This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/aEdbH2gcMJrcI8LeEpWiiItu560.roa File: aEdbH2gcMJrcI8LeEpWiiItu560.roa (raw, json) Hash identifier: 2FbQgo/a/H9dMPsQCbyn1M5Rd/nKsnsa5CJ69qDU4Ds= Subject key identifier: 68:47:5B:1F:68:1C:30:9A:DC:23:C2:DE:12:95:A2:88:8B:6E:E7:AD Certificate issuer: /CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626 Certificate serial: 019B7DCAC20EBF2A88EA21BEFDF78F9EE8EA Authority key identifier: 9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/aEdbH2gcMJrcI8LeEpWiiItu560.roa Signing time: Fri 02 Jan 2026 08:19:58 +0000 ROA not before: Fri 02 Jan 2026 08:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198178 IP address blocks: 83.242.100.0/24 maxlen: 24 2a13:7e40:1::/48 maxlen: 48 2a13:7e40:2::/48 maxlen: 48 2a13:7e40:3::/48 maxlen: 48 2a13:7e40:4::/48 maxlen: 48 2a13:7e40:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.crl rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:c2:0e:bf:2a:88:ea:21:be:fd:f7:8f:9e:e8:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626 Validity Not Before: Jan 2 08:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68475b1f681c309adc23c2de1295a2888b6ee7ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:01:f2:cf:18:4c:9a:57:81:b4:ec:5d:b6:f1: ec:f4:b7:38:b1:94:0d:99:86:52:82:62:a5:9f:9b: 7d:61:22:73:56:9a:3c:84:6f:8b:66:d7:98:b0:69: e4:26:e9:23:0e:8e:36:c5:96:2f:a3:7c:94:30:73: c1:85:db:22:87:64:19:bc:a7:a3:1b:03:d8:d6:fa: d1:53:6d:5b:ac:2b:f4:4b:b9:13:3f:0d:0e:a9:fc: 0f:c3:20:44:56:83:b5:9c:43:9e:03:7e:bf:36:24: 9e:c0:a5:b9:a5:ad:63:89:b5:ec:3d:7b:06:fe:9f: 53:6c:6a:7b:92:c1:63:3b:4e:4a:e4:65:ba:bd:12: 43:38:58:65:13:0a:24:f2:d6:4d:5c:77:da:ab:c2: 94:12:bb:58:f0:5f:96:3a:e1:19:37:0f:2d:12:93: f0:13:cf:64:2b:9d:56:28:e4:38:a9:af:c4:b1:1d: d0:9b:b7:9f:1a:fd:b0:0f:fa:78:6e:9c:8a:6d:72: 49:ab:6b:b5:24:7d:f8:ca:34:ba:90:4d:17:89:fb: 6f:64:32:14:9b:3d:18:be:94:b3:88:4e:36:88:dc: 35:14:09:74:59:63:7e:26:3e:92:32:23:b8:c7:6c: 89:5a:f8:a0:49:d6:d7:a0:b2:5a:50:fc:94:13:b9: 58:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:47:5B:1F:68:1C:30:9A:DC:23:C2:DE:12:95:A2:88:8B:6E:E7:AD X509v3 Authority Key Identifier: keyid:9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/aEdbH2gcMJrcI8LeEpWiiItu560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.242.100.0/24 IPv6: 2a13:7e40:1::-2a13:7e40:5:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 03:5e:35:2f:49:a9:58:b3:b8:44:a6:7d:1d:34:c0:ee:f1:d0: 