This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/aedlYda2oVCUa1BM1GSAfkRmYaY.roa File: aedlYda2oVCUa1BM1GSAfkRmYaY.roa (raw, json) Hash identifier: 1lOdpPJ7itskaoLnmdQoRa6VeoKX772UHHwUXEq8AJ4= Subject key identifier: 69:E7:65:61:D6:B6:A1:50:94:6B:50:4C:D4:64:80:7E:44:66:61:A6 Certificate issuer: /CN=cf4a717f8fa1bb0359274223acdae22b70e66bec Certificate serial: 019B230292D3CCE311A4B8F5FACA740E864A Authority key identifier: CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/aedlYda2oVCUa1BM1GSAfkRmYaY.roa Signing time: Mon 15 Dec 2025 17:15:29 +0000 ROA not before: Mon 15 Dec 2025 17:15:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15774 IP address blocks: 31.42.96.0/20 maxlen: 32 37.49.192.0/19 maxlen: 32 37.205.48.0/21 maxlen: 32 37.205.64.0/19 maxlen: 32 46.50.128.0/17 maxlen: 32 46.151.88.0/21 maxlen: 32 46.241.0.0/17 maxlen: 32 91.105.128.0/18 maxlen: 32 109.171.0.0/17 maxlen: 32 109.197.128.0/21 maxlen: 32 178.217.0.0/21 maxlen: 32 188.44.96.0/19 maxlen: 32 188.168.0.0/16 maxlen: 32 188.244.128.0/17 maxlen: 32 194.187.29.0/24 maxlen: 32 195.238.100.0/22 maxlen: 32 2a02:618::/32 maxlen: 96 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 11:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:02:92:d3:cc:e3:11:a4:b8:f5:fa:ca:74:0e:86:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf4a717f8fa1bb0359274223acdae22b70e66bec Validity Not Before: Dec 15 17:15:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69e76561d6b6a150946b504cd464807e446661a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8a:74:2c:8e:04:17:2d:f1:18:f9:56:9a:0f: 9c:bf:4a:6b:2b:45:7d:77:2e:eb:75:d9:54:00:4e: 3c:da:d3:c6:52:95:6e:15:0e:0c:fd:44:e0:fd:1b: 4d:77:65:69:56:ff:50:b0:63:12:e2:ea:47:a3:15: e4:0d:59:90:8d:7c:96:03:0a:3a:41:9f:5e:0a:4f: 47:06:1b:c8:41:b9:24:f0:d4:93:c5:3b:47:61:a0: 81:4f:cf:80:5a:85:b1:de:a0:f2:09:51:6e:c4:c5: bc:74:4e:ef:50:c3:9f:fb:95:87:5e:90:13:22:d1: 62:44:00:85:d8:7d:f6:20:5a:51:e3:7c:57:52:6d: a0:e4:88:53:17:21:bf:7b:45:a5:ce:bf:d6:4c:50: 39:45:1b:66:3a:6e:89:e9:dc:5f:07:ad:76:de:54: 83:a0:a8:6c:1f:8b:47:9c:74:73:1e:ed:e1:4c:02: a6:75:be:fa:18:69:a2:af:ec:52:9c:38:68:8c:4f: 6a:e0:fa:f0:e2:19:4b:fb:8b:e9:4e:56:ad:60:fd: d3:18:a5:a1:02:40:e4:ba:77:80:72:59:db:32:bd: 65:ce:f5:ae:7a:04:d6:86:4f:d5:e2:5e:48:42:ae: 1f:0a:7f:a2:c9:b0:d3:d2:fa:55:26:cd:37:02:00: b5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E7:65:61:D6:B6:A1:50:94:6B:50:4C:D4:64:80:7E:44:66:61:A6 X509v3 Authority Key Identifier: keyid:CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/aedlYda2oVCUa1BM1GSAfkRmYaY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.42.96.0/20 37.49.192.0/19 37.205.48.0/21 37.205.64.0/19 46.50.128.0/17 46.151.88.0/21 46.241.0.0/17 91.105.128.0/18 109.171.0.0/17 109.197.128.0/21 