This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/aEi34f_6t9l4iaqclME3TbdcONI.roa File: aEi34f_6t9l4iaqclME3TbdcONI.roa (raw, json) Hash identifier: 6lr3JCFVymXlYUNs8hePhThGsbDq6rJYIuYHzugE+PU= Subject key identifier: 68:48:B7:E1:FF:FA:B7:D9:78:89:AA:9C:94:C1:37:4D:B7:5C:38:D2 Certificate issuer: /CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675 Certificate serial: 019AB2B8A006A6C1AB1D975AE80136729D70 Authority key identifier: 52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/aEi34f_6t9l4iaqclME3TbdcONI.roa Signing time: Sun 23 Nov 2025 21:57:15 +0000 ROA not before: Sun 23 Nov 2025 21:57:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57954 IP address blocks: 192.162.19.0/24 maxlen: 24 193.105.210.0/24 maxlen: 24 194.1.159.0/24 maxlen: 24 2001:678:41c::/48 maxlen: 48 2001:67c:13a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b2:b8:a0:06:a6:c1:ab:1d:97:5a:e8:01:36:72:9d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675 Validity Not Before: Nov 23 21:57:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6848b7e1fffab7d97889aa9c94c1374db75c38d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9f:f1:75:0b:ac:92:3f:f7:07:f5:78:b3:9d: bc:6b:54:91:2c:b0:cb:c8:df:c1:25:75:f1:c7:0e: 98:07:ff:f0:36:84:83:0c:f1:44:e4:f3:e9:3e:d5: 9f:c1:d7:7b:8f:6a:f6:e7:98:89:35:76:4d:f0:33: 04:8d:da:1e:98:e3:49:08:2b:55:5c:70:aa:40:e3: f7:93:af:10:d3:a9:2a:54:44:be:63:0f:4b:ee:4e: a6:bd:b9:22:25:38:94:bf:15:bd:ac:21:a0:06:aa: 43:37:b3:b0:c2:47:34:39:5d:69:a3:a3:71:94:64: 2a:a1:9a:8d:9e:aa:9a:d5:08:96:a2:7e:78:94:6d: 4b:e6:6a:28:7b:30:38:6f:0e:3a:4f:00:51:45:7b: 56:08:ef:f4:5f:6c:55:56:ea:a4:02:7b:e0:71:49: e4:e9:50:64:cd:31:02:fd:3d:d8:8c:0a:22:76:44: 7d:e2:56:62:33:44:f0:de:6d:59:f0:ed:d4:6d:06: ad:45:45:18:de:69:f5:71:9a:fa:30:98:cd:88:d0: 9e:d3:ea:dd:7a:85:c2:83:b7:e3:df:95:ea:e5:49: 0a:d3:3c:7c:1c:8a:ef:48:bc:a0:23:ae:45:9f:1f: ac:84:f9:dc:df:f4:95:e9:85:9f:c7:b6:16:93:e0: 82:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:48:B7:E1:FF:FA:B7:D9:78:89:AA:9C:94:C1:37:4D:B7:5C:38:D2 X509v3 Authority Key Identifier: keyid:52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/aEi34f_6t9l4iaqclME3TbdcONI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.162.19.0/24 193.105.210.0/24 194.1.159.0/24 IPv6: 2001:678:41c::/48 2001:67c:13a0::/48 Signature Algorithm: sha256WithRSAEncryption 78:38:37:30:20:91:c8:38:5d:47:64:fd:c7:fe:74:22:df:43: 7b:4f:e6:7f:57:29:ac:61:b8:63:d7:00:bc:e4:4d:f5:f7:30: f3:f1:37:cf:55:57:71:d7:4d:9a:46:e4:3a:ad:a9:cc:b2:70: 1c:cd:0b:01:c5:dc:99:a5:fa:31:88:bb:cd:1a:c4:78:74:4a: ea:e2:cc:0c:73:68:ef:a6:e1:27:06:76:53:05:06:00:b7:48: 37:36:80:a9:04:47:e3:26:6d:2d:79:f9:1b:75:e3:1a:a7:67: 20:0a:22:86:fc:f8:58:d0:21:60:f6:ca:93:db:78:b5:6e:8f: e3:d9:8e:d9:26:9e:32:d2:e2:98:21:35:16:a6:29:18:a6:1b: 03:49:b9:b9:55:15:a2:1b:37:dd:f3:50:a1:52:7b:20:ee:1f: ee:93:50:12:a9:6e:2b:7a:29:ad:6f:31:d9:0d:c3:6c:02:ce: 70:30:95:a6:9e:4c:2a:7d:f9:41:3d:e9:6b:b0:73:40:d1:96: 40:d4:cb:45:6d:6b:8d:82:44:04:93:f5:f9:d8:54:f7:bd:c7: d8:9e:67:99:3e:d6:b7:4f:b1:17:cb:23:9a:bc:3b:3c:b9:d6: 66:ea:1e:df:96:6e:96:84:09:7f:6f:ef:2a:d6:92:28:f4:ff: 7c:5b:8c:54 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZqyuKAGpsGrHZda6AE2cp1wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYmYyMWVlYjM2NDE0YjMyODBlNmMzM2IwYjU3Mjk2Yjhm NmI2NzUwHhcNMjUxMTIzMjE1NzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODQ4YjdlMWZmZmFiN2Q5Nzg4OWFhOWM5NGMxMzc0ZGI3NWMzOGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Z/xdQuskj/3B/V4s528a1SRLLDL yN/BJXXxxw6YB//wNoSDDPFE5PPpPtWfwdd7j2r255iJNXZN8DMEjdoemONJCCtV XHCqQOP3k68Q06kqVES+Yw9L7k6mvbkiJTiUvxW9rCGgBqpDN7Owwkc0OV1po6Nx lGQqoZqNnqqa1QiWon54lG1L5mooezA4bw46TwBRRXtWCO/0X2xVVuqkAnvgcUnk 6VBkzTEC/T3YjAoidkR94lZiM0Tw3m1Z8O3UbQatRUUY3mn1cZr6MJjNiNCe0+rd eoXCg7fj35Xq5UkK0zx8HIrvSLygI65Fnx+shPnc3/SV6YWfx7YWk+CCmwIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFGhIt+H/+rfZeImqnJTBN023XDjSMB8GA1UdIwQY MBaAFFK/Ie6zZBSzKA5sM7C1cpa49rZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXI4aDdyTmtGTE1vRG13enNMVnlscmoydG5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wNTk1NDMtNjllNC00OGY2LWExNzUt YWM5NmY2YWFiNDk0LzEvYUVpMzRmXzZ0OWw0aWFxY2xNRTNUYmRjT05JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wNTk1NDMtNjllNC00OGY2LWExNzUtYWM5NmY2YWFiNDk0 LzEvVXI4aDdyTmtGTE1vRG13enNMVnlscmoydG5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAYBAIAATASAwQAwKITAwQA wWnSAwQAwgGfMBgEAgACMBIDBwAgAQZ4BBwDBwAgAQZ8E6AwDQYJKoZIhvcNAQEL BQADggEBAHg4NzAgkcg4XUdk/cf+dCLfQ3tP5n9XKaxhuGPXALzkTfX3MPPxN89V V3HXTZpG5DqtqcyycBzNCwHF3Jml+jGIu80axHh0SurizAxzaO+m4ScGdlMFBgC3 SDc2gKkER+MmbS15+Rt14xqnZyAKIob8+FjQIWD2ypPbeLVuj+PZjtkmnjLS4pgh NRamKRimGwNJublVFaIbN93zUKFSeyDuH+6TUBKpbit6Ka1vMdkNw2wCznAwlaae TCp9+UE96Wuwc0DRlkDUy0Vta42CRAST9fnYVPe9x9ieZ5k+1rdPsRfLI5q8Ozy5 1mbqHt+WbpaECX9v7yrWkij0/3xbjFQ= -----END CERTIFICATE-----Generated at Fri Dec 19 23:04:32 2025 by rpki-client