This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/s_aKE2fwvI0TlJb7EYHJTZWCW7w.roa File: s_aKE2fwvI0TlJb7EYHJTZWCW7w.roa (raw, json) Hash identifier: fh6F14UFEi/72CmWgxdS2ArW4727YK4EYnZc6mj0zIE= Subject key identifier: B3:F6:8A:13:67:F0:BC:8D:13:94:96:FB:11:81:C9:4D:95:82:5B:BC Certificate issuer: /CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900 Certificate serial: 019A9C1FBF3F80DE2405850B7362DC0716D3 Authority key identifier: AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/s_aKE2fwvI0TlJb7EYHJTZWCW7w.roa Signing time: Wed 19 Nov 2025 12:38:37 +0000 ROA not before: Wed 19 Nov 2025 12:38:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204137 IP address blocks: 134.19.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9c:1f:bf:3f:80:de:24:05:85:0b:73:62:dc:07:16:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900 Validity Not Before: Nov 19 12:38:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b3f68a1367f0bc8d139496fb1181c94d95825bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:28:a5:c6:d8:75:e7:0d:52:07:9e:74:53:72: 4d:43:f1:72:62:74:8a:bc:f8:ce:c7:fa:25:0e:a3: 71:32:b4:c8:cb:43:71:81:99:1d:77:08:6d:dd:c2: fb:81:d4:7a:3e:aa:6f:2a:e3:b6:b9:c6:98:3a:3b: b4:63:d1:3d:89:1f:6b:a3:8f:1a:06:1b:c1:19:cc: 17:2f:1d:40:1d:36:5d:e6:80:83:7c:e1:b2:ea:24: 99:38:70:c8:84:97:8d:34:55:0e:20:79:48:99:fb: 60:f2:0c:3f:89:b7:b8:25:8a:f9:c8:09:53:08:5c: 0c:86:64:2a:f9:e5:ca:8a:fe:27:7b:bc:72:3e:f5: 6d:23:06:2a:d2:ad:3d:2b:43:65:cf:a7:5d:4e:2c: 95:e0:06:20:43:6b:4c:45:9d:41:e5:0c:dd:bb:58: 9c:e0:84:62:d6:f2:c9:fe:ce:cc:00:c0:0e:66:93: 34:c0:13:65:42:38:8d:55:0a:0b:64:6c:90:58:0b: 57:6e:c0:7e:f1:ef:76:54:be:83:ef:94:c1:30:8e: ad:19:e9:a7:bd:77:12:8c:f0:36:bc:39:a1:d7:a2: fb:9e:94:c6:c9:72:79:a2:d1:e7:23:50:41:c1:c6: 47:96:e9:74:e3:12:cb:17:0b:04:58:b1:06:22:cf: f3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F6:8A:13:67:F0:BC:8D:13:94:96:FB:11:81:C9:4D:95:82:5B:BC X509v3 Authority Key Identifier: keyid:AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/s_aKE2fwvI0TlJb7EYHJTZWCW7w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.19.128.0/21 Signature Algorithm: sha256WithRSAEncryption 45:9f:fc:a4:2e:de:6e:d4:42:7e:df:f5:1e:15:16:d4:a2:d0: 0f:fb:c0:1f:39:27:58:5b:3a:76:ee:de:37:d2:01:86:a4:ae: c5:04:bc:40:1e:c1:f8:d5:07:6d:9f:c0:51:4c:57:04:c1:2a: 5a:29:63:ba:fd:b5:48:c5:4c:58:6c:41:db:5a:26:3b:f6:88: ff:c0:9a:03:9b:df:a7:f7:6f:54:2b:83:61:24:54:84:36:c5: c4:41:a1:b5:7e:f3:d3:5a:32:00:8a:d3:ae:75:97:94:c6:8f: 99:1e:19:f8:16:3b:7a:4e:ab:7a:00:47:31:3b:93:33:c8:a2: 8e:8d:7d:3b:7a:a3:be:a0:82:17:72:63:b0:ed:af:44:a6:de: 21:0d:a6:bb:3d:87:26:2e:13:48:5f:d7:03:54:9d:29:4a:43: 56:a3:36:54:6d:c8:2e:58:df:57:bf:79:65:6d:3a:e9:54:5b: 88:07:0d:4e:ab:73:4d:b8:b0:ae:dc:dd:cd:3d:75:c3:cf:ea: 4f:54:dd:32:a9:c3:d6:43:ea:99:c9:ca:78:5b:f4:f0:c9:ca: ee:d2:f2:0e:00:7b:4a:1e:4d:4d:01:4d:66:af:bd:85:91:a3: 51:ad:92:80:d0:aa:fb:96:3b:b4:ea:eb:5f:ab:e9:51:42:0c: 66:a0:03:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqcH78/gN4kBYULc2LcBxbTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlN2Y3NDdkZjVmMjQzNTMxNTRkYzRkNGJmNzBkMmRkY2I1 M2U5MDAwHhcNMjUxMTE5MTIzODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2Y2OGExMzY3ZjBiYzhkMTM5NDk2ZmIxMTgxYzk0ZDk1ODI1YmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiilxth15w1SB550U3JNQ/FyYnSK vPjOx/olDqNxMrTIy0NxgZkddwht3cL7gdR6PqpvKuO2ucaYOju0Y9E9iR9ro48a BhvBGcwXLx1AHTZd5oCDfOGy6iSZOHDIhJeNNFUOIHlImftg8gw/ibe4JYr5yAlT CFwMhmQq+eXKiv4ne7xyPvVtIwYq0q09K0Nlz6ddTiyV4AYgQ2tMRZ1B5Qzdu1ic 4IRi1vLJ/s7MAMAOZpM0wBNlQjiNVQoLZGyQWAtXbsB+8e92VL6D75TBMI6tGemn vXcSjPA2vDmh16L7npTGyXJ5otHnI1BBwcZHlul04xLLFwsEWLEGIs/z5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLP2ihNn8LyNE5SW+xGByU2Vglu8MB8GA1UdIwQY MBaAFK5/dH318kNTFU3E1L9w0t3LU+kAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm45MGZmWHlRMU1WVGNUVXYzRFMzY3RUNlFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi81OGFmMjQtYzQ1NC00NGIwLWE3Y2Et YzZmMWU2YWM5YmE5LzEvc19hS0UyZnd2STBUbEpiN0VZSEpUWldDVzd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi81OGFmMjQtYzQ1NC00NGIwLWE3Y2EtYzZmMWU2YWM5YmE5 LzEvcm45MGZmWHlRMU1WVGNUVXYzRFMzY3RUNlFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhhOAMA0G CSqGSIb3DQEBCwUAA4IBAQBFn/ykLt5u1EJ+3/UeFRbUotAP+8AfOSdYWzp27t43 0gGGpK7FBLxAHsH41Qdtn8BRTFcEwSpaKWO6/bVIxUxYbEHbWiY79oj/wJoDm9+n 929UK4NhJFSENsXEQaG1fvPTWjIAitOudZeUxo+ZHhn4Fjt6Tqt6AEcxO5MzyKKO jX07eqO+oIIXcmOw7a9Ept4hDaa7PYcmLhNIX9cDVJ0pSkNWozZUbcguWN9Xv3ll bTrpVFuIBw1Oq3NNuLCu3N3NPXXDz+pPVN0yqcPWQ+qZycp4W/Twycru0vIOAHtK Hk1NAU1mr72FkaNRrZKA0Kr7lju06utfq+lRQgxmoAOb -----END CERTIFICATE-----Generated at Sat Dec 6 23:18:19 2025 by rpki-client