This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/aeEP89HKT7e7KYklfEV6GwzzRq4.roa File: aeEP89HKT7e7KYklfEV6GwzzRq4.roa (raw, json) Hash identifier: +iLAVwj6kbQSZH9/6AWgoWRz5/OYd1yxCHRY7Br0+CU= Subject key identifier: 69:E1:0F:F3:D1:CA:4F:B7:BB:29:89:25:7C:45:7A:1B:0C:F3:46:AE Certificate issuer: /CN=5c29cba2dacf0ef9fa22090032bb159a109140f0 Certificate serial: 019B79110E71F046EB514BB92F03B51BDDA8 Authority key identifier: 5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/aeEP89HKT7e7KYklfEV6GwzzRq4.roa Signing time: Thu 01 Jan 2026 10:18:39 +0000 ROA not before: Thu 01 Jan 2026 10:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57292 IP address blocks: 185.130.76.0/24 maxlen: 24 185.130.77.0/24 maxlen: 24 185.130.78.0/24 maxlen: 24 185.130.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:0e:71:f0:46:eb:51:4b:b9:2f:03:b5:1b:dd:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c29cba2dacf0ef9fa22090032bb159a109140f0 Validity Not Before: Jan 1 10:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69e10ff3d1ca4fb7bb2989257c457a1b0cf346ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:14:35:84:4a:0a:5c:de:3e:ca:ef:0d:c8:f1: 5f:2a:44:88:2d:a2:b1:cd:9b:30:e3:59:f9:cf:51: 4a:fe:91:c7:5a:e2:2e:8e:ed:d5:70:6f:c2:4c:1d: cd:a4:0b:4e:25:ce:66:9d:b0:cb:71:e6:74:da:cc: 24:28:4d:be:df:04:6b:35:98:76:7c:5b:57:58:e8: 8c:86:ec:b1:06:03:7b:dd:f5:49:4f:45:20:d9:b8: 65:a8:aa:d2:e2:02:d2:b2:97:6f:df:a8:13:49:e3: f4:11:e7:77:cc:81:a9:43:64:89:1d:3a:20:49:fc: 5b:fd:57:f7:a0:6a:bb:0a:08:29:18:2d:cd:19:61: d2:46:cd:04:7f:57:cc:bc:fd:a7:9c:58:c7:37:6c: e7:e7:50:f8:08:f1:8d:75:0c:57:2d:62:64:1c:3a: a2:d5:ff:fe:79:40:39:b6:66:1e:41:dc:44:94:ba: 45:cb:dc:00:b9:a4:e2:da:10:c8:ef:d1:de:e1:34: 57:90:e9:50:70:9f:0c:74:2d:fe:ec:33:90:a3:79: 66:39:78:d4:20:08:91:f8:23:0f:14:a8:73:79:5a: d7:17:f2:db:50:18:37:a6:1d:79:83:3f:ac:b8:b1: bf:c6:68:90:4d:e2:12:6e:35:61:56:97:53:b2:1a: f8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E1:0F:F3:D1:CA:4F:B7:BB:29:89:25:7C:45:7A:1B:0C:F3:46:AE X509v3 Authority Key Identifier: keyid:5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/aeEP89HKT7e7KYklfEV6GwzzRq4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.130.76.0/22 Signature Algorithm: sha256WithRSAEncryption 73:bf:05:a5:2e:f1:68:6e:2e:d7:8e:5e:48:8d:cc:07:45:a0: f7:d3:9c:0b:62:38:cf:4b:07:8e:6b:d9:b2:e4:81:3b:d5:4f: 