This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/aq9ZDPOt2KSoFZ-L-okek5SxK78.roa File: aq9ZDPOt2KSoFZ-L-okek5SxK78.roa (raw, json) Hash identifier: bWviDnPDEPH13dbpMPoZ7BrHECU4pVLl3k2fyU17UOY= Subject key identifier: 6A:AF:59:0C:F3:AD:D8:A4:A8:15:9F:8B:FA:89:1E:93:94:B1:2B:BF Certificate issuer: /CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1 Certificate serial: 019B117E510241770593FB90BD56C34B21CB Authority key identifier: 57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/aq9ZDPOt2KSoFZ-L-okek5SxK78.roa Signing time: Fri 12 Dec 2025 07:37:29 +0000 ROA not before: Fri 12 Dec 2025 07:37:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202214 IP address blocks: 185.50.64.0/23 maxlen: 23 185.50.64.0/24 maxlen: 24 185.50.65.0/24 maxlen: 24 185.50.66.0/23 maxlen: 23 185.50.66.0/24 maxlen: 24 185.50.67.0/24 maxlen: 24 2a01:a6a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 19:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:7e:51:02:41:77:05:93:fb:90:bd:56:c3:4b:21:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1 Validity Not Before: Dec 12 07:37:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6aaf590cf3add8a4a8159f8bfa891e9394b12bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1f:05:3c:02:8c:45:d3:b5:63:99:3d:2f:69: 0f:f8:5f:ef:8f:0c:ef:02:5b:18:66:f3:1d:66:67: 70:61:91:61:32:77:8b:c3:39:24:11:2e:e3:f1:be: 02:2e:72:9a:3c:55:e6:4d:bc:ef:a5:bb:67:19:78: 93:a6:36:5e:a4:d1:4e:ec:93:b4:eb:9b:2a:be:7d: e4:d3:ec:26:9b:b1:8e:45:69:65:dc:64:c8:28:ed: 86:af:f5:f6:0d:23:f0:61:20:19:c5:32:5c:af:d2: eb:fd:fc:df:d9:07:ca:cf:ce:70:0a:24:ea:ee:4a: d7:f6:9e:31:ca:c8:a8:b9:7a:7a:53:b9:d2:50:0c: 6e:4d:21:87:4e:32:14:23:88:ad:8e:e5:86:3d:9b: 40:24:27:82:75:98:01:7f:5a:11:08:4b:68:bd:b6: fb:1b:b8:96:9b:f0:24:b4:c6:88:3d:49:bc:b1:44: 2e:dc:13:4f:b2:9e:fc:4a:6a:03:5d:d9:5e:e5:89: 5c:6b:b5:89:3c:12:71:8d:5c:25:f9:64:81:f6:d0: 6b:70:fe:5e:9b:5d:5a:48:50:70:6a:f8:8f:10:d5: 36:a0:1c:fb:9b:2f:d7:99:ad:49:05:d9:6a:82:bd: c4:0f:53:fd:8e:7f:d7:c2:0f:f3:04:b2:6a:a5:c4: d5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:AF:59:0C:F3:AD:D8:A4:A8:15:9F:8B:FA:89:1E:93:94:B1:2B:BF X509v3 Authority Key Identifier: keyid:57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/aq9ZDPOt2KSoFZ-L-okek5SxK78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.50.64.0/22 IPv6: 2a01:a6a0::/32 Signature Algorithm: sha256WithRSAEncryption 45:4b:64:ad:33:e4:8a:64:f8:af:3a:8c:b7:ec:48:ac:d0:f1: 