This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/AzEuVrCNg0OP3d7LUBjQpawO_rE.roa File: AzEuVrCNg0OP3d7LUBjQpawO_rE.roa (raw, json) Hash identifier: MiRcUaC8fiqqhu01r03R6W6myuWahwiZ26TD5z4IP/Y= Subject key identifier: 03:31:2E:56:B0:8D:83:43:8F:DD:DE:CB:50:18:D0:A5:AC:0E:FE:B1 Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B2CD75C6FB4C1267E00077AD1B2CDBF9C Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/AzEuVrCNg0OP3d7LUBjQpawO_rE.roa Signing time: Wed 17 Dec 2025 15:04:29 +0000 ROA not before: Wed 17 Dec 2025 15:04:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215341 IP address blocks: 2.58.54.0/24 maxlen: 24 5.180.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:d7:5c:6f:b4:c1:26:7e:00:07:7a:d1:b2:cd:bf:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Dec 17 15:04:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=03312e56b08d83438fdddecb5018d0a5ac0efeb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:11:74:aa:ee:6a:11:98:93:40:28:99:5d:a1: 3a:18:98:62:78:66:56:91:26:06:1b:45:db:cf:0b: a7:2d:47:c7:85:ce:2f:ee:bc:f5:10:03:9d:d7:dc: ea:37:fc:65:e9:b0:7c:e5:2d:4c:e1:a3:74:e9:74: a1:17:20:9f:e3:50:f7:3c:f6:61:28:52:4e:0c:74: d1:7d:e1:f3:5b:8c:74:a7:cc:92:01:70:f7:ac:ff: df:26:b6:0a:8d:68:05:e0:c9:e4:6b:b1:0b:1b:09: f0:28:7e:6c:31:81:4b:be:eb:b4:28:3f:be:0d:8d: 51:4e:a7:66:ed:8b:f3:5d:db:17:75:7d:c5:9b:32: d7:7b:4a:e8:31:71:5d:7d:48:c5:a7:40:44:c6:e8: 8f:cc:1f:0f:69:eb:63:58:1c:e4:df:89:c2:f7:a6: 1b:b0:f7:09:6a:74:a0:86:73:37:1a:48:39:29:b7: e3:7d:ea:bd:1b:55:3e:80:8b:8d:e1:39:59:a0:13: 1e:7d:60:8f:9a:31:63:7c:89:13:a2:87:45:8d:57: a4:1c:44:e9:91:51:1c:2c:fb:56:7b:c8:1e:3b:f3: 7c:00:c7:89:94:1b:16:84:bb:e5:01:a2:82:b7:1b: 2e:c5:fe:0d:3f:11:cf:d2:52:ca:f7:f3:c4:93:04: ab:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:31:2E:56:B0:8D:83:43:8F:DD:DE:CB:50:18:D0:A5:AC:0E:FE:B1 X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/AzEuVrCNg0OP3d7LUBjQpawO_rE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.54.0/24 5.180.194.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:08:b3:2b:a7:53:60:50:28:d7:1b:b7:0a:19:cc:8d:92:7c: 0e:4a:47:22:b5:63:85:7b:38:2f:83:44:19:83:8d:61:85:2c: a0:39:87:4f:7b:28:73:8a:eb:96:79:e7:2b:e2:a3:d7:d5:3c: 1c:b5:af:c5:ce:b2:ae:0c:d6:2f:f0:1f:15:1a:a9:ca:8c:37: 0a:79:0b:63:f9:96:7f:9d:9b:9d:29:ae:a4:6a:6f:7b:3b:4f: 8a:37:87:6d:6c:d6:a7:92:1c:16:ef:aa:4e:29:9e:03:cd:47: ac:66:3e:de:1b:f3:c7:72:42:49:a3:47:67:b0:cd:1d:68:65: cd:8f:ad:b2:1d:6f:d3:a8:f5:3b:60:d1:9b:d6:d8:4e:17:9b: bd:62:a1:25:ee:0a:d4:17:78:40:5c:9f:49:e5:b6:a1:7e:ac: aa:b7:b5:58:97:86:0b:7e:77:27:2a:21:61:eb:df:d1:ce:55: 63:1d:36:2e:95:a3:af:9d:96:f1:59:b2:1c:2e:d5:b1:85:c0: 73:05:e9:4d:37:9f:48:af:c0:04:b9:0f:b2:6a:09:ec:23:99: ed:bb:46:0f:1a:b8:36:1c:46:2b:15:96:f0:11:cc:27:c7:47: 78:f2:fa:5c:2f:29:25:f0:68:57:37:af:ed:ae:d4:df:fb:d2: 95:c6:6c:31 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZss11xvtMEmfgAHetGyzb+cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjUxMjE3MTUwNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzMxMmU1NmIwOGQ4MzQzOGZkZGRlY2I1MDE4ZDBhNWFjMGVmZWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBF0qu5qEZiTQCiZXaE6GJhieGZW kSYGG0XbzwunLUfHhc4v7rz1EAOd19zqN/xl6bB85S1M4aN06XShFyCf41D3PPZh KFJODHTRfeHzW4x0p8ySAXD3rP/fJrYKjWgF4Mnka7ELGwnwKH5sMYFLvuu0KD++ DY1RTqdm7YvzXdsXdX3FmzLXe0roMXFdfUjFp0BExuiPzB8PaetjWBzk34nC96Yb sPcJanSghnM3Gkg5Kbfjfeq9G1U+gIuN4TlZoBMefWCPmjFjfIkToodFjVekHETp kVEcLPtWe8geO/N8AMeJlBsWhLvlAaKCtxsuxf4NPxHP0lLK9/PEkwSrhwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAMxLlawjYNDj93ey1AY0KWsDv6xMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvQXpFdVZyQ05nME9QM2Q3TFVCalFwYXdPX3JFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAjo2AwQA BbTCMA0GCSqGSIb3DQEBCwUAA4IBAQA6CLMrp1NgUCjXG7cKGcyNknwOSkcitWOF ezgvg0QZg41hhSygOYdPeyhziuuWeecr4qPX1Twcta/FzrKuDNYv8B8VGqnKjDcK eQtj+ZZ/nZudKa6kam97O0+KN4dtbNankhwW76pOKZ4DzUesZj7eG/PHckJJo0dn sM0daGXNj62yHW/TqPU7YNGb1thOF5u9YqEl7grUF3hAXJ9J5bahfqyqt7VYl4YL fncnKiFh69/RzlVjHTYulaOvnZbxWbIcLtWxhcBzBelNN59Ir8AEuQ+yagnsI5nt u0YPGrg2HEYrFZbwEcwnx0d48vpcLykl8GhXN6/trtTf+9KVxmwx -----END CERTIFICATE-----Generated at Sat Dec 20 21:03:37 2025 by rpki-client