6a:f7:35:bc:60:a8:87:ef:07:97:6e:0a:7c:45:4c:22:3a:48: 4e:53:ea:d3:73:c1:55:b9:8d:9a:ad:37:5c:48:cd:be:d8:dc: 36:3e:5c:14:f2:e0:00:06:31:21:11:92:ea:37:5d:e8:54:b0: aa:92:ae:47:50:f3:43:5d:31:ab:cd:e8:35:4a:49:ac:64:a8: fb:b0:8b:e1:94:3f:52:95:2a:8e:13:27:86:1c:7e:8f:db:cb: 99:ef:c4:19:51:f9:8f:22:89:0d:2a:b9:7e:cb:9d:d7:55:91: 5f:19:d6:74:2b:e0:1a:ac:f7:15:f9:2d:6d:bd:77:b2:7a:85: d1:72:1e:38:5b:7c:d0:b0:b3:f0:91:c7:df:2e:e9:5d:86:02: 21:8c:ba:c1:6f:37:a2:0c:39:3e:e9:8d:ac:69:60:24:37:6b: 57:3e:48:58:44:2a:d4:5c:38:4b:a4:1c:d7:77:bb:42:6e:ca: 63:ff:3d:8b:20:e9:fb:07:a4:65:60:f6:a5:01:69:91:c0:f4: a1:03:ae:67:33:f8:e2:91:13:0d:70:75:a7:3b:56:1e:ac:9a: f1:c7:b9:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EQ5x8EbrUUu5LwO1G92oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjMjljYmEyZGFjZjBlZjlmYTIyMDkwMDMyYmIxNTlhMTA5 MTQwZjAwHhcNMjYwMTAxMTAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWUxMGZmM2QxY2E0ZmI3YmIyOTg5MjU3YzQ1N2ExYjBjZjM0NmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRQ1hEoKXN4+yu8NyPFfKkSILaKx zZsw41n5z1FK/pHHWuIuju3VcG/CTB3NpAtOJc5mnbDLceZ02swkKE2+3wRrNZh2 fFtXWOiMhuyxBgN73fVJT0Ug2bhlqKrS4gLSspdv36gTSeP0Eed3zIGpQ2SJHTog Sfxb/Vf3oGq7CggpGC3NGWHSRs0Ef1fMvP2nnFjHN2zn51D4CPGNdQxXLWJkHDqi 1f/+eUA5tmYeQdxElLpFy9wAuaTi2hDI79He4TRXkOlQcJ8MdC3+7DOQo3lmOXjU IAiR+CMPFKhzeVrXF/LbUBg3ph15gz+suLG/xmiQTeISbjVhVpdTshr4UwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGnhD/PRyk+3uymJJXxFehsM80auMB8GA1UdIwQY MBaAFFwpy6Lazw75+iIJADK7FZoQkUDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWENuTG90clBEdm42SWdrQU1yc1ZtaENSUVBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MjlmZGEtZDg1Mi00YWNhLTlhZmYt NmQxZmE0MmQwYjgwLzEvYWVFUDg5SEtUN2U3S1lrbGZFVjZHd3p6UnE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC83MjlmZGEtZDg1Mi00YWNhLTlhZmYtNmQxZmE0MmQwYjgw LzEvWENuTG90clBEdm42SWdrQU1yc1ZtaENSUVBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYJMMA0G CSqGSIb3DQEBCwUAA4IBAQBzvwWlLvFobi7Xjl5IjcwHRaD305wLYjjPSweOa9my 5IE71U9q9zW8YKiH7weXbgp8RUwiOkhOU+rTc8FVuY2arTdcSM2+2Nw2PlwU8uAA BjEhEZLqN13oVLCqkq5HUPNDXTGrzeg1SkmsZKj7sIvhlD9SlSqOEyeGHH6P28uZ 78QZUfmPIokNKrl+y53XVZFfGdZ0K+AarPcV+S1tvXeyeoXRch44W3zQsLPwkcff LuldhgIhjLrBbzeiDDk+6Y2saWAkN2tXPkhYRCrUXDhLpBzXd7tCbspj/z2LIOn7 B6RlYPalAWmRwPShA65nM/jikRMNcHWnO1YerJrxx7kE -----END CERTIFICATE-----Generated at Mon Jan 26 10:53:00 2026 by rpki-client