This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/aumQ2rFvvPhxeJtuueKJVvufvQo.roa File: aumQ2rFvvPhxeJtuueKJVvufvQo.roa (raw, json) Hash identifier: ZFlq8TIHB2weJNR+r1TYQoztERUk3FxSRK57UxVkfCM= Subject key identifier: 6A:E9:90:DA:B1:6F:BC:F8:71:78:9B:6E:B9:E2:89:56:FB:9F:BD:0A Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Certificate serial: 019B76EAFD6B81FFF58B61C7F89428B9E85F Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/aumQ2rFvvPhxeJtuueKJVvufvQo.roa Signing time: Thu 01 Jan 2026 00:17:50 +0000 ROA not before: Thu 01 Jan 2026 00:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61134 IP address blocks: 188.137.118.0/24 maxlen: 24 2a02:c47:c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:fd:6b:81:ff:f5:8b:61:c7:f8:94:28:b9:e8:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Validity Not Before: Jan 1 00:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ae990dab16fbcf871789b6eb9e28956fb9fbd0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3e:ce:ba:1e:6e:25:d4:65:2b:6e:9c:5a:79: 71:49:f5:12:7f:5c:65:bd:6f:bb:b3:25:9d:b1:39: ac:e8:95:78:3d:14:f0:67:02:bc:16:68:cf:78:40: 71:c7:d4:89:01:3c:25:92:8f:8f:ed:a0:f7:6c:00: 3f:f9:a0:14:d0:23:fc:67:4d:f7:31:22:cc:1b:f8: ad:1a:8b:ee:02:60:90:ac:14:1b:a9:f0:7b:55:ff: d5:07:12:ea:2b:93:4b:e0:be:95:34:0a:47:00:c1: 00:03:c5:6b:ea:07:11:a2:a9:32:f8:19:bb:b2:bd: 35:8e:fc:65:c3:5f:21:c9:8b:ec:fd:4b:15:ac:93: 8a:0f:64:81:4c:60:93:3a:06:d9:ac:84:f0:0b:6c: b4:76:c6:dc:6f:26:21:dd:a0:7d:af:ae:38:68:5a: 29:cb:25:51:9e:21:98:9b:75:64:bf:ea:0e:06:76: 67:e7:a0:95:b8:31:f0:c2:8d:d5:6b:a6:a1:89:32: 38:d7:e2:9c:82:36:3c:8c:69:1f:1d:b9:ac:01:d2: 1c:dd:38:32:16:cd:8a:cf:dc:a8:ce:db:3d:89:ad: 4a:18:e0:d5:80:53:48:83:ad:2b:82:1c:22:f7:d1: de:fe:94:24:3c:08:73:9f:fa:83:40:87:25:31:be: f2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E9:90:DA:B1:6F:BC:F8:71:78:9B:6E:B9:E2:89:56:FB:9F:BD:0A X509v3 Authority Key Identifier: keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/aumQ2rFvvPhxeJtuueKJVvufvQo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.137.118.0/24 IPv6: 2a02:c47:c::/48 Signature Algorithm: sha256WithRSAEncryption 05:12:8f:b9:72:fe:b0:54:ff:fb:3b:79:01:1e:e4:19:e9:8b: 79:6c:5b:5b:50:f4:b0:7e:b5:48:be:f4:8e:71:5b:2d:d0:8c: 93:67:2e:bb:cf:29:76:86:0b:64:83:9f:ad:67:3e:28:75:36: 5c:97:ed:dd:c1:f2:ec:fd:9d:c8:a7:f8:06:84:96:e0:cc:c1: 77:ad:9e:f5:6a:c7:83:1d:30:7c:08:a2:2c:92:33:ff:d1:cd: f8:17:c2:c1:f9:b8:62:58:df:11:3e:3f:79:99:60:1f:05:4d: d0:2e:6d:50:f0:59:38:7c:5a:cc:6f:89:1e:ca:d2:b4:cd:7c: 61:1b:8e:c4:f7:1e:d6:a8:cd:81:43:8e:da:b8:6a:49:af:b9: 3c:88:49:49:4b:3e:95:e3:a6:3c:9c:8f:87:73:27:05:96:c1: 32:02:7a:93:20:e1:69:a6:49:f5:79:14:62:0f:5e:0b:98:96: da:d4:83:56:15:7f:ee:93:7a:e5:f0:64:13:58:e5:9b:2f:86: 4a:2a:fa:d8:4f:e2:fc:b3:0f:d5:2d:a7:50:37:9e:1e:55:7a: 89:81:2a:df:16:72:1a:a6:20:f1:ab:f8:37:94:67:7b:40:c0: 2c:d9:56:74:57:95:ea:7a:59:97:f9:19:cd:00:6b:af:3b:dd: c5:86:4d:9f -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt26v1rgf/1i2HH+JQouehfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3 MzlkMjEwHhcNMjYwMTAxMDAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWU5OTBkYWIxNmZiY2Y4NzE3ODliNmViOWUyODk1NmZiOWZiZDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz7Ouh5uJdRlK26cWnlxSfUSf1xl vW+7syWdsTms6JV4PRTwZwK8FmjPeEBxx9SJATwlko+P7aD3bAA/+aAU0CP8Z033 MSLMG/itGovuAmCQrBQbqfB7Vf/VBxLqK5NL4L6VNApHAMEAA8Vr6gcRoqky+Bm7 sr01jvxlw18hyYvs/UsVrJOKD2SBTGCTOgbZrITwC2y0dsbcbyYh3aB9r644aFop yyVRniGYm3Vkv+oOBnZn56CVuDHwwo3Va6ahiTI41+KcgjY8jGkfHbmsAdIc3Tgy Fs2Kz9yozts9ia1KGODVgFNIg60rghwi99He/pQkPAhzn/qDQIclMb7y5QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGrpkNqxb7z4cXibbrniiVb7n70KMB8GA1UdIwQY MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt MWY5MjQ0OTVmY2RkLzEvYXVtUTJyRnZ2UGh4ZUp0dXVlS0pWdnVmdlFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAvIl2MA8E AgACMAkDBwAqAgxHAAwwDQYJKoZIhvcNAQELBQADggEBAAUSj7ly/rBU//s7eQEe 5Bnpi3lsW1tQ9LB+tUi+9I5xWy3QjJNnLrvPKXaGC2SDn61nPih1NlyX7d3B8uz9 ncin+AaEluDMwXetnvVqx4MdMHwIoiySM//RzfgXwsH5uGJY3xE+P3mZYB8FTdAu bVDwWTh8WsxviR7K0rTNfGEbjsT3HtaozYFDjtq4akmvuTyISUlLPpXjpjycj4dz JwWWwTICepMg4WmmSfV5FGIPXguYltrUg1YVf+6TeuXwZBNY5Zsvhkoq+thP4vyz D9Utp1A3nh5VeomBKt8WchqmIPGr+DeUZ3tAwCzZVnRXlep6WZf5Gc0Aa6873cWG TZ8= -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:47 2026 by rpki-client