This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/aPxKVSvNRXkuueNUo0oD6qVAbdI.roa File: aPxKVSvNRXkuueNUo0oD6qVAbdI.roa (raw, json) Hash identifier: 61RoVPH2gZzr7aCEfyXLcJOn37DXu2XNDfa7Kms2beA= Subject key identifier: 68:FC:4A:55:2B:CD:45:79:2E:B9:E3:54:A3:4A:03:EA:A5:40:6D:D2 Certificate issuer: /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34 Certificate serial: 019B79103F4CE4DFFBB463C0864AAEC4FC6B Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/aPxKVSvNRXkuueNUo0oD6qVAbdI.roa Signing time: Thu 01 Jan 2026 10:17:46 +0000 ROA not before: Thu 01 Jan 2026 10:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60767 IP address blocks: 45.95.204.0/24 maxlen: 24 2a0e:3940:1000::/36 maxlen: 44 2a0e:3940:2000::/36 maxlen: 44 2a0e:3940:d000::/36 maxlen: 36 2a0e:3940:f000::/36 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:3f:4c:e4:df:fb:b4:63:c0:86:4a:ae:c4:fc:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34 Validity Not Before: Jan 1 10:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68fc4a552bcd45792eb9e354a34a03eaa5406dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:63:f5:9c:06:48:55:fe:98:37:68:5e:29:54: a6:97:73:a8:da:c4:b6:4c:06:6d:92:70:4a:d9:36: 1e:ad:ca:83:1b:8b:56:b4:92:37:da:39:53:bf:d9: 01:a6:8e:d6:d1:b3:cf:26:56:2d:d9:c5:41:cc:ce: de:86:8f:0a:9e:74:52:45:b9:e6:b4:a6:b6:0e:30: 46:9b:f2:78:b2:57:b3:34:4c:bf:6c:40:1a:ea:f0: 84:0c:86:12:71:28:8d:d8:b3:5c:9b:91:ed:b5:ec: 6a:2d:bc:38:df:dd:cc:40:3f:1a:75:bf:9f:2e:03: 31:af:03:fa:76:81:52:cd:70:14:fc:5a:27:c6:fa: f5:b0:be:92:49:be:52:ed:17:3c:4e:ef:eb:a6:08: 79:9e:32:f2:b7:04:2b:a7:cc:33:67:c4:cc:9a:fe: 7d:cf:23:83:32:43:73:18:46:66:96:b8:d6:60:a1: bc:cb:12:08:78:dd:26:31:9f:6d:56:7a:f0:72:bb: 3f:c1:6c:ba:97:2d:cf:20:1d:a6:e5:18:58:d3:2c: 84:8e:a4:59:48:2e:47:c0:c7:77:d6:bf:b4:85:49: 67:f5:a8:45:b9:a4:71:41:86:b7:72:e0:3b:dc:18: 76:12:b3:a9:55:66:d0:62:0e:0a:5f:ef:0e:a6:1d: 45:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FC:4A:55:2B:CD:45:79:2E:B9:E3:54:A3:4A:03:EA:A5:40:6D:D2 X509v3 Authority Key Identifier: keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/aPxKVSvNRXkuueNUo0oD6qVAbdI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.204.0/24 IPv6: 2a0e:3940:1000::-2a0e:3940:2fff:ffff:ffff:ffff:ffff:ffff 2a0e:3940:d000::/36 2a0e:3940:f000::/36 Signature Algorithm: sha256WithRSAEncryption a1:76:31:4f:14:e5:93:2d:5a:6e:c6:62:5a:a9:43:46:79:22: 