This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/aEg8pKYRLzgHoBTbcFWlM2bc9cY.roa File: aEg8pKYRLzgHoBTbcFWlM2bc9cY.roa (raw, json) Hash identifier: /Iyi+dntnfLdprySjcri6ap8bjxvS/nEOkhR72Tr4I4= Subject key identifier: 68:48:3C:A4:A6:11:2F:38:07:A0:14:DB:70:55:A5:33:66:DC:F5:C6 Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936 Certificate serial: 019B7AC8B63B5E33732DFBE3107B539F4AFD Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/aEg8pKYRLzgHoBTbcFWlM2bc9cY.roa Signing time: Thu 01 Jan 2026 18:18:52 +0000 ROA not before: Thu 01 Jan 2026 18:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30981 IP address blocks: 82.205.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:b6:3b:5e:33:73:2d:fb:e3:10:7b:53:9f:4a:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936 Validity Not Before: Jan 1 18:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68483ca4a6112f3807a014db7055a53366dcf5c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3f:f0:28:07:4e:2b:9b:5f:8f:65:a2:ef:4e: c0:5a:7e:ca:a0:07:29:6f:59:94:59:31:24:a4:16: db:99:14:e0:c7:bf:6b:3a:ce:6a:00:74:bb:0b:ad: 9d:7e:fe:3c:17:54:6d:96:69:4a:3c:e1:19:56:88: f6:75:3d:87:b8:35:e8:67:55:e4:31:bd:2d:a0:61: 2e:4c:c5:39:99:d8:85:96:b3:72:55:73:02:c7:c3: a0:cb:68:44:05:14:21:db:0b:cb:65:6f:a3:08:bb: ca:76:c6:9c:9a:14:e0:4e:3e:c4:73:37:ca:fb:92: 02:0a:50:e5:cb:30:0e:56:b2:8e:52:1f:aa:7c:1f: 77:2c:2b:51:75:e9:38:16:bc:9d:68:25:98:f0:5b: 25:e1:f2:f2:19:50:e7:60:ff:61:91:23:38:b1:d3: f2:24:ff:0f:a5:37:9f:b3:3c:af:22:6a:05:ca:e6: ec:04:a0:54:f3:cc:8e:5c:59:49:2f:0a:ad:20:d2: 1a:55:c1:c2:6e:e0:cf:43:16:c5:c8:c7:bd:1b:08: e5:20:f6:11:3a:f3:a5:8d:d6:93:ce:d6:7a:8a:71: 72:3d:80:6a:d3:de:b1:ff:ab:d7:b6:35:97:ee:b4: 4e:40:32:ba:9c:36:56:24:a2:58:99:2f:33:80:86: 50:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:48:3C:A4:A6:11:2F:38:07:A0:14:DB:70:55:A5:33:66:DC:F5:C6 X509v3 Authority Key Identifier: keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/aEg8pKYRLzgHoBTbcFWlM2bc9cY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.205.201.0/24 Signature Algorithm: sha256WithRSAEncryption 30:b4:fd:be:f9:a5:32:57:80:10:6c:11:89:79:c5:b2:a4:d6: 1b:cf:dc:8f:29:f7:1d:f2:34:58:8f:52:24:ad:0a:f0:d2:85: d1:ea:c9:e8:5c:f7:02:6c:32:9d:03:5e:02:fa:47:33:71:11: d6:c0:35:b4:75:81:1d:5f:15:16:55:96:77:8e:08:b4:fb:4a: 8e:99:c6:ca:8d:25:29:ed:4d:a3:bb:04:46:be:73:88:80:ff: c6:c9:8e:df:63:c1:d9:aa:d3:d4:9a:9e:36:8d:7d:5f:f3:27: f2:11:cf:46:51:f0:dd:28:9c:c8:5d:02:86:c4:e7:6b:c0:28: ea:de:b9:66:e1:ea:96:d9:d6:fc:29:1c:dc:16:07:81:c2:20: 2c:ae:73:bb:cf:3d:a9:0b:a2:45:61:81:46:7e:06:cd:38:1e: 8f:1e:21:b1:88:f5:f8:97:94:59:3b:d6:7e:11:08:ad:a0:5d: 0f:53:c5:32:fb:f1:c4:fa:0f:73:38:9d:1f:50:f8:fa:25:b0: c0:40:21:94:ab:07:6a:b8:5f:ee:4b:10:4a:19:35:b0:01:13: 77:e4:1f:69:68:e0:d5:70:2d:d2:15:c9:bf:54:3b:d4:8f:2d: 3b:63:b1:13:67:cc:1c:7c:42:8a:39:91:c2:b4:08:e5:32:66: 8c:f8:93:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yLY7XjNzLfvjEHtTn0r9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZjBkY2NlYjc0ZjExODVhY2Q5N2FlZWFhYzI1ZGRhNWU5 YjA5MzYwHhcNMjYwMTAxMTgxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODQ4M2NhNGE2MTEyZjM4MDdhMDE0ZGI3MDU1YTUzMzY2ZGNmNWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD/wKAdOK5tfj2Wi707AWn7KoAcp b1mUWTEkpBbbmRTgx79rOs5qAHS7C62dfv48F1RtlmlKPOEZVoj2dT2HuDXoZ1Xk Mb0toGEuTMU5mdiFlrNyVXMCx8Ogy2hEBRQh2wvLZW+jCLvKdsacmhTgTj7EczfK +5ICClDlyzAOVrKOUh+qfB93LCtRdek4FrydaCWY8Fsl4fLyGVDnYP9hkSM4sdPy JP8PpTefszyvImoFyubsBKBU88yOXFlJLwqtINIaVcHCbuDPQxbFyMe9GwjlIPYR OvOljdaTztZ6inFyPYBq096x/6vXtjWX7rROQDK6nDZWJKJYmS8zgIZQQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGhIPKSmES84B6AU23BVpTNm3PXGMB8GA1UdIwQY MBaAFAnw3M63TxGFrNl67qrCXdpemwk2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80NWFjMGYtMzgzYS00ZWI0LWIxODgt OTk2MTg5ZjljZTE0LzEvYUVnOHBLWVJMemdIb0JUYmNGV2xNMmJjOWNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi80NWFjMGYtMzgzYS00ZWI0LWIxODgtOTk2MTg5ZjljZTE0 LzEvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUs3JMA0G CSqGSIb3DQEBCwUAA4IBAQAwtP2++aUyV4AQbBGJecWypNYbz9yPKfcd8jRYj1Ik rQrw0oXR6snoXPcCbDKdA14C+kczcRHWwDW0dYEdXxUWVZZ3jgi0+0qOmcbKjSUp 7U2juwRGvnOIgP/GyY7fY8HZqtPUmp42jX1f8yfyEc9GUfDdKJzIXQKGxOdrwCjq 3rlm4eqW2db8KRzcFgeBwiAsrnO7zz2pC6JFYYFGfgbNOB6PHiGxiPX4l5RZO9Z+ EQitoF0PU8Uy+/HE+g9zOJ0fUPj6JbDAQCGUqwdquF/uSxBKGTWwARN35B9paODV cC3SFcm/VDvUjy07Y7ETZ8wcfEKKOZHCtAjlMmaM+JOE -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:45 2026 by rpki-client