This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/AeSjCxe58nLVakCziowNRNiihdE.roa File: AeSjCxe58nLVakCziowNRNiihdE.roa (raw, json) Hash identifier: 2tJe1mN72zh8lVi/unWtZRCYPR5i02lOGb/kuOjV7Ok= Subject key identifier: 01:E4:A3:0B:17:B9:F2:72:D5:6A:40:B3:8A:8C:0D:44:D8:A2:85:D1 Certificate issuer: /CN=05bfdbb6a4b1663369da407db97b021f73284a28 Certificate serial: 019B7F15C98085EAC9936A17F4ED9876835B Authority key identifier: 05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/AeSjCxe58nLVakCziowNRNiihdE.roa Signing time: Fri 02 Jan 2026 14:21:32 +0000 ROA not before: Fri 02 Jan 2026 14:21:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 5.101.136.0/21 maxlen: 21 5.101.144.0/21 maxlen: 21 5.101.168.0/21 maxlen: 21 31.132.0.0/21 maxlen: 21 37.9.56.0/21 maxlen: 21 77.74.192.0/21 maxlen: 21 77.75.120.0/21 maxlen: 21 78.110.160.0/21 maxlen: 21 78.110.168.0/23 maxlen: 23 78.110.170.0/24 maxlen: 24 78.110.172.0/22 maxlen: 22 78.157.192.0/21 maxlen: 21 78.157.200.0/22 maxlen: 22 78.157.204.0/24 maxlen: 24 78.157.206.0/23 maxlen: 23 78.157.208.0/20 maxlen: 20 81.92.192.0/22 maxlen: 22 81.92.217.0/24 maxlen: 24 81.92.218.0/24 maxlen: 24 91.109.112.0/21 maxlen: 21 94.46.184.0/22 maxlen: 22 94.46.192.0/22 maxlen: 22 94.46.207.0/24 maxlen: 24 94.46.220.0/22 maxlen: 22 94.46.244.0/22 maxlen: 22 94.229.64.0/20 maxlen: 20 178.159.0.0/20 maxlen: 20 185.17.24.0/24 maxlen: 24 185.17.26.0/24 maxlen: 24 185.17.27.0/24 maxlen: 24 185.99.252.0/24 maxlen: 24 185.99.253.0/24 maxlen: 24 185.99.254.0/24 maxlen: 24 185.103.96.0/22 maxlen: 22 185.109.168.0/22 maxlen: 22 2a01:a500::/32 maxlen: 32 2a01:a500:1::/48 maxlen: 48 2a01:a500:1228::/48 maxlen: 48 2a01:a500:251a::/48 maxlen: 48 2a01:a500:251b::/48 maxlen: 48 2a01:a500:251c::/48 maxlen: 48 2a01:a500:2566::/48 maxlen: 48 2a01:a500:a517::/48 maxlen: 48 2a01:a500:b517::/48 maxlen: 48 2a01:a500:c517::/48 maxlen: 48 2a01:a500:d517::/48 maxlen: 48 2a01:a500:e517::/48 maxlen: 48 2a01:a500:f517::/48 maxlen: 48 2a01:a507::/32 maxlen: 32 2a01:a507:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c9:80:85:ea:c9:93:6a:17:f4:ed:98:76:83:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05bfdbb6a4b1663369da407db97b021f73284a28 Validity Not Before: Jan 2 14:21:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01e4a30b17b9f272d56a40b38a8c0d44d8a285d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fd:69:13:2c:be:c4:48:65:d4:96:04:94:7f: 48:b5:28:29:92:74:98:fb:72:85:ad:50:8b:a5:18: 19:7f:cc:ae:22:5a:db:63:65:7e:bf:5e:34:d5:52: 47:80:e3:e4:8f:2a:02:17:5a:42:82:b5:00:59:ba: 7b:46:9c:c9:79:ff:70:0e:9e:50:ac:12:eb:4b:32: 3a:24:3c:cc:6b:3c:a6:fa:64:8b:37:b6:82:d0:67: 1a:92:2d:c3:93:3c:6e:9d:52:e9:ea:9c:84:e5:a3: 35:4a:bb:31:fd:a7:bc:44:a5:36:60:37:63:63:90: ef:c7:f5:53:30:2b:44:39:da:15:25:a5:d7:cc:9c: 81:98:e7:85:df:bd:fc:97:d7:6c:b3:e5:3b:26:99: 4e:ab:d9:82:85:7f:fa:ad:af:42:cb:ec:59:f5:03: e7:b7:8f:11:37:40:d0:b2:0a:ac:ea:c1:bf:ad:d6: b3:9b:86:c6:5b:d6:5f:91:b5:64:65:04:60:07:e6: 3e:e1:84:c6:30:59:11:89:99:c8:b2:17:9a:f7:60: 8d:79:d8:f9:32:3d:01:c2:86:8e:6c:9c:a4:78:27: ae:47:2a:5d:67:33:35:f5:2c:a2:95:ca:05:d5:76: 7c:50:12:67:23:2b:d1:d3:18:12:c4:d0:c7:4f:82: 86:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E4:A3:0B:17:B9:F2:72:D5:6A:40:B3:8A:8C:0D:44:D8:A2:85:D1 X509v3 Authority Key Identifier: keyid:05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/AeSjCxe58nLVakCziowNRNiihdE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.101.136.0-5.101.151.255 