This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AAEnB9UBRbuYj85LXzLvKKyM3oA.roa File: AAEnB9UBRbuYj85LXzLvKKyM3oA.roa (raw, json) Hash identifier: bbOSFD9Qg60+7YhzBebX3cf/9WbD+QmCbCk6GYc+eS4= Subject key identifier: 00:01:27:07:D5:01:45:BB:98:8F:CE:4B:5F:32:EF:28:AC:8C:DE:80 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019AB5041D90BAAF5A566A90B9950D3D0ADE Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AAEnB9UBRbuYj85LXzLvKKyM3oA.roa Signing time: Mon 24 Nov 2025 08:38:57 +0000 ROA not before: Mon 24 Nov 2025 08:38:57 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 30058 IP address blocks: 2.56.101.0/24 maxlen: 24 45.85.160.0/24 maxlen: 24 45.86.12.0/24 maxlen: 24 93.190.245.0/24 maxlen: 24 103.114.42.0/24 maxlen: 24 185.242.244.0/24 maxlen: 24 193.23.253.0/24 maxlen: 24 193.27.10.0/24 maxlen: 24 194.33.29.0/24 maxlen: 24 194.62.31.0/24 maxlen: 24 213.139.217.0/24 maxlen: 24 213.139.218.0/24 maxlen: 24 2a0a:2d06:104::/48 maxlen: 48 2a10:7500::/29 maxlen: 29 2a11:efc0::/29 maxlen: 29 2a12:ef00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:04:1d:90:ba:af:5a:56:6a:90:b9:95:0d:3d:0a:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Nov 24 08:38:57 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=00012707d50145bb988fce4b5f32ef28ac8cde80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:23:7b:ce:51:dc:4f:a2:e9:cd:b4:06:86:c1: 11:07:96:a4:04:e9:30:5a:2b:7f:8b:a4:40:3c:1a: 53:d2:48:65:be:81:4b:9c:fd:36:67:21:c9:bf:bd: a0:cf:2f:04:d1:50:53:d9:40:65:6e:3b:ba:4f:45: a3:1f:d5:21:26:ec:f7:ec:6a:3a:2e:06:a0:10:bb: c7:43:97:ce:16:fd:d9:ad:fa:29:fb:a6:a6:5c:73: 39:16:f2:ca:0b:c6:83:c3:dd:0e:2c:b2:3e:df:5c: 5a:f9:59:a1:f5:f2:da:23:34:45:98:0b:c2:3f:35: 82:84:a2:ca:60:31:58:21:6d:f9:1c:1d:fd:60:e9: b3:48:34:da:43:44:d6:6f:f0:a6:6e:ad:74:e9:d6: ff:8f:67:fc:35:34:bd:40:50:91:48:6c:53:ad:2f: 63:0b:10:fe:2c:18:30:b2:43:e9:f1:54:3e:67:c9: 0b:57:b1:18:12:e8:8b:73:2d:cb:49:c2:a2:e1:81: 7e:a8:22:f1:53:e4:74:a1:b7:8a:fe:b5:36:2a:df: d2:b6:9e:2d:3f:d3:03:0a:a6:4f:88:49:a4:4d:79: 59:fa:90:1f:0f:e0:8c:2a:19:6d:0e:eb:47:9e:d4: 3b:6a:f7:4b:11:31:99:7a:60:bd:81:ed:8d:7c:58: 23:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:01:27:07:D5:01:45:BB:98:8F:CE:4B:5F:32:EF:28:AC:8C:DE:80 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AAEnB9UBRbuYj85LXzLvKKyM3oA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.101.0/24 45.85.160.0/24 45.86.12.0/24 93.190.245.0/24 103.114.42.0/24 185.242.244.0/24 193.23.253.0/24 193.27.10.0/24 194.33.29.0/24 194.62.31.0/24 213.139.217.0-213.139.218.255 IPv6: 2a0a:2d06:104::/48 2a10:7500::/29 2a11:efc0::/29 2a12:ef00::/29 Signature Algorithm: sha256WithRSAEncryption cf:72:ce:1d:40:6f:fa:cf:15:31:b1:95:ad:50:79:fe:bb:cc: ae:57:03:76:ea:db:f6:85:69:c3:0a:3c:0f:8b:cb:8a:1a:eb: 6e:cc:3e:65:41:f4:6f:cc:e9:33:4e:23:93:f5:fb:8c:17:e9: a7:80:14:a7:1b:36:72:d5:e2:ad:1c:d1:73:d2:57:ee:d1:d8: ec:1e:51:b7:12:7e:e5:87:7e:03:8f:b6:50:d1:f6:41:ae:5b: 9c:a4:28:1b:bc:47:84:ed:06:9b:60:0d:5a:14:fe:58:36:03: 6e:59:c7:97:93:ca:b2:b7:16:a9:fc:22:1d:d2:43:4b:d4:de: 4e:8b:bb:c9:54:06:a3:9c:64:66:7d:ce:e9:ce:c5:88:af:e6: 0c:9c:01:30:b0:f7:e3:26:b7:4d:e0:c2:6d:f9:43:e6:8d:cd: 9c:f6:72:32:11:fb:dc:e6:b6:46:ce:84:83:41:ba:39:e2:10: c0:81:97:74:2a:b1:70:20:88:24:66:36:3e:85:2c:9a:06:65: 96:b2:fd:6e:16:6e:0a:0f:7c:a5:c7:c0:95:e8:87:bd:0e:82: 31:c4:4d:f4:78:67:9b:f7:e4:a7:19:67:75:13:8d:e7:3f:7c: 7a:f4:2a:f4:c8:69:59:5c:ed:ec:6e:a9:36:6a:a7:87:0d:eb: 5c:9f:e9:8a -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgISAZq1BB2Quq9aVmqQuZUNPQreMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMTI0MDgzODU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDAxMjcwN2Q1MDE0NWJiOTg4ZmNlNGI1ZjMyZWYyOGFjOGNkZTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCN7zlHcT6LpzbQGhsERB5akBOkw Wit/i6RAPBpT0khlvoFLnP02ZyHJv72gzy8E0VBT2UBlbju6T0WjH9UhJuz37Go6 LgagELvHQ5fOFv3Zrfop+6amXHM5FvLKC8aDw90OLLI+31xa+Vmh9fLaIzRFmAvC PzWChKLKYDFYIW35HB39YOmzSDTaQ0TWb/Cmbq106db/j2f8NTS9QFCRSGxTrS9j CxD+LBgwskPp8VQ+Z8kLV7EYEuiLcy3LScKi4YF+qCLxU+R0obeK/rU2Kt/Stp4t P9MDCqZPiEmkTXlZ+pAfD+CMKhltDutHntQ7avdLETGZemC9ge2NfFgjVQIDAQAB o4ICdDCCAnAwHQYDVR0OBBYEFAABJwfVAUW7mI/OS18y7yisjN6AMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvQUFFbkI5VUJSYnVZajg1TFh6THZLS3lNM29BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGJBggrBgEFBQcBBwEB/wR6MHgwUAQCAAEwSgMEAAI4ZQME AC1VoAMEAC1WDAMEAF2+9QMEAGdyKgMEALny9AMEAMEX/QMEAMEbCgMEAMIhHQME AMI+HzAMAwQA1YvZAwQA1YvaMCQEAgACMB4DBwAqCi0GAQQDBQMqEHUAAwUDKhHv wAMFAyoS7wAwDQYJKoZIhvcNAQELBQADggEBAM9yzh1Ab/rPFTGxla1Qef67zK5X A3bq2/aFacMKPA+Ly4oa627MPmVB9G/M6TNOI5P1+4wX6aeAFKcbNnLV4q0c0XPS V+7R2OweUbcSfuWHfgOPtlDR9kGuW5ykKBu8R4TtBptgDVoU/lg2A25Zx5eTyrK3 Fqn8Ih3SQ0vU3k6Lu8lUBqOcZGZ9zunOxYiv5gycATCw9+Mmt03gwm35Q+aNzZz2 cjIR+9zmtkbOhINBujniEMCBl3QqsXAgiCRmNj6FLJoGZZay/W4WbgoPfKXHwJXo h70OgjHETfR4Z5v35KcZZ3UTjec/fHr0KvTIaVlc7exuqTZqp4cN61yf6Yo= -----END CERTIFICATE-----Generated at Sat Dec 6 12:45:06 2025 by rpki-client