This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/AuKeMwICnv8GK3NJTUf6Verg3I8.roa File: AuKeMwICnv8GK3NJTUf6Verg3I8.roa (raw, json) Hash identifier: kwdux9NYacYTU28nuaHLrfwEJdOFmVTpX4Lxa9A6UiM= Subject key identifier: 02:E2:9E:33:02:02:9E:FF:06:2B:73:49:4D:47:FA:55:EA:E0:DC:8F Certificate issuer: /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b Certificate serial: 019B02A0780758F4C16F18918AB67F34906C Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/AuKeMwICnv8GK3NJTUf6Verg3I8.roa Signing time: Tue 09 Dec 2025 10:20:29 +0000 ROA not before: Tue 09 Dec 2025 10:20:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51956 IP address blocks: 92.53.236.0/22 maxlen: 22 92.53.236.0/24 maxlen: 24 92.53.237.0/24 maxlen: 24 92.53.238.0/24 maxlen: 24 92.53.239.0/24 maxlen: 24 185.144.132.0/22 maxlen: 22 185.144.132.0/23 maxlen: 23 185.144.132.0/24 maxlen: 24 185.144.133.0/24 maxlen: 24 185.144.134.0/24 maxlen: 24 185.144.135.0/24 maxlen: 24 185.201.172.0/22 maxlen: 22 2a00:b8c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:a0:78:07:58:f4:c1:6f:18:91:8a:b6:7f:34:90:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b Validity Not Before: Dec 9 10:20:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=02e29e3302029eff062b73494d47fa55eae0dc8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:7f:df:44:e7:2c:e1:71:4c:17:b7:f8:cf:64: 6d:20:dd:e9:7c:6f:91:c6:7a:2a:93:ff:93:43:60: 9e:00:28:a3:f7:4f:98:70:0b:72:41:30:2b:6a:21: 79:9c:bd:c0:4b:26:93:c4:52:85:72:a2:b3:c4:a9: a9:e7:d7:01:61:f8:99:57:c2:09:e4:a4:69:44:6c: ae:8c:27:ed:d9:dd:b2:72:a5:9f:dc:88:b4:91:61: ea:a6:1c:cd:a6:34:ac:8e:19:28:be:cb:d5:18:a3: 73:bc:0b:70:b5:76:30:6d:8a:94:5c:01:ec:dc:d0: 26:63:f3:02:bb:73:2c:32:66:fd:21:c6:7d:8b:c5: 0b:21:ca:16:c7:38:fc:44:f2:6a:e7:bc:c4:d8:8a: 69:68:5f:27:60:88:17:6f:fe:80:77:96:94:22:1a: 50:37:6c:66:b4:9d:5e:25:11:3c:da:8e:20:a8:ca: 99:fe:36:39:2f:d1:e8:6b:b4:7f:cf:11:02:63:c3: 5b:82:53:7b:57:46:42:a2:38:ec:b7:d3:c9:a5:c5: 35:d7:8a:3b:7d:03:cb:2e:be:c5:5c:3d:dd:80:93: 45:94:27:f5:44:73:b7:78:d1:ca:91:1d:85:25:78: 24:bb:3b:e8:5f:3e:7a:80:22:66:6a:03:d8:5d:a0: 97:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E2:9E:33:02:02:9E:FF:06:2B:73:49:4D:47:FA:55:EA:E0:DC:8F X509v3 Authority Key Identifier: keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/AuKeMwICnv8GK3NJTUf6Verg3I8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.53.236.0/22 185.144.132.0/22 185.201.172.0/22 IPv6: 2a00:b8c0::/32 Signature Algorithm: sha256WithRSAEncryption 41:06:d7:bc:77:52:25:b7:ac:a2:0b:85:2a:88:0f:46:dd:dd: ec:b2:86:f2:b9:82:8f:c0:fb:d4:d9:49:e4:46:ac:ac:c2:7d: 03:a6:67:c3:b7:04:c0:50:fe:d1:94:b8:6e:fa:97:ef:5c:af: c9:33:6b:e6:9a:1d:b4:ac:df:35:73:f2:87:69:90:d9:de:a8: 1b:49:e8:59:59:27:59:b2:5a:40:6c:db:f9:e0:28:ed:48:b7: f6:a4:9d:fb:cc:0a:2e:dd:23:c7:7e:6e:ac:d6:c9:c9:6c:b4: 9e:63:80:50:2e:6d:cc:0a:a9:fe:11:74:1f:be:28:9c:b6:f9: a3:0f:ba:f3:82:dd:9a:2e:a3:6c:fa:ff:6d:de:2d:18:6f:ff: e8:b4:7c:84:4b:47:ce:3c:44:c3:22:30:f9:33:da:78:7c:f1: f3:b7:6d:e3:42:e0:5a:e8:aa:ff:97:05:c0:5e:9d:2a:2e:e9: cb:97:9f:78:a3:96:6d:3a:3d:3d:c6:f8:fd:5c:54:4b:62:96: 96:64:b7:8c:eb:42:df:10:f9:e1:7c:31:ab:90:f5:a6:18:23: 50:b8:61:e5:d1:4f:a0:cf:d4:1d:6d:7a:81:51:5a:5d:11:58: 57:31:8b:87:54:d2:c8:cd:bc:5f:36:fa:17:1e:4a:57:51:84: 10:05:d3:16 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZsCoHgHWPTBbxiRirZ/NJBsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZGZmMDFmNTZlMzQxOWQwMjdiZTc1OTFjZWVmNjI4NTFj ZTBmNmIwHhcNMjUxMjA5MTAyMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmUyOWUzMzAyMDI5ZWZmMDYyYjczNDk0ZDQ3ZmE1NWVhZTBkYzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7H/fROcs4XFMF7f4z2RtIN3pfG+R xnoqk/+TQ2CeACij90+YcAtyQTAraiF5nL3ASyaTxFKFcqKzxKmp59cBYfiZV8IJ 5KRpRGyujCft2d2ycqWf3Ii0kWHqphzNpjSsjhkovsvVGKNzvAtwtXYwbYqUXAHs 3NAmY/MCu3MsMmb9IcZ9i8ULIcoWxzj8RPJq57zE2IppaF8nYIgXb/6Ad5aUIhpQ N2xmtJ1eJRE82o4gqMqZ/jY5L9Hoa7R/zxECY8NbglN7V0ZCojjst9PJpcU114o7 fQPLLr7FXD3dgJNFlCf1RHO3eNHKkR2FJXgkuzvoXz56gCJmagPYXaCXMwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFALinjMCAp7/BitzSU1H+lXq4NyPMB8GA1UdIwQY MBaAFKjf8B9W40GdAnvnWRzu9ihRzg9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80NzMzNjYtNzAyZC00NzNmLWJmYmUt ODgyYzQ0OGUyZWY2LzEvQXVLZU13SUNudjhHSzNOSlRVZjZWZXJnM0k4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS80NzMzNjYtNzAyZC00NzNmLWJmYmUtODgyYzQ0OGUyZWY2 LzEvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCXDXsAwQC uZCEAwQCucmsMA0EAgACMAcDBQAqALjAMA0GCSqGSIb3DQEBCwUAA4IBAQBBBte8 d1Ilt6yiC4UqiA9G3d3ssobyuYKPwPvU2UnkRqyswn0DpmfDtwTAUP7RlLhu+pfv XK/JM2vmmh20rN81c/KHaZDZ3qgbSehZWSdZslpAbNv54CjtSLf2pJ37zAou3SPH fm6s1snJbLSeY4BQLm3MCqn+EXQfviictvmjD7rzgt2aLqNs+v9t3i0Yb//otHyE S0fOPETDIjD5M9p4fPHzt23jQuBa6Kr/lwXAXp0qLunLl594o5ZtOj09xvj9XFRL YpaWZLeM60LfEPnhfDGrkPWmGCNQuGHl0U+gz9QdbXqBUVpdEVhXMYuHVNLIzbxf NvoXHkpXUYQQBdMW -----END CERTIFICATE-----Generated at Tue Dec 16 13:39:30 2025 by rpki-client