This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/AYaEmoY1-XUkb7lB9KNJ_xR3m1g.roa File: AYaEmoY1-XUkb7lB9KNJ_xR3m1g.roa (raw, json) Hash identifier: NrUuVeJj5ATjCyIN5+puf19KFBrG5r8jtHnDw7jiz2E= Subject key identifier: 01:86:84:9A:86:35:F9:75:24:6F:B9:41:F4:A3:49:FF:14:77:9B:58 Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Certificate serial: 019B320E3197451542F6A434FB722B524AFD Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/AYaEmoY1-XUkb7lB9KNJ_xR3m1g.roa Signing time: Thu 18 Dec 2025 15:22:29 +0000 ROA not before: Thu 18 Dec 2025 15:22:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12874 IP address blocks: 37.153.135.0/24 maxlen: 24 89.39.200.0/23 maxlen: 23 89.39.200.0/24 maxlen: 24 89.43.192.0/24 maxlen: 24 185.36.72.0/22 maxlen: 22 193.169.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:0e:31:97:45:15:42:f6:a4:34:fb:72:2b:52:4a:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Validity Not Before: Dec 18 15:22:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0186849a8635f975246fb941f4a349ff14779b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2c:de:56:4f:5b:ba:9a:7d:5e:a4:cd:86:66: 05:d3:e3:d4:86:ce:92:dd:86:b7:0e:15:26:07:fa: 62:55:6e:4c:6e:05:ab:f0:28:17:85:41:83:f8:94: 54:7e:e0:68:13:fc:77:44:71:b8:c0:14:71:b2:aa: 2d:ea:c1:1f:27:3b:5e:ab:15:99:b1:13:c0:47:95: 3e:f0:82:61:ab:6c:b5:bb:ed:9b:40:d4:2d:cc:2a: 15:8b:01:20:ba:ff:7b:09:87:2e:ee:e9:70:a8:36: e5:69:3a:c4:bd:9f:c6:da:45:bf:33:ed:f1:06:5e: 2c:94:30:f0:ac:71:e4:68:c0:8d:50:16:3f:e1:ec: c4:be:38:01:99:5c:e0:dc:bc:7c:38:47:1f:81:5a: 1f:64:2b:ff:09:f8:38:02:dc:65:d0:f1:e9:03:e0: 29:bc:69:d3:d8:51:49:cd:53:44:25:1d:64:c1:d8: 89:2c:d5:3d:92:fb:db:16:54:bc:99:04:68:12:03: 4f:fe:06:0e:57:36:19:28:74:f0:af:1b:e7:8d:81: 6d:29:80:d5:ca:80:d1:6d:a5:80:fc:7d:6f:db:ca: ae:1b:b9:9d:33:9c:e7:3f:53:86:ae:8e:46:9d:24: b9:fc:20:65:b0:6f:94:0c:d5:c3:cf:68:aa:28:ba: 8a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:86:84:9A:86:35:F9:75:24:6F:B9:41:F4:A3:49:FF:14:77:9B:58 X509v3 Authority Key Identifier: keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/AYaEmoY1-XUkb7lB9KNJ_xR3m1g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.153.135.0/24 89.39.200.0/23 89.43.192.0/24 185.36.72.0/22 193.169.20.0/24 Signature Algorithm: sha256WithRSAEncryption d8:62:05:de:75:8c:1a:3a:05:74:9b:67:2e:dc:12:21:d3:a3: 82:ce:33:04:4a:f2:69:f0:c1:95:4b:de:ba:0f:d6:ba:d2:a3: 59:73:d1:64:28:9a:14:df:4c:7c:9d:28:7e:62:33:d3:0a:cd: 46:19:31:99:cd:81:76:82:c9:a2:c1:ea:53:f5:bd:81:87:1e: cb:83:c4:2c:71:2f:c5:ba:0c:3c:b3:1d:e3:8b:88:cc:f3:49: 60:3d:45:ed:d3:d5:d3:10:d4:fc:9c:e6:2f:2b:98:5a:27:24: 8e:d7:6f:fc:70:a0:31:b1:6e:bb:6b:70:73:7a:80:df:08:8d: c2:8e:5f:18:6c:03:1b:c2:31:b2:e4:8c:29:6b:10:12:8f:3c: 1a:ce:d6:dc:ff:6b:80:ac:9b:cc:b0:44:2d:3a:fc:da:4d:5a: 55:7b:a4:15:6c:97:46:0e:b6:66:e4:38:9e:d7:ff:43:56:93: f6:35:b7:a3:f5:4c:f3:a5:fb:e6:43:b0:63:fd:3c:7b:36:c0: 9b:4d:cc:d8:52:cf:a6:c2:2d:22:cd:4e:bd:95:b0:6b:85:72: 14:13:20:9e:74:0e:cd:6a:ce:1e:3e:fd:03:ab:30:39:ea:36: 83:70:56:d6:43:54:9f:29:a7:d1:44:3f:4c:c7:83:4b:e8:b9: 0d:af:b3:ea -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZsyDjGXRRVC9qQ0+3IrUkr9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3 NjA1MTkwHhcNMjUxMjE4MTUyMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTg2ODQ5YTg2MzVmOTc1MjQ2ZmI5NDFmNGEzNDlmZjE0Nzc5YjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtizeVk9bupp9XqTNhmYF0+PUhs6S 3Ya3DhUmB/piVW5MbgWr8CgXhUGD+JRUfuBoE/x3RHG4wBRxsqot6sEfJzteqxWZ sRPAR5U+8IJhq2y1u+2bQNQtzCoViwEguv97CYcu7ulwqDblaTrEvZ/G2kW/M+3x Bl4slDDwrHHkaMCNUBY/4ezEvjgBmVzg3Lx8OEcfgVofZCv/Cfg4Atxl0PHpA+Ap vGnT2FFJzVNEJR1kwdiJLNU9kvvbFlS8mQRoEgNP/gYOVzYZKHTwrxvnjYFtKYDV yoDRbaWA/H1v28quG7mdM5znP1OGro5GnSS5/CBlsG+UDNXDz2iqKLqKOwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFAGGhJqGNfl1JG+5QfSjSf8Ud5tYMB8GA1UdIwQY MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt NzQwOGViOGJjNTg2LzEvQVlhRW1vWTEtWFVrYjdsQjlLTkpfeFIzbTFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2 LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAJZmHAwQB WSfIAwQAWSvAAwQCuSRIAwQAwakUMA0GCSqGSIb3DQEBCwUAA4IBAQDYYgXedYwa OgV0m2cu3BIh06OCzjMESvJp8MGVS966D9a60qNZc9FkKJoU30x8nSh+YjPTCs1G GTGZzYF2gsmiwepT9b2Bhx7Lg8QscS/Fugw8sx3ji4jM80lgPUXt09XTENT8nOYv K5haJySO12/8cKAxsW67a3BzeoDfCI3Cjl8YbAMbwjGy5IwpaxASjzwaztbc/2uA rJvMsEQtOvzaTVpVe6QVbJdGDrZm5Die1/9DVpP2Nbej9UzzpfvmQ7Bj/Tx7NsCb TczYUs+mwi0izU69lbBrhXIUEyCedA7Nas4ePv0DqzA56jaDcFbWQ1SfKafRRD9M x4NL6LkNr7Pq -----END CERTIFICATE-----Generated at Sat Dec 20 12:54:28 2025 by rpki-client