This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/qhnp9CUojBvxHZsyHr9qS7mJwVY.roa File: qhnp9CUojBvxHZsyHr9qS7mJwVY.roa (raw, json) Hash identifier: +es7sp6A0ISc395zb693NSLJXGVU44id/39tgl37MH4= Subject key identifier: AA:19:E9:F4:25:28:8C:1B:F1:1D:9B:32:1E:BF:6A:4B:B9:89:C1:56 Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4 Certificate serial: 019AEA98200B41895FAE68F29FBCFE2BA912 Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/qhnp9CUojBvxHZsyHr9qS7mJwVY.roa Signing time: Thu 04 Dec 2025 18:20:29 +0000 ROA not before: Thu 04 Dec 2025 18:20:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211619 IP address blocks: 45.95.168.0/24 maxlen: 24 45.95.169.0/24 maxlen: 24 45.95.170.0/24 maxlen: 24 45.95.171.0/24 maxlen: 24 150.40.96.0/19 maxlen: 24 150.40.122.0/24 maxlen: 24 203.31.217.0/24 maxlen: 24 2a0e:bfc0::/32 maxlen: 32 2a0e:bfc1::/32 maxlen: 32 2a0e:bfc2::/32 maxlen: 32 2a0e:bfc3::/32 maxlen: 32 2a0e:bfc4::/32 maxlen: 32 2a0e:bfc5::/32 maxlen: 32 2a0e:bfc6::/32 maxlen: 32 2a0e:bfc7::/40 maxlen: 40 2a0e:bfc7:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ea:98:20:0b:41:89:5f:ae:68:f2:9f:bc:fe:2b:a9:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4 Validity Not Before: Dec 4 18:20:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=aa19e9f425288c1bf11d9b321ebf6a4bb989c156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ae:52:b0:3d:9f:cd:57:34:a2:71:a4:b5:a7: cd:a1:2a:ae:9f:08:a8:d0:61:7b:e1:b1:70:a6:1f: ea:9b:88:31:3f:4c:4e:83:d2:20:e5:9b:a2:4e:09: 16:8d:c0:7e:8c:f7:9d:bc:4e:9f:e9:de:8a:46:d2: ae:95:e1:81:49:b7:7e:01:02:63:db:7a:70:81:58: 43:83:5c:eb:8c:e9:ee:62:65:ee:fd:98:1b:20:19: 2f:98:0a:e2:56:b0:f8:e6:c0:d2:b5:39:57:6b:a2: 9c:dc:20:be:98:db:54:ce:ae:75:7d:89:b2:01:38: f8:af:3b:a2:7e:e7:f7:6e:f6:a1:6a:00:e9:03:2d: 9d:93:40:b9:1f:82:92:4d:8c:f1:2b:e5:21:12:38: dd:64:f3:a0:80:95:98:f6:3b:9f:bb:22:d5:ed:60: 96:ea:e3:9f:63:96:f6:6e:98:4c:5e:42:06:8f:ec: 8f:96:96:b0:0e:16:e6:86:42:9b:6f:4f:de:22:dc: 2c:60:b4:b4:86:04:b0:d4:bb:5d:36:73:6e:57:e9: a6:90:b5:1a:13:27:46:79:e0:c3:cf:ae:9e:88:b7: 47:1f:61:0b:3a:b7:e7:62:6a:39:74:f5:3f:95:8f: 0e:b0:9d:a0:88:e3:aa:ff:63:a1:07:d5:d7:82:d9: 76:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:19:E9:F4:25:28:8C:1B:F1:1D:9B:32:1E:BF:6A:4B:B9:89:C1:56 X509v3 Authority Key Identifier: keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/qhnp9CUojBvxHZsyHr9qS7mJwVY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.168.0/22 150.40.96.0/19 