This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/aeo2cA53KaNIMNSpURuE9qmInhw.roa File: aeo2cA53KaNIMNSpURuE9qmInhw.roa (raw, json) Hash identifier: fF+aTwDS7UtAgqPPcQTjS6k2TbT0szZ9i5XfheC55bU= Subject key identifier: 69:EA:36:70:0E:77:29:A3:48:30:D4:A9:51:1B:84:F6:A9:88:9E:1C Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019B07A14CA72EBAF81A9F9EBAD2B4AAE708 Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/aeo2cA53KaNIMNSpURuE9qmInhw.roa Signing time: Wed 10 Dec 2025 09:39:29 +0000 ROA not before: Wed 10 Dec 2025 09:39:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211522 IP address blocks: 45.134.12.0/24 maxlen: 24 45.134.13.0/24 maxlen: 24 45.134.14.0/24 maxlen: 24 45.134.15.0/24 maxlen: 24 185.128.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:a1:4c:a7:2e:ba:f8:1a:9f:9e:ba:d2:b4:aa:e7:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Dec 10 09:39:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69ea36700e7729a34830d4a9511b84f6a9889e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:02:84:96:47:9c:c8:1d:43:30:09:2d:93:cc: 1c:1e:09:a2:3b:d0:0d:4b:fa:e6:ee:d6:62:45:4b: a1:e4:73:23:bd:61:5d:53:c1:a7:d3:1b:b8:df:b9: b5:df:a1:ca:70:cd:da:e9:33:e4:e2:92:31:e6:86: 3f:5a:ce:b7:b0:70:77:82:35:6b:f6:56:cf:3f:b1: f3:0b:c3:61:6a:34:02:ee:bf:34:de:d6:eb:d4:92: 38:30:c2:3d:9e:d3:8b:62:d5:6f:5f:ed:a3:ca:79: 5f:58:45:e9:25:48:97:4e:5f:70:d2:b0:03:26:e0: 4c:31:22:95:4a:f6:73:62:52:f4:46:e2:2c:7f:ae: d9:0d:ca:98:9a:fc:e3:2f:12:b7:35:2d:8c:34:99: 01:94:63:fa:50:45:3e:9e:dc:b8:77:61:64:55:e8: 76:3b:b0:09:de:40:31:69:f6:0d:88:c4:e3:c1:1d: 8d:67:b7:d5:dc:a1:21:26:75:ae:84:04:8a:64:58: f7:a8:3f:4d:94:2e:f9:b9:36:4b:16:17:f2:05:c5: 24:ef:d1:b2:ec:a3:8d:76:6a:98:94:88:2b:e6:ef: e4:3a:7f:58:3f:68:10:6b:c6:2d:6f:0e:4e:b3:17: 21:e1:b2:38:19:dd:8a:67:1f:fe:33:c6:3f:a6:ee: ee:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:EA:36:70:0E:77:29:A3:48:30:D4:A9:51:1B:84:F6:A9:88:9E:1C X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/aeo2cA53KaNIMNSpURuE9qmInhw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.12.0/22 185.128.104.0/24 Signature Algorithm: sha256WithRSAEncryption 32:e1:94:b7:ec:8e:6d:a2:38:09:49:b0:4e:45:58:f1:9b:21: b3:2f:fe:e8:cd:18:e6:52:50:88:3d:44:04:cc:10:00:90:60: 78:fc:4f:be:e1:58:60:96:5f:23:a2:61:af:a7:7a:26:46:b2: e2:bf:9d:8f:9b:35:2d:f1:f4:1d:10:93:a7:d4:1c:8c:5f:e1: c1:81:71:fb:5b:1b:98:0e:fb:68:8a:94:6c:c8:8d:68:7c:c2: 7c:ce:24:b6:8e:cf:44:9a:1c:09:1c:11:a1:b8:18:06:c7:fd: 7f:6a:64:fb:82:59:f6:b4:a3:bd:fe:1a:8f:13:8d:e9:14:31: 6d:67:42:54:46:5d:04:7c:f6:73:10:f0:0d:bf:9d:2a:b7:3b: 70:4c:4e:bd:06:fc:a1:b2:3a:47:a1:91:04:40:ae:0e:41:2a: b0:7f:97:ee:36:21:73:c8:48:2a:4a:2c:58:0e:c5:d9:e4:e5: fb:f5:e5:58:62:86:e7:a2:af:69:d0:78:e6:bd:ed:b9:d5:45: 1f:0a:09:26:2e:8e:4f:38:ea:d2:ab:4b:32:76:06:e4:20:f4: 3e:49:cd:8e:e5:58:4a:03:9a:f4:72:92:ff:ac:24:be:a0:77: e6:8b:90:c7:79:00:12:6b:36:39:a2:f9:8d:07:95:fd:d7:0f: e8:67:8a:79 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsHoUynLrr4Gp+eutK0qucIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjUxMjEwMDkzOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWVhMzY3MDBlNzcyOWEzNDgzMGQ0YTk1MTFiODRmNmE5ODg5ZTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAKElkecyB1DMAktk8wcHgmiO9AN S/rm7tZiRUuh5HMjvWFdU8Gn0xu437m136HKcM3a6TPk4pIx5oY/Ws63sHB3gjVr 9lbPP7HzC8NhajQC7r803tbr1JI4MMI9ntOLYtVvX+2jynlfWEXpJUiXTl9w0rAD JuBMMSKVSvZzYlL0RuIsf67ZDcqYmvzjLxK3NS2MNJkBlGP6UEU+nty4d2FkVeh2 O7AJ3kAxafYNiMTjwR2NZ7fV3KEhJnWuhASKZFj3qD9NlC75uTZLFhfyBcUk79Gy 7KONdmqYlIgr5u/kOn9YP2gQa8Ytbw5Osxch4bI4Gd2KZx/+M8Y/pu7uxwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGnqNnAOdymjSDDUqVEbhPapiJ4cMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvYWVvMmNBNTNLYU5JTU5TcFVSdUU5cW1Jbmh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLYYMAwQA uYBoMA0GCSqGSIb3DQEBCwUAA4IBAQAy4ZS37I5tojgJSbBORVjxmyGzL/7ozRjm UlCIPUQEzBAAkGB4/E++4Vhgll8jomGvp3omRrLiv52PmzUt8fQdEJOn1ByMX+HB gXH7WxuYDvtoipRsyI1ofMJ8ziS2js9EmhwJHBGhuBgGx/1/amT7gln2tKO9/hqP E43pFDFtZ0JURl0EfPZzEPANv50qtztwTE69BvyhsjpHoZEEQK4OQSqwf5fuNiFz yEgqSixYDsXZ5OX79eVYYobnoq9p0Hjmve251UUfCgkmLo5POOrSq0sydgbkIPQ+ Sc2O5VhKA5r0cpL/rCS+oHfmi5DHeQASazY5ovmNB5X91w/oZ4p5 -----END CERTIFICATE-----Generated at Wed Dec 17 18:41:52 2025 by rpki-client