This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/ab4oCfni6I0eVxmmGLGyz1krj30.roa File: ab4oCfni6I0eVxmmGLGyz1krj30.roa (raw, json) Hash identifier: gbL/66W2TTWhHvbdIV2FOVnrXjr1YDVt+7NVMMUxMss= Subject key identifier: 69:BE:28:09:F9:E2:E8:8D:1E:57:19:A6:18:B1:B2:CF:59:2B:8F:7D Certificate issuer: /CN=69042c1f27a7d7862475087023dc97c3330f73c6 Certificate serial: 019B7F15C6C3690BB018BA16FA5E65C892FF Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/ab4oCfni6I0eVxmmGLGyz1krj30.roa Signing time: Fri 02 Jan 2026 14:21:32 +0000 ROA not before: Fri 02 Jan 2026 14:21:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48847 IP address blocks: 185.104.68.0/22 maxlen: 22 185.104.68.0/24 maxlen: 24 185.104.68.0/26 maxlen: 26 185.104.68.64/26 maxlen: 26 185.104.68.144/28 maxlen: 28 185.104.68.240/29 maxlen: 29 185.104.70.0/24 maxlen: 24 185.104.70.0/28 maxlen: 28 185.104.70.32/30 maxlen: 30 185.104.70.220/30 maxlen: 30 185.104.71.0/24 maxlen: 24 185.104.71.0/28 maxlen: 28 185.104.71.16/30 maxlen: 30 185.104.71.20/30 maxlen: 30 185.104.71.24/30 maxlen: 30 185.104.71.28/30 maxlen: 30 185.104.71.32/28 maxlen: 28 185.104.71.128/28 maxlen: 28 185.104.71.160/29 maxlen: 29 185.104.71.176/29 maxlen: 29 185.104.71.200/29 maxlen: 29 185.104.71.224/28 maxlen: 28 2a06:3480::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c6:c3:69:0b:b0:18:ba:16:fa:5e:65:c8:92:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6 Validity Not Before: Jan 2 14:21:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69be2809f9e2e88d1e5719a618b1b2cf592b8f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d3:1d:f1:c5:78:29:4e:3d:f6:a7:1f:76:57: d1:68:60:44:13:a7:32:d0:0c:0a:50:0c:f2:7e:ac: 9a:af:a8:c4:2c:25:9a:83:f1:47:5b:3f:9e:8f:59: 4a:64:7a:cb:ce:4e:b9:f4:e1:a6:10:c8:2a:01:84: 94:12:92:22:28:74:66:3f:a3:b1:c2:b2:f8:2c:75: f3:8b:6d:37:0d:3f:0b:c4:8b:df:96:59:26:e6:4d: c6:3f:be:46:b8:ce:68:79:de:7e:34:ab:3d:93:1b: 71:f4:9d:b7:27:58:bd:30:dc:9e:11:92:24:9d:f7: f8:63:8c:f1:80:c3:d9:5f:35:84:45:11:a9:63:ac: f3:9d:82:80:d3:4b:c7:42:22:65:50:b3:cb:f4:a8: 77:6e:94:3c:a0:e3:2f:2f:41:79:e8:3b:26:d9:43: 9c:66:a7:74:43:1a:40:bd:de:88:fd:77:e3:40:63: b4:b1:93:fe:a3:a8:7d:71:9d:be:8f:37:41:33:ff: 9f:e7:7b:fb:bf:41:39:4e:39:d4:49:1d:b4:bb:d2: 58:49:a4:e9:61:75:66:d2:84:a9:d9:fb:79:fe:90: 5a:f6:20:7d:87:dd:1b:1c:47:de:55:c9:ba:53:a8: 81:ed:5a:53:dd:40:90:7a:b7:b5:2d:22:29:4c:68: e7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:BE:28:09:F9:E2:E8:8D:1E:57:19:A6:18:B1:B2:CF:59:2B:8F:7D X509v3 Authority Key Identifier: keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/ab4oCfni6I0eVxmmGLGyz1krj30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.104.68.0/22 IPv6: 2a06:3480::/29 Signature Algorithm: sha256WithRSAEncryption c0:5e:c6:8c:35:30:3d:5b:c2:bc:a0:17:32:30:40:c4:b5:37: fc:18:6e:b8:be:2c:16:1b:77:2c:d8:fa:25:39:f7:91:9b:38: c6:6f:6c:ff:f6:b3:c9:ae:47:48:ad:0f:25:f0:7e:c7:ce:cb: 3d:e9:d5:77:06:d2:aa:e5:72:08:85:b6:0f:76:9f:b1:d5:f1: c5:4d:9f:e3:14:82:5f:aa:87:f8:9c:5e:aa:f1:20:56:14:6c: a1:3a:df:fa:f6:bb:ca:36:d2:3f:83:fa:7c:d0:3f:91:f3:52: b0:52:d1:05:a9:cc:44:41:f6:e8:38:9a:85:33:d9:39:28:48: 56:6a:9f:e3:e2:d4:7c:b8:57:83:02:02:d3:36:14:88:f2:6a: df:e6:2c:ca:0f:f0:55:44:94:84:37:ef:35:bf:31:69:70:f7: af:60:e9:92:59:92:94:a6:c4:e8:a0:41:ea:75:b6:49:06:56: de:8e:cf:99:c2:4b:e0:86:5a:7a:18:38:8f:c8:1e:14:b0:3a: ab:2c:ba:14:bc:06:16:2b:6d:3e:74:e6:1a:75:51:a4:d9:c1: b5:96:2b:27:f9:01:4c:0f:d4:03:06:33:e1:02:ba:6a:24:df: e8:b1:ba:78:dd:60:4b:31:6d:62:70:cd:28:96:ab:90:86:67: 32:88:63:32 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FcbDaQuwGLoW+l5lyJL/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MDQyYzFmMjdhN2Q3ODYyNDc1MDg3MDIzZGM5N2MzMzMw ZjczYzYwHhcNMjYwMTAyMTQyMTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWJlMjgwOWY5ZTJlODhkMWU1NzE5YTYxOGIxYjJjZjU5MmI4ZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstMd8cV4KU499qcfdlfRaGBEE6cy 0AwKUAzyfqyar6jELCWag/FHWz+ej1lKZHrLzk659OGmEMgqAYSUEpIiKHRmP6Ox wrL4LHXzi203DT8LxIvfllkm5k3GP75GuM5oed5+NKs9kxtx9J23J1i9MNyeEZIk nff4Y4zxgMPZXzWERRGpY6zznYKA00vHQiJlULPL9Kh3bpQ8oOMvL0F56Dsm2UOc Zqd0QxpAvd6I/XfjQGO0sZP+o6h9cZ2+jzdBM/+f53v7v0E5TjnUSR20u9JYSaTp YXVm0oSp2ft5/pBa9iB9h90bHEfeVcm6U6iB7VpT3UCQere1LSIpTGjnJwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGm+KAn54uiNHlcZphixss9ZK499MB8GA1UdIwQY MBaAFGkELB8np9eGJHUIcCPcl8MzD3PGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy80YWU2NGItZjczZS00MDhjLWI0YTgt Y2JiM2Q2MzVkODJmLzEvYWI0b0Nmbmk2STBlVnhtbUdMR3l6MWtyajMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy80YWU2NGItZjczZS00MDhjLWI0YTgtY2JiM2Q2MzVkODJm LzEvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWhEMA0E AgACMAcDBQMqBjSAMA0GCSqGSIb3DQEBCwUAA4IBAQDAXsaMNTA9W8K8oBcyMEDE tTf8GG64viwWG3cs2PolOfeRmzjGb2z/9rPJrkdIrQ8l8H7Hzss96dV3BtKq5XII hbYPdp+x1fHFTZ/jFIJfqof4nF6q8SBWFGyhOt/69rvKNtI/g/p80D+R81KwUtEF qcxEQfboOJqFM9k5KEhWap/j4tR8uFeDAgLTNhSI8mrf5izKD/BVRJSEN+81vzFp cPevYOmSWZKUpsTooEHqdbZJBlbejs+Zwkvghlp6GDiPyB4UsDqrLLoUvAYWK20+ dOYadVGk2cG1lisn+QFMD9QDBjPhArpqJN/osbp43WBLMW1icM0olquQhmcyiGMy -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:31 2026 by rpki-client