40:a5:9c:df:0d:9a:de:1b:3b:da:40:8e:70:80:91:e0:78:e0: 68:c3:71:1b:0f:2f:7e:2a:31:c4:66:da:45:c2:11:56:c2:9c: 4a:43:be:f8:99:35:59:cd:78:20:d5:2b:45:67:1a:16:12:07: f4:23:87:cf:18:8e:7e:6b:34:87:6b:37:15:fd:64:3d:87:0c: 59:65:50:48:ab:b2:90:99:8d:a1:b9:a4:61:37:3a:39:d9:7b: d9:76:f6:11:37:ef:48:a0:aa:86:f4:31:f6:1f:cf:67:7b:59: 91:1c:8e:20:2f:00:6c:8b:2d:d9:3c:d2:02:16:b6:42:2b:61: de:bc:a6:cb:7a:5d:af:ba:aa:88:b0:6b:d5:ea:8d:64:08:72: b9:a5:7c:8d:de:4d:e9:ad:3e:7d:08:91:0c:ce:fe:f9:e0:60: 6d:a2:49:15:62:87:1f:a4:bd:23:84:d6:aa:26:e4:b3:06:7a: 0e:b0:73:f8:1d:a9:8e:c6:c0:0f:60:3d:e4:8d:1f:3a:22:31: f5:b8:2e:2f:aa:7b:e3:de:f8:4a:84:f1:ba:68:39:2f:52:b2: 3a:c8:be:e3:55:80:15:97:55:bf:6a:c5:2e:4b:ef:0a:33:d3: 5e:f1:e6:91 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt9ysIOvyqI6iG+/fePnujqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNGY5YmY4N2FmZjAwZmQ1ZGIyMTU4NTc4MWI0NmYzNmY5 ZTM2MjYwHhcNMjYwMTAyMDgxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODQ3NWIxZjY4MWMzMDlhZGMyM2MyZGUxMjk1YTI4ODhiNmVlN2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQHyzxhMmleBtOxdtvHs9Lc4sZQN mYZSgmKln5t9YSJzVpo8hG+LZteYsGnkJukjDo42xZYvo3yUMHPBhdsih2QZvKej GwPY1vrRU21brCv0S7kTPw0OqfwPwyBEVoO1nEOeA36/NiSewKW5pa1jibXsPXsG /p9TbGp7ksFjO05K5GW6vRJDOFhlEwok8tZNXHfaq8KUErtY8F+WOuEZNw8tEpPw E89kK51WKOQ4qa/EsR3Qm7efGv2wD/p4bpyKbXJJq2u1JH34yjS6kE0XiftvZDIU mz0YvpSziE42iNw1FAl0WWN+Jj6SMiO4x2yJWvigSdbXoLJaUPyUE7lYqwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGhHWx9oHDCa3CPC3hKVooiLbuetMB8GA1UdIwQY MBaAFJ1Pm/h6/wD9XbIVhXgbRvNvnjYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblUtYi1Icl9BUDFkc2hXRmVCdEc4Mi1lTmlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS83NDE4NzItYTQyNS00MzY3LTlhYzIt ZGNkOTM3ZmQwN2E3LzEvYUVkYkgyZ2NNSnJjSThMZUVwV2lpSXR1NTYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS83NDE4NzItYTQyNS00MzY3LTlhYzItZGNkOTM3ZmQwN2E3 LzEvblUtYi1Icl9BUDFkc2hXRmVCdEc4Mi1lTmlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQAU/JkMBoE AgACMBQwEgMHACoTfkAAAQMHASoTfkAABDANBgkqhkiG9w0BAQsFAAOCAQEAA141 L0mpWLO4RKZ9HTTA7vHQQKWc3w2a3hs72kCOcICR4HjgaMNxGw8vfioxxGbaRcIR VsKcSkO++Jk1Wc14INUrRWcaFhIH9COHzxiOfms0h2s3Ff1kPYcMWWVQSKuykJmN obmkYTc6Odl72Xb2ETfvSKCqhvQx9h/PZ3tZkRyOIC8AbIst2TzSAha2Qith3rym y3pdr7qqiLBr1eqNZAhyuaV8jd5N6a0+fQiRDM7++eBgbaJJFWKHH6S9I4TWqibk swZ6DrBz+B2pjsbAD2A95I0fOiIx9bguL6p74974SoTxumg5L1KyOsi+41WAFZdV v2rFLkvvCjPTXvHmkQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:28 2026 by rpki-client