68:5c:71:69:7e:c6:9a:46:8e:9f:38:0e:45:82:22:12:c1:75: 8e:cf:8a:c7:55:2d:d6:65:a3:4a:40:5a:26:66:b0:3e:c8:4b: 08:b2:00:57:20:03:77:f9:85:92:17:20:f0:8a:96:64:49:7d: 32:8f:e7:c7:5c:9c:0b:f6:95:66:68:14:32:b0:9e:c7:73:c4: c0:9b:53:29:50:da:44:ae:d4:49:e8:ad:95:3e:f5:91:6a:29: f8:2c:68:71:1a:2d:ff:5a:bf:ca:20:1a:eb:b3:7f:d8:fc:d7: 3a:98:54:ff:52:d8:ca:52:06:f7:7b:32:d9:72:d8:0b:f6:fa: 46:6f:eb:d0:be:66:66:e8:fe:d6:6a:96:5f:bc:d7:11:b9:e3: fe:bb:c5:78:e3:83:8d:0c:d6:72:ed:2e:5a:ca:24:54:4a:6d: 11:8c:ab:84:dc:2e:42:d1:d9:ac:66:c4:eb:61:24:42:76:66: d6:47:b7:ea:d3:c2:06:a9:b8:fe:0d:3d:60:77:31:a8:ba:6b: 3f:27:5e:ed:f5:20:6c:12:11:99:a4:39:5c:12:52:17:4d:3f: a6:fd:f0:45:60:42:1d:ec:f4:32:6c:1d:ce:b9:72:5c:2a:f5: 5c:d1:2d:3a -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt5ED9M5N/7tGPAhkquxPxrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjFhYTVkMWJlZmQ3YTBmZTNlNGRmZTNhYThkYTczZWZj ZmJhMzQwHhcNMjYwMTAxMTAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGZjNGE1NTJiY2Q0NTc5MmViOWUzNTRhMzRhMDNlYWE1NDA2ZGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGP1nAZIVf6YN2heKVSml3Oo2sS2 TAZtknBK2TYercqDG4tWtJI32jlTv9kBpo7W0bPPJlYt2cVBzM7eho8KnnRSRbnm tKa2DjBGm/J4slezNEy/bEAa6vCEDIYScSiN2LNcm5HttexqLbw4393MQD8adb+f LgMxrwP6doFSzXAU/Fonxvr1sL6SSb5S7Rc8Tu/rpgh5njLytwQrp8wzZ8TMmv59 zyODMkNzGEZmlrjWYKG8yxIIeN0mMZ9tVnrwcrs/wWy6ly3PIB2m5RhY0yyEjqRZ SC5HwMd31r+0hUln9ahFuaRxQYa3cuA73Bh2ErOpVWbQYg4KX+8Oph1FLQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFGj8SlUrzUV5LrnjVKNKA+qlQG3SMB8GA1UdIwQY MBaAFB9hql0b79eg/j5N/jqo2nPvz7o0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYWQ0MTQtM2RmMS00YjM4LTg2OWUt YzYyMWU4ZGY5NWZmLzEvYVB4S1ZTdk5SWGt1dWVOVW8wb0Q2cVZBYmRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wYWQ0MTQtM2RmMS00YjM4LTg2OWUtYzYyMWU4ZGY5NWZm LzEvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAMBAIAATAGAwQALV/MMCgE AgACMCIwEAMGBCoOOUAQAwYEKg45QCADBgQqDjlA0AMGBCoOOUDwMA0GCSqGSIb3 DQEBCwUAA4IBAQChdjFPFOWTLVpuxmJaqUNGeSJoXHFpfsaaRo6fOA5FgiISwXWO z4rHVS3WZaNKQFomZrA+yEsIsgBXIAN3+YWSFyDwipZkSX0yj+fHXJwL9pVmaBQy sJ7Hc8TAm1MpUNpErtRJ6K2VPvWRain4LGhxGi3/Wr/KIBrrs3/Y/Nc6mFT/UtjK Ugb3ezLZctgL9vpGb+vQvmZm6P7WapZfvNcRueP+u8V444ONDNZy7S5ayiRUSm0R jKuE3C5C0dmsZsTrYSRCdmbWR7fq08IGqbj+DT1gdzGoums/J17t9SBsEhGZpDlc ElIXTT+m/fBFYEId7PQybB3OuXJcKvVc0S06 -----END CERTIFICATE-----Generated at Sun Jan 25 21:28:38 2026 by rpki-client