This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/AeWx0-fl3_TvDxLG7i61x4Cu7cI.roa File: AeWx0-fl3_TvDxLG7i61x4Cu7cI.roa (raw, json) Hash identifier: MKkScRWC1oRd8kAjKYwh38bSe/XT+iXgkda09WhWgiw= Subject key identifier: 01:E5:B1:D3:E7:E5:DF:F4:EF:0F:12:C6:EE:2E:B5:C7:80:AE:ED:C2 Certificate issuer: /CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0 Certificate serial: 019B7E38E0D73A1B5DB7F55A10F9EED2CAF4 Authority key identifier: 79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/AeWx0-fl3_TvDxLG7i61x4Cu7cI.roa Signing time: Fri 02 Jan 2026 10:20:15 +0000 ROA not before: Fri 02 Jan 2026 10:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209346 IP address blocks: 185.157.0.0/22 maxlen: 24 2a0b:2ec0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e0:d7:3a:1b:5d:b7:f5:5a:10:f9:ee:d2:ca:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0 Validity Not Before: Jan 2 10:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01e5b1d3e7e5dff4ef0f12c6ee2eb5c780aeedc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:62:41:ed:f5:d4:3c:26:43:34:b9:f7:2f:dd: 42:2d:ad:25:65:fd:e1:34:16:3d:2f:ac:88:83:71: b8:bf:b8:06:ae:03:8a:0f:75:67:be:4a:7c:bf:f2: 15:93:3f:60:0b:20:26:c1:9e:53:21:ae:c2:36:ca: ef:76:22:e4:e2:35:b0:c5:49:6a:ac:35:51:30:41: f3:6a:cc:40:5f:68:58:03:48:ed:5c:fe:a6:a2:f5: 11:14:8a:90:63:d5:28:09:72:f9:38:da:d9:6e:80: 44:50:34:a2:6d:ac:e9:5d:f4:3c:27:11:27:62:3a: 35:ae:b2:82:5a:2d:56:9e:bd:44:be:f3:2a:6b:21: b4:fa:02:e2:20:9b:19:74:48:ba:79:da:a7:26:56: 10:54:b9:2c:c4:45:cd:9e:4e:3e:20:eb:08:d3:86: dc:28:f7:13:b3:8b:2c:9e:97:8a:99:db:ea:52:74: 88:d1:ae:69:0d:31:b7:f1:58:d7:d0:76:57:16:5d: 67:64:f8:b7:32:c0:bb:38:15:de:07:5a:e8:06:09: 06:a9:46:0f:d3:20:2b:4f:f6:83:cc:4f:28:6c:2a: a6:94:29:70:43:71:fd:fc:57:a0:0c:e6:65:98:81: 4a:5a:5d:b7:76:71:48:db:a9:cc:50:6a:aa:17:f6: 42:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E5:B1:D3:E7:E5:DF:F4:EF:0F:12:C6:EE:2E:B5:C7:80:AE:ED:C2 X509v3 Authority Key Identifier: keyid:79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/AeWx0-fl3_TvDxLG7i61x4Cu7cI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.157.0.0/22 IPv6: 2a0b:2ec0::/29 Signature Algorithm: sha256WithRSAEncryption 20:d0:33:d3:88:e5:c3:b9:15:e4:95:97:c1:56:9c:4c:de:b7: a2:40:1e:0b:28:09:a0:dc:a6:fc:b2:3e:36:8c:02:a1:a7:a5: 91:26:a9:7f:55:8a:77:1d:46:1b:d9:3c:61:e4:1c:bc:9b:a3: