This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/AqeEArFXVprPp5Ifa6hKfeHjgZo.roa File: AqeEArFXVprPp5Ifa6hKfeHjgZo.roa (raw, json) Hash identifier: SNZsKTAZfwwb0XNOZZFJ3zpSaVaqLY7YkuyejngEFEA= Subject key identifier: 02:A7:84:02:B1:57:56:9A:CF:A7:92:1F:6B:A8:4A:7D:E1:E3:81:9A Certificate issuer: /CN=01bfe882d13e803fc194373ea40d8a5a9e69f304 Certificate serial: 019B79ECC1AA5A2A774636B79EC1AC276504 Authority key identifier: 01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/AqeEArFXVprPp5Ifa6hKfeHjgZo.roa Signing time: Thu 01 Jan 2026 14:18:37 +0000 ROA not before: Thu 01 Jan 2026 14:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200647 IP address blocks: 185.67.196.0/22 maxlen: 22 2a05:1280::/29 maxlen: 29 2a05:1280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c1:aa:5a:2a:77:46:36:b7:9e:c1:ac:27:65:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01bfe882d13e803fc194373ea40d8a5a9e69f304 Validity Not Before: Jan 1 14:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02a78402b157569acfa7921f6ba84a7de1e3819a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:be:83:76:56:4b:5a:8a:27:1d:f0:0e:b0:e2: df:90:f9:12:5a:59:7c:7b:1b:e8:06:3c:fe:8c:2f: 1a:cd:1b:e0:2d:68:91:06:a9:46:8e:e7:70:29:20: e2:56:63:16:1c:fe:58:c1:84:50:28:9a:25:91:2c: e9:a0:c2:66:5a:8a:d1:ac:68:17:e6:f0:45:c7:a0: 13:fb:df:41:b0:6a:8e:84:6b:ab:b9:12:54:13:4d: 7e:6e:fe:13:74:6c:7e:61:c8:4f:97:0a:f8:3b:16: 5e:16:ed:21:25:1d:26:d2:bc:95:88:e5:9f:ae:73: f8:d4:ae:58:a4:c8:f9:7c:6d:6f:28:3c:22:aa:dd: d8:b8:22:e1:e0:bd:fa:66:67:07:98:04:35:c4:2b: 07:9c:f5:db:2b:80:ce:84:e9:fd:b9:c4:2a:0a:88: 13:29:0a:a6:6d:5d:9a:07:a2:15:b4:56:05:14:f4: 31:03:e3:9a:99:e4:18:a3:62:36:08:10:dd:45:bb: a3:e3:f3:6d:30:9a:67:6f:09:fa:b9:17:04:12:8b: 80:bf:89:a2:c7:23:3b:6e:7c:a2:9f:4b:1b:da:b3: 04:59:a8:ae:2e:59:07:1b:e8:72:f0:8c:7f:18:98: 48:cd:af:29:cc:0c:37:c2:e2:2d:fb:50:ef:77:1f: 27:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A7:84:02:B1:57:56:9A:CF:A7:92:1F:6B:A8:4A:7D:E1:E3:81:9A X509v3 Authority Key Identifier: keyid:01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/AqeEArFXVprPp5Ifa6hKfeHjgZo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.67.196.0/22 IPv6: 2a05:1280::/29 Signature Algorithm: sha256WithRSAEncryption bd:6f:b2:0d:13:e8:f9:01:3d:a6:c5:14:74:72:35:68:39:e0: 5c:a2:ae:ac:ff:91:08:58:34:26:94:e2:bf:7a:74:c1:cd:24: f4:35:ab:58:a4:30:be:1f:25:59:d7:04:98:10:b0:d8:d0:c8: ee:98:b1:cc:ab:0c:c8:f9:7d:a9:09:64:d8:70:de:f8:d1:0f: 3d:23:27:a3:1c:9b:28:df:52:0f:ac:18:9f:ac:b7:0c:87:fc: 0f:81:52:d2:78:9c:41:b2:cc:c1:1f:76:32:33:ba:ea:9a:3a: de:f3:23:fc:c5:e2:14:76:26:c4:92:14:69:22:4e:11:75:9e: ef:60:9e:1c:d5:e2:c7:dd:ab:b8:56:3b:91:7b:2a:be:75:e2: d8:5b:d0:7f:fb:b8:be:c7:63:75:d4:de:20:69:ba:db:fa:b7: 54:d2:9d:1f:21:ee:e4:b6:96:05:e0:00:8b:39:76:f4:ca:c4: de:10:ae:75:14:81:95:f8:6e:79:ed:21:8c:88:ca:f2:42:ff: 88:30:a5:f2:66:91:09:d3:c9:1e:8b:6a:8e:b6:16:d4:d8:ee: ce:d2:59:32:f3:4e:02:c9:e9:5a:c2:ab:14:e4:05:38:f0:70: 11:ac:d1:d3:70:ce:b1:b2:94:f7:f0:63:46:2c:35:3c:c8:33: 01:5d:e0:6d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57MGqWip3Rja3nsGsJ2UEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYmZlODgyZDEzZTgwM2ZjMTk0MzczZWE0MGQ4YTVhOWU2 OWYzMDQwHhcNMjYwMTAxMTQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmE3ODQwMmIxNTc1NjlhY2ZhNzkyMWY2YmE4NGE3ZGUxZTM4MTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL6DdlZLWoonHfAOsOLfkPkSWll8 exvoBjz+jC8azRvgLWiRBqlGjudwKSDiVmMWHP5YwYRQKJolkSzpoMJmWorRrGgX 5vBFx6AT+99BsGqOhGuruRJUE01+bv4TdGx+YchPlwr4OxZeFu0hJR0m0ryViOWf rnP41K5YpMj5fG1vKDwiqt3YuCLh4L36ZmcHmAQ1xCsHnPXbK4DOhOn9ucQqCogT KQqmbV2aB6IVtFYFFPQxA+OameQYo2I2CBDdRbuj4/NtMJpnbwn6uRcEEouAv4mi xyM7bnyin0sb2rMEWaiuLlkHG+hy8Ix/GJhIza8pzAw3wuIt+1Dvdx8nIwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAKnhAKxV1aaz6eSH2uoSn3h44GaMB8GA1UdIwQY MBaAFAG/6ILRPoA/wZQ3PqQNilqeafMEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWJfb2d0RS1nRF9CbERjLXBBMktXcDVwOHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82NmMwOGEtZWU1OS00NzcxLWE4ZjIt MmE1NTM5OWE4MGIwLzEvQXFlRUFyRlhWcHJQcDVJZmE2aEtmZUhqZ1pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82NmMwOGEtZWU1OS00NzcxLWE4ZjItMmE1NTM5OWE4MGIw LzEvQWJfb2d0RS1nRF9CbERjLXBBMktXcDVwOHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuUPEMA0E AgACMAcDBQMqBRKAMA0GCSqGSIb3DQEBCwUAA4IBAQC9b7INE+j5AT2mxRR0cjVo OeBcoq6s/5EIWDQmlOK/enTBzST0NatYpDC+HyVZ1wSYELDY0MjumLHMqwzI+X2p CWTYcN740Q89IyejHJso31IPrBifrLcMh/wPgVLSeJxBsszBH3YyM7rqmjre8yP8 xeIUdibEkhRpIk4RdZ7vYJ4c1eLH3au4VjuReyq+deLYW9B/+7i+x2N11N4gabrb +rdU0p0fIe7ktpYF4ACLOXb0ysTeEK51FIGV+G557SGMiMryQv+IMKXyZpEJ08ke i2qOthbU2O7O0lky804CyelawqsU5AU48HARrNHTcM6xspT38GNGLDU8yDMBXeBt -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:59 2026 by rpki-client