178.217.0.0/21 188.44.96.0/19 188.168.0.0/16 188.244.128.0/17 194.187.29.0/24 195.238.100.0/22 IPv6: 2a02:618::/32 Signature Algorithm: sha256WithRSAEncryption 1b:63:59:f4:10:de:cd:d4:1e:f2:ed:a4:3b:b8:1e:c6:d7:06: 36:3c:7e:2e:7e:f5:3c:24:18:0b:8c:c3:4f:15:e9:cf:e5:ae: a8:7a:d5:c6:10:9f:5d:b3:d9:50:d8:f1:da:99:51:34:12:db: 9c:12:ee:f2:b7:82:05:08:02:cc:44:44:35:1e:c5:db:0c:24: ee:19:0f:87:a7:d5:41:82:63:58:2c:c0:56:ee:1e:29:da:fa: 35:6a:51:45:6c:e9:0e:9e:f6:a2:72:b7:5b:d7:3e:fa:64:36: f9:0b:17:5c:cd:be:6b:4a:7a:c1:d7:8b:6a:42:da:ef:8c:a2: b7:e5:47:76:bc:41:57:7f:50:70:7f:67:e8:b2:70:5c:ff:a6: 2b:a8:7e:61:68:4e:9e:77:f3:d0:80:c4:be:45:1b:22:5a:84: a5:3d:91:10:43:cb:db:ab:bb:40:1b:29:47:4f:83:37:42:f0: 5b:c0:cb:82:62:c4:32:73:4c:15:bf:6a:b5:a9:3b:08:42:f0: d3:d0:64:c8:0b:e1:30:29:a3:87:6b:20:77:bf:00:7f:f6:4e: ea:d3:ea:27:c3:55:52:72:7a:ae:c2:a2:98:fd:49:ea:57:74: 16:3d:8a:25:12:ad:2b:b9:69:d8:e9:b2:8a:8e:f1:d2:fb:2e: ba:85:e9:02 -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgISAZsjApLTzOMRpLj1+sp0DoZKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNGE3MTdmOGZhMWJiMDM1OTI3NDIyM2FjZGFlMjJiNzBl NjZiZWMwHhcNMjUxMjE1MTcxNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWU3NjU2MWQ2YjZhMTUwOTQ2YjUwNGNkNDY0ODA3ZTQ0NjY2MWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIp0LI4EFy3xGPlWmg+cv0prK0V9 dy7rddlUAE482tPGUpVuFQ4M/UTg/RtNd2VpVv9QsGMS4upHoxXkDVmQjXyWAwo6 QZ9eCk9HBhvIQbkk8NSTxTtHYaCBT8+AWoWx3qDyCVFuxMW8dE7vUMOf+5WHXpAT ItFiRACF2H32IFpR43xXUm2g5IhTFyG/e0Wlzr/WTFA5RRtmOm6J6dxfB6123lSD oKhsH4tHnHRzHu3hTAKmdb76GGmir+xSnDhojE9q4Prw4hlL+4vpTlatYP3TGKWh AkDkuneAclnbMr1lzvWuegTWhk/V4l5IQq4fCn+iybDT0vpVJs03AgC12wIDAQAB o4ICcjCCAm4wHQYDVR0OBBYEFGnnZWHWtqFQlGtQTNRkgH5EZmGmMB8GA1UdIwQY MBaAFM9KcX+PobsDWSdCI6za4itw5mvsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejBweGY0LWh1d05aSjBJanJOcmlLM0RtYS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9lNTBmNTQtNmZkZC00ZmU5LTlmZTkt NmFhYTZiMDIxNjBkLzEvYWVkbFlkYTJvVkNVYTFCTTFHU0Fma1JtWWFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9lNTBmNTQtNmZkZC00ZmU5LTlmZTktNmFhYTZiMDIxNjBk LzEvejBweGY0LWh1d05aSjBJanJOcmlLM0RtYS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwZQQCAAEwXwMEBB8qYAME BSUxwAMEAyXNMAMEBSXNQAMEBy4ygAMEAy6XWAMEBy7xAAMEBltpgAMEB22rAAME A23FgAMEA7LZAAMEBbwsYAMDALyoAwQHvPSAAwQAwrsdAwQCw+5kMA0EAgACMAcD BQAqAgYYMA0GCSqGSIb3DQEBCwUAA4IBAQAbY1n0EN7N1B7y7aQ7uB7G1wY2PH4u fvU8JBgLjMNPFenP5a6oetXGEJ9ds9lQ2PHamVE0EtucEu7yt4IFCALMREQ1HsXb DCTuGQ+Hp9VBgmNYLMBW7h4p2vo1alFFbOkOnvaicrdb1z76ZDb5Cxdczb5rSnrB 14tqQtrvjKK35Ud2vEFXf1Bwf2fosnBc/6YrqH5haE6ed/PQgMS+RRsiWoSlPZEQ Q8vbq7tAGylHT4M3QvBbwMuCYsQyc0wVv2q1qTsIQvDT0GTIC+EwKaOHayB3vwB/ 9k7q0+onw1VScnquwqKY/UnqV3QWPYolEq0ruWnY6bKKjvHS+y66hekC -----END CERTIFICATE-----Generated at Tue Dec 16 19:59:10 2025 by rpki-client