This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/AeaM2xm7nb7M-kWi1MeK6nJ2Esc.roa File: AeaM2xm7nb7M-kWi1MeK6nJ2Esc.roa (raw, json) Hash identifier: W3lr2rS1RVTUqcHqPE1AsG2t395rfWUnGztv53BJGsY= Subject key identifier: 01:E6:8C:DB:19:BB:9D:BE:CC:FA:45:A2:D4:C7:8A:EA:72:76:12:C7 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 019AF00D764DF045D8FB4A374F85B55E371A Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/AeaM2xm7nb7M-kWi1MeK6nJ2Esc.roa Signing time: Fri 05 Dec 2025 19:46:45 +0000 ROA not before: Fri 05 Dec 2025 19:46:45 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48715 IP address blocks: 78.110.120.0/22 maxlen: 24 80.71.149.0/24 maxlen: 24 88.135.36.0/22 maxlen: 22 88.135.36.0/24 maxlen: 24 88.135.37.0/24 maxlen: 24 88.135.38.0/24 maxlen: 24 88.135.39.0/24 maxlen: 24 91.236.168.0/23 maxlen: 23 91.236.168.0/24 maxlen: 24 91.236.169.0/24 maxlen: 24 91.247.171.0/24 maxlen: 24 130.193.77.0/24 maxlen: 24 152.89.44.0/22 maxlen: 22 152.89.44.0/24 maxlen: 24 152.89.45.0/24 maxlen: 24 152.89.46.0/24 maxlen: 24 152.89.47.0/24 maxlen: 24 185.18.212.0/22 maxlen: 22 185.18.212.0/24 maxlen: 24 185.18.213.0/24 maxlen: 24 185.18.214.0/24 maxlen: 24 185.18.215.0/24 maxlen: 24 185.36.228.0/24 maxlen: 24 185.51.200.0/22 maxlen: 22 185.51.200.0/24 maxlen: 24 185.51.201.0/24 maxlen: 24 185.51.202.0/24 maxlen: 24 185.51.203.0/24 maxlen: 24 185.58.240.0/22 maxlen: 24 185.112.149.0/24 maxlen: 24 185.112.150.0/23 maxlen: 23 185.112.150.0/24 maxlen: 24 185.112.151.0/24 maxlen: 24 185.121.130.0/23 maxlen: 23 185.121.130.0/24 maxlen: 24 185.121.131.0/24 maxlen: 24 185.128.136.0/22 maxlen: 24 185.128.136.0/24 maxlen: 24 185.128.137.0/24 maxlen: 24 185.128.138.0/24 maxlen: 24 185.128.139.0/24 maxlen: 24 185.141.104.0/22 maxlen: 22 185.141.104.0/24 maxlen: 24 185.141.105.0/24 maxlen: 24 185.141.106.0/24 maxlen: 24 185.141.107.0/24 maxlen: 24 185.141.132.0/22 maxlen: 22 185.141.132.0/24 maxlen: 24 185.141.133.0/24 maxlen: 24 185.141.134.0/24 maxlen: 24 185.141.135.0/24 maxlen: 24 185.170.8.0/24 maxlen: 24 185.173.129.0/24 maxlen: 24 185.173.130.0/24 maxlen: 24 185.206.231.0/24 maxlen: 24 185.213.195.0/24 maxlen: 24 185.234.14.0/24 maxlen: 24 185.235.245.0/24 maxlen: 24 185.252.200.0/24 maxlen: 24 188.209.152.0/23 maxlen: 23 188.209.152.0/24 maxlen: 24 188.209.153.0/24 maxlen: 24 195.110.38.0/23 maxlen: 23 195.211.44.0/22 maxlen: 22 195.211.44.0/24 maxlen: 24 195.211.45.0/24 maxlen: 24 195.211.46.0/24 maxlen: 24 195.211.47.0/24 maxlen: 24 213.109.199.0/24 maxlen: 24 2a0a:5e80::/29 maxlen: 29 2a0a:5e80::/48 maxlen: 48 2a0a:5e80::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:0d:76:4d:f0:45:d8:fb:4a:37:4f:85:b5:5e:37:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Dec 5 19:46:45 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=01e68cdb19bb9dbeccfa45a2d4c78aea727612c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b0:90:42:91:72:ba:ad:5b:ea:71:90:43:35: fa:14:e7:0b:22:e1:73:0e:91:9c:54:a2:35:bb:ac: 1e:83:20:3b:63:b9:9e:d7:f3:67:13:b7:ee:19:0f: 4c:08:5b:da:3f:42:41:f4:86:e4:0e:5c:71:7c:a9: 65:c9:77:d0:4c:51:6e:c7:9f:12:d8:a9:4f:8c:74: 04:1f:8b:3b:4b:68:81:24:a2:b8:64:8f:c4:c0:97: 96:be:95:05:51:27:74:81:bf:76:a4:0a:97:cc:e9: 68:93:be:01:7b:0e:12:19:27:78:dd:cc:38:4e:06: e9:1e:dc:98:17:df:31:30:eb:86:61:e3:f8:79:cd: 5e:fd:3e:35:c8:2c:da:af:bf:e2:b0:52:67:e9:5a: bb:4d:14:98:26:57:e5:bc:a4:37:98:cf:f8:a2:58: 04:95:de:08:dc:f5:24:c0:d3:3c:2d:1d:d2:82:d2: c8:bd:39:cd:7c:5c:96:c2:a9:75:52:94:d6:84:e9: 5e:23:bb:75:3c:a0:21:11:8f:65:a9:56:cf:f4:40: 5b:78:8c:8a:e2:ce:53:94:7f:d5:3c:b8:37:e5:92: 27:e5:0d:88:3a:78:17:81:14:94:14:54:fb:0b:cc: 7f:4b:de:42:73:21:d8:66:b3:38:94:4d:e6:09:17: b5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E6:8C:DB:19:BB:9D:BE:CC:FA:45:A2:D4:C7:8A:EA:72:76:12:C7 X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/AeaM2xm7nb7M-kWi1MeK6nJ2Esc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.110.120.0/22 80.71.149.0/24 88.135.36.0/22 91.236.168.0/23 91.247.171.0/24 130.193.77.0/24 152.89.44.0/22 185.18.212.0/22 185.36.228.0/24 185.51.200.0/22 185.58.240.0/22 185.112.149.0-185.112.151.255 185.121.130.0/23 185.128.136.0/22 185.141.104.0/22 185.141.132.0/22 185.170.8.0/24 185.173.129.0-185.173.130.255 185.206.231.0/24 185.213.195.0/24 185.234.14.0/24 185.235.245.0/24 185.252.200.0/24 188.209.152.0/23 195.110.38.0/23 195.211.44.0/22 213.109.199.0/24 IPv6: 2a0a:5e80::/29 Signature Algorithm: sha256WithRSAEncryption a3:c8:dc:e1:8b:47:b5:ec:ae:c2:19:7f:a8:6d:c2:e1:0a:1d: 2f:70:9b:c4:cc:22:06:fe:23:1f:a4:17:3b:14:54:a8:ae:43: 13:a1:53:fb:78:89:d8:a6:0f:c1:f7:3e:39:98:e4:3e:62:99: e9:d2:5c:a1:c7:ee:6c:bc:da:f3:53:ff:de:25:78:a6:4a:14: 3a:e5:72:5d:0e:d0:ec:b0:fd:41:98:2f:cd:32:c0:de:8e:68: e5:47:73:ed:f6:13:d6:e8:cd:cf:7e:79:6e:7f:b9:99:79:7d: 84:f0:4b:6e:20:63:21:1a:18:3d:3a:bd:c8:9e:fa:df:66:22: eb:3d:40:fe:32:4d:fd:9c:29:71:29:c5:72:2c:fd:4c:04:8d: 1a:02:34:dc:bf:a0:e8:5d:2b:79:c5:51:f3:96:36:95:1e:4e: f2:8c:8c:c8:91:67:b0:1c:82:7e:93:33:bd:8d:a7:b6:6d:1a: 9f:b6:f3:36:f8:c7:82:a0:3c:23:61:67:7a:0a:27:26:33:94: 8d:ee:b8:c9:58:2c:77:0d:a8:86:48:01:39:cf:21:01:50:93: 63:27:23:d2:0c:77:e5:9c:07:44:15:75:eb:90:1f:20:9c:ef: f8:d5:79:5d:63:2e:e4:a4:96:fa:15:ba:98:48:a5:ca:de:72: 7c:f4:53:b6 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZrwDXZN8EXY+0o3T4W1XjcaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjUxMjA1MTk0NjQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWU2OGNkYjE5YmI5ZGJlY2NmYTQ1YTJkNGM3OGFlYTcyNzYxMmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrCQQpFyuq1b6nGQQzX6FOcLIuFz DpGcVKI1u6wegyA7Y7me1/NnE7fuGQ9MCFvaP0JB9IbkDlxxfKllyXfQTFFux58S 2KlPjHQEH4s7S2iBJKK4ZI/EwJeWvpUFUSd0gb92pAqXzOlok74Bew4SGSd43cw4 TgbpHtyYF98xMOuGYeP4ec1e/T41yCzar7/isFJn6Vq7TRSYJlflvKQ3mM/4olgE ld4I3PUkwNM8LR3SgtLIvTnNfFyWwql1UpTWhOleI7t1PKAhEY9lqVbP9EBbeIyK 4s5TlH/VPLg35ZIn5Q2IOngXgRSUFFT7C8x/S95CcyHYZrM4lE3mCRe1qwIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFAHmjNsZu52+zPpFotTHiupydhLHMB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvQWVhTTJ4bTduYjdNLWtXaTFNZUs2bkoyRXNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHeBggrBgEFBQcBBwEB/wSBzjCByzCBuQQCAAEwgbIDBAJO bngDBABQR5UDBAJYhyQDBAFb7KgDBABb96sDBACCwU0DBAKYWSwDBAK5EtQDBAC5 JOQDBAK5M8gDBAK5OvAwDAMEALlwlQMEA7lwkAMEAbl5ggMEArmAiAMEArmNaAME ArmNhAMEALmqCDAMAwQAua2BAwQAua2CAwQAuc7nAwQAudXDAwQAueoOAwQAuev1 AwQAufzIAwQBvNGYAwQBw24mAwQCw9MsAwQA1W3HMA0EAgACMAcDBQMqCl6AMA0G CSqGSIb3DQEBCwUAA4IBAQCjyNzhi0e17K7CGX+obcLhCh0vcJvEzCIG/iMfpBc7 FFSorkMToVP7eInYpg/B9z45mOQ+Ypnp0lyhx+5svNrzU//eJXimShQ65XJdDtDs sP1BmC/NMsDejmjlR3Pt9hPW6M3Pfnluf7mZeX2E8EtuIGMhGhg9Or3InvrfZiLr PUD+Mk39nClxKcVyLP1MBI0aAjTcv6DoXSt5xVHzljaVHk7yjIzIkWewHIJ+kzO9 jae2bRqftvM2+MeCoDwjYWd6CicmM5SN7rjJWCx3DaiGSAE5zyEBUJNjJyPSDHfl nAdEFXXrkB8gnO/41XldYy7kpJb6FbqYSKXK3nJ89FO2 -----END CERTIFICATE-----Generated at Sat Dec 6 22:31:07 2025 by rpki-client