This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/aeINCm8UEmjt6W6_5LOCbiM43pQ.roa File: aeINCm8UEmjt6W6_5LOCbiM43pQ.roa (raw, json) Hash identifier: FiSOUOoA6+XFwnTZVcoBNqJEsC2qiF3Rs0rciACSzBE= Subject key identifier: 69:E2:0D:0A:6F:14:12:68:ED:E9:6E:BF:E4:B3:82:6E:23:38:DE:94 Certificate issuer: /CN=02930f8c688c04d17433a2b9c7249bc625bce316 Certificate serial: 019B7D5C7E7CA768B103E2146EBF6489184F Authority key identifier: 02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/aeINCm8UEmjt6W6_5LOCbiM43pQ.roa Signing time: Fri 02 Jan 2026 06:19:32 +0000 ROA not before: Fri 02 Jan 2026 06:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49800 IP address blocks: 5.63.160.0/21 maxlen: 21 5.63.160.0/24 maxlen: 24 31.47.192.0/21 maxlen: 21 37.186.64.0/18 maxlen: 18 46.19.96.0/21 maxlen: 21 62.89.0.0/19 maxlen: 19 78.109.64.0/20 maxlen: 20 93.185.32.0/20 maxlen: 20 130.193.120.0/21 maxlen: 21 185.8.0.0/22 maxlen: 22 185.8.2.0/24 maxlen: 24 195.250.64.0/19 maxlen: 19 2a02:2a50::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:7e:7c:a7:68:b1:03:e2:14:6e:bf:64:89:18:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02930f8c688c04d17433a2b9c7249bc625bce316 Validity Not Before: Jan 2 06:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69e20d0a6f141268ede96ebfe4b3826e2338de94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c5:0b:cb:f7:57:71:8b:25:8c:7d:70:49:32: 21:71:cc:71:df:41:4f:f5:ac:3d:3a:6a:11:28:6d: 88:07:8e:37:9b:9a:f3:6a:48:bf:21:a3:5a:97:9d: 97:6e:e7:70:d0:63:8c:ca:a9:ee:63:1b:79:33:3a: 48:37:bf:cc:96:fe:5c:37:ed:28:46:a7:07:19:24: 1b:d2:05:13:4a:ca:74:4d:ad:20:5c:aa:df:56:d3: 34:8c:15:bb:a3:03:88:09:0b:e7:02:90:d7:f2:66: 28:0f:71:97:9d:44:43:d8:5c:b7:6f:e2:e4:ce:8a: 96:8f:53:07:0d:00:87:dc:64:49:47:d7:89:0b:6c: 32:ee:03:44:3d:bb:7c:0c:e6:9e:b2:3a:57:34:ef: 2e:8e:c7:87:c0:93:64:54:89:77:d8:96:b6:03:49: bf:1a:3c:6b:4c:9d:ad:69:65:57:e6:c9:e9:20:19: 5d:36:2b:2c:e5:b7:93:9a:49:d0:de:df:9d:bf:50: dc:31:4d:ea:27:2a:57:a4:35:29:3b:08:8a:13:b4: e1:f7:65:e5:d3:cc:16:fd:93:3a:c1:c2:57:7c:77: 33:5b:2a:85:e9:79:aa:7f:58:f7:50:8e:6c:2d:3a: 16:0c:86:30:00:96:6f:c2:d7:f4:49:09:b9:8a:be: 18:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E2:0D:0A:6F:14:12:68:ED:E9:6E:BF:E4:B3:82:6E:23:38:DE:94 X509v3 Authority Key Identifier: keyid:02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/aeINCm8UEmjt6W6_5LOCbiM43pQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.63.160.0/21 31.47.192.0/21 37.186.64.0/18 46.19.96.0/21 62.89.0.0/19 78.109.64.0/20 93.185.32.0/20 130.193.120.0/21 185.8.0.0/22 195.250.64.0/19 IPv6: 2a02:2a50::/29 Signature Algorithm: sha256WithRSAEncryption 73:87:30:d3:45:8d:b5:0d:62:b9:ff:c7:2d:77:97:77:9f:85: 3d:30:01:92:02:bf:6a:96:6f:da:67:fc:c2:1f:c4:53:3c:19: 59:27:a8:87:93:1d:6c:1e:2a:8f:1e:4b:21:2e:8d:0e:1e:be: 39:c1:d3:f6:10:3a:9e:67:ba:9c:0d:49:bc:03:88:22:15:f7: 37:8d:34:aa:2c:a3:d7:97:6b:64:1b:74:ef:1d:44:e5:7c:9c: 13:a9:81:6b:5d:1f:2b:42:ff:60:1e:43:9a:57:10:fe:6c:98: 83:e0:aa:72:5d:da:66:3b:89:ab:1f:f6:53:96:41:5e:73:a5: 06:67:0e:54:45:02:d2:29:18:cc:67:d8:44:98:8c:a0:6c:28: ed:2c:0f:6f:51:ef:0d:43:ec:18:15:b6:35:55:63:61:8b:58: ff:c5:c2:5d:92:75:f2:e5:4f:b6:96:6f:04:8d:bf:35:19:4f: 52:a8:9c:08:29:70:81:7e:cf:b4:a9:f8:d0:c5:54:36:10:92: 77:0b:cd:a1:c9:ee:a8:d5:af:60:ee:90:ed:ad:f7:29:5b:3f: 06:76:04:94:27:ca:05:2a:2f:ce:a7:39:f5:2f:ee:0d:00:da: 3d:1d:16:43:ce:53:10:31:c1:7a:bf:c5:5e:c5:b0:1f:6b:ad: 1e:6f:bf:66 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZt9XH58p2ixA+IUbr9kiRhPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyOTMwZjhjNjg4YzA0ZDE3NDMzYTJiOWM3MjQ5YmM2MjVi Y2UzMTYwHhcNMjYwMTAyMDYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWUyMGQwYTZmMTQxMjY4ZWRlOTZlYmZlNGIzODI2ZTIzMzhkZTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMULy/dXcYsljH1wSTIhccxx30FP 9aw9OmoRKG2IB443m5rzaki/IaNal52Xbudw0GOMyqnuYxt5MzpIN7/Mlv5cN+0o RqcHGSQb0gUTSsp0Ta0gXKrfVtM0jBW7owOICQvnApDX8mYoD3GXnURD2Fy3b+Lk zoqWj1MHDQCH3GRJR9eJC2wy7gNEPbt8DOaesjpXNO8ujseHwJNkVIl32Ja2A0m/ GjxrTJ2taWVX5snpIBldNiss5beTmknQ3t+dv1DcMU3qJypXpDUpOwiKE7Th92Xl 08wW/ZM6wcJXfHczWyqF6Xmqf1j3UI5sLToWDIYwAJZvwtf0SQm5ir4YfQIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFGniDQpvFBJo7eluv+Szgm4jON6UMB8GA1UdIwQY MBaAFAKTD4xojATRdDOiucckm8YlvOMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXBNUGpHaU1CTkYwTTZLNXh5U2J4aVc4NHhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9iMjA2NGItYmUwOS00M2Q5LWIwODct YTRlOTkxYjBmMTQ0LzEvYWVJTkNtOFVFbWp0Nlc2XzVMT0NiaU00M3BRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9iMjA2NGItYmUwOS00M2Q5LWIwODctYTRlOTkxYjBmMTQ0 LzEvQXBNUGpHaU1CTkYwTTZLNXh5U2J4aVc4NHhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQDBT+gAwQD Hy/AAwQGJbpAAwQDLhNgAwQFPlkAAwQETm1AAwQEXbkgAwQDgsF4AwQCuQgAAwQF w/pAMA0EAgACMAcDBQMqAipQMA0GCSqGSIb3DQEBCwUAA4IBAQBzhzDTRY21DWK5 /8ctd5d3n4U9MAGSAr9qlm/aZ/zCH8RTPBlZJ6iHkx1sHiqPHkshLo0OHr45wdP2 EDqeZ7qcDUm8A4giFfc3jTSqLKPXl2tkG3TvHUTlfJwTqYFrXR8rQv9gHkOaVxD+ bJiD4KpyXdpmO4mrH/ZTlkFec6UGZw5URQLSKRjMZ9hEmIygbCjtLA9vUe8NQ+wY FbY1VWNhi1j/xcJdknXy5U+2lm8Ejb81GU9SqJwIKXCBfs+0qfjQxVQ2EJJ3C82h ye6o1a9g7pDtrfcpWz8GdgSUJ8oFKi/Opzn1L+4NANo9HRZDzlMQMcF6v8VexbAf a60eb79m -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:02 2026 by rpki-client