bb:65:eb:8d:86:06:fb:f4:fe:88:5b:a4:96:6f:a2:80:ca:a5: cc:68:6d:ee:6b:96:a0:e3:45:61:a1:9e:e2:5b:7e:77:25:db: 30:d2:6b:f8:5f:33:94:16:72:77:a5:a0:1e:34:f2:7f:12:93: cd:9e:0f:02:08:a4:99:5f:5e:29:b9:66:3c:c1:ba:1f:1a:90: 71:8f:a6:ac:d3:5d:4c:17:e1:90:ef:4d:b4:73:ad:68:12:bb: f0:2b:c8:87:a7:42:2b:e2:ec:07:a1:6f:18:01:82:14:f8:f1: 4d:05:cd:0f:9d:54:b4:83:94:6d:2a:3d:d7:24:e3:c8:31:f8: e0:bf:cf:3e:2a:3f:e9:f7:29:8d:ca:e9:47:21:48:20:43:c6: bb:35:b4:4d:a1:64:b5:28:be:18:75:20:c8:21:f7:db:61:ee: ff:58:eb:4b:6a:9c:ea:e4:08:d4:cf:a5:62:ef:33:23:04:7d: e2:bc:10:3f:fb:af:f5:62:bc:e3:d9:8c:e3:46:fc:2e:d9:02: 97:a2:6c:16 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OODXOhtdt/VaEPnu0sr0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YmI3NzQ5YWJkZTZmNWRhNGViMWM2ZWQxYzU3NjgxNjE3 ODQ2YjAwHhcNMjYwMTAyMTAyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWU1YjFkM2U3ZTVkZmY0ZWYwZjEyYzZlZTJlYjVjNzgwYWVlZGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGJB7fXUPCZDNLn3L91CLa0lZf3h NBY9L6yIg3G4v7gGrgOKD3Vnvkp8v/IVkz9gCyAmwZ5TIa7CNsrvdiLk4jWwxUlq rDVRMEHzasxAX2hYA0jtXP6movURFIqQY9UoCXL5ONrZboBEUDSibazpXfQ8JxEn Yjo1rrKCWi1Wnr1EvvMqayG0+gLiIJsZdEi6edqnJlYQVLksxEXNnk4+IOsI04bc KPcTs4ssnpeKmdvqUnSI0a5pDTG38VjX0HZXFl1nZPi3MsC7OBXeB1roBgkGqUYP 0yArT/aDzE8obCqmlClwQ3H9/FegDOZlmIFKWl23dnFI26nMUGqqF/ZC2QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAHlsdPn5d/07w8Sxu4utceAru3CMB8GA1UdIwQY MBaAFHm7d0mr3m9dpOscbtHFdoFheEawMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWJ0M1NhdmViMTJrNnh4dTBjVjJnV0Y0UnJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yNWI3YjgtYzMwMi00ZGRhLTg5OGEt NDgyNWUxOGQ3MzAxLzEvQWVXeDAtZmwzX1R2RHhMRzdpNjF4NEN1N2NJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yNWI3YjgtYzMwMi00ZGRhLTg5OGEtNDgyNWUxOGQ3MzAx LzEvZWJ0M1NhdmViMTJrNnh4dTBjVjJnV0Y0UnJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZ0AMA0E AgACMAcDBQMqCy7AMA0GCSqGSIb3DQEBCwUAA4IBAQAg0DPTiOXDuRXklZfBVpxM 3reiQB4LKAmg3Kb8sj42jAKhp6WRJql/VYp3HUYb2Txh5By8m6O7ZeuNhgb79P6I W6SWb6KAyqXMaG3ua5ag40VhoZ7iW353Jdsw0mv4XzOUFnJ3paAeNPJ/EpPNng8C CKSZX14puWY8wbofGpBxj6as011MF+GQ7020c61oErvwK8iHp0Ir4uwHoW8YAYIU +PFNBc0PnVS0g5RtKj3XJOPIMfjgv88+Kj/p9ymNyulHIUggQ8a7NbRNoWS1KL4Y dSDIIffbYe7/WOtLapzq5AjUz6Vi7zMjBH3ivBA/+6/1Yrzj2YzjRvwu2QKXomwW -----END CERTIFICATE-----Generated at Mon Jan 26 07:08:27 2026 by rpki-client