This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/tUzrF3nyBJ8jEfq7bWvPmVwsD-0.roa File: tUzrF3nyBJ8jEfq7bWvPmVwsD-0.roa (raw, json) Hash identifier: Haw+aRAR5U2cv2bj8US6YE3DJs1jpOG0OPl3Bgiz4Sg= Subject key identifier: B5:4C:EB:17:79:F2:04:9F:23:11:FA:BB:6D:6B:CF:99:5C:2C:0F:ED Certificate issuer: /CN=4a7e8c622c87532f8c449f347433dae52b7738f0 Certificate serial: 019B775935810436DAA89219D52F00F8867C Authority key identifier: 4A:7E:8C:62:2C:87:53:2F:8C:44:9F:34:74:33:DA:E5:2B:77:38:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/tUzrF3nyBJ8jEfq7bWvPmVwsD-0.roa Signing time: Thu 01 Jan 2026 02:18:13 +0000 ROA not before: Thu 01 Jan 2026 02:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50477 IP address blocks: 5.149.200.0/22 maxlen: 22 5.149.204.0/22 maxlen: 22 5.149.204.0/24 maxlen: 24 5.149.205.0/24 maxlen: 24 5.149.206.0/24 maxlen: 24 46.19.112.0/23 maxlen: 23 46.19.114.0/24 maxlen: 24 46.19.115.0/24 maxlen: 24 46.19.116.0/22 maxlen: 22 109.236.208.0/23 maxlen: 23 109.236.210.0/24 maxlen: 24 109.236.211.0/24 maxlen: 24 109.236.212.0/22 maxlen: 22 109.236.216.0/21 maxlen: 21 134.19.144.0/21 maxlen: 21 134.19.152.0/24 maxlen: 24 134.19.153.0/24 maxlen: 24 134.19.154.0/23 maxlen: 23 134.19.154.0/24 maxlen: 24 134.19.156.0/22 maxlen: 22 134.19.156.0/23 maxlen: 23 2a04:6000::/29 maxlen: 29 2a04:6006::/32 maxlen: 32 2a04:6007::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:35:81:04:36:da:a8:92:19:d5:2f:00:f8:86:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a7e8c622c87532f8c449f347433dae52b7738f0 Validity Not Before: Jan 1 02:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b54ceb1779f2049f2311fabb6d6bcf995c2c0fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:aa:c2:53:a4:4e:6d:49:02:25:ee:ea:c4:92: 26:8a:a2:6b:d7:a9:ff:77:da:12:c8:63:92:90:bd: b5:d7:f3:71:d3:61:b8:7d:34:7b:28:e1:92:aa:43: 0b:00:2e:c0:c3:41:fb:f0:13:08:64:70:a5:40:1b: f7:9a:c7:14:93:66:b6:39:e6:36:b4:e9:8e:16:c9: 57:ca:75:63:d3:71:15:cd:7f:f4:ce:3a:6c:4a:c9: 34:51:eb:0f:f9:c1:77:49:e0:fc:8a:5e:6a:ff:e7: 9c:c6:f8:6e:14:f1:97:b7:61:e3:5c:61:54:4e:0c: 04:12:f0:ee:70:b4:88:2e:0c:3f:fb:e2:61:fb:96: d0:8d:2e:58:fc:5f:5d:93:ca:84:59:d1:1b:0f:8e: 9e:e4:0f:22:10:7d:b0:b6:41:50:08:00:a1:d7:84: c1:38:9c:64:6f:26:ee:37:f3:a3:63:a5:2a:14:0d: 2e:b3:64:b9:5d:19:81:f0:46:de:1e:a5:1d:b6:6e: 1d:b6:d6:41:5b:ff:2f:8d:7c:05:99:c1:76:54:8e: 93:27:81:7f:0c:e5:7b:bb:2a:f7:d8:b0:f6:9b:92: 2b:df:66:0e:41:15:ca:79:34:7b:2e:02:52:df:d2: 76:6c:bc:61:ef:41:d5:73:08:dd:44:8b:01:41:19: 13:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:4C:EB:17:79:F2:04:9F:23:11:FA:BB:6D:6B:CF:99:5C:2C:0F:ED X509v3 Authority Key Identifier: keyid:4A:7E:8C:62:2C:87:53:2F:8C:44:9F:34:74:33:DA:E5:2B:77:38:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/tUzrF3nyBJ8jEfq7bWvPmVwsD-0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.149.200.0/21 46.19.112.0/21 109.236.208.0/20 134.19.144.0/20 IPv6: 2a04:6000::/29 Signature Algorithm: sha256WithRSAEncryption 41:f6:ba:63:21:97:e4:1c:35:4e:f2:b5:6e:74:1e:7d:6b:27: fb:16:86:7a:51:40:78:57:fd:0d:a6:7f:48:ba:d9:70:69:14: a3:16:45:a6:9f:df:97:3d:92:3a:71:4b:6f:fb:49:86:2b:9a: 37:4c:34:9b:1a:5e:df:a9:bf:a0:fc:dc:2e:c0:3f:c8:1b:53: ec:98:8b:b8:66:7d:2c:86:91:c6:f6:60:ff:5b:b4:25:58:fe: 8e:68:ef:b5:08:c7:b1:7c:41:6e:27:40:1c:17:84:4e:70:c1: 7d:9c:1d:28:67:eb:a2:a6:ea:e0:ae:39:69:ce:ec:7a:8e:7e: 30:d1:20:4e:02:12:e7:3f:fd:49:74:ab:41:38:0a:cd:78:58: 91:e9:08:f7:78:c6:0a:b3:b6:9e:c0:de:e2:53:11:98:41:14: af:ad:5c:8f:16:da:fb:5a:10:ca:16:94:5b:3d:c1:20:99:25: e5:1a:a0:37:96:56:b9:1b:9b:db:d4:17:94:3c:ca:2b:da:c4: df:07:f8:88:61:9a:16:df:6d:85:01:f2:cd:91:9b:fd:28:ed: b7:09:5e:2c:87:5b:4a:20:e9:2c:4e:d6:04:7b:7e:0c:2c:1e: bd:a1:45:e1:a4:95:37:f3:27:77:c0:dd:3e:69:09:31:2a:f0: ec:6c:13:fa -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt3WTWBBDbaqJIZ1S8A+IZ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhN2U4YzYyMmM4NzUzMmY4YzQ0OWYzNDc0MzNkYWU1MmI3 NzM4ZjAwHhcNMjYwMTAxMDIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTRjZWIxNzc5ZjIwNDlmMjMxMWZhYmI2ZDZiY2Y5OTVjMmMwZmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqrCU6RObUkCJe7qxJImiqJr16n/ d9oSyGOSkL211/Nx02G4fTR7KOGSqkMLAC7Aw0H78BMIZHClQBv3mscUk2a2OeY2 tOmOFslXynVj03EVzX/0zjpsSsk0UesP+cF3SeD8il5q/+ecxvhuFPGXt2HjXGFU TgwEEvDucLSILgw/++Jh+5bQjS5Y/F9dk8qEWdEbD46e5A8iEH2wtkFQCACh14TB OJxkbybuN/OjY6UqFA0us2S5XRmB8EbeHqUdtm4dttZBW/8vjXwFmcF2VI6TJ4F/ DOV7uyr32LD2m5Ir32YOQRXKeTR7LgJS39J2bLxh70HVcwjdRIsBQRkTKwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFLVM6xd58gSfIxH6u21rz5lcLA/tMB8GA1UdIwQY MBaAFEp+jGIsh1MvjESfNHQz2uUrdzjwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU242TVlpeUhVeS1NUko4MGREUGE1U3QzT1BBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83NDc4MzYtNzgyMi00ZWQ3LTgyOTEt ZGFjMjViMjY2ZDhlLzEvdFV6ckYzbnlCSjhqRWZxN2JXdlBtVndzRC0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS83NDc4MzYtNzgyMi00ZWQ3LTgyOTEtZGFjMjViMjY2ZDhl LzEvU242TVlpeUhVeS1NUko4MGREUGE1U3QzT1BBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDBZXIAwQD LhNwAwQEbezQAwQEhhOQMA0EAgACMAcDBQMqBGAAMA0GCSqGSIb3DQEBCwUAA4IB AQBB9rpjIZfkHDVO8rVudB59ayf7FoZ6UUB4V/0Npn9IutlwaRSjFkWmn9+XPZI6 cUtv+0mGK5o3TDSbGl7fqb+g/NwuwD/IG1PsmIu4Zn0shpHG9mD/W7QlWP6OaO+1 CMexfEFuJ0AcF4ROcMF9nB0oZ+uipurgrjlpzux6jn4w0SBOAhLnP/1JdKtBOArN eFiR6Qj3eMYKs7aewN7iUxGYQRSvrVyPFtr7WhDKFpRbPcEgmSXlGqA3lla5G5vb 1BeUPMor2sTfB/iIYZoW322FAfLNkZv9KO23CV4sh1tKIOksTtYEe34MLB69oUXh pJU38yd3wN0+aQkxKvDsbBP6 -----END CERTIFICATE-----Generated at Tue Feb 10 00:29:42 2026 by rpki-client