This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/hE8C31w_RpAXSBqCw_OOMk-JFm8.roa File: hE8C31w_RpAXSBqCw_OOMk-JFm8.roa (raw, json) Hash identifier: HNil33scanjIhVtVF2DLJ+3VEH2NbJtgfLv8Zd42M2M= Subject key identifier: 84:4F:02:DF:5C:3F:46:90:17:48:1A:82:C3:F3:8E:32:4F:89:16:6F Certificate issuer: /CN=4142d3f9b31126e0850265715c9fc32174b557a4 Certificate serial: 019B77590132BEB3CB06BA1F802475A90B45 Authority key identifier: 41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/hE8C31w_RpAXSBqCw_OOMk-JFm8.roa Signing time: Thu 01 Jan 2026 02:18:00 +0000 ROA not before: Thu 01 Jan 2026 02:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208095 IP address blocks: 45.159.28.0/24 maxlen: 24 45.159.29.0/24 maxlen: 24 94.124.73.0/24 maxlen: 24 2a0f:67c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:01:32:be:b3:cb:06:ba:1f:80:24:75:a9:0b:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4142d3f9b31126e0850265715c9fc32174b557a4 Validity Not Before: Jan 1 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=844f02df5c3f469017481a82c3f38e324f89166f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1d:e7:3a:ed:d3:23:e2:83:72:58:fb:1f:09: a3:69:e2:47:9b:4e:dd:ac:e6:7b:7b:b5:ff:63:9c: 66:6d:13:78:4e:e8:52:1f:53:9e:e6:a2:b7:69:6d: 1e:61:bc:90:d3:20:30:18:a2:ca:ef:33:0e:a6:92: d3:f1:57:69:de:f9:81:9e:b2:bf:4a:1b:11:d9:1b: c0:fa:da:ca:21:73:f7:a5:52:ab:27:56:35:c2:b3: ea:47:f9:e9:33:72:e4:91:7e:3b:41:db:67:e6:a0: f1:9f:00:da:e1:e9:09:73:02:67:4a:87:dc:ed:50: fb:c6:a2:05:c0:e7:15:19:61:47:e9:14:58:8f:0b: bd:93:53:23:a0:fa:9b:78:1d:47:b3:eb:a7:9e:28: 24:16:8a:ee:aa:9c:b2:f6:2c:dd:2f:1c:6d:ed:8c: ef:b2:99:8f:20:9e:52:be:cf:a4:5b:bc:94:bb:13: c6:3c:14:17:d8:a2:c9:e1:2d:ee:c1:b0:97:81:04: 56:91:bb:23:de:94:85:ff:aa:73:17:6c:06:4e:fe: 4b:d5:3b:e7:80:99:9e:b4:0a:46:87:f5:39:88:84: 06:2f:80:8d:18:60:39:a0:bf:58:e5:81:67:0d:46: 29:36:bf:6c:63:35:dc:38:08:06:c1:bf:7b:32:01: c1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4F:02:DF:5C:3F:46:90:17:48:1A:82:C3:F3:8E:32:4F:89:16:6F X509v3 Authority Key Identifier: keyid:41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/hE8C31w_RpAXSBqCw_OOMk-JFm8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.28.0/23 94.124.73.0/24 IPv6: 2a0f:67c0::/48 Signature Algorithm: sha256WithRSAEncryption 8f:2d:4f:59:5b:79:67:fc:93:0c:1b:25:6b:50:d3:69:d8:e5: f5:63:09:ad:f3:6b:89:17:e8:a8:74:92:80:b6:1b:6e:e5:6d: 