This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/AeS4mieXzUqA4uwiNDkMCtqXsxo.roa File: AeS4mieXzUqA4uwiNDkMCtqXsxo.roa (raw, json) Hash identifier: XlaYDtDtth/9oxGh0H1TjUe63WNIoo3CA9/O+obTGX0= Subject key identifier: 01:E4:B8:9A:27:97:CD:4A:80:E2:EC:22:34:39:0C:0A:DA:97:B3:1A Certificate issuer: /CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7 Certificate serial: 019B7834ECA312297390721C095B8111F143 Authority key identifier: C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/AeS4mieXzUqA4uwiNDkMCtqXsxo.roa Signing time: Thu 01 Jan 2026 06:18:12 +0000 ROA not before: Thu 01 Jan 2026 06:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44845 IP address blocks: 213.159.196.0/24 maxlen: 24 213.159.197.0/24 maxlen: 24 213.159.198.0/24 maxlen: 24 213.159.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ec:a3:12:29:73:90:72:1c:09:5b:81:11:f1:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7 Validity Not Before: Jan 1 06:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01e4b89a2797cd4a80e2ec2234390c0ada97b31a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e9:3b:4f:1d:ce:09:26:a7:bc:e9:e3:52:c8: e9:9e:f4:5c:76:e3:ec:74:c6:b2:3d:05:8f:37:ef: 1c:65:8e:bd:9c:71:90:d4:24:71:5b:59:be:f0:0f: ab:07:3f:f5:40:60:e1:1f:52:59:3e:10:91:c6:d2: 39:f0:c0:86:46:a8:9f:b0:7c:3d:65:9a:ed:68:d5: f3:4c:e3:77:dc:df:fc:7a:be:14:df:d6:95:e8:2b: d7:cd:f3:0a:17:ea:fa:9a:9f:78:15:b6:e9:af:6e: 54:64:10:cd:17:5b:41:22:60:af:49:ca:c0:67:72: 83:84:a4:13:c9:c9:02:22:4c:a8:f3:a4:4d:eb:21: 1b:1d:52:65:d8:c4:f4:f3:7e:2e:58:ba:17:40:c9: 48:cc:21:c9:24:75:b7:7d:75:32:40:90:16:d8:a5: b3:2d:ef:00:b5:9d:7e:65:a2:63:81:d3:81:83:1c: ad:f7:6c:4c:23:db:b0:aa:49:5b:c0:71:31:80:98: e0:a4:19:4f:99:be:b3:4d:3f:2b:ba:c0:63:2b:ea: 8f:17:a7:cf:06:5c:7f:9d:2b:b8:48:f0:58:e9:73: 84:99:2a:3a:60:c1:7a:e5:40:db:af:76:e9:10:54: d4:cc:d0:43:fb:3a:99:32:fd:87:09:00:15:89:d8: 16:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E4:B8:9A:27:97:CD:4A:80:E2:EC:22:34:39:0C:0A:DA:97:B3:1A X509v3 Authority Key Identifier: keyid:C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/AeS4mieXzUqA4uwiNDkMCtqXsxo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.159.196.0/22 Signature Algorithm: sha256WithRSAEncryption af:07:42:d8:36:22:66:d6:ef:05:92:c4:c3:a2:36:9d:00:ca: df:a9:c6:a0:c2:e3:dd:7a:da:6d:25:e6:7c:f2:18:61:0a:1a: 19:e3:2b:f4:25:23:80:22:66:36:90:3e:21:7f:5f:8f:6c:ea: a2:07:d6:3d:92:80:fb:28:19:df:d6:c6:8c:3d:b4:5f:25:72: 81:b0:6c:f9:76:6c:38:32:95:62:96:36:26:18:1d:8b:f2:33: 49:0d:eb:28:56:b3:26:02:40:7b:1f:fd:5a:7e:92:87:e9:5d: c9:52:9d:4e:c2:c2:ce:cf:00:1e:96:6c:25:ad:13:65:e5:52: 88:de:b8:71:8d:ee:a1:d1:55:3e:d2:19:93:70:a2:9b:d0:a9: 1c:f6:9a:73:2a:04:40:48:85:59:1d:3f:5e:5a:3d:82:82:47: 67:e6:00:97:92:b2:e5:1c:3c:95:8d:ed:c0:3e:40:a4:1d:a8: a2:ae:6f:23:a6:b0:c4:19:71:17:bb:6f:5e:64:51:24:4f:00: bb:bb:6e:7d:5e:78:98:75:dc:04:af:4d:fa:73:90:60:8c:60: e8:47:53:52:92:b9:05:c7:79:51:77:90:c7:42:83:97:08:23: 52:c0:62:08:d3:b5:f7:35:64:05:27:b4:7f:43:cc:2b:97:92: cb:25:75:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NOyjEilzkHIcCVuBEfFDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NTA4NTAwNWQwZTQ0OWQzYmFmYTMxYzVjYjQyOWZmODlk MmM0YjcwHhcNMjYwMTAxMDYxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWU0Yjg5YTI3OTdjZDRhODBlMmVjMjIzNDM5MGMwYWRhOTdiMzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuk7Tx3OCSanvOnjUsjpnvRcduPs dMayPQWPN+8cZY69nHGQ1CRxW1m+8A+rBz/1QGDhH1JZPhCRxtI58MCGRqifsHw9 ZZrtaNXzTON33N/8er4U39aV6CvXzfMKF+r6mp94Fbbpr25UZBDNF1tBImCvScrA Z3KDhKQTyckCIkyo86RN6yEbHVJl2MT0834uWLoXQMlIzCHJJHW3fXUyQJAW2KWz Le8AtZ1+ZaJjgdOBgxyt92xMI9uwqklbwHExgJjgpBlPmb6zTT8rusBjK+qPF6fP Blx/nSu4SPBY6XOEmSo6YMF65UDbr3bpEFTUzNBD+zqZMv2HCQAVidgW0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAHkuJonl81KgOLsIjQ5DAral7MaMB8GA1UdIwQY MBaAFMVQhQBdDkSdO6+jHFy0Kf+J0sS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFZDRkFGME9SSjA3cjZNY1hMUXBfNG5TeExjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83Mzg4MDEtZGRjNi00ODQzLTkzNmMt MjBhY2MzOGJjOGZmLzEvQWVTNG1pZVh6VXFBNHV3aU5Ea01DdHFYc3hvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83Mzg4MDEtZGRjNi00ODQzLTkzNmMtMjBhY2MzOGJjOGZm LzEveFZDRkFGME9SSjA3cjZNY1hMUXBfNG5TeExjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1Z/EMA0G CSqGSIb3DQEBCwUAA4IBAQCvB0LYNiJm1u8FksTDojadAMrfqcagwuPdetptJeZ8 8hhhChoZ4yv0JSOAImY2kD4hf1+PbOqiB9Y9koD7KBnf1saMPbRfJXKBsGz5dmw4 MpViljYmGB2L8jNJDesoVrMmAkB7H/1afpKH6V3JUp1OwsLOzwAelmwlrRNl5VKI 3rhxje6h0VU+0hmTcKKb0Kkc9ppzKgRASIVZHT9eWj2Cgkdn5gCXkrLlHDyVje3A PkCkHaiirm8jprDEGXEXu29eZFEkTwC7u259XniYddwEr036c5BgjGDoR1NSkrkF x3lRd5DHQoOXCCNSwGII07X3NWQFJ7R/Q8wrl5LLJXVs -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:50 2026 by rpki-client