This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/V4NStAxIHPoKlH9zYaeCMnj4Ybs.roa File: V4NStAxIHPoKlH9zYaeCMnj4Ybs.roa (raw, json) Hash identifier: zru3fwuo+uqUUUD/Tt2lqSQeSGF743mnPFfJFNfb2jE= Subject key identifier: 57:83:52:B4:0C:48:1C:FA:0A:94:7F:73:61:A7:82:32:78:F8:61:BB Certificate issuer: /CN=4142d3f9b31126e0850265715c9fc32174b557a4 Certificate serial: 019B0D844089ECAE4C116B63930E0AC5DA07 Authority key identifier: 41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/V4NStAxIHPoKlH9zYaeCMnj4Ybs.roa Signing time: Thu 11 Dec 2025 13:05:29 +0000 ROA not before: Thu 11 Dec 2025 13:05:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208095 IP address blocks: 45.159.28.0/24 maxlen: 24 45.159.29.0/24 maxlen: 24 94.124.73.0/24 maxlen: 24 2a0f:67c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:84:40:89:ec:ae:4c:11:6b:63:93:0e:0a:c5:da:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4142d3f9b31126e0850265715c9fc32174b557a4 Validity Not Before: Dec 11 13:05:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=578352b40c481cfa0a947f7361a7823278f861bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6f:29:fc:ec:84:1f:95:3d:95:a1:31:c4:2d: f5:ef:fc:0a:cb:6c:89:7a:09:2c:d0:47:ab:07:85: 91:cc:2f:f3:4c:e2:e4:77:18:0f:18:68:7b:08:5e: f2:aa:27:ac:11:a9:0f:bd:ad:09:67:da:fd:c2:fe: 3d:e7:b5:0c:6d:3e:24:21:95:c7:7c:f4:37:b7:bb: 4f:82:87:5d:af:8a:96:9e:70:2e:33:b7:8a:93:cd: ae:fc:c6:0f:ab:04:d2:0c:8e:0f:b3:34:5d:af:7d: 74:33:28:30:50:49:72:23:a2:f1:68:f6:a1:fb:66: 01:88:a0:29:89:bc:7d:74:1a:fc:5e:5c:22:c2:b1: 12:ea:01:1d:18:42:ed:7f:27:f4:b0:c7:e8:97:92: 31:a5:ef:80:55:9e:f6:c8:bc:f1:08:c3:f2:9a:82: cb:eb:06:61:b9:c0:1c:42:5a:36:24:0e:25:e6:6d: ac:14:8c:9f:70:f4:f7:55:f1:d6:ee:d1:52:88:af: b3:31:03:32:80:e0:92:b4:94:98:ef:23:d3:b6:83: 31:1a:3a:4c:da:6e:e0:b9:b6:67:cd:45:85:68:16: c6:d0:39:f3:ed:89:fc:69:ab:bf:91:e8:e3:3f:8a: e7:c8:6c:29:5f:eb:dd:7a:31:32:83:6a:32:62:5f: a8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:83:52:B4:0C:48:1C:FA:0A:94:7F:73:61:A7:82:32:78:F8:61:BB X509v3 Authority Key Identifier: keyid:41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/V4NStAxIHPoKlH9zYaeCMnj4Ybs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.28.0/23 94.124.73.0/24 IPv6: 2a0f:67c0::/48 Signature Algorithm: sha256WithRSAEncryption 56:bf:71:2f:f5:15:6d:99:3c:7e:26:dd:2e:f7:68:55:0f:91: cf:94:8e:ee:9b:16:03:d1:da:7f:25:46:e8:ff:ab:34:20:35: 