203.31.217.0/24 IPv6: 2a0e:bfc0::-2a0e:bfc7:1ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 97:e5:19:7e:b1:85:10:d1:4d:4b:96:13:01:86:e3:4b:0b:a7: 58:3e:8c:46:eb:bb:c2:4e:67:66:fc:09:1d:8f:ca:2a:23:8c: 2d:46:44:c6:e7:4c:59:19:c2:d4:fc:7f:bc:b8:f1:c4:d2:dd: a7:7d:de:00:5a:3a:2c:c4:12:bc:43:73:78:36:29:39:35:95: 4b:ae:c8:23:14:c7:fe:e0:a6:87:df:85:5b:57:88:11:79:a4: ca:7a:a1:e1:5e:e6:4f:1b:4b:f0:03:20:bb:f0:81:38:b1:ec: d5:d6:0f:c2:33:a8:89:7f:81:54:e5:4a:95:1c:e7:d5:6b:17: 4d:6e:00:32:a9:14:1f:fd:70:12:34:ff:51:fd:13:2c:e2:08: d2:33:96:e8:97:10:6f:ac:19:0a:b0:1f:0e:1d:df:5f:50:3c: ef:47:ec:56:7b:64:84:54:68:99:86:35:25:dd:75:fd:b2:ff: b3:09:95:fd:0f:0a:20:4c:4c:88:78:2e:4b:05:bc:66:d8:da: 92:44:65:c5:15:ab:e8:14:c6:94:e6:90:97:7f:e8:fc:57:bd: b0:a1:e1:23:b3:d2:61:c2:69:e3:13:fc:58:c5:f8:c0:b7:b7: c2:af:84:4c:8a:2b:ed:91:0b:86:e4:25:a9:b3:80:91:39:b2: 17:0b:7c:ec -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZrqmCALQYlfrmjyn7z+K6kSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYTk2MmMxZmU4ZTJlMTJhMzU1NzZmZDYyOTg3YTBjYmJh NDYzZDQwHhcNMjUxMjA0MTgyMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTE5ZTlmNDI1Mjg4YzFiZjExZDliMzIxZWJmNmE0YmI5ODljMTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK5SsD2fzVc0onGktafNoSqunwio 0GF74bFwph/qm4gxP0xOg9Ig5ZuiTgkWjcB+jPedvE6f6d6KRtKuleGBSbd+AQJj 23pwgVhDg1zrjOnuYmXu/ZgbIBkvmAriVrD45sDStTlXa6Kc3CC+mNtUzq51fYmy ATj4rzuifuf3bvahagDpAy2dk0C5H4KSTYzxK+UhEjjdZPOggJWY9jufuyLV7WCW 6uOfY5b2bphMXkIGj+yPlpawDhbmhkKbb0/eItwsYLS0hgSw1LtdNnNuV+mmkLUa EydGeeDDz66eiLdHH2ELOrfnYmo5dPU/lY8OsJ2giOOq/2OhB9XXgtl27QIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFKoZ6fQlKIwb8R2bMh6/aku5icFWMB8GA1UdIwQY MBaAFAKpYsH+ji4So1V2/WKYegy7pGPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYt N2QxMzQ5ODBjNWJlLzEvcWhucDlDVW9qQnZ4SFpzeUhyOXFTN21Kd1ZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYtN2QxMzQ5ODBjNWJl LzEvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAYBAIAATASAwQCLV+oAwQF lihgAwQAyx/ZMBcEAgACMBEwDwMFBioOv8ADBgEqDr/HADANBgkqhkiG9w0BAQsF AAOCAQEAl+UZfrGFENFNS5YTAYbjSwunWD6MRuu7wk5nZvwJHY/KKiOMLUZExudM WRnC1Px/vLjxxNLdp33eAFo6LMQSvENzeDYpOTWVS67IIxTH/uCmh9+FW1eIEXmk ynqh4V7mTxtL8AMgu/CBOLHs1dYPwjOoiX+BVOVKlRzn1WsXTW4AMqkUH/1wEjT/ Uf0TLOII0jOW6JcQb6wZCrAfDh3fX1A870fsVntkhFRomYY1Jd11/bL/swmV/Q8K IExMiHguSwW8ZtjakkRlxRWr6BTGlOaQl3/o/Fe9sKHhI7PSYcJp4xP8WMX4wLe3 wq+ETIor7ZELhuQlqbOAkTmyFwt87A== -----END CERTIFICATE-----Generated at Sat Dec 6 14:40:32 2025 by rpki-client