This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/aoK4LjzvW24iCl2Hm5SfIHEA-7M.roa File: aoK4LjzvW24iCl2Hm5SfIHEA-7M.roa (raw, json) Hash identifier: JYGSbmnC0FqsVCIRhlEAGEVGEQbQz4POmiiJzlboiKY= Subject key identifier: 6A:82:B8:2E:3C:EF:5B:6E:22:0A:5D:87:9B:94:9F:20:71:00:FB:B3 Certificate issuer: /CN=7fefebd15fbc651487acaf67424f4783d43eb420 Certificate serial: 019A263E85E5AA34A3FA16F772EC9F53A647 Authority key identifier: 7F:EF:EB:D1:5F:BC:65:14:87:AC:AF:67:42:4F:47:83:D4:3E:B4:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/aoK4LjzvW24iCl2Hm5SfIHEA-7M.roa Signing time: Mon 27 Oct 2025 15:17:03 +0000 ROA not before: Mon 27 Oct 2025 15:17:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211119 IP address blocks: 185.126.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:26:3e:85:e5:aa:34:a3:fa:16:f7:72:ec:9f:53:a6:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fefebd15fbc651487acaf67424f4783d43eb420 Validity Not Before: Oct 27 15:17:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6a82b82e3cef5b6e220a5d879b949f207100fbb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f2:82:6b:36:52:f9:c6:30:c4:38:36:32:4a: 24:a4:47:4e:a5:6e:34:36:df:2c:a8:01:ae:00:07: 63:51:2c:3d:99:89:74:8d:60:e8:f8:22:64:09:14: 69:5e:5e:42:40:71:f6:6c:c7:15:9c:13:51:0e:09: 5b:72:34:eb:ed:d7:85:0a:2c:91:d3:8a:e3:78:31: 01:31:1a:ea:cf:84:be:c0:cb:f1:7e:9e:e6:f6:bb: 4b:f1:5b:23:b6:eb:38:29:fe:37:52:0e:f3:9c:36: 93:4c:98:c9:02:57:be:34:56:e0:04:92:f4:9c:e5: dc:d4:e1:f4:75:b9:4c:ea:df:65:b4:a9:5b:72:ae: ff:24:5f:68:3f:0c:48:ac:ce:a0:36:a6:96:f7:fd: 9b:d7:20:10:94:60:d0:f3:66:63:31:4b:81:a9:04: 79:22:33:95:da:34:6d:0b:1b:29:f7:e4:96:5f:76: aa:77:02:b2:03:99:d7:82:0b:13:83:27:ce:29:b9: 63:0e:98:99:c5:21:7b:03:2d:5a:1e:da:98:26:bc: 6d:d2:8a:b8:3f:ce:99:81:63:a8:79:68:a6:38:39: 33:28:3f:92:43:5d:44:c9:8c:2f:5b:e1:b8:84:6e: 1d:22:5e:d3:c1:27:f3:57:c9:14:df:92:15:16:59: 46:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:82:B8:2E:3C:EF:5B:6E:22:0A:5D:87:9B:94:9F:20:71:00:FB:B3 X509v3 Authority Key Identifier: keyid:7F:EF:EB:D1:5F:BC:65:14:87:AC:AF:67:42:4F:47:83:D4:3E:B4:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/aoK4LjzvW24iCl2Hm5SfIHEA-7M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.126.24.