This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/AEeJSgd9hlyALjAT7VdLfYljHH0.roa File: AEeJSgd9hlyALjAT7VdLfYljHH0.roa (raw, json) Hash identifier: PVd1F1UpbhwqFuweUPL7b6S5ZtMmpxp8M2iQx5zIyAE= Subject key identifier: 00:47:89:4A:07:7D:86:5C:80:2E:30:13:ED:57:4B:7D:89:63:1C:7D Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA776D99665503E65610943F48B1F48 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/AEeJSgd9hlyALjAT7VdLfYljHH0.roa Signing time: Fri 02 Jan 2026 12:21:02 +0000 ROA not before: Fri 02 Jan 2026 12:21:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42610 IP address blocks: 5.228.0.0/16 maxlen: 16 5.228.80.0/23 maxlen: 23 5.228.82.0/23 maxlen: 23 5.228.112.0/23 maxlen: 23 5.228.114.0/23 maxlen: 23 5.228.116.0/23 maxlen: 23 5.228.118.0/23 maxlen: 23 37.110.0.0/17 maxlen: 17 37.110.128.0/19 maxlen: 19 37.204.0.0/16 maxlen: 16 46.242.0.0/17 maxlen: 17 46.242.8.0/22 maxlen: 22 46.242.12.0/22 maxlen: 22 77.37.128.0/17 maxlen: 17 83.166.227.0/24 maxlen: 24 84.253.64.0/18 maxlen: 18 85.30.192.0/18 maxlen: 18 85.172.171.0/24 maxlen: 24 90.154.64.0/18 maxlen: 18 90.154.70.0/23 maxlen: 23 90.154.72.0/23 maxlen: 23 90.156.172.0/22 maxlen: 22 95.84.128.0/18 maxlen: 18 95.84.192.0/18 maxlen: 18 109.173.0.0/17 maxlen: 17 178.140.0.0/16 maxlen: 16 185.19.20.0/22 maxlen: 22 188.32.0.0/16 maxlen: 16 188.255.0.0/17 maxlen: 17 217.12.41.0/24 maxlen: 24 2a02:2168::/29 maxlen: 29 2a02:2168::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:76:d9:96:65:50:3e:65:61:09:43:f4:8b:1f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0047894a077d865c802e3013ed574b7d89631c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:36:fb:99:59:e5:a1:15:09:0a:13:8d:68:49: 96:5a:a5:eb:da:5d:e8:f3:26:72:f5:6f:9f:f8:01: e2:d2:34:93:5e:72:18:c0:b9:e1:41:e2:08:c0:22: 30:b3:86:8a:61:c8:9c:fc:c3:99:c2:e6:ad:49:6b: bd:1a:7b:82:bc:c3:5d:aa:94:72:ac:6d:37:be:d4: e4:3b:78:c2:7c:6a:5c:40:7f:b0:bd:2a:3c:26:c9: bb:dc:bc:d1:4c:70:fc:fe:4d:1a:cb:3a:a7:5b:7f: cc:61:b1:4f:5b:5d:a0:80:7f:7a:9f:6a:65:f9:8c: 7f:ec:24:99:de:ad:e2:67:4d:70:1e:68:fc:a2:ef: 84:b9:06:94:a0:f8:03:11:62:45:b9:ac:bf:8b:6c: 67:d7:0a:f0:2a:2c:78:67:51:fc:d6:82:70:16:52: 5b:69:f7:de:9f:ae:5b:8b:28:77:19:a7:b5:03:8d: 01:92:cb:4a:50:10:d1:c1:9b:95:57:20:41:7d:19: 7d:02:43:a5:ff:16:e6:9f:d6:2b:af:05:5c:4b:f7: 43:c4:bc:95:85:37:18:47:09:83:e5:b8:6b:0e:b2: 19:d6:c6:97:8c:5a:b5:d4:dc:53:68:06:58:d5:4f: 5d:a4:0d:2a:88:f3:fd:d1:6e:63:36:2c:bd:1c:70: ab:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:47:89:4A:07:7D:86:5C:80:2E:30:13:ED:57:4B:7D:89:63:1C:7D X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/AEeJSgd9hlyALjAT7VdLfYljHH0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.228.0.0/16 