4f:ee:99:43:20:cf:6b:05:9b:63:da:b3:19:40:f3:89:0b:5a: d2:39:4d:73:1c:55:95:57:91:aa:9d:af:fc:88:bf:d0:5c:39: 5e:d9:df:41:56:40:d4:8e:e1:8f:e5:f1:8b:a7:2c:4c:2a:80: 31:ae:c6:d6:7f:cd:69:f1:13:94:e8:1f:dc:99:23:24:e2:5c: f9:a2:b1:65:58:1c:2a:9a:6d:48:e8:9f:ab:8f:03:24:b6:8b: bf:57:8a:bc:3d:e2:fc:49:1d:f5:a4:7d:7e:92:ba:19:61:94: 8f:7c:21:74:bd:03:a7:ff:76:8f:cf:10:54:ce:ac:76:18:ff: 39:f0:4b:24:a2:b1:95:60:16:a0:5d:e5:cd:a5:88:03:e8:db: 90:83:7e:2d:35:22:e2:ad:65:d3:f3:46:18:13:a3:76:b8:7d: f5:90:26:09:81:91:df:f6:87:13:59:f2:03:02:4f:21:64:46: f2:cc:fa:fc:40:de:14:9a:e9:6a:0e:b2:8c:10:18:10:7d:53: df:2b:d5:14:56:e1:75:c4:75:f9:ee:51:60:84:bb:c4:45:f1: ce:ae:89:5d -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZsNhECJ7K5MEWtjkw4KxdoHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNDJkM2Y5YjMxMTI2ZTA4NTAyNjU3MTVjOWZjMzIxNzRi NTU3YTQwHhcNMjUxMjExMTMwNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzgzNTJiNDBjNDgxY2ZhMGE5NDdmNzM2MWE3ODIzMjc4Zjg2MWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG8p/OyEH5U9laExxC317/wKy2yJ egks0EerB4WRzC/zTOLkdxgPGGh7CF7yqiesEakPva0JZ9r9wv4957UMbT4kIZXH fPQ3t7tPgoddr4qWnnAuM7eKk82u/MYPqwTSDI4PszRdr310MygwUElyI6LxaPah +2YBiKApibx9dBr8XlwiwrES6gEdGELtfyf0sMfol5Ixpe+AVZ72yLzxCMPymoLL 6wZhucAcQlo2JA4l5m2sFIyfcPT3VfHW7tFSiK+zMQMygOCStJSY7yPTtoMxGjpM 2m7gubZnzUWFaBbG0Dnz7Yn8aau/kejjP4rnyGwpX+vdejEyg2oyYl+o5wIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFFeDUrQMSBz6CpR/c2GngjJ4+GG7MB8GA1UdIwQY MBaAFEFC0/mzESbghQJlcVyfwyF0tVekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVVMVC1iTVJKdUNGQW1WeFhKX0RJWFMxVjZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hZTE5NTMtYmZjNC00MmI1LTk1MGIt OWM5OGQxMTE5N2I3LzEvVjROU3RBeElIUG9LbEg5ellhZUNNbmo0WWJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9hZTE5NTMtYmZjNC00MmI1LTk1MGItOWM5OGQxMTE5N2I3 LzEvUVVMVC1iTVJKdUNGQW1WeFhKX0RJWFMxVjZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBLZ8cAwQA XnxJMA8EAgACMAkDBwAqD2fAAAAwDQYJKoZIhvcNAQELBQADggEBAFa/cS/1FW2Z PH4m3S73aFUPkc+Uju6bFgPR2n8lRuj/qzQgNU/umUMgz2sFm2PasxlA84kLWtI5 TXMcVZVXkaqdr/yIv9BcOV7Z30FWQNSO4Y/l8YunLEwqgDGuxtZ/zWnxE5ToH9yZ IyTiXPmisWVYHCqabUjon6uPAyS2i79Xirw94vxJHfWkfX6SuhlhlI98IXS9A6f/ do/PEFTOrHYY/znwSySisZVgFqBd5c2liAPo25CDfi01IuKtZdPzRhgTo3a4ffWQ JgmBkd/2hxNZ8gMCTyFkRvLM+vxA3hSa6WoOsowQGBB9U98r1RRW4XXEdfnuUWCE u8RF8c6uiV0= -----END CERTIFICATE-----Generated at Mon Dec 22 04:18:52 2025 by rpki-client