5.101.168.0/21 31.132.0.0/21 37.9.56.0/21 77.74.192.0/21 77.75.120.0/21 78.110.160.0-78.110.170.255 78.110.172.0/22 78.157.192.0-78.157.204.255 78.157.206.0-78.157.223.255 81.92.192.0/22 81.92.217.0-81.92.218.255 91.109.112.0/21 94.46.184.0/22 94.46.192.0/22 94.46.207.0/24 94.46.220.0/22 94.46.244.0/22 94.229.64.0/20 178.159.0.0/20 185.17.24.0/24 185.17.26.0/23 185.99.252.0-185.99.254.255 185.103.96.0/22 185.109.168.0/22 IPv6: 2a01:a500::/32 2a01:a507::/32 Signature Algorithm: sha256WithRSAEncryption 7a:e0:41:39:22:da:e1:fc:42:07:e5:69:df:47:ba:52:03:f5: 58:99:71:7e:8f:4b:4e:e6:85:5e:6f:85:b0:0b:74:d7:2d:54: 26:fe:0e:e9:0f:91:15:41:3c:26:16:da:74:1e:dd:85:90:ff: 05:5f:72:cb:cb:1e:92:85:aa:49:61:b1:bd:0a:b6:6d:80:cc: 04:d5:32:5c:96:b9:6f:03:bc:9d:53:cc:f1:27:a0:84:d7:76: 7d:33:7a:3c:ae:3b:cb:26:44:1a:52:66:a9:77:9e:c2:b1:9f: 97:18:82:6c:c2:c1:41:97:3e:6f:7e:9d:60:82:dd:59:e0:c1: 8f:ff:13:82:e1:34:2c:7e:f3:b0:13:80:76:92:07:6b:a3:70: 7e:26:3d:5e:ab:b5:26:60:c4:4a:84:37:40:18:ec:af:09:50: 45:e0:1d:10:10:5e:ac:e2:14:7b:f2:fa:1a:06:da:85:71:6e: d1:a2:12:82:49:2b:5e:f2:67:0c:bd:44:db:df:51:36:f9:cd: e8:25:9a:f6:e2:2a:a5:97:41:c1:28:fd:fb:e2:58:61:bf:65: 2b:69:cc:7d:3a:d1:b0:d9:66:51:c9:b1:2c:9f:e5:b9:e6:99: 39:0a:bb:9d:79:8b:38:42:3b:42:77:10:60:42:fb:e1:52:68: 9f:e1:04:56 -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgISAZt/FcmAherJk2oX9O2YdoNbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YmZkYmI2YTRiMTY2MzM2OWRhNDA3ZGI5N2IwMjFmNzMy ODRhMjgwHhcNMjYwMTAyMTQyMTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWU0YTMwYjE3YjlmMjcyZDU2YTQwYjM4YThjMGQ0NGQ4YTI4NWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2P1pEyy+xEhl1JYElH9ItSgpknSY +3KFrVCLpRgZf8yuIlrbY2V+v1401VJHgOPkjyoCF1pCgrUAWbp7RpzJef9wDp5Q rBLrSzI6JDzMazym+mSLN7aC0Gcaki3DkzxunVLp6pyE5aM1Srsx/ae8RKU2YDdj Y5Dvx/VTMCtEOdoVJaXXzJyBmOeF3738l9dss+U7JplOq9mChX/6ra9Cy+xZ9QPn t48RN0DQsgqs6sG/rdazm4bGW9ZfkbVkZQRgB+Y+4YTGMFkRiZnIshea92CNedj5 Mj0BwoaObJykeCeuRypdZzM19SyilcoF1XZ8UBJnIyvR0xgSxNDHT4KGoQIDAQAB o4IC5DCCAuAwHQYDVR0OBBYEFAHkowsXufJy1WpAs4qMDUTYooXRMB8GA1UdIwQY MBaAFAW/27aksWYzadpAfbl7Ah9zKEooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJfYnRxU3haak5wMmtCOXVYc0NIM01vU2lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi80NjBjMDAtM2U5NS00Mjc0LWJjOWMt MDYwZGFjZmViZTBmLzEvQWVTakN4ZTU4bkxWYWtDemlvd05STmlpaGRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi80NjBjMDAtM2U5NS00Mjc0LWJjOWMtMDYwZGFjZmViZTBm LzEvQmJfYnRxU3haak5wMmtCOXVYc0NIM01vU2lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIH5BggrBgEFBQcBBwEB/wSB6TCB5jCBzQQCAAEwgcYwDAME AwVliAMEAwVlkAMEAwVlqAMEAx+EAAMEAyUJOAMEA01KwAMEA01LeDAMAwQFTm6g AwQATm6qAwQCTm6sMAwDBAZOncADBABOncwwDAMEAU6dzgMEBU6dwAMEAlFcwDAM AwQAUVzZAwQAUVzaAwQDW21wAwQCXi64AwQCXi7AAwQAXi7PAwQCXi7cAwQCXi70 AwQEXuVAAwQEsp8AAwQAuREYAwQBuREaMAwDBAK5Y/wDBAC5Y/4DBAK5Z2ADBAK5 bagwFAQCAAIwDgMFACoBpQADBQAqAaUHMA0GCSqGSIb3DQEBCwUAA4IBAQB64EE5 Itrh/EIH5WnfR7pSA/VYmXF+j0tO5oVeb4WwC3TXLVQm/g7pD5EVQTwmFtp0Ht2F kP8FX3LLyx6ShapJYbG9CrZtgMwE1TJclrlvA7ydU8zxJ6CE13Z9M3o8rjvLJkQa Umapd57CsZ+XGIJswsFBlz5vfp1ggt1Z4MGP/xOC4TQsfvOwE4B2kgdro3B+Jj1e q7UmYMRKhDdAGOyvCVBF4B0QEF6s4hR78voaBtqFcW7RohKCSSte8mcMvUTb31E2 +c3oJZr24iqll0HBKP374lhhv2Uracx9OtGw2WZRybEsn+W55pk5CrudeYs4QjtC dxBgQvvhUmif4QRW -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:14 2026 by rpki-client