This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/aee0I0dO38CAh4hf9yW-1XfCqv0.roa File: aee0I0dO38CAh4hf9yW-1XfCqv0.roa (raw, json) Hash identifier: fAKIM361SIUvjoEHISS1W+r7JuhRzrfkSbLgWiAYJ/U= Subject key identifier: 69:E7:B4:23:47:4E:DF:C0:80:87:88:5F:F7:25:BE:D5:77:C2:AA:FD Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B130456ECC77E3D0221C26AC5CA9B664C Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/aee0I0dO38CAh4hf9yW-1XfCqv0.roa Signing time: Fri 12 Dec 2025 14:43:30 +0000 ROA not before: Fri 12 Dec 2025 14:43:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 30844 IP address blocks: 87.83.53.0/24 maxlen: 24 195.172.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:04:56:ec:c7:7e:3d:02:21:c2:6a:c5:ca:9b:66:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Dec 12 14:43:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69e7b423474edfc08087885ff725bed577c2aafd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1c:70:bb:5f:13:3a:79:31:90:79:73:30:cc: 3b:c8:a0:f0:be:de:94:19:78:02:bd:24:27:e5:29: 5e:b3:28:e2:a9:6d:4b:d4:08:ad:5b:a7:a4:30:c1: f3:a0:0e:d5:1d:74:e0:6d:3e:eb:ed:09:1c:75:ed: 2b:8f:46:23:42:0d:8b:cb:1e:8a:cc:e4:24:bd:ca: 55:50:37:08:c4:68:dd:22:c8:65:e5:c7:48:02:d8: 50:75:4b:85:51:33:bf:86:89:88:8f:73:fb:98:67: 11:32:52:ac:be:cd:76:e3:d8:88:3e:49:59:f6:47: 91:9c:88:8c:7b:21:b1:2d:0f:72:87:c5:9b:5d:b3: fe:c6:f5:cb:ff:d6:ad:ed:02:e8:c4:31:ea:5c:ac: 66:c4:cd:48:9e:20:08:7f:1d:9d:68:56:c2:bf:c6: 45:63:e3:b7:f3:8b:7e:10:46:07:da:fc:d0:db:3f: d4:3e:7c:b3:bf:e0:1f:2c:f4:15:f0:16:53:eb:89: 31:c8:41:3d:24:89:41:45:09:ac:be:7e:09:91:8e: 24:36:02:e9:4b:28:59:39:66:7c:05:ee:a2:86:1d: 9c:36:cc:b1:39:77:86:70:d1:78:66:08:65:95:9e: 40:f9:56:68:9f:da:1a:b0:50:70:53:36:ed:61:78: ca:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E7:B4:23:47:4E:DF:C0:80:87:88:5F:F7:25:BE:D5:77:C2:AA:FD X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/aee0I0dO38CAh4hf9yW-1XfCqv0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.83.53.0/24 195.172.144.0/24 Signature Algorithm: sha256WithRSAEncryption a1:23:22:9c:ff:41:9c:87:e9:ac:d6:76:7c:0b:ed:ca:f6:d8: 1d:e2:ff:04:07:ed:f7:52:a6:db:1f:14:65:41:08:16:51:df: 38:7d:93:df:9e:67:57:a5:06:0d:68:10:c0:06:f5:b5:8c:fb: 8a:ff:84:89:c4:45:15:c6:67:f3:6d:ae:ad:41:7f:2b:a4:78: a2:6c:f0:77:d3:60:99:4f:2d:57:07:6b:92:c5:b3:d3:64:0a: 4b:a4:74:6b:88:0a:db:a3:12:6e:0a:57:41:24:fd:ed:a4:51: f3:74:1e:50:00:aa:10:15:f5:07:6c:ad:5e:05:fa:33:4f:6d: fd:75:46:68:d5:e4:21:43:47:23:06:5f:fb:a8:eb:56:b5:13: e1:c1:60:f5:b2:03:fa:87:b2:d5:05:79:8c:c1:fe:d2:1b:97: 04:da:c7:87:c8:a7:a6:70:61:90:82:5f:52:34:5f:b8:cf:6d: 46:46:71:1f:5c:d9:72:63:f7:68:bc:8c:85:bd:42:55:39:5e: 90:57:f2:f1:c7:50:89:2a:ea:2b:9a:d5:8d:8f:66:4c:6f:87: 67:c6:d1:f5:7c:fd:b9:b6:7e:22:5b:c4:c1:aa:e3:42:5a:42: cc:b9:79:bc:b5:99:bc:5b:52:ba:46:53:38:4c:62:5e:1f:9c: f5:62:a7:79 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsTBFbsx349AiHCasXKm2ZMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMjEyMTQ0MzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWU3YjQyMzQ3NGVkZmMwODA4Nzg4NWZmNzI1YmVkNTc3YzJhYWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthxwu18TOnkxkHlzMMw7yKDwvt6U GXgCvSQn5SlesyjiqW1L1AitW6ekMMHzoA7VHXTgbT7r7Qkcde0rj0YjQg2Lyx6K zOQkvcpVUDcIxGjdIshl5cdIAthQdUuFUTO/homIj3P7mGcRMlKsvs1249iIPklZ 9keRnIiMeyGxLQ9yh8WbXbP+xvXL/9at7QLoxDHqXKxmxM1IniAIfx2daFbCv8ZF Y+O384t+EEYH2vzQ2z/UPnyzv+AfLPQV8BZT64kxyEE9JIlBRQmsvn4JkY4kNgLp SyhZOWZ8Be6ihh2cNsyxOXeGcNF4ZghllZ5A+VZon9oasFBwUzbtYXjKjwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGnntCNHTt/AgIeIX/clvtV3wqr9MB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvYWVlMEkwZE8zOENBaDRoZjl5Vy0xWGZDcXYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV1M1AwQA w6yQMA0GCSqGSIb3DQEBCwUAA4IBAQChIyKc/0Gch+ms1nZ8C+3K9tgd4v8EB+33 UqbbHxRlQQgWUd84fZPfnmdXpQYNaBDABvW1jPuK/4SJxEUVxmfzba6tQX8rpHii bPB302CZTy1XB2uSxbPTZApLpHRriArboxJuCldBJP3tpFHzdB5QAKoQFfUHbK1e BfozT239dUZo1eQhQ0cjBl/7qOtWtRPhwWD1sgP6h7LVBXmMwf7SG5cE2seHyKem cGGQgl9SNF+4z21GRnEfXNlyY/dovIyFvUJVOV6QV/Lxx1CJKuormtWNj2ZMb4dn xtH1fP25tn4iW8TBquNCWkLMuXm8tZm8W1K6RlM4TGJeH5z1Yqd5 -----END CERTIFICATE-----Generated at Sat Dec 20 13:52:54 2025 by rpki-client