This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/aoQp_E2M_9LXTFF6pDgOqdykMJs.roa File: aoQp_E2M_9LXTFF6pDgOqdykMJs.roa (raw, json) Hash identifier: ZVBgKqgCIX/FUlxwreqDRMfTTYTUXcqz3btFwSkMr7k= Subject key identifier: 6A:84:29:FC:4D:8C:FF:D2:D7:4C:51:7A:A4:38:0E:A9:DC:A4:30:9B Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Certificate serial: 019AEF343E3C500146680D1AD2BE99EFF168 Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/aoQp_E2M_9LXTFF6pDgOqdykMJs.roa Signing time: Fri 05 Dec 2025 15:49:29 +0000 ROA not before: Fri 05 Dec 2025 15:49:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203142 IP address blocks: 130.49.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:34:3e:3c:50:01:46:68:0d:1a:d2:be:99:ef:f1:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Validity Not Before: Dec 5 15:49:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6a8429fc4d8cffd2d74c517aa4380ea9dca4309b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3d:57:82:82:8b:85:2b:88:a5:ef:2d:26:3a: 7d:33:58:21:62:f8:03:e9:d8:65:0e:a6:ff:54:f6: 3d:5f:96:f5:fb:36:12:33:8e:98:b9:79:8f:9a:86: 16:30:f9:1d:45:26:4f:3f:2e:49:88:7d:af:14:3e: 7e:11:af:60:75:20:8a:2d:13:e8:5f:a6:88:8f:cb: 9e:68:4a:67:e0:57:2e:5e:ae:45:d8:cb:38:64:3f: 63:fa:95:b4:65:b3:f2:c2:42:33:11:9a:69:84:52: cc:9f:9d:36:21:8a:a8:f1:1e:77:72:e3:30:b7:e1: 6d:bb:19:a1:64:33:a8:9f:e1:05:ee:57:2e:b7:6c: e7:3f:e9:c1:14:45:17:b6:bd:de:e2:53:c8:1c:48: c8:58:3d:5a:8e:a2:c1:c3:8f:fc:9e:84:25:95:33: 01:d0:b4:5f:85:18:7f:8f:50:aa:37:02:0b:33:b9: 74:a5:d0:a9:e3:a4:a9:62:8b:06:4f:b2:86:db:90: 5e:b7:f6:cf:17:10:ca:56:ed:6d:e0:da:7d:02:a0: 72:91:39:22:bf:72:bb:7d:d3:c0:58:ee:f4:c2:d8: 93:2e:de:c1:40:50:df:5b:cf:e1:52:c8:49:f1:c9: c3:ec:34:70:02:ff:da:87:19:1a:1c:af:e6:d0:df: b4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:84:29:FC:4D:8C:FF:D2:D7:4C:51:7A:A4:38:0E:A9:DC:A4:30:9B X509v3 Authority Key Identifier: keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/aoQp_E2M_9LXTFF6pDgOqdykMJs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.49.180.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:e1:61:f4:dc:ac:db:76:5d:47:9b:85:12:42:a4:65:04:00: 29:01:27:25:71:b5:a7:a2:9c:00:62:f2:d0:3b:07:6c:6b:5c: f3:f9:e6:43:5c:ee:76:2a:70:b4:5b:dc:e6:3d:12:f0:87:9a: b8:d5:04:a6:56:e5:b7:0c:71:03:60:7a:ae:c0:17:98:59:de: e1:07:ed:ca:21:51:ce:0d:9b:0a:56:be:61:1e:9d:83:21:09: 01:64:ab:a8:3d:07:2b:4a:46:55:d6:1e:a5:21:77:33:62:48: 13:10:f8:49:43:7d:48:cf:d6:ac:46:c5:e0:69:e2:2d:37:86: e4:32:9d:42:bd:ef:45:62:15:23:1e:52:d6:b3:f9:de:c5:56: a7:19:0c:11:12:ea:00:08:fc:ae:12:a1:62:68:d3:b6:04:ea: 46:23:66:72:56:68:69:69:41:79:97:9f:5c:c1:7e:8c:1a:00: 50:7b:97:99:fb:15:5c:6e:40:ed:50:c0:84:17:15:ad:a2:73: fc:df:ed:71:14:dd:e4:e5:44:6b:78:d8:d5:6e:6c:81:f6:88: 30:37:3d:36:0d:96:c3:74:6b:85:66:db:e4:95:8f:a3:80:c1: e1:7d:0c:a9:95:70:54:16:ff:4d:f4:73:9f:12:bd:35:39:16: b9:9d:e5:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrvND48UAFGaA0a0r6Z7/FoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3 NzliYjEwHhcNMjUxMjA1MTU0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTg0MjlmYzRkOGNmZmQyZDc0YzUxN2FhNDM4MGVhOWRjYTQzMDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD1XgoKLhSuIpe8tJjp9M1ghYvgD 6dhlDqb/VPY9X5b1+zYSM46YuXmPmoYWMPkdRSZPPy5JiH2vFD5+Ea9gdSCKLRPo X6aIj8ueaEpn4FcuXq5F2Ms4ZD9j+pW0ZbPywkIzEZpphFLMn502IYqo8R53cuMw t+FtuxmhZDOon+EF7lcut2znP+nBFEUXtr3e4lPIHEjIWD1ajqLBw4/8noQllTMB 0LRfhRh/j1CqNwILM7l0pdCp46SpYosGT7KG25Bet/bPFxDKVu1t4Np9AqBykTki v3K7fdPAWO70wtiTLt7BQFDfW8/hUshJ8cnD7DRwAv/ahxkaHK/m0N+0IQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGqEKfxNjP/S10xReqQ4DqncpDCbMB8GA1UdIwQY MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt NmI0MzcyNjAyMDk2LzEvYW9RcF9FMk1fOUxYVEZGNnBEZ09xZHlrTUpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2 LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgjG0MA0G CSqGSIb3DQEBCwUAA4IBAQA84WH03Kzbdl1Hm4USQqRlBAApASclcbWnopwAYvLQ Owdsa1zz+eZDXO52KnC0W9zmPRLwh5q41QSmVuW3DHEDYHquwBeYWd7hB+3KIVHO DZsKVr5hHp2DIQkBZKuoPQcrSkZV1h6lIXczYkgTEPhJQ31Iz9asRsXgaeItN4bk Mp1Cve9FYhUjHlLWs/nexVanGQwREuoACPyuEqFiaNO2BOpGI2ZyVmhpaUF5l59c wX6MGgBQe5eZ+xVcbkDtUMCEFxWtonP83+1xFN3k5URreNjVbmyB9ogwNz02DZbD dGuFZtvklY+jgMHhfQyplXBUFv9N9HOfEr01ORa5neWz -----END CERTIFICATE-----Generated at Sat Dec 6 17:47:24 2025 by rpki-client