This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/aYOE3QzdGavKOpdIiLw8wF8XiJ8.roa File: aYOE3QzdGavKOpdIiLw8wF8XiJ8.roa (raw, json) Hash identifier: vWr6BftrdyWJD+hB0G6lD/tYnqXK0+OgPKOWHS3L0YQ= Subject key identifier: 69:83:84:DD:0C:DD:19:AB:CA:3A:97:48:88:BC:3C:C0:5F:17:88:9F Certificate issuer: /CN=f747ead1fa9a135c65057ca412d893bb82e91429 Certificate serial: 019B3600C9C2E9A50D86E9D67D331D34F379 Authority key identifier: F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/aYOE3QzdGavKOpdIiLw8wF8XiJ8.roa Signing time: Fri 19 Dec 2025 09:46:19 +0000 ROA not before: Fri 19 Dec 2025 09:46:19 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8075 IP address blocks: 131.176.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:00:c9:c2:e9:a5:0d:86:e9:d6:7d:33:1d:34:f3:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f747ead1fa9a135c65057ca412d893bb82e91429 Validity Not Before: Dec 19 09:46:19 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=698384dd0cdd19abca3a974888bc3cc05f17889f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:df:40:3d:60:61:98:19:2b:b8:80:ae:48: 03:8e:f2:40:4a:1c:49:33:1f:62:e5:59:19:1a:c0: e5:4f:7a:93:c0:14:fb:43:96:89:95:e7:84:99:bf: 6b:b3:2b:ac:0a:ce:b4:a0:0b:d6:33:8d:85:39:f8: 66:89:1b:dd:23:85:e6:59:49:79:12:b1:12:e3:7d: f4:f9:e6:e6:05:36:da:93:28:f3:18:23:41:18:b3: 61:ee:4c:2a:ab:76:db:6f:c8:a2:65:ca:cb:56:61: 04:1b:3a:93:94:0f:ba:e4:c4:69:b6:e7:65:a6:fe: 3e:4d:a8:66:bc:ea:aa:46:2c:0a:cf:84:e3:dc:ae: c9:cf:78:bc:cd:61:50:fb:47:72:06:b4:56:68:02: 56:43:c9:aa:0c:3e:8c:44:ce:d2:d1:27:b9:59:45: b6:89:36:2a:40:f6:3b:7f:49:f1:44:6f:d4:e7:b9: e1:81:66:ea:dd:d7:54:64:83:92:a7:e3:4b:16:5c: 6e:db:24:65:54:42:28:90:b3:53:5e:3f:d5:72:71: 9d:43:9a:34:c3:df:6e:33:3e:04:5f:15:fd:bb:5f: 06:8b:44:1c:47:42:5c:15:76:89:c7:02:2f:fc:6d: 71:c7:59:c7:33:21:1d:84:3e:4c:f9:1b:7c:ae:70: d3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:83:84:DD:0C:DD:19:AB:CA:3A:97:48:88:BC:3C:C0:5F:17:88:9F X509v3 Authority Key Identifier: keyid:F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/aYOE3QzdGavKOpdIiLw8wF8XiJ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.176.228.0/22 Signature Algorithm: sha256WithRSAEncryption db:b7:f4:3f:44:51:cf:d4:6c:3c:96:fd:03:15:73:a1:37:b1: 77:89:36:ea:90:d2:53:47:f4:54:c8:dd:b2:08:57:73:f1:29: 7d:4a:f4:a6:a2:65:7c:ff:6b:6c:97:da:f8:e7:d0:76:bb:be: 5c:05:38:02:31:18:41:9a:53:fe:3a:13:e7:00:59:2a:62:a9: d3:b9:41:46:5b:e1:40:3d:84:0b:e7:20:28:b0:b7:89:10:e0: 26:08:c7:ab:f7:90:0c:64:96:e6:5a:e0:bb:42:84:48:f0:68: 2b:b6:60:de:ea:89:3e:9a:3d:77:0f:69:d3:3a:43:84:af:3d: 4a:68:10:dd:0f:96:9c:43:36:a3:70:68:b3:3f:76:18:49:86: bc:f8:ce:1b:3f:bb:50:fa:b5:cc:50:b1:1d:59:2a:1e:d1:d3: 40:35:df:35:10:1f:ff:6f:d5:f2:27:8b:1f:66:cc:b2:0f:11: 2f:5e:37:56:62:40:42:ad:e1:91:16:3b:d7:0f:ef:93:ea:2f: b2:36:f4:42:37:a6:45:2b:43:f7:59:44:29:5b:d9:d2:03:03: 5e:90:20:a4:19:4a:fc:64:09:e2:bf:32:b5:05:01:4d:f0:3e: 88:2a:92:53:0b:92:c9:f8:88:83:95:00:77:ad:0b:95:3e:34: 8f:29:4b:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZs2AMnC6aUNhunWfTMdNPN5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NDdlYWQxZmE5YTEzNWM2NTA1N2NhNDEyZDg5M2JiODJl OTE0MjkwHhcNMjUxMjE5MDk0NjE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTgzODRkZDBjZGQxOWFiY2EzYTk3NDg4OGJjM2NjMDVmMTc4ODlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsPfQD1gYZgZK7iArkgDjvJAShxJ Mx9i5VkZGsDlT3qTwBT7Q5aJleeEmb9rsyusCs60oAvWM42FOfhmiRvdI4XmWUl5 ErES4330+ebmBTbakyjzGCNBGLNh7kwqq3bbb8iiZcrLVmEEGzqTlA+65MRptudl pv4+TahmvOqqRiwKz4Tj3K7Jz3i8zWFQ+0dyBrRWaAJWQ8mqDD6MRM7S0Se5WUW2 iTYqQPY7f0nxRG/U57nhgWbq3ddUZIOSp+NLFlxu2yRlVEIokLNTXj/VcnGdQ5o0 w99uMz4EXxX9u18Gi0QcR0JcFXaJxwIv/G1xx1nHMyEdhD5M+Rt8rnDTWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGmDhN0M3RmryjqXSIi8PMBfF4ifMB8GA1UdIwQY MBaAFPdH6tH6mhNcZQV8pBLYk7uC6RQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTBmcTBmcWFFMXhsQlh5a0V0aVR1NExwRkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wNDc4OWMtYWUwNC00Yjk4LTkwOWMt YjkxN2Y4M2YxZThjLzEvYVlPRTNRemRHYXZLT3BkSWlMdzh3RjhYaUo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wNDc4OWMtYWUwNC00Yjk4LTkwOWMtYjkxN2Y4M2YxZThj LzEvOTBmcTBmcWFFMXhsQlh5a0V0aVR1NExwRkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg7DkMA0G CSqGSIb3DQEBCwUAA4IBAQDbt/Q/RFHP1Gw8lv0DFXOhN7F3iTbqkNJTR/RUyN2y CFdz8Sl9SvSmomV8/2tsl9r459B2u75cBTgCMRhBmlP+OhPnAFkqYqnTuUFGW+FA PYQL5yAosLeJEOAmCMer95AMZJbmWuC7QoRI8GgrtmDe6ok+mj13D2nTOkOErz1K aBDdD5acQzajcGizP3YYSYa8+M4bP7tQ+rXMULEdWSoe0dNANd81EB//b9XyJ4sf ZsyyDxEvXjdWYkBCreGRFjvXD++T6i+yNvRCN6ZFK0P3WUQpW9nSAwNekCCkGUr8 ZAnivzK1BQFN8D6IKpJTC5LJ+IiDlQB3rQuVPjSPKUst -----END CERTIFICATE-----Generated at Sat Dec 20 10:29:23 2025 by rpki-client