This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/AYPL3doC5yo-g_GJEtlxvxNz4Is.roa File: AYPL3doC5yo-g_GJEtlxvxNz4Is.roa (raw, json) Hash identifier: Mao2j0qYLtf8HTIzIIL89ndhMOSkiqtNGmq/Rrvexbo= Subject key identifier: 01:83:CB:DD:DA:02:E7:2A:3E:83:F1:89:12:D9:71:BF:13:73:E0:8B Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019A9B1813A216B74D37AA4FA210A86CACDC Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/AYPL3doC5yo-g_GJEtlxvxNz4Is.roa Signing time: Wed 19 Nov 2025 07:50:37 +0000 ROA not before: Wed 19 Nov 2025 07:50:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204997 IP address blocks: 45.144.64.0/24 maxlen: 24 45.144.65.0/24 maxlen: 24 45.144.66.0/24 maxlen: 24 45.144.67.0/24 maxlen: 24 46.17.104.0/24 maxlen: 24 91.217.81.0/24 maxlen: 24 139.28.222.0/24 maxlen: 24 139.28.223.0/24 maxlen: 24 147.78.64.0/24 maxlen: 24 147.78.65.0/24 maxlen: 24 147.78.66.0/24 maxlen: 24 147.78.67.0/24 maxlen: 24 185.17.3.0/24 maxlen: 24 185.104.248.0/24 maxlen: 24 185.104.249.0/24 maxlen: 24 185.139.68.0/24 maxlen: 24 185.139.69.0/24 maxlen: 24 185.139.70.0/24 maxlen: 24 185.139.71.0/24 maxlen: 24 185.180.231.0/24 maxlen: 24 185.188.182.0/24 maxlen: 24 185.188.183.0/24 maxlen: 24 185.195.24.0/24 maxlen: 24 185.195.25.0/24 maxlen: 24 185.195.26.0/24 maxlen: 24 185.195.27.0/24 maxlen: 24 185.204.0.0/24 maxlen: 24 185.204.2.0/24 maxlen: 24 185.204.3.0/24 maxlen: 24 185.212.148.0/24 maxlen: 24 185.244.172.0/24 maxlen: 24 185.244.173.0/24 maxlen: 24 185.252.146.0/24 maxlen: 24 185.252.147.0/24 maxlen: 24 185.255.132.0/24 maxlen: 24 185.255.133.0/24 maxlen: 24 185.255.134.0/24 maxlen: 24 185.255.135.0/24 maxlen: 24 193.109.78.0/24 maxlen: 24 193.109.79.0/24 maxlen: 24 195.66.114.0/24 maxlen: 24 2a04:5200:fb01::/48 maxlen: 48 2a04:5200:fb02::/48 maxlen: 48 2a04:5200:ff00::/48 maxlen: 48 2a04:5200:ff10::/48 maxlen: 48 2a04:5200:fff1::/48 maxlen: 48 2a04:5200:fff2::/48 maxlen: 48 2a04:5200:fff3::/48 maxlen: 48 2a04:5200:fff4::/48 maxlen: 48 2a04:5200:fff5::/48 maxlen: 48 2a04:5200:fff6::/48 maxlen: 48 2a04:5200:fff7::/48 maxlen: 48 2a04:5200:fff8::/48 maxlen: 48 2a04:5200:fff9::/48 maxlen: 48 2a04:5200:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:18:13:a2:16:b7:4d:37:aa:4f:a2:10:a8:6c:ac:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Nov 19 07:50:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0183cbddda02e72a3e83f18912d971bf1373e08b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c9:d5:24:8d:09:78:6b:b5:07:af:7c:aa:7e: 01:51:81:12:d0:85:da:20:65:a4:a6:d6:cf:42:4f: df:d4:b2:0d:3d:6f:e9:91:65:c8:bc:df:59:1f:91: 46:6e:8b:d6:be:1c:a0:7f:ad:62:fa:40:6f:7c:23: 94:03:11:8e:5c:ec:92:0d:50:31:5f:64:4e:7d:fa: b1:e7:fe:e4:2a:0a:28:2c:f4:1e:27:20:8e:08:07: a7:24:c4:a5:4b:01:16:a8:c0:83:11:69:18:59:c5: 65:2c:51:52:42:84:64:f5:5c:ac:18:9d:3a:a2:d5: c5:b5:8b:fd:94:2d:ed:69:ae:95:07:26:28:39:9a: 71:d4:a7:23:d4:7c:0c:85:ef:a3:72:4d:3a:bb:6f: 6c:be:74:e4:2e:19:fe:0a:99:4a:b1:50:69:c1:61: 1f:0a:6e:65:59:84:f3:36:18:cd:d6:a0:69:2c:50: b2:49:1f:ca:2d:93:e9:dd:5c:69:1d:c8:2c:49:24: 54:9a:f2:95:e9:5a:02:6c:e8:39:5a:b8:13:05:2e: 06:de:80:83:47:b0:a5:ab:7f:d3:cd:23:53:13:5b: a0:5a:f1:38:a4:04:c4:16:74:47:e3:12:54:aa:b0: 57:6e:ff:10:fb:52:3c:3f:fc:75:0b:dd:6d:d0:cf: b2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:83:CB:DD:DA:02:E7:2A:3E:83:F1:89:12:D9:71:BF:13:73:E0:8B X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/AYPL3doC5yo-g_GJEtlxvxNz4Is.