This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/aVOKvpwocFPOybKu2HArVNos6VE.roa File: aVOKvpwocFPOybKu2HArVNos6VE.roa (raw, json) Hash identifier: 0a73eKWIb1Dki0lByBB+mR2gYiKoEVUop3iszyB1pNk= Subject key identifier: 69:53:8A:BE:9C:28:70:53:CE:C9:B2:AE:D8:70:2B:54:DA:2C:E9:51 Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2 Certificate serial: 019B7F1581D167BD8AF2C7C12579E225471E Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/aVOKvpwocFPOybKu2HArVNos6VE.roa Signing time: Fri 02 Jan 2026 14:21:14 +0000 ROA not before: Fri 02 Jan 2026 14:21:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43833 IP address blocks: 80.254.224.0/22 maxlen: 22 89.29.203.0/24 maxlen: 24 193.177.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:81:d1:67:bd:8a:f2:c7:c1:25:79:e2:25:47:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2 Validity Not Before: Jan 2 14:21:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69538abe9c287053cec9b2aed8702b54da2ce951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8e:16:cb:1d:fd:2c:48:5c:dc:e9:1e:51:d3: 5f:bd:24:e8:93:df:a9:62:0f:b3:2f:17:db:6a:15: fb:0b:84:ae:9c:8a:9a:69:c6:46:ba:ce:9f:e5:b8: 14:5d:ca:67:44:d8:3f:ee:42:34:b0:f5:cb:71:14: 31:e0:dd:12:3f:77:37:f1:e3:b4:94:fc:f7:74:75: 11:ae:09:ce:77:7b:e3:f2:28:f6:4e:22:8a:ee:02: ac:28:fe:5c:00:03:26:88:7c:5b:ce:03:5f:fa:92: 88:51:f4:33:f6:bf:8d:d2:24:a8:9d:75:0c:44:ba: a8:f6:66:73:52:7d:e8:d1:d3:85:f0:25:ff:f6:34: 70:dd:18:03:10:b2:24:b6:a4:68:db:68:a6:a7:5c: 69:68:16:01:5e:e6:23:f6:3e:5a:30:21:d5:4f:9c: 9f:80:b9:9b:ca:ed:5a:1d:59:8c:30:e5:45:10:96: 34:36:fa:fb:d6:1e:7c:b1:3f:a6:7c:a3:ed:69:3e: c9:0b:30:a5:23:7e:1d:46:2c:35:42:c0:a3:64:10: 53:ac:15:27:8a:d7:c0:e1:e8:74:9c:3f:f2:5c:8e: 1e:86:3f:97:84:8f:0a:0e:a8:c7:2d:3c:ba:d1:46: 21:ee:ff:f4:6d:d7:3f:f2:96:74:6e:55:8f:a6:53: fb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:53:8A:BE:9C:28:70:53:CE:C9:B2:AE:D8:70:2B:54:DA:2C:E9:51 X509v3 Authority Key Identifier: keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/aVOKvpwocFPOybKu2HArVNos6VE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.254.224.0/22 89.29.203.0/24 193.177.212.0/22 Signature Algorithm: sha256WithRSAEncryption ba:c1:a0:21:b8:84:65:ea:51:dd:85:d1:35:7f:f4:ed:43:f8: 83:ea:34:c2:1f:34:fd:23:9c:02:8a:66:42:bb:cf:1d:f9:cb: 04:63:a6:ab:48:0e:23:1d:d9:40:4a:2c:40:a1:ce:46:86:33: 15:66:b9:3b:c1:5c:db:b4:10:7c:8f:11:e8:0e:b1:41:91:e6: 70:2d:7c:b4:9f:e7:ea:e9:07:0c:ce:4d:82:df:97:48:96:6c: fb:ad:90:73:cb:d1:e8:a7:12:a9:19:58:b3:d1:3a:65:28:9f: d0:93:d2:e8:8b:9c:4b:f7:ee:19:14:55:e3:05:e7:36:a9:63: aa:1b:a0:0b:a5:cd:e4:1e:f6:82:72:2b:d8:50:30:6f:65:39: 52:61:5e:f7:ea:3e:fc:b1:06:5e:d1:9c:3d:c4:ce:90:9c:48: ba:dc:d1:d3:fc:d9:0c:41:df:c6:d9:86:2c:dd:95:48:46:9c: d8:af:e2:90:61:8a:17:ce:2c:9d:b0:13:1c:13:94:cd:c8:aa: c2:65:56:91:37:99:02:27:ab:c9:f8:38:4b:35:80:d8:5a:a3: 75:dd:50:ff:09:4f:cc:c7:bc:19:cd:77:fe:38:95:8c:dc:8d: 5c:f8:93:47:59:57:6d:e5:b7:6c:ef:47:5a:8d:88:d3:ff:5c: 9f:c1:73:b2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FYHRZ72K8sfBJXniJUceMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MmM0MTVkMTc3NWFlOTk5M2U5MDBhNzUzNmI0NmFiMTQ0 YTlhYTIwHhcNMjYwMTAyMTQyMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTUzOGFiZTljMjg3MDUzY2VjOWIyYWVkODcwMmI1NGRhMmNlOTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo4Wyx39LEhc3OkeUdNfvSTok9+p Yg+zLxfbahX7C4SunIqaacZGus6f5bgUXcpnRNg/7kI0sPXLcRQx4N0SP3c38eO0 lPz3dHURrgnOd3vj8ij2TiKK7gKsKP5cAAMmiHxbzgNf+pKIUfQz9r+N0iSonXUM RLqo9mZzUn3o0dOF8CX/9jRw3RgDELIktqRo22imp1xpaBYBXuYj9j5aMCHVT5yf gLmbyu1aHVmMMOVFEJY0Nvr71h58sT+mfKPtaT7JCzClI34dRiw1QsCjZBBTrBUn itfA4eh0nD/yXI4ehj+XhI8KDqjHLTy60UYh7v/0bdc/8pZ0blWPplP7/QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGlTir6cKHBTzsmyrthwK1TaLOlRMB8GA1UdIwQY MBaAFOksQV0Xda6Zk+kAp1NrRqsUSpqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQt MWQ5MzRhMDQ4NDc0LzEvYVZPS3Zwd29jRlBPeWJLdTJIQXJWTm9zNlZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQtMWQ5MzRhMDQ4NDc0 LzEvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCUP7gAwQA WR3LAwQCwbHUMA0GCSqGSIb3DQEBCwUAA4IBAQC6waAhuIRl6lHdhdE1f/TtQ/iD 6jTCHzT9I5wCimZCu88d+csEY6arSA4jHdlASixAoc5GhjMVZrk7wVzbtBB8jxHo DrFBkeZwLXy0n+fq6QcMzk2C35dIlmz7rZBzy9HopxKpGViz0TplKJ/Qk9Loi5xL 9+4ZFFXjBec2qWOqG6ALpc3kHvaCcivYUDBvZTlSYV736j78sQZe0Zw9xM6QnEi6 3NHT/NkMQd/G2YYs3ZVIRpzYr+KQYYoXziydsBMcE5TNyKrCZVaRN5kCJ6vJ+DhL NYDYWqN13VD/CU/Mx7wZzXf+OJWM3I1c+JNHWVdt5bds70dajYjT/1yfwXOy -----END CERTIFICATE-----Generated at Sat Jan 3 06:26:27 2026 by rpki-client