This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/rAEklKYGXqC0SI7BJUCNbv2v5n8.roa File: rAEklKYGXqC0SI7BJUCNbv2v5n8.roa (raw, json) Hash identifier: gLAk6gE4hIpnSsFcX87BRcU/zchBSxQcnSCr86hSo9o= Subject key identifier: AC:01:24:94:A6:06:5E:A0:B4:48:8E:C1:25:40:8D:6E:FD:AF:E6:7F Certificate issuer: /CN=53529924b233ac563c08e0c313e29213fd969669 Certificate serial: 019B7A5B04EF5C98934B4E1214DD6F52FAEE Authority key identifier: 53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/rAEklKYGXqC0SI7BJUCNbv2v5n8.roa Signing time: Thu 01 Jan 2026 16:19:03 +0000 ROA not before: Thu 01 Jan 2026 16:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5603 IP address blocks: 37.18.224.0/20 maxlen: 24 37.18.224.0/22 maxlen: 24 37.18.228.0/23 maxlen: 23 37.18.230.0/23 maxlen: 23 37.18.232.0/21 maxlen: 21 185.58.180.0/22 maxlen: 24 185.58.180.0/23 maxlen: 23 185.58.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:04:ef:5c:98:93:4b:4e:12:14:dd:6f:52:fa:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53529924b233ac563c08e0c313e29213fd969669 Validity Not Before: Jan 1 16:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac012494a6065ea0b4488ec125408d6efdafe67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3d:ca:7f:cc:df:20:75:53:c1:e3:94:9d:34: 19:d2:69:81:9b:ec:7a:b5:72:6b:40:6b:c4:1e:d3: 9b:b7:45:a0:12:30:ad:7e:95:95:82:b3:dc:69:28: 8b:b1:5c:a4:23:cd:cf:4b:03:29:30:3c:36:01:88: 88:85:10:dc:02:de:86:a4:21:67:84:67:f4:c7:58: c9:15:75:d8:e4:e1:18:b1:5d:2a:ef:e5:84:5e:89: 15:c6:80:4a:d9:3c:f3:12:93:f5:81:fb:75:fd:72: f3:c9:20:68:6c:f8:67:23:ed:d5:74:a4:51:04:45: 22:c7:0a:8d:2c:56:fe:96:c4:34:88:d6:95:21:d8: 8d:65:b2:8b:64:34:a2:8b:f8:af:16:21:b6:09:d8: 6a:3d:09:0b:8a:ec:89:d0:ff:d8:28:8f:f2:06:ce: 44:d0:0f:71:c8:c3:f0:65:bc:05:ed:4b:64:b7:08: b8:fa:3f:a5:3f:44:68:1b:ef:23:30:9e:96:b7:e6: 50:55:84:ce:d5:c6:09:9c:d5:cf:40:0e:04:4d:9e: bc:4f:f4:46:b8:bc:cb:76:56:93:06:b5:9d:7a:f6: 27:f2:72:db:b7:16:c6:0a:39:b9:68:c9:3a:a1:4b: 15:45:a2:2b:6a:42:14:e5:eb:07:fd:67:37:f9:7f: 3d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:01:24:94:A6:06:5E:A0:B4:48:8E:C1:25:40:8D:6E:FD:AF:E6:7F X509v3 Authority Key Identifier: keyid:53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/rAEklKYGXqC0SI7BJUCNbv2v5n8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.18.224.0/20 185.58.180.0/22 Signature Algorithm: sha256WithRSAEncryption 53:32:1e:56:1d:4d:e2:c4:07:93:f8:9b:2f:cd:e8:5d:28:72: ff:0c:2e:1a:bc:2f:dc:a2:fd:73:26:e5:18:8c:1b:a1:9e:eb: ed:2f:3c:6d:ef:9a:b8:f6:59:0a:a3:a3:a6:3e:97:f1:97:62: c5:fa:d1:2e:7c:fa:60:59:2e:38:a2:3d:c3:00:b5:a8:36:9f: 81:67:12:ba:86:6d:10:06:4c:e0:1c:21:79:d9:2d:95:ef:0e: 59:b9:45:28:47:cb:e4:81:5a:f7:db:02:a8:34:46:ac:08:c1: 8f:50:ed:d3:2f:39:11:19:c7:da:10:da:68:33:e8:c5:73:25: 58:1d:8d:60:4a:42:71:6b:c5:6d:d8:1b:c7:05:4b:41:7c:6e: 97:a1:ef:6c:9c:53:0a:c2:1e:85:47:c4:df:ad:d0:2f:54:ba: 01:eb:47:fb:98:0c:56:e7:f8:72:5c:c6:3a:c9:69:01:51:6f: bd:9a:80:94:51:59:c8:fa:9f:ba:c0:67:05:5a:49:e6:53:09: f3:3a:ec:69:37:33:95:a3:77:b4:21:cb:a3:b1:1e:77:56:f8: 17:d1:40:02:21:ed:7a:89:47:0c:6b:e5:6e:52:cf:af:69:f1: fa:9b:ea:5f:8f:43:68:09:d3:90:8a:dc:95:64:44:4e:83:b1: b5:c0:3e:df -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WwTvXJiTS04SFN1vUvruMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNTI5OTI0YjIzM2FjNTYzYzA4ZTBjMzEzZTI5MjEzZmQ5 Njk2NjkwHhcNMjYwMTAxMTYxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzAxMjQ5NGE2MDY1ZWEwYjQ0ODhlYzEyNTQwOGQ2ZWZkYWZlNjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmT3Kf8zfIHVTweOUnTQZ0mmBm+x6 tXJrQGvEHtObt0WgEjCtfpWVgrPcaSiLsVykI83PSwMpMDw2AYiIhRDcAt6GpCFn hGf0x1jJFXXY5OEYsV0q7+WEXokVxoBK2TzzEpP1gft1/XLzySBobPhnI+3VdKRR BEUixwqNLFb+lsQ0iNaVIdiNZbKLZDSii/ivFiG2CdhqPQkLiuyJ0P/YKI/yBs5E 0A9xyMPwZbwF7Utktwi4+j+lP0RoG+8jMJ6Wt+ZQVYTO1cYJnNXPQA4ETZ68T/RG uLzLdlaTBrWdevYn8nLbtxbGCjm5aMk6oUsVRaIrakIU5esH/Wc3+X89fQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKwBJJSmBl6gtEiOwSVAjW79r+Z/MB8GA1UdIwQY MBaAFFNSmSSyM6xWPAjgwxPikhP9lpZpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTFLWkpMSXpyRlk4Q09EREUtS1NFXzJXbG1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wZTI3MTQtOWRkNi00ZmU4LWFiMjQt OTQ0MTU2OTBkZGZkLzEvckFFa2xLWUdYcUMwU0k3QkpVQ05idjJ2NW44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8wZTI3MTQtOWRkNi00ZmU4LWFiMjQtOTQ0MTU2OTBkZGZk LzEvVTFLWkpMSXpyRlk4Q09EREUtS1NFXzJXbG1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEJRLgAwQC uTq0MA0GCSqGSIb3DQEBCwUAA4IBAQBTMh5WHU3ixAeT+JsvzehdKHL/DC4avC/c ov1zJuUYjBuhnuvtLzxt75q49lkKo6OmPpfxl2LF+tEufPpgWS44oj3DALWoNp+B ZxK6hm0QBkzgHCF52S2V7w5ZuUUoR8vkgVr32wKoNEasCMGPUO3TLzkRGcfaENpo M+jFcyVYHY1gSkJxa8Vt2BvHBUtBfG6Xoe9snFMKwh6FR8TfrdAvVLoB60f7mAxW 5/hyXMY6yWkBUW+9moCUUVnI+p+6wGcFWknmUwnzOuxpNzOVo3e0IcujsR53VvgX 0UACIe16iUcMa+VuUs+vafH6m+pfj0NoCdOQityVZEROg7G1wD7f -----END CERTIFICATE-----Generated at Tue Feb 10 03:06:19 2026 by rpki-client