This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/aaPOTBlkuMjNjNhThAoy1QubzHU.roa File: aaPOTBlkuMjNjNhThAoy1QubzHU.roa (raw, json) Hash identifier: MHPsOZfu6NVfVx/XCYn4wmQvJJZF4fU5/Flh/fnJfpg= Subject key identifier: 69:A3:CE:4C:19:64:B8:C8:CD:8C:D8:53:84:0A:32:D5:0B:9B:CC:75 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B77593D699CBF48DD8DF7A698956E10E5 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/aaPOTBlkuMjNjNhThAoy1QubzHU.roa Signing time: Thu 01 Jan 2026 02:18:15 +0000 ROA not before: Thu 01 Jan 2026 02:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8708 IP address blocks: 46.102.175.0/24 maxlen: 24 85.204.242.0/24 maxlen: 24 86.105.233.0/24 maxlen: 24 89.34.178.0/24 maxlen: 24 89.38.236.0/24 maxlen: 24 89.43.53.0/24 maxlen: 24 89.43.63.0/24 maxlen: 24 89.46.93.0/24 maxlen: 24 93.114.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:3d:69:9c:bf:48:dd:8d:f7:a6:98:95:6e:10:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69a3ce4c1964b8c8cd8cd853840a32d50b9bcc75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c4:34:a8:e8:f5:9d:23:66:44:98:ce:72:9c: 00:8d:34:5f:ff:08:2e:45:da:84:8d:09:4d:c4:2c: f1:da:0e:34:1b:bc:7b:5f:8b:e6:4d:93:c8:7b:d0: 23:03:31:6e:f0:27:5d:7f:cb:72:02:c8:d6:8f:1f: fc:cc:39:40:2a:79:bb:55:41:59:1d:0c:f2:ef:66: 47:34:fd:62:51:6f:02:25:be:81:10:a6:64:eb:9e: 4f:3a:57:a7:b7:51:47:a1:28:04:59:c3:f0:a0:79: de:38:bd:21:ba:d6:dc:50:d5:be:15:e3:f3:98:7c: db:9b:f2:bd:7d:39:73:b6:73:bc:ef:54:60:5b:97: 34:e3:97:37:da:b9:63:39:f6:98:f5:93:22:3c:b7: 58:51:f2:1f:fa:92:14:f7:7e:38:0f:9e:5a:48:fc: 1e:04:09:bd:63:4b:3a:b7:e4:37:65:39:52:bd:0e: cb:2c:c6:24:1b:0d:3d:e3:d6:2b:60:22:6f:a9:16: 0c:7f:e8:91:dd:a4:83:d2:6d:6a:b4:13:7b:08:69: a7:57:0d:84:f0:a2:e0:2d:9c:f9:96:51:37:70:f8: 58:cc:2a:3a:85:46:5a:44:83:62:7d:cf:6b:91:0a: 97:0b:2b:20:24:a1:9f:45:8f:14:5f:c4:40:47:f4: 65:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A3:CE:4C:19:64:B8:C8:CD:8C:D8:53:84:0A:32:D5:0B:9B:CC:75 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/aaPOTBlkuMjNjNhThAoy1QubzHU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.102.175.0/24 85.204.242.0/24 86.105.233.0/24 89.34.178.0/24 89.38.236.0/24 89.43.53.0/24 89.43.63.0/24 89.46.93.0/24 93.114.57.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:09:66:83:50:3b:c9:b1:b0:77:68:ca:20:bb:72:40:3f:e1: 6f:d0:31:a1:e7:98:2f:7e:4d:12:9f:bb:30:e5:33:22:9a:85: c6:3c:5f:10:2c:99:54:0b:2f:62:e5:98:84:39:cc:14:a8:e8: b6:84:1e:5d:4f:e0:b5:71:5d:51:3f:22:ea:6b:43:db:ad:92: 9b:de:27:e6:f7:ea:d0:f9:eb:99:95:1f:00:94:0a:cb:85:1a: aa:3a:a8:33:e8:3e:8b:c7:d1:74:d9:b4:a6:8c:e1:9d:53:4b: e2:ab:69:46:c7:75:c3:b0:33:ba:13:f4:45:0f:e9:f8:df:71: cc:95:22:0f:1e:bb:b2:4e:ba:a9:f1:ee:6a:eb:75:cd:50:12: 5b:86:61:81:06:30:a3:82:a4:e0:02:89:e8:35:ab:38:9a:ee: 2a:0b:fb:ad:80:7f:a7:32:57:16:f8:8c:d2:b5:7d:74:0c:da: e9:56:f3:91:90:b8:dc:58:0b:cd:cd:41:0d:03:79:3c:1a:26: 89:06:1e:e6:4b:71:61:84:76:99:e4:db:fe:c7:f0:d6:5b:e9: 0a:81:f7:e7:a0:85:5e:92:21:72:22:7b:b1:06:3c:ae:5f:c3: 15:0b:c2:8b:bb:60:4c:41:70:08:f4:87:cb:29:c8:80:46:b9: 2c:84:8e:a5 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZt3WT1pnL9I3Y33ppiVbhDlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWEzY2U0YzE5NjRiOGM4Y2Q4Y2Q4NTM4NDBhMzJkNTBiOWJjYzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8Q0qOj1nSNmRJjOcpwAjTRf/wgu RdqEjQlNxCzx2g40G7x7X4vmTZPIe9AjAzFu8Cddf8tyAsjWjx/8zDlAKnm7VUFZ HQzy72ZHNP1iUW8CJb6BEKZk655POlent1FHoSgEWcPwoHneOL0hutbcUNW+FePz mHzbm/K9fTlztnO871RgW5c045c32rljOfaY9ZMiPLdYUfIf+pIU9344D55aSPwe BAm9Y0s6t+Q3ZTlSvQ7LLMYkGw0949YrYCJvqRYMf+iR3aSD0m1qtBN7CGmnVw2E 8KLgLZz5llE3cPhYzCo6hUZaRINifc9rkQqXCysgJKGfRY8UX8RAR/RlIwIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFGmjzkwZZLjIzYzYU4QKMtULm8x1MB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL2FhUE9UQmxrdU1qTmpOaFRoQW95MVF1YnpIVS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwTwYIKwYBBQUHAQcBAf8EQDA+MDwEAgABMDYDBAAuZq8D BABVzPIDBABWaekDBABZIrIDBABZJuwDBABZKzUDBABZKz8DBABZLl0DBABdcjkw DQYJKoZIhvcNAQELBQADggEBAB0JZoNQO8mxsHdoyiC7ckA/4W/QMaHnmC9+TRKf uzDlMyKahcY8XxAsmVQLL2LlmIQ5zBSo6LaEHl1P4LVxXVE/IuprQ9utkpveJ+b3 6tD565mVHwCUCsuFGqo6qDPoPovH0XTZtKaM4Z1TS+KraUbHdcOwM7oT9EUP6fjf ccyVIg8eu7JOuqnx7mrrdc1QEluGYYEGMKOCpOACieg1qzia7ioL+62Af6cyVxb4 jNK1fXQM2ulW85GQuNxYC83NQQ0DeTwaJokGHuZLcWGEdpnk2/7H8NZb6QqB9+eg hV6SIXIie7EGPK5fwxULwou7YExBcAj0h8spyIBGuSyEjqU= -----END CERTIFICATE-----Generated at Sun Jan 25 14:39:23 2026 by rpki-client