This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/AE9Lfl-4UbNnNijYfCBA7Dotnk0.roa File: AE9Lfl-4UbNnNijYfCBA7Dotnk0.roa (raw, json) Hash identifier: 4272KJRiaDFrIJ1v9/e6Ri/6Hq4jjOw6FRmI0faWzNk= Subject key identifier: 00:4F:4B:7E:5F:B8:51:B3:67:36:28:D8:7C:20:40:EC:3A:2D:9E:4D Certificate issuer: /CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1 Certificate serial: 019B7C80539ADDDA7B0B0022890758EA35CF Authority key identifier: 16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/AE9Lfl-4UbNnNijYfCBA7Dotnk0.roa Signing time: Fri 02 Jan 2026 02:19:03 +0000 ROA not before: Fri 02 Jan 2026 02:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21150 IP address blocks: 155.45.160.0/20 maxlen: 20 155.45.176.0/20 maxlen: 20 155.45.208.0/21 maxlen: 21 155.45.240.0/21 maxlen: 21 155.45.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:53:9a:dd:da:7b:0b:00:22:89:07:58:ea:35:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1 Validity Not Before: Jan 2 02:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=004f4b7e5fb851b3673628d87c2040ec3a2d9e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:18:bb:fe:1c:65:4e:ce:a5:d3:8c:57:54:0f: a3:81:30:9d:ee:bc:f4:09:2d:92:7f:09:71:60:df: 51:07:b0:e8:54:9f:51:95:f2:92:09:65:69:b9:31: 56:94:ac:76:2b:24:14:b6:27:56:da:0c:02:67:13: 0a:72:5d:5e:fa:41:57:f5:75:8e:d4:c1:10:51:f0: 2b:56:f8:c7:31:79:5d:bc:90:f8:38:3d:60:70:c3: 23:40:1f:1a:d6:2d:20:52:2b:cd:f8:b9:1a:03:35: 16:58:5c:57:1c:b2:32:bb:ba:34:ab:65:ba:6f:8d: e9:ca:b5:da:a2:e0:6d:33:ed:80:8b:ac:3d:76:4f: 36:03:b1:75:69:4c:02:56:54:7f:c2:5b:38:79:7d: 00:29:04:f2:36:af:53:9f:6d:c6:5d:26:21:52:c2: 62:6b:b1:e9:6a:c8:16:ff:2b:7e:9d:5e:b0:ac:48: d1:53:88:de:61:de:b0:47:db:40:d5:c8:07:3e:ff: 50:81:eb:e2:20:3f:aa:00:81:88:4a:ad:46:c1:e9: b3:a2:b2:e7:c8:2c:a6:bc:43:e0:01:a1:dd:e9:6f: 4b:28:16:22:88:f2:2f:c5:ba:3d:1f:f4:3e:87:42: 6d:50:a1:9a:b4:b0:6f:70:80:c3:5d:08:16:4a:e7: b5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4F:4B:7E:5F:B8:51:B3:67:36:28:D8:7C:20:40:EC:3A:2D:9E:4D X509v3 Authority Key Identifier: keyid:16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/AE9Lfl-4UbNnNijYfCBA7Dotnk0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.45.160.0/19 155.45.208.0/21 155.45.240.0/21 155.45.255.0/24 Signature Algorithm: sha256WithRSAEncryption 57:fc:dc:4f:1c:b1:14:88:75:8f:79:20:8d:3f:62:97:c0:81: bf:b9:ee:4d:d3:bc:4c:3a:fb:3d:12:b0:2a:08:a7:b6:c8:09: 