This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/AedgcNL8Ig_vUhjnBiaFjptK-_w.roa File: AedgcNL8Ig_vUhjnBiaFjptK-_w.roa (raw, json) Hash identifier: MX7QqsHI59rsb+txANol5zSV6ybo4HBl4AZOtA8MFPQ= Subject key identifier: 01:E7:60:70:D2:FC:22:0F:EF:52:18:E7:06:26:85:8E:9B:4A:FB:FC Certificate issuer: /CN=ff29e70af2f7e18cbc19f97cca8fd6c05099741d Certificate serial: 019B7E385DE6656773B32762E62E59681D59 Authority key identifier: FF:29:E7:0A:F2:F7:E1:8C:BC:19:F9:7C:CA:8F:D6:C0:50:99:74:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/AedgcNL8Ig_vUhjnBiaFjptK-_w.roa Signing time: Fri 02 Jan 2026 10:19:41 +0000 ROA not before: Fri 02 Jan 2026 10:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13178 IP address blocks: 91.204.20.0/24 maxlen: 24 91.204.21.0/24 maxlen: 24 91.205.44.0/22 maxlen: 22 93.88.128.0/20 maxlen: 20 93.187.120.0/21 maxlen: 21 185.55.40.0/22 maxlen: 22 185.58.124.0/22 maxlen: 22 185.58.152.0/22 maxlen: 22 185.59.192.0/22 maxlen: 22 185.61.192.0/24 maxlen: 24 185.61.195.0/24 maxlen: 24 185.175.72.0/22 maxlen: 22 2a00:8040::/32 maxlen: 32 2a02:6160::/32 maxlen: 32 2a03:6c0::/32 maxlen: 32 2a03:ed80::/32 maxlen: 32 2a04:e080::/29 maxlen: 29 2a04:ed40::/29 maxlen: 29 2a0b:d700::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:5d:e6:65:67:73:b3:27:62:e6:2e:59:68:1d:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff29e70af2f7e18cbc19f97cca8fd6c05099741d Validity Not Before: Jan 2 10:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01e76070d2fc220fef5218e70626858e9b4afbfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:08:be:bc:79:a6:0c:74:49:8c:36:53:80:07: 9d:c9:e6:91:4c:f5:fa:13:3d:f5:7c:98:5c:30:fc: 05:00:0a:a8:8b:5e:8f:49:bd:44:a2:ca:a1:40:c4: a9:94:9e:2e:fb:00:0f:70:74:18:9e:cf:a2:6a:cc: 73:0f:c3:0b:71:82:01:79:50:20:ed:ee:66:f3:54: 5b:22:ab:f3:3b:13:16:80:b8:66:00:81:c2:2d:8b: 0a:9d:e5:bd:69:81:36:1a:38:90:b3:cd:54:e2:36: 79:5a:96:3a:c1:2f:f7:95:04:3f:18:41:a2:eb:0a: ad:a5:33:7c:69:07:c0:2d:ff:a5:8e:6a:04:c7:f7: c0:04:05:51:21:0d:8a:c1:68:a0:00:c3:fc:a4:1a: 5c:d2:87:87:d1:2b:d0:f1:45:f3:f5:1e:7f:b6:30: ba:95:f2:f2:3c:ef:9d:6e:b6:3e:c8:25:79:91:58: 01:30:1a:0b:b8:76:6a:05:7f:c1:f0:2f:2e:56:e2: 4f:03:03:9d:b5:3c:30:5a:c6:9d:b8:cc:d7:1b:36: e3:05:a1:0d:75:87:73:57:86:2b:85:db:1d:72:ea: a3:4c:5e:9c:ab:7c:59:bd:62:96:d4:25:2b:3a:03: 3a:55:8d:26:a8:64:34:6c:09:22:ed:57:72:ad:02: 69:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E7:60:70:D2:FC:22:0F:EF:52:18:E7:06:26:85:8E:9B:4A:FB:FC X509v3 Authority Key Identifier: keyid:FF:29:E7:0A:F2:F7:E1:8C:BC:19:F9:7C:CA:8F:D6:C0:50:99:74:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/AedgcNL8Ig_vUhjnBiaFjptK-_w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.204.20.0/23 91.205.44.0/22 93.88.128.0/20 93.187.120.0/21 185.55.40.0/22 185.58.124.0/22 185.58.152.0/22 185.59.192.0/22 