This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/8Rm1SgZg1Bs53oWUPgJYLQwc6v0.roa File: 8Rm1SgZg1Bs53oWUPgJYLQwc6v0.roa (raw, json) Hash identifier: CN9FQKWnYFvT45yEg6pP7QIRjyetozFoulGfr16sMF4= Subject key identifier: F1:19:B5:4A:06:60:D4:1B:39:DE:85:94:3E:02:58:2D:0C:1C:EA:FD Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4 Certificate serial: 019C0801A0E7419EB6F5579B64E33E849196 Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/8Rm1SgZg1Bs53oWUPgJYLQwc6v0.roa Signing time: Thu 29 Jan 2026 04:27:30 +0000 ROA not before: Thu 29 Jan 2026 04:27:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211619 IP address blocks: 45.95.168.0/24 maxlen: 24 45.95.169.0/24 maxlen: 24 45.95.170.0/24 maxlen: 24 150.40.96.0/19 maxlen: 24 2a0e:bfc0::/32 maxlen: 32 2a0e:bfc1::/32 maxlen: 32 2a0e:bfc2::/32 maxlen: 32 2a0e:bfc3::/32 maxlen: 32 2a0e:bfc4::/32 maxlen: 32 2a0e:bfc5::/32 maxlen: 32 2a0e:bfc6::/32 maxlen: 32 2a0e:bfc7::/40 maxlen: 40 2a0e:bfc7:100::/40 maxlen: 40 2a0e:bfc7:200::/40 maxlen: 40 2a0e:bfc7:1000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:08:01:a0:e7:41:9e:b6:f5:57:9b:64:e3:3e:84:91:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4 Validity Not Before: Jan 29 04:27:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f119b54a0660d41b39de85943e02582d0c1ceafd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c2:12:54:4e:ec:44:33:58:aa:99:2e:9c:70: a2:16:6f:6c:8a:95:ec:1f:e9:7b:df:5a:c7:3f:77: ac:5d:e0:d5:d9:9f:e7:15:94:48:08:5b:01:ee:f8: aa:6d:07:cc:28:2f:04:fb:5f:57:2d:d4:d5:c8:f0: a9:ab:c5:12:99:40:39:d9:fd:2a:40:b8:f7:e2:f2: 1a:92:b6:a1:a4:26:1f:f0:f9:d3:1c:90:0c:0d:8e: 20:1b:e7:bd:ed:91:75:a5:61:41:96:2f:b5:ba:9b: 95:c1:76:48:eb:4d:6d:fd:89:75:e6:a2:68:92:33: 98:5a:56:82:81:e8:38:57:07:b9:af:02:e9:a8:d3: 5c:f5:de:0a:65:37:dc:24:22:95:75:40:05:2a:fc: 1f:37:97:e8:31:34:73:61:dd:dc:d0:a3:39:99:86: f6:04:a8:d8:9c:46:d7:20:18:b7:39:71:7b:25:71: 22:81:83:e6:88:32:9a:86:96:cf:3a:20:bd:a4:46: 2e:5d:d9:c3:b4:bd:2b:f0:28:0d:71:79:f5:47:e9: 20:b6:72:cb:ce:d9:78:1d:1b:d0:1f:68:62:29:ee: 9b:ac:d4:9d:37:53:54:76:c5:3f:1e:da:88:5a:13: 63:c5:80:4a:7c:4a:f8:a9:f0:d9:4b:3a:c6:81:02: ff:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:19:B5:4A:06:60:D4:1B:39:DE:85:94:3E:02:58:2D:0C:1C:EA:FD X509v3 Authority Key Identifier: keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/8Rm1SgZg1Bs53oWUPgJYLQwc6v0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.168.0-45.95.170.255 150.40.96.0/19 IPv6: 2a0e:bfc0::-2a0e:bfc7:2ff:ffff:ffff:ffff:ffff:ffff 2a0e:bfc7:1000::/38 Signature Algorithm: sha256WithRSAEncryption 54:ff:fe:49:1b:0e:ef:a8:e0:ac:29:74:9f:57:88:cc:d5:3b: 57:c1:17:12:33:ba:5b:ee:20:0a:54:b4:f6:37:53:31:76:41: 53:a4:26:4d:b2:b7:46:d9:06:d7:ec:90:4a:2a:84:07:93:4e: 6d:60:7f:29:71:c9:8b:87:e5:aa:45:15:3b:08:1b:3f:19:38: 12:1e:26:15:51:b8:bf:4e:d4:86:a1:74:95:c1:e7:75:2a:f3: 70:2d:eb:ad:00:8c:97:c2:af:0e:41:55:fb:23:5e:bd:91:48: 8d:a9:aa:0f:50:cb:a7:a7:5b:b4:dd:f1:51:eb:9e:7b:11:1f: 27:c9:6c:46:56:18:b3:95:c6:69:24:2e:16:3f:ed:6f:f3:ad: 51:e4:60:99:a5:f9:aa:56:0f:50:88:4a:5a:30:d4:ba:8a:37: c6:87:2c:39:19:9a:43:5b:1b:30:94:ec:d9:48:dd:38:7b:a8: d8:76:7e:a9:4e:f3:f4:1c:12:bc:c4:dc:2d:98:d3:53:96:fb: f2:e0:05:fe:7e:91:35:86:ba:9d:89:12:de:a2:bd:59:0b:45: cb:6e:90:2f:a3:ed:ac:0a:f0:25:a7:92:3e:26:ea:c6:84:ab: ce:91:da:ad:4f:3d:b3:c7:8b:4f:12:67:1f:3e:ab:d1:ca:04: 6c:84:7b:77 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZwIAaDnQZ629VebZOM+hJGWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYTk2MmMxZmU4ZTJlMTJhMzU1NzZmZDYyOTg3YTBjYmJh NDYzZDQwHhcNMjYwMTI5MDQyNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTE5YjU0YTA2NjBkNDFiMzlkZTg1OTQzZTAyNTgyZDBjMWNlYWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcISVE7sRDNYqpkunHCiFm9sipXs H+l731rHP3esXeDV2Z/nFZRICFsB7viqbQfMKC8E+19XLdTVyPCpq8USmUA52f0q QLj34vIakrahpCYf8PnTHJAMDY4gG+e97ZF1pWFBli+1upuVwXZI601t/Yl15qJo kjOYWlaCgeg4Vwe5rwLpqNNc9d4KZTfcJCKVdUAFKvwfN5foMTRzYd3c0KM5mYb2 BKjYnEbXIBi3OXF7JXEigYPmiDKahpbPOiC9pEYuXdnDtL0r8CgNcXn1R+kgtnLL ztl4HRvQH2hiKe6brNSdN1NUdsU/HtqIWhNjxYBKfEr4