93:b2:7d:f7:cc:a9:4d:84:9d:12:68:5b:12:b9:c9:01:0a:1c: ae:88:97:58:b8:53:dd:b4:54:df:46:70:f0:bc:5b:00:6b:69: f7:bf:c2:35:39:2f:0e:3b:63:26:53:c3:b9:43:4b:af:19:ea: ae:a3:bc:0e:be:6c:0f:3e:57:90:ac:79:99:34:64:00:ae:26: 0f:50:93:aa:2c:83:ea:24:38:d7:63:c6:e5:f6:b3:1a:9c:d3: de:cd:9b:6d:52:fd:ea:7a:bd:e0:2f:a0:69:31:fd:41:a0:b4: 23:e2:9b:f9:20:9d:8c:e8:14:b0:28:d8:2f:97:d3:c9:9e:92: 9b:2f:b5:0f:9c:20:f1:31:bd:ce:33:d3:71:e1:01:c6:84:5a: 12:77:25:55:b4:23:20:7b:e8:37:0b:9d:88:28:ff:4f:2a:1d: 92:df:59:da:51:ea:d8:91:6c:aa:be:43:d6:27:85:32:dc:06: 25:fa:2a:fa:32:b8:8f:95:a9:d5:a3:95:a5:a3:64:09:31:3a: 7e:6b:1a:22:9a:84:c9:1b:63:08:f2:5f:9e:97:2d:42:d5:19: 16:1b:a3:97 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8gFOa3dp7CwAiiQdY6jXPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2Y2RlMTM5YWUwNTczYjBhNGRkYTkzZTc3YjU3ZmYyN2Y5 YmViYTEwHhcNMjYwMTAyMDIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDRmNGI3ZTVmYjg1MWIzNjczNjI4ZDg3YzIwNDBlYzNhMmQ5ZTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhi7/hxlTs6l04xXVA+jgTCd7rz0 CS2SfwlxYN9RB7DoVJ9RlfKSCWVpuTFWlKx2KyQUtidW2gwCZxMKcl1e+kFX9XWO 1MEQUfArVvjHMXldvJD4OD1gcMMjQB8a1i0gUivN+LkaAzUWWFxXHLIyu7o0q2W6 b43pyrXaouBtM+2Ai6w9dk82A7F1aUwCVlR/wls4eX0AKQTyNq9Tn23GXSYhUsJi a7HpasgW/yt+nV6wrEjRU4jeYd6wR9tA1cgHPv9QgeviID+qAIGISq1GwemzorLn yCymvEPgAaHd6W9LKBYiiPIvxbo9H/Q+h0JtUKGatLBvcIDDXQgWSue1ZwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFABPS35fuFGzZzYo2HwgQOw6LZ5NMB8GA1UdIwQY MBaAFBbN4TmuBXOwpN2pPne1f/J/m+uhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnMzaE9hNEZjN0NrM2FrLWQ3Vl84bi1iNjZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zYzAyZjYtN2M0MS00OWJiLWI5ZGUt YjY5ZGNlNzU0N2ExLzEvQUU5TGZsLTRVYk5uTmlqWWZDQkE3RG90bmswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8zYzAyZjYtN2M0MS00OWJiLWI5ZGUtYjY5ZGNlNzU0N2Ex LzEvRnMzaE9hNEZjN0NrM2FrLWQ3Vl84bi1iNjZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQFmy2gAwQD my3QAwQDmy3wAwQAmy3/MA0GCSqGSIb3DQEBCwUAA4IBAQBX/NxPHLEUiHWPeSCN P2KXwIG/ue5N07xMOvs9ErAqCKe2yAmTsn33zKlNhJ0SaFsSuckBChyuiJdYuFPd tFTfRnDwvFsAa2n3v8I1OS8OO2MmU8O5Q0uvGequo7wOvmwPPleQrHmZNGQAriYP UJOqLIPqJDjXY8bl9rManNPezZttUv3qer3gL6BpMf1BoLQj4pv5IJ2M6BSwKNgv l9PJnpKbL7UPnCDxMb3OM9Nx4QHGhFoSdyVVtCMge+g3C52IKP9PKh2S31naUerY kWyqvkPWJ4Uy3AYl+ir6MriPlanVo5Wlo2QJMTp+axoimoTJG2MI8l+ely1C1RkW G6OX -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:55 2026 by rpki-client