This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/aaJ1jaTLTGfM4VDt5VNpK1tiufg.roa File: aaJ1jaTLTGfM4VDt5VNpK1tiufg.roa (raw, json) Hash identifier: ardpktxFjeQvHK2MqhTKB5ZUCsB5pD/8L8tzcZpPhHI= Subject key identifier: 69:A2:75:8D:A4:CB:4C:67:CC:E1:50:ED:E5:53:69:2B:5B:62:B9:F8 Certificate issuer: /CN=706745ad92353da8a80cb2e0d229d68c2ef53db2 Certificate serial: 019B2C05E416DF54D9C9B8BDC918F089F3B2 Authority key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/aaJ1jaTLTGfM4VDt5VNpK1tiufg.roa Signing time: Wed 17 Dec 2025 11:15:42 +0000 ROA not before: Wed 17 Dec 2025 11:15:42 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 26383 IP address blocks: 185.133.173.0/24 maxlen: 24 185.133.174.0/24 maxlen: 24 185.133.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:05:e4:16:df:54:d9:c9:b8:bd:c9:18:f0:89:f3:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2 Validity Not Before: Dec 17 11:15:42 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a2758da4cb4c67cce150ede553692b5b62b9f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cb:e9:88:b3:7b:5f:0b:d2:06:73:60:b6:ca: 09:a3:01:22:bd:d0:e2:e6:7f:9d:00:3a:ac:85:bb: 21:c1:17:ab:9e:21:b7:2d:00:81:e7:39:ac:16:94: 7f:39:7c:26:00:70:52:17:9f:d1:c4:25:56:32:7b: c5:41:95:20:52:84:90:34:af:4b:c9:4c:bf:84:2c: 87:39:61:7d:c1:26:f6:2f:42:b1:7c:36:94:64:29: 69:c1:c7:02:89:9a:b3:70:22:8c:f0:c6:75:07:78: 68:7d:18:a3:b4:aa:e8:dc:a7:f7:2c:a5:eb:bd:02: 2f:23:89:df:0e:7b:16:06:30:24:52:be:8e:84:ae: a9:53:2d:af:f4:42:19:66:a8:df:13:03:59:33:9a: 37:5b:36:4c:fc:81:0b:53:aa:7e:44:6c:d6:0a:35: 50:2f:7e:b3:9b:87:1f:f9:5d:e6:53:e8:10:25:8e: ba:80:5c:6a:2c:5d:fe:bd:fe:67:bf:7b:32:15:d7: 38:c5:73:44:b3:7a:2c:ea:3f:46:0d:84:78:68:d4: 1a:4e:28:59:95:5c:9b:bd:e1:a7:d0:46:f5:e6:c5: 4c:55:ae:8f:eb:63:04:79:71:7d:f9:62:67:7f:b1: 8b:74:2a:b5:09:1e:aa:fa:f6:52:be:c7:ec:f6:e6: 88:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A2:75:8D:A4:CB:4C:67:CC:E1:50:ED:E5:53:69:2B:5B:62:B9:F8 X509v3 Authority Key Identifier: keyid:70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/aaJ1jaTLTGfM4VDt5VNpK1tiufg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.173.0-185.133.175.255 Signature Algorithm: sha256WithRSAEncryption 9f:f6:44:9d:62:e1:40:0e:0d:58:0c:63:85:bd:8f:67:86:06: d8:de:75:11:07:aa:e3:19:64:97:4e:57:93:19:70:f4:db:a0: 8c:66:60:8e:61:b3:ea:ac:5c:78:d5:d5:9c:dc:94:b3:a7:4d: 10:f2:5e:c5:f5:71:67:d4:1f:51:08:39:8e:75:dc:e0:5b:cc: 68:e5:5e:c9:5e:a1:9e:81:7c:19:3a:7e:81:69:72:d7:b0:3f: 5f:63:98:ef:be:93:db:e4:d8:68:4b:6c:ff:d6:d7:64:4f:11: 0a:a7:21:58:7b:a4:c4:2d:6a:fc:1e:70:ef:03:37:c5:b2:15: 5d:54:c8:46:e7:90:af:f3:1c:66:5c:92:78:f2:91:20:63:0d: d5:bb:ba:04:c2:f1:3c:7d:4c:c9:68:5a:5b:e2:e8:7e:bd:77: 7e:e8:30:d4:9e:bf:53:1c:0f:17:45:7b:f7:8a:ac:76:14:01: b4:0f:a2:38:75:33:2b:a9:12:09:05:9a:e4:44:4c:00:a6:57: 08:76:8a:33:03:2d:94:4d:d8:05:99:62:ee:9b:50:db:39:c3: 94:5d:df:d6:be:98:34:71:04:dd:aa:0a:86:da:89:17:b5:12: 07:db:7f:78:25:f6:08:eb:15:b2:b5:0f:02:a8:ba:44:c3:48: 4e:e3:79:9e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZssBeQW31TZybi9yRjwifOyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNjc0NWFkOTIzNTNkYThhODBjYjJlMGQyMjlkNjhjMmVm NTNkYjIwHhcNMjUxMjE3MTExNTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWEyNzU4ZGE0Y2I0YzY3Y2NlMTUwZWRlNTUzNjkyYjViNjJiOWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8vpiLN7XwvSBnNgtsoJowEivdDi 5n+dADqshbshwRerniG3LQCB5zmsFpR/OXwmAHBSF5/RxCVWMnvFQZUgUoSQNK9L yUy/hCyHOWF9wSb2L0KxfDaUZClpwccCiZqzcCKM8MZ1B3hofRijtKro3Kf3LKXr vQIvI4nfDnsWBjAkUr6OhK6pUy2v9EIZZqjfEwNZM5o3WzZM/IELU6p+RGzWCjVQ L36zm4cf+V3mU+gQJY66gFxqLF3+vf5nv3syFdc4xXNEs3os6j9GDYR4aNQaTihZ lVybveGn0Eb15sVMVa6P62MEeXF9+WJnf7GLdCq1CR6q+vZSvsfs9uaIyQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGmidY2ky0xnzOFQ7eVTaStbYrn4MB8GA1UdIwQY MBaAFHBnRa2SNT2oqAyy4NIp1owu9T2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTkt ZTIxNzYzYzY3MmZhLzEvYWFKMWphVExUR2ZNNFZEdDVWTnBLMXRpdWZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTktZTIxNzYzYzY3MmZh LzEvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5ha0D BAS5haAwDQYJKoZIhvcNAQELBQADggEBAJ/2RJ1i4UAODVgMY4W9j2eGBtjedREH quMZZJdOV5MZcPTboIxmYI5hs+qsXHjV1ZzclLOnTRDyXsX1cWfUH1EIOY513OBb zGjlXsleoZ6BfBk6foFpctewP19jmO++k9vk2GhLbP/W12RPEQqnIVh7pMQtavwe cO8DN8WyFV1UyEbnkK/zHGZcknjykSBjDdW7ugTC8Tx9TMloWlvi6H69d37oMNSe v1McDxdFe/eKrHYUAbQPojh1MyupEgkFmuRETACmVwh2ijMDLZRN2AWZYu6bUNs5 w5Rd39a+mDRxBN2qCobaiRe1Egfbf3gl9gjrFbK1DwKoukTDSE7jeZ4= -----END CERTIFICATE-----Generated at Sat Dec 20 15:01:31 2025 by rpki-client