98:78:42:a7:48:16:e7:32:e6:cf:76:10:a2:a7:a6:ed:45:45: dc:d4:10:9b:69:c4:da:54:ea:26:6a:ec:63:73:6a:24:42:3d: 41:d5:bf:40:c2:c9:37:a8:cc:4d:f2:08:cf:58:b4:fe:d4:dc: ff:ba:ef:71:ce:3e:29:75:8f:72:54:43:82:83:59:7f:cb:7a: c4:3a:22:a3:3b:8a:41:3f:15:48:07:44:81:86:ec:d9:56:15: fc:b0:f5:75:d9:b8:22:0a:15:90:4f:8d:ec:0d:5c:64:e1:a1: db:c6:3b:ae:e3:0e:84:e9:95:8d:63:6d:ba:37:97:aa:f5:d4: ae:f8:9f:e1:32:d2:41:4f:63:a2:72:47:84:73:7e:bc:1a:10: 08:bb:32:43:88:60:93:15:e8:4a:b4:9c:78:61:6e:27:16:df: e9:9b:c8:5d:5a:df:f4:a8:c1:37:92:e7:c4:00:70:a7:24:0e: 3c:83:a8:30:fa:3c:e9:b0:4a:82:ae:90:37:be:0d:1c:72:76: 45:17:06:3d:3a:68:b6:df:2e:f8:f9:8d:58:46:84:78:06:0a: c6:63:a8:0e:67:f4:17:f3:68:69:20:1e:f8:27:7f:da:ae:7b: 94:fe:7c:d0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZsRflECQXcFk/uQvVbDSyHLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NGUyNWExNmU1ZDNhYTExMGFjNWU4MzM1Zjg4ZjYzZTU0 YjQyZjEwHhcNMjUxMjEyMDczNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWFmNTkwY2YzYWRkOGE0YTgxNTlmOGJmYTg5MWU5Mzk0YjEyYmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB8FPAKMRdO1Y5k9L2kP+F/vjwzv AlsYZvMdZmdwYZFhMneLwzkkES7j8b4CLnKaPFXmTbzvpbtnGXiTpjZepNFO7JO0 65sqvn3k0+wmm7GORWll3GTIKO2Gr/X2DSPwYSAZxTJcr9Lr/fzf2QfKz85wCiTq 7krX9p4xysiouXp6U7nSUAxuTSGHTjIUI4itjuWGPZtAJCeCdZgBf1oRCEtovbb7 G7iWm/AktMaIPUm8sUQu3BNPsp78SmoDXdle5Ylca7WJPBJxjVwl+WSB9tBrcP5e m11aSFBwaviPENU2oBz7my/Xma1JBdlqgr3ED1P9jn/Xwg/zBLJqpcTVJQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGqvWQzzrdikqBWfi/qJHpOUsSu/MB8GA1UdIwQY MBaAFFdOJaFuXTqhEKxegzX4j2PlS0LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjA0bG9XNWRPcUVRckY2RE5maVBZLVZMUXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wNDI5MmYtZjEwNC00MTdjLWFjZGEt NTcxYWYwNjZjZjFlLzEvYXE5WkRQT3QyS1NvRlotTC1va2VrNVN4Szc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8wNDI5MmYtZjEwNC00MTdjLWFjZGEtNTcxYWYwNjZjZjFl LzEvVjA0bG9XNWRPcUVRckY2RE5maVBZLVZMUXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTJAMA0E AgACMAcDBQAqAaagMA0GCSqGSIb3DQEBCwUAA4IBAQBFS2StM+SKZPivOoy37Eis 0PGYeEKnSBbnMubPdhCip6btRUXc1BCbacTaVOomauxjc2okQj1B1b9Awsk3qMxN 8gjPWLT+1Nz/uu9xzj4pdY9yVEOCg1l/y3rEOiKjO4pBPxVIB0SBhuzZVhX8sPV1 2bgiChWQT43sDVxk4aHbxjuu4w6E6ZWNY226N5eq9dSu+J/hMtJBT2OickeEc368 GhAIuzJDiGCTFehKtJx4YW4nFt/pm8hdWt/0qME3kufEAHCnJA48g6gw+jzpsEqC rpA3vg0ccnZFFwY9Omi23y74+Y1YRoR4BgrGY6gOZ/QX82hpIB74J3/arnuU/nzQ -----END CERTIFICATE-----Generated at Sun Dec 14 03:40:04 2025 by rpki-client