185.61.192.0/24 185.61.195.0/24 185.175.72.0/22 IPv6: 2a00:8040::/32 2a02:6160::/32 2a03:6c0::/32 2a03:ed80::/32 2a04:e080::/29 2a04:ed40::/29 2a0b:d700::/29 Signature Algorithm: sha256WithRSAEncryption 6b:18:ce:25:0e:a7:51:98:99:3b:1f:31:19:da:1e:b7:ac:a0: 61:04:19:a3:cf:c6:9d:96:f8:f3:bf:4d:07:1c:89:c0:a3:0b: 89:8b:87:7c:c5:1a:ac:66:49:f2:1a:ad:ea:be:e3:9f:c3:31: 9a:b6:60:dc:9b:6e:35:e7:01:84:2d:44:85:1a:d5:a4:dc:52: bf:88:46:84:8e:94:51:b5:29:06:93:cd:db:d4:2e:2e:ca:2d: 97:dc:fe:06:ac:f8:4e:5f:df:1f:cd:e4:c3:52:22:c1:c4:9c: 4b:ab:3c:03:73:49:12:f7:72:91:57:d6:4b:90:cd:c8:52:de: ed:72:de:66:5d:23:67:ce:77:c0:73:05:d8:06:7e:02:44:b1: 79:d6:f0:b9:9b:5d:74:58:60:e0:86:d9:9a:1c:05:12:30:d3: 89:6b:c8:aa:a6:55:e4:17:3b:6f:93:d6:c9:a0:76:ed:3e:cf: ce:fa:84:8f:06:3b:d3:05:e4:d7:51:39:ad:d3:69:cc:89:e7: b0:5c:55:84:61:9d:ca:f7:38:45:db:46:ec:6e:ea:e8:9a:59: c6:cd:3c:71:a0:72:0e:9e:25:d7:41:eb:be:2d:80:1e:ad:8c: f1:cb:55:c1:36:8b:65:ac:e6:c7:ec:8c:e3:0c:dc:4e:e4:24: 3a:a2:27:e6 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgISAZt+OF3mZWdzsydi5i5ZaB1ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMjllNzBhZjJmN2UxOGNiYzE5Zjk3Y2NhOGZkNmMwNTA5 OTc0MWQwHhcNMjYwMTAyMTAxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWU3NjA3MGQyZmMyMjBmZWY1MjE4ZTcwNjI2ODU4ZTliNGFmYmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQi+vHmmDHRJjDZTgAedyeaRTPX6 Ez31fJhcMPwFAAqoi16PSb1EosqhQMSplJ4u+wAPcHQYns+iasxzD8MLcYIBeVAg 7e5m81RbIqvzOxMWgLhmAIHCLYsKneW9aYE2GjiQs81U4jZ5WpY6wS/3lQQ/GEGi 6wqtpTN8aQfALf+ljmoEx/fABAVRIQ2KwWigAMP8pBpc0oeH0SvQ8UXz9R5/tjC6 lfLyPO+dbrY+yCV5kVgBMBoLuHZqBX/B8C8uVuJPAwOdtTwwWsaduMzXGzbjBaEN dYdzV4YrhdsdcuqjTF6cq3xZvWKW1CUrOgM6VY0mqGQ0bAki7VdyrQJpRwIDAQAB o4ICgTCCAn0wHQYDVR0OBBYEFAHnYHDS/CIP71IY5wYmhY6bSvv8MB8GA1UdIwQY MBaAFP8p5wry9+GMvBn5fMqP1sBQmXQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3lubkN2TDM0WXk4R2ZsOHlvX1d3RkNaZEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lYzJkODktNDRkZC00YmFiLWFlN2Et Y2YyMGU1YjY3ZmM4LzEvQWVkZ2NOTDhJZ192VWhqbkJpYUZqcHRLLV93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9lYzJkODktNDRkZC00YmFiLWFlN2EtY2YyMGU1YjY3ZmM4 LzEvX3lubkN2TDM0WXk4R2ZsOHlvX1d3RkNaZEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzBIBAIAATBCAwQBW8wU AwQCW80sAwQEXViAAwQDXbt4AwQCuTcoAwQCuTp8AwQCuTqYAwQCuTvAAwQAuT3A AwQAuT3DAwQCua9IMDcEAgACMDEDBQAqAIBAAwUAKgJhYAMFACoDBsADBQAqA+2A AwUDKgTggAMFAyoE7UADBQMqC9cAMA0GCSqGSIb3DQEBCwUAA4IBAQBrGM4lDqdR mJk7HzEZ2h63rKBhBBmjz8adlvjzv00HHInAowuJi4d8xRqsZknyGq3qvuOfwzGa tmDcm2415wGELUSFGtWk3FK/iEaEjpRRtSkGk83b1C4uyi2X3P4GrPhOX98fzeTD UiLBxJxLqzwDc0kS93KRV9ZLkM3IUt7tct5mXSNnznfAcwXYBn4CRLF51vC5m110 WGDghtmaHAUSMNOJa8iqplXkFztvk9bJoHbtPs/O+oSPBjvTBeTXUTmt02nMieew XFWEYZ3K9zhF20bsburomlnGzTxxoHIOniXXQeu+LYAerYzxy1XBNotlrObH7Izj DNxO5CQ6oifm -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:52 2026 by rpki-client