This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/4xsqx1BRiOnQUuj-J7Kv9snKUF4.roa File: 4xsqx1BRiOnQUuj-J7Kv9snKUF4.roa (raw, json) Hash identifier: YQ0u0f9VxQoIjP9SpEqPzEGG/gRgTsZUD9VhsGAB6Vw= Subject key identifier: E3:1B:2A:C7:50:51:88:E9:D0:52:E8:FE:27:B2:AF:F6:C9:CA:50:5E Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4 Certificate serial: 019B7A5A75DCD66E685C6284D4E98F2BF2FD Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/4xsqx1BRiOnQUuj-J7Kv9snKUF4.roa Signing time: Thu 01 Jan 2026 16:18:27 +0000 ROA not before: Thu 01 Jan 2026 16:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201744 IP address blocks: 45.95.171.0/24 maxlen: 24 150.40.97.0/24 maxlen: 24 150.40.109.0/24 maxlen: 24 150.40.110.0/24 maxlen: 24 150.40.111.0/24 maxlen: 24 150.40.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:75:dc:d6:6e:68:5c:62:84:d4:e9:8f:2b:f2:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4 Validity Not Before: Jan 1 16:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e31b2ac7505188e9d052e8fe27b2aff6c9ca505e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:10:9d:b0:cf:67:91:92:c5:70:29:ff:59:2f: ec:23:b7:4b:ba:4d:e9:3d:70:37:6b:f9:a0:1a:a1: f2:56:cf:87:71:ea:46:5d:1b:82:5d:55:d7:cc:73: 81:a4:3c:12:22:25:9e:47:5f:91:21:20:c2:6c:23: b3:b0:16:b5:73:45:7f:8f:56:ca:1f:14:6d:34:2f: 40:31:14:b0:80:37:9c:b8:70:7e:55:75:4b:c3:9f: 27:48:f8:bc:59:7b:d0:de:76:e3:5c:e2:cc:a3:c7: 74:19:df:72:ab:75:77:05:f9:cf:b3:bf:d1:21:2c: a4:0e:b2:89:cd:8f:b8:1e:90:1f:b4:7e:20:de:c8: 1d:39:de:75:45:e1:39:ca:45:07:7c:16:7d:b1:81: d5:08:90:33:68:2c:53:84:fe:2e:61:7d:b8:be:97: 03:07:91:82:0c:a2:47:2a:f1:cd:c3:bb:f3:ef:dc: 62:fe:58:bc:c1:0d:da:68:dd:d5:71:3b:f7:20:30: 49:04:c5:fb:bc:e7:21:e5:a4:a2:06:77:ce:09:27: fa:27:92:dc:88:d4:19:60:c0:22:5a:12:83:36:53: 09:b4:93:4a:18:f8:6c:82:fc:04:a3:76:0b:2a:04: e8:05:b2:b4:d6:6c:95:9e:88:8f:30:09:6c:bf:0b: 2a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1B:2A:C7:50:51:88:E9:D0:52:E8:FE:27:B2:AF:F6:C9:CA:50:5E X509v3 Authority Key Identifier: keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/4xsqx1BRiOnQUuj-J7Kv9snKUF4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.171.0/24 150.40.97.0/24 150.40.109.0-150.40.112.255 Signature Algorithm: sha256WithRSAEncryption 78:2d:ea:e4:0a:af:77:a2:a3:20:4b:2a:d9:01:6d:c6:51:13: f6:ad:34:fc:4c:2b:f1:db:b0:db:e6:68:b4:db:3c:20:7c:9c: 05:fc:ae:fd:a8:4f:a9:56:c9:a0:3d:25:22:ae:ad:ab:41:1b: b1:81:b4:ef:4d:c8:a5:8a:91:21:28:f5:61:43:65:e5:23:a7: 16:c5:da:fd:dd:3a:9e:8b:b9:1d:de:6d:af:d8:80:ca:d0:aa: 30:15:83:23:bf:5e:9d:f6:5b:63:ed:f4:24:03:85:4a:7c:7e: ae:c3:10:4c:62:bc:fb:59:4e:04:a4:9d:ce:ab:ac:1b:5f:be: 5a:2a:bc:7e:b3:3d:cd:ab:80:b5:a6:df:69:88:08:3e:00:73: dc:db:77:c6:1f:28:ca:3d:f6:68:0e:d0:c0:18:d2:49:4d:ee: bf:3e:03:09:1a:41:96:09:88:c9:0d:ac:ba:40:35:2e:51:10: 36:a6:01:ee:91:89:29:87:49:75:18:53:20:dc:78:b5:c5:c5: 34:9d:85:fc:7a:fb:9f:c7:fa:bc:10:02:5c:20:56:c7:b5:20: cc:1e:e5:c4:0f:34:14:3a:e3:97:26:b6:80:14:54:67:1c:01: b8:13:6b:ba:18:4e:2a:cd:44:54:b4:4c:07:c9:e6:69:ff:71: 4f:9a:5d:b5 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt6WnXc1m5oXGKE1OmPK/L9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYTk2MmMxZmU4ZTJlMTJhMzU1NzZmZDYyOTg3YTBjYmJh NDYzZDQwHhcNMjYwMTAxMTYxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzFiMmFjNzUwNTE4OGU5ZDA1MmU4ZmUyN2IyYWZmNmM5Y2E1MDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRCdsM9nkZLFcCn/WS/sI7dLuk3p PXA3a/mgGqHyVs+HcepGXRuCXVXXzHOBpDwSIiWeR1+RISDCbCOzsBa1c0V/j1bK HxRtNC9AMRSwgDecuHB+VXVLw58nSPi8WXvQ3nbjXOLMo8d0Gd9yq3V3BfnPs7/R ISykDrKJzY+4HpAftH4g3sgdOd51ReE5ykUHfBZ9sYHVCJAzaCxThP4uYX24vpcD B5GCDKJHKvHNw7vz79xi/li8wQ3aaN3VcTv3IDBJBMX7vOch5aSiBnfOCSf6J5Lc iNQZYMAiWhKDNlMJtJNKGPhsgvwEo3YLKgToBbK01myVnoiPMAlsvwsqowIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFOMbKsdQUYjp0FLo/ieyr/bJylBeMB8GA1UdIwQY MBaAFAKpYsH+ji4So1V2/WKYegy7pGPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYt N2QxMzQ5ODBjNWJlLzEvNHhzcXgxQlJpT25RVXVqLUo3S3Y5c25LVUY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYtN2QxMzQ5ODBjNWJl LzEvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQALV+rAwQA lihhMAwDBACWKG0DBACWKHAwDQYJKoZIhvcNAQELBQADggEBAHgt6uQKr3eioyBL KtkBbcZRE/atNPxMK/HbsNvmaLTbPCB8nAX8rv2oT6lWyaA9JSKuratBG7GBtO9N yKWKkSEo9WFDZeUjpxbF2v3dOp6LuR3eba/YgMrQqjAVgyO/Xp32W2Pt9CQDhUp8 fq7DEExivPtZTgSknc6rrBtfvloqvH6zPc2rgLWm32mICD4Ac9zbd8YfKMo99mgO 0MAY0klN7r8+AwkaQZYJiMkNrLpANS5REDamAe6RiSmHSXUYUyDceLXFxTSdhfx6 +5/H+rwQAlwgVse1IMwe5cQPNBQ645cmtoAUVGccAbgTa7oYTirNRFS0TAfJ5mn/ cU+aXbU= -----END CERTIFICATE-----Generated at Mon Jan 26 04:22:21 2026 by rpki-client