This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/arMnBAvJ_l0t_k2cs_JTkYsW7KE.roa File: arMnBAvJ_l0t_k2cs_JTkYsW7KE.roa (raw, json) Hash identifier: w1dyHqeEyCElmhe7gdYR35NFPH33gVtOtSLiS4j1Q1o= Subject key identifier: 6A:B3:27:04:0B:C9:FE:5D:2D:FE:4D:9C:B3:F2:53:91:8B:16:EC:A1 Certificate issuer: /CN=706745ad92353da8a80cb2e0d229d68c2ef53db2 Certificate serial: 019B03D5EB6A2F804197BAED14193AE44B5A Authority key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/arMnBAvJ_l0t_k2cs_JTkYsW7KE.roa Signing time: Tue 09 Dec 2025 15:58:29 +0000 ROA not before: Tue 09 Dec 2025 15:58:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 26383 IP address blocks: 185.133.173.0/24 maxlen: 24 185.133.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:d5:eb:6a:2f:80:41:97:ba:ed:14:19:3a:e4:4b:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2 Validity Not Before: Dec 9 15:58:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6ab327040bc9fe5d2dfe4d9cb3f253918b16eca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2a:2b:2c:30:9c:45:b6:95:18:c5:8a:4e:53: d8:6e:58:96:8e:21:c9:88:09:b6:4a:b6:2d:b3:e9: 0e:63:e8:36:cc:b3:8a:88:f2:12:23:d9:34:0b:05: c7:6d:1e:ae:23:1e:51:9c:53:60:de:55:2a:71:95: 0f:08:93:05:cd:53:73:01:6e:1c:02:ab:39:01:db: 9e:b8:39:aa:b6:77:9b:f5:7e:8d:32:a7:9a:62:d5: 01:be:28:32:10:e9:86:4d:c6:a6:b9:67:75:89:6a: 6d:6a:95:23:01:02:61:9c:02:e4:4e:d8:20:e7:a3: 27:ed:48:9f:30:c5:a4:e2:b1:92:25:91:2a:da:89: 60:cb:e6:ab:73:05:c7:a7:d6:c3:2f:5b:09:7b:b7: 67:1b:75:70:8d:36:7a:54:5a:a7:b7:df:fc:f6:e8: 7f:4b:cd:a5:36:e5:19:b8:ca:0c:d7:be:a0:1e:97: cd:01:1f:5f:a0:13:9e:f5:05:32:27:dc:93:d6:80: fb:78:81:03:c4:0a:38:ab:a8:ae:c9:e3:99:64:e9: 53:e6:6e:4d:0d:8e:2e:94:0f:d8:4c:5f:a6:46:a7: 4a:a8:d2:98:2c:f6:0f:1c:e3:33:86:7d:9a:f1:b1: 47:5b:e0:4c:58:1f:ca:90:f4:e9:9f:e2:3a:8f:99: 6e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B3:27:04:0B:C9:FE:5D:2D:FE:4D:9C:B3:F2:53:91:8B:16:EC:A1 X509v3 Authority Key Identifier: keyid:70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/arMnBAvJ_l0t_k2cs_JTkYsW7KE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.173.0-185.133.174.255 Signature Algorithm: sha256WithRSAEncryption 60:00:cf:6c:cb:b0:d3:ed:23:c8:8e:21:51:a6:53:fa:40:59: b8:62:1f:58:3c:98:3b:99:b4:96:63:56:d3:41:98:22:0b:c1: d5:dd:c0:bc:25:ae:0e:13:9d:0c:36:7b:b9:b8:e2:0e:90:e2: bb:03:f3:e3:c5:52:17:b1:ad:94:cd:de:a1:94:23:9e:72:7b: 96:7e:c7:11:16:6b:7a:d1:c7:eb:35:d6:1c:44:39:6d:3e:ac: b2:ac:50:bc:c6:22:61:fb:0e:d5:ef:23:6d:9b:e9:b2:27:b1: 2b:8d:d9:b5:01:ea:02:78:1e:41:18:9e:2a:df:eb:ed:40:ae: 83:95:80:12:1d:ba:85:99:c8:44:94:d1:b3:62:cb:f5:3c:82: 07:d7:08:97:3f:7a:a0:96:05:ec:72:c6:7b:2b:b0:2d:34:f5: 4f:7f:00:ff:66:2c:d9:51:a0:ca:25:16:b1:b1:fc:69:da:58: a7:05:1d:ea:a1:55:59:da:04:de:3f:89:8e:1b:38:30:f6:75: a5:2e:6f:81:15:43:77:e7:f3:5f:7c:b4:1c:9a:67:84:e6:88: ba:5f:0a:a6:c1:b1:2b:72:20:d7:0c:87:0d:07:ae:8f:e8:9d: 16:aa:7d:da:d2:4a:4a:84:41:93:7d:85:55:51:26:37:21:dc: 6e:a9:6e:19 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZsD1etqL4BBl7rtFBk65EtaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNjc0NWFkOTIzNTNkYThhODBjYjJlMGQyMjlkNjhjMmVm NTNkYjIwHhcNMjUxMjA5MTU1ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWIzMjcwNDBiYzlmZTVkMmRmZTRkOWNiM2YyNTM5MThiMTZlY2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniorLDCcRbaVGMWKTlPYbliWjiHJ iAm2SrYts+kOY+g2zLOKiPISI9k0CwXHbR6uIx5RnFNg3lUqcZUPCJMFzVNzAW4c Aqs5AdueuDmqtneb9X6NMqeaYtUBvigyEOmGTcamuWd1iWptapUjAQJhnALkTtgg 56Mn7UifMMWk4rGSJZEq2olgy+arcwXHp9bDL1sJe7dnG3VwjTZ6VFqnt9/89uh/ S82lNuUZuMoM176gHpfNAR9foBOe9QUyJ9yT1oD7eIEDxAo4q6iuyeOZZOlT5m5N DY4ulA/YTF+mRqdKqNKYLPYPHOMzhn2a8bFHW+BMWB/KkPTpn+I6j5luJQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGqzJwQLyf5dLf5NnLPyU5GLFuyhMB8GA1UdIwQY MBaAFHBnRa2SNT2oqAyy4NIp1owu9T2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTkt ZTIxNzYzYzY3MmZhLzEvYXJNbkJBdkpfbDB0X2syY3NfSlRrWXNXN0tFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTktZTIxNzYzYzY3MmZh LzEvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5ha0D BAC5ha4wDQYJKoZIhvcNAQELBQADggEBAGAAz2zLsNPtI8iOIVGmU/pAWbhiH1g8 mDuZtJZjVtNBmCILwdXdwLwlrg4TnQw2e7m44g6Q4rsD8+PFUhexrZTN3qGUI55y e5Z+xxEWa3rRx+s11hxEOW0+rLKsULzGImH7DtXvI22b6bInsSuN2bUB6gJ4HkEY nirf6+1AroOVgBIduoWZyESU0bNiy/U8ggfXCJc/eqCWBexyxnsrsC009U9/AP9m LNlRoMolFrGx/GnaWKcFHeqhVVnaBN4/iY4bODD2daUub4EVQ3fn8198tByaZ4Tm iLpfCqbBsStyINcMhw0Hro/onRaqfdrSSkqEQZN9hVVRJjch3G6pbhk= -----END CERTIFICATE-----Generated at Tue Dec 16 05:03:53 2025 by rpki-client