2c:bd:ea:cb:31:a0:83:cb:13:47:f8:8d:83:5d:f2:d9:1d:cc: 5a:6c:20:28:05:3e:d9:f0:08:ef:40:93:22:ef:ec:a2:d0:7b: d4:81:7c:60:d8:61:24:bc:ff:a4:f2:02:77:25:27:f8:fe:16: 7e:2a:a2:ac:4e:01:97:37:3e:15:52:59:49:00:31:4b:50:7c: 54:d2:c7:8d:05:5b:c6:a6:a7:b2:6e:b1:52:2f:a1:f0:e3:23: e2:71:ad:81:41:bf:92:17:32:5d:f6:ef:f5:25:c9:64:9b:28: a8:a3:1e:6a:8e:5d:c0:6d:dd:30:ea:e0:65:9d:7b:24:60:fd: 34:3a:c4:8c:22:7e:ff:f5:2c:ca:60:9c:89:c6:f2:f1:10:a0: 9f:3e:5b:97:a2:2b:be:17:c4:62:60:53:63:d3:6e:9f:24:c7: 67:0a:59:a0:4e:1c:20:36:09:7d:cb:82:57:a8:82:19:71:2b: 75:4e:3e:fc:27:dc:ec:c4:6e:bf:57:b6:eb:22:a4:a8:15:06: 0b:47:70:b7:a3:8b:5f:9b:61:3e:5d:d2:25:a8:65:4c:4b:50: df:f7:f7:12 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt3WQEyvrPLBrofgCR1qQtFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNDJkM2Y5YjMxMTI2ZTA4NTAyNjU3MTVjOWZjMzIxNzRi NTU3YTQwHhcNMjYwMTAxMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDRmMDJkZjVjM2Y0NjkwMTc0ODFhODJjM2YzOGUzMjRmODkxNjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh3nOu3TI+KDclj7HwmjaeJHm07d rOZ7e7X/Y5xmbRN4TuhSH1Oe5qK3aW0eYbyQ0yAwGKLK7zMOppLT8Vdp3vmBnrK/ ShsR2RvA+trKIXP3pVKrJ1Y1wrPqR/npM3LkkX47Qdtn5qDxnwDa4ekJcwJnSofc 7VD7xqIFwOcVGWFH6RRYjwu9k1MjoPqbeB1Hs+unnigkForuqpyy9izdLxxt7Yzv spmPIJ5Svs+kW7yUuxPGPBQX2KLJ4S3uwbCXgQRWkbsj3pSF/6pzF2wGTv5L1Tvn gJmetApGh/U5iIQGL4CNGGA5oL9Y5YFnDUYpNr9sYzXcOAgGwb97MgHBxwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFIRPAt9cP0aQF0gagsPzjjJPiRZvMB8GA1UdIwQY MBaAFEFC0/mzESbghQJlcVyfwyF0tVekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVVMVC1iTVJKdUNGQW1WeFhKX0RJWFMxVjZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hZTE5NTMtYmZjNC00MmI1LTk1MGIt OWM5OGQxMTE5N2I3LzEvaEU4QzMxd19ScEFYU0JxQ3dfT09Nay1KRm04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9hZTE5NTMtYmZjNC00MmI1LTk1MGItOWM5OGQxMTE5N2I3 LzEvUVVMVC1iTVJKdUNGQW1WeFhKX0RJWFMxVjZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBLZ8cAwQA XnxJMA8EAgACMAkDBwAqD2fAAAAwDQYJKoZIhvcNAQELBQADggEBAI8tT1lbeWf8 kwwbJWtQ02nY5fVjCa3za4kX6Kh0koC2G27lbSy96ssxoIPLE0f4jYNd8tkdzFps ICgFPtnwCO9AkyLv7KLQe9SBfGDYYSS8/6TyAnclJ/j+Fn4qoqxOAZc3PhVSWUkA MUtQfFTSx40FW8amp7JusVIvofDjI+JxrYFBv5IXMl327/UlyWSbKKijHmqOXcBt 3TDq4GWdeyRg/TQ6xIwifv/1LMpgnInG8vEQoJ8+W5eiK74XxGJgU2PTbp8kx2cK WaBOHCA2CX3LgleoghlxK3VOPvwn3OzEbr9XtusipKgVBgtHcLeji1+bYT5d0iWo ZUxLUN/39xI= -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:44 2026 by rpki-client