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:39:a2:4c:3b:78:e9:47:71:4e:51:fd:f9:15:e7:e3:7e:22: 3d:2a:b1:32:d5:ad:90:e7:f0:04:ca:84:ab:f9:ac:eb:2f:ec: 03:f6:ba:3f:f3:49:c1:8c:12:68:32:c4:fa:92:c0:bc:c1:0e: 98:b2:1a:8b:a5:f2:f8:ee:92:03:3b:f1:ed:b1:aa:4f:e9:7d: 41:56:d2:24:32:3e:2b:e2:7a:b7:12:a6:0a:56:44:6c:c3:cd: bc:94:b9:5a:f6:20:19:c3:c4:eb:91:5d:18:fe:62:3a:84:98: d6:fb:32:6b:a0:ab:a2:db:1d:13:52:e3:60:0c:b6:27:69:e2: 7e:4f:f9:f1:a0:38:53:b2:6a:87:4b:86:f0:07:5c:a3:a4:8f: cc:83:94:11:40:a3:5c:3c:17:20:23:13:95:96:86:e3:5e:ea: c9:2c:1b:aa:11:30:61:6b:44:67:b9:99:ff:18:c5:6b:9c:aa: 2b:90:bc:a1:3f:c0:5b:35:e1:c9:c0:7f:af:c4:74:83:d2:16: d1:e4:14:07:56:40:fa:42:2a:7a:9e:2b:78:34:7a:9c:e7:ae: 9a:de:57:80:14:69:ee:59:a6:e2:74:a8:7e:cd:6a:86:3e:53: 68:6e:0e:d3:a3:09:b4:39:3b:dc:dc:81:33:78:80:60:cf:7c: 45:6a:ce:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZomPoXlqjSj+hb3cuyfU6ZHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmZWZlYmQxNWZiYzY1MTQ4N2FjYWY2NzQyNGY0NzgzZDQz ZWI0MjAwHhcNMjUxMDI3MTUxNzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTgyYjgyZTNjZWY1YjZlMjIwYTVkODc5Yjk0OWYyMDcxMDBmYmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPKCazZS+cYwxDg2MkokpEdOpW40 Nt8sqAGuAAdjUSw9mYl0jWDo+CJkCRRpXl5CQHH2bMcVnBNRDglbcjTr7deFCiyR 04rjeDEBMRrqz4S+wMvxfp7m9rtL8Vsjtus4Kf43Ug7znDaTTJjJAle+NFbgBJL0 nOXc1OH0dblM6t9ltKlbcq7/JF9oPwxIrM6gNqaW9/2b1yAQlGDQ82ZjMUuBqQR5 IjOV2jRtCxsp9+SWX3aqdwKyA5nXggsTgyfOKbljDpiZxSF7Ay1aHtqYJrxt0oq4 P86ZgWOoeWimODkzKD+SQ11EyYwvW+G4hG4dIl7TwSfzV8kU35IVFllGpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGqCuC4871tuIgpdh5uUnyBxAPuzMB8GA1UdIwQY MBaAFH/v69FfvGUUh6yvZ0JPR4PUPrQgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZi1fcjBWLThaUlNIcks5blFrOUhnOVEtdENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8yNmVmNjMtYjcyZi00YjNjLThkZmMt MmJjODQ1MTkyMjdhLzEvYW9LNExqenZXMjRpQ2wySG01U2ZJSEVBLTdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8yNmVmNjMtYjcyZi00YjNjLThkZmMtMmJjODQ1MTkyMjdh LzEvZi1fcjBWLThaUlNIcks5blFrOUhnOVEtdENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuX4YMA0G CSqGSIb3DQEBCwUAA4IBAQBaOaJMO3jpR3FOUf35FefjfiI9KrEy1a2Q5/AEyoSr +azrL+wD9ro/80nBjBJoMsT6ksC8wQ6YshqLpfL47pIDO/HtsapP6X1BVtIkMj4r 4nq3EqYKVkRsw828lLla9iAZw8TrkV0Y/mI6hJjW+zJroKui2x0TUuNgDLYnaeJ+ T/nxoDhTsmqHS4bwB1yjpI/Mg5QRQKNcPBcgIxOVlobjXurJLBuqETBha0RnuZn/ GMVrnKorkLyhP8BbNeHJwH+vxHSD0hbR5BQHVkD6Qip6nit4NHqc566a3leAFGnu WabidKh+zWqGPlNobg7Towm0OTvc3IEzeIBgz3xFas7L -----END CERTIFICATE-----Generated at Sat Dec 6 12:54:10 2025 by rpki-client