:7F:6B:E0:BC:C4:6B:91:5D:D5 X509v3 Authority Key Identifier: keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/aVsHGtWZhZ-JjyN_a-C8xGuRXdU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.215.105.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:b4:c1:43:b8:69:bb:89:b9:07:d2:40:fc:2b:15:e1:05:fa: 99:20:29:e5:8d:79:17:aa:dd:4e:6d:96:93:f8:f1:9c:68:20: 87:24:29:46:7e:1d:4d:fc:10:ad:3a:8f:80:87:ce:1e:51:18: 70:21:ab:aa:2a:b7:dc:0a:91:ce:8a:bc:7a:01:1a:e5:c9:93: e1:a0:83:e8:13:66:95:5a:49:55:d1:57:74:14:1a:6e:0e:89: ce:7a:e5:5e:d9:c3:97:06:58:64:f2:93:1c:0a:db:0f:af:1a: 7c:12:1f:8b:5b:48:90:28:86:1a:80:f8:b3:92:54:d4:74:3f: c5:9a:89:86:ed:09:80:e8:f2:1f:a7:d4:9c:62:65:7f:9d:9d: 51:84:fc:ba:a2:34:d3:44:5c:96:f3:d1:da:80:59:4b:be:92: a3:bc:9f:01:ae:e0:55:76:06:73:1a:2f:45:d7:87:4a:cf:e6: 63:b9:8b:d9:bb:c0:e9:9e:d2:5d:78:78:a6:8e:0e:43:c8:99: 63:a0:75:fe:36:de:07:da:cb:19:17:f7:e6:39:36:63:75:c4: 9d:b3:38:3e:f6:3a:af:0e:15:0b:ab:51:bf:5d:f8:2c:b5:31: 61:0f:50:39:ac:b9:c9:ca:6e:c8:26:2b:df:57:4e:26:25:ab: 47:a1:b4:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pmbAGUPVfKpecbndEvkfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Zjg4MTQwMWFiYWNjODhjOTQxZmRmNzQwZjFhYjE1MzZm MDVkYmEwHhcNMjYwMTAyMTIxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTViMDcxYWQ1OTk4NTlmODk4ZjIzN2Y2YmUwYmNjNDZiOTE1ZGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnKPO6yHF52PBJzwTmjXXZlcdRMi 9sDWJBEuqLvbMhlF8OB3ElflUq+7f6ST4bYjeL/RZIJP1Gv+SToNtXIsJHCCLBqU ZuPUeMCNhba5NHu9XMxkixTa0Le3Kt4LSOOasu7QbKIZUTSdzp+DbWvNveCla8d1 6YO7XxavnYlkRo/COdy3DJxrv8S6so4c4DufvPAQtSjkME1pYYvjqtqyNj9YFvgn 9KGLdKlE825rjsJSTm3g9wP1r94u40S/AmI9zUsUQ4dz9pxi9/M1cSTi9ys+wWOJ gC0NYAR6RBPLF1oJsOSRk8iURqHdrvLcbPGyjb5tk31olaeeCjdrEoGh7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGlbBxrVmYWfiY8jf2vgvMRrkV3VMB8GA1UdIwQY MBaAFOf4gUAausyIyUH990DxqxU28F26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmIt ZTJmYmMzYTY4ODAwLzEvYVZzSEd0V1poWi1KanlOX2EtQzh4R3VSWGRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmItZTJmYmMzYTY4ODAw LzEvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ddpMA0G CSqGSIb3DQEBCwUAA4IBAQAqtMFDuGm7ibkH0kD8KxXhBfqZICnljXkXqt1ObZaT +PGcaCCHJClGfh1N/BCtOo+Ah84eURhwIauqKrfcCpHOirx6ARrlyZPhoIPoE2aV WklV0Vd0FBpuDonOeuVe2cOXBlhk8pMcCtsPrxp8Eh+LW0iQKIYagPizklTUdD/F momG7QmA6PIfp9ScYmV/nZ1RhPy6ojTTRFyW89HagFlLvpKjvJ8BruBVdgZzGi9F 14dKz+ZjuYvZu8DpntJdeHimjg5DyJljoHX+Nt4H2ssZF/fmOTZjdcSdszg+9jqv DhULq1G/XfgstTFhD1A5rLnJym7IJivfV04mJatHobTo -----END CERTIFICATE-----Generated at Mon Jan 26 12:17:36 2026 by rpki-client