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.64.0/22 46.17.104.0/24 91.217.81.0/24 139.28.222.0/23 147.78.64.0/22 185.17.3.0/24 185.104.248.0/23 185.139.68.0/22 185.180.231.0/24 185.188.182.0/23 185.195.24.0/22 185.204.0.0/24 185.204.2.0/23 185.212.148.0/24 185.244.172.0/23 185.252.146.0/23 185.255.132.0/22 193.109.78.0/23 195.66.114.0/24 IPv6: 2a04:5200:fb01::-2a04:5200:fb02:ffff:ffff:ffff:ffff:ffff 2a04:5200:ff00::/48 2a04:5200:ff10::/48 2a04:5200:fff1::-2a04:5200:fff9:ffff:ffff:ffff:ffff:ffff 2a04:5200:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 9e:27:4d:f8:53:29:3e:f2:48:00:ba:8c:09:da:de:c1:31:24: a6:9c:32:a3:12:9a:20:5c:e5:1f:40:eb:ec:35:aa:a7:c0:eb: d3:6f:fe:fa:85:33:56:44:d3:80:29:a9:16:5c:ac:de:e3:d2: 78:2b:26:1a:ea:b5:13:eb:1e:ce:ec:77:e4:78:13:a6:33:d1: 4c:62:29:29:57:17:3a:e9:9e:81:a7:60:0c:b3:08:96:44:6d: c5:a6:69:88:47:e5:3b:70:d6:1c:b7:59:7b:04:7d:22:96:66: b8:05:5d:21:ff:c7:a7:05:2f:fd:58:0d:59:cb:64:09:0d:12: 36:5c:50:f6:be:ce:8a:69:7c:e1:2d:00:a2:cb:61:97:16:47: 07:4b:da:1e:6c:b0:49:c8:c1:15:5e:86:72:d8:27:1e:29:3d: f9:c8:9a:bc:43:93:5c:cc:14:4c:3a:c6:97:43:6f:7f:a1:2b: 5d:62:cf:4e:32:e0:7b:06:47:e2:63:df:b0:af:35:d0:d0:a7: b5:17:56:0b:f5:6a:9b:5a:9d:a2:8f:12:9a:d7:5b:1e:84:60: 10:d3:d6:9c:05:a4:7c:04:20:de:3d:83:13:26:5c:58:d7:55: 4e:54:eb:32:91:72:7e:94:43:a1:40:aa:2c:a7:be:1b:cd:d6: 07:4a:77:33 -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZqbGBOiFrdNN6pPohCobKzcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjUxMTE5MDc1MDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTgzY2JkZGRhMDJlNzJhM2U4M2YxODkxMmQ5NzFiZjEzNzNlMDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28nVJI0JeGu1B698qn4BUYES0IXa IGWkptbPQk/f1LINPW/pkWXIvN9ZH5FGbovWvhygf61i+kBvfCOUAxGOXOySDVAx X2ROffqx5/7kKgooLPQeJyCOCAenJMSlSwEWqMCDEWkYWcVlLFFSQoRk9VysGJ06 otXFtYv9lC3taa6VByYoOZpx1Kcj1HwMhe+jck06u29svnTkLhn+CplKsVBpwWEf Cm5lWYTzNhjN1qBpLFCySR/KLZPp3VxpHcgsSSRUmvKV6VoCbOg5WrgTBS4G3oCD R7Clq3/TzSNTE1ugWvE4pATEFnRH4xJUqrBXbv8Q+1I8P/x1C91t0M+yuQIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFAGDy93aAucqPoPxiRLZcb8Tc+CLMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvQVlQTDNkb0M1eW8tZ19HSkV0bHh2eE56NElzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHYBggrBgEFBQcBBwEB/wSByDCBxTB4BAIAATByAwQCLZBA AwQALhFoAwQAW9lRAwQBixzeAwQCk05AAwQAuREDAwQBuWj4AwQCuYtEAwQAubTn AwQBuby2AwQCucMYAwQAucwAAwQBucwCAwQAudSUAwQBufSsAwQBufySAwQCuf+E AwQBwW1OAwQAw0JyMEkEAgACMEMwEgMHACoEUgD7AQMHACoEUgD7AgMHACoEUgD/ AAMHACoEUgD/EDASAwcAKgRSAP/xAwcBKgRSAP/4AwcAKgRSAP//MA0GCSqGSIb3 DQEBCwUAA4IBAQCeJ034Uyk+8kgAuowJ2t7BMSSmnDKjEpogXOUfQOvsNaqnwOvT b/76hTNWRNOAKakWXKze49J4KyYa6rUT6x7O7HfkeBOmM9FMYikpVxc66Z6Bp2AM swiWRG3FpmmIR+U7cNYct1l7BH0ilma4BV0h/8enBS/9WA1Zy2QJDRI2XFD2vs6K aXzhLQCiy2GXFkcHS9oebLBJyMEVXoZy2CceKT35yJq8Q5NczBRMOsaXQ29/oStd Ys9OMuB7BkfiY9+wrzXQ0Ke1F1YL9WqbWp2ijxKa11sehGAQ09acBaR8BCDePYMT JlxY11VOVOsykXJ+lEOhQKosp74bzdYHSncz -----END CERTIFICATE-----Generated at Fri Dec 5 21:27:43 2025 by rpki-client