37.110.0.0-37.110.159.255 37.204.0.0/16 46.242.0.0/17 77.37.128.0/17 83.166.227.0/24 84.253.64.0/18 85.30.192.0/18 85.172.171.0/24 90.154.64.0/18 90.156.172.0/22 95.84.128.0/17 109.173.0.0/17 178.140.0.0/16 185.19.20.0/22 188.32.0.0/16 188.255.0.0/17 217.12.41.0/24 IPv6: 2a02:2168::/29 Signature Algorithm: sha256WithRSAEncryption 7d:84:57:89:7d:3e:30:67:f6:03:07:19:e3:b6:22:ce:ce:f7: 46:ea:c2:5e:26:08:0c:84:0f:9a:1e:59:89:a3:25:16:7c:52: 60:bb:ec:05:e8:97:51:f4:35:2d:38:15:4c:49:9e:7a:c9:f5: 87:69:27:69:41:9c:b4:12:1b:09:d9:84:7d:75:3a:15:a7:53: 37:3f:29:ac:9d:eb:3c:16:45:69:97:ff:be:ec:05:53:11:df: a7:05:3e:77:2e:35:b0:5c:fe:03:fa:24:00:b1:00:33:ce:1b: 07:de:e8:13:ee:10:e2:f5:22:37:ec:18:4e:ee:7c:6b:38:1b: be:26:cf:1d:13:73:be:c9:7b:cb:5f:72:ce:10:37:e9:f4:f2: 6e:f7:2d:ff:dc:50:51:f4:ff:40:18:14:c6:9d:76:ec:16:2a: 8d:f7:6e:12:b4:ce:c1:a9:dd:c5:db:77:68:cf:fc:96:3e:cc: 1f:e7:5f:ba:a6:26:18:83:37:27:31:a2:fc:af:10:29:77:74: 7a:52:05:92:1b:c7:ee:a2:1d:2f:78:f4:8b:f7:b9:24:1b:21: 98:b9:a3:35:3e:50:77:16:1f:4a:5c:37:db:34:92:93:bc:ef: ed:08:c6:cc:e8:e7:e2:b5:6d:c0:dd:7b:d6:96:7e:cb:fa:d6: 61:63:04:75 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+p3bZlmVQPmVhCUP0ix9IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDQ3ODk0YTA3N2Q4NjVjODAyZTMwMTNlZDU3NGI3ZDg5NjMxYzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzb7mVnloRUJChONaEmWWqXr2l3o 8yZy9W+f+AHi0jSTXnIYwLnhQeIIwCIws4aKYcic/MOZwuatSWu9GnuCvMNdqpRy rG03vtTkO3jCfGpcQH+wvSo8Jsm73LzRTHD8/k0ayzqnW3/MYbFPW12ggH96n2pl +Yx/7CSZ3q3iZ01wHmj8ou+EuQaUoPgDEWJFuay/i2xn1wrwKix4Z1H81oJwFlJb affen65biyh3Gae1A40BkstKUBDRwZuVVyBBfRl9AkOl/xbmn9YrrwVcS/dDxLyV hTcYRwmD5bhrDrIZ1saXjFq11NxTaAZY1U9dpA0qiPP90W5jNiy9HHCr1wIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFABHiUoHfYZcgC4wE+1XS32JYxx9MB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvQUVlSlNnZDlobHlBTGpBVDdWZExmWWxqSEgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGZBggrBgEFBQcBBwEB/wSBiTCBhjB1BAIAATBvAwMABeQw CwMDASVuAwQFJW6AAwMAJcwDBAcu8gADBAdNJYADBABTpuMDBAZU/UADBAZVHsAD BABVrKsDBAZamkADBAJanKwDBAdfVIADBAdtrQADAwCyjAMEArkTFAMDALwgAwQH vP8AAwQA2QwpMA0EAgACMAcDBQMqAiFoMA0GCSqGSIb3DQEBCwUAA4IBAQB9hFeJ fT4wZ/YDBxnjtiLOzvdG6sJeJggMhA+aHlmJoyUWfFJgu+wF6JdR9DUtOBVMSZ56 yfWHaSdpQZy0EhsJ2YR9dToVp1M3Pymsnes8FkVpl/++7AVTEd+nBT53LjWwXP4D +iQAsQAzzhsH3ugT7hDi9SI37BhO7nxrOBu+Js8dE3O+yXvLX3LOEDfp9PJu9y3/ 3FBR9P9AGBTGnXbsFiqN924StM7Bqd3F23doz/yWPswf51+6piYYgzcnMaL8rxAp d3R6UgWSG8fuoh0vePSL97kkGyGYuaM1PlB3Fh9KXDfbNJKTvO/tCMbM6OfitW3A 3XvWln7L+tZhYwR1 -----END CERTIFICATE-----Generated at Mon Jan 26 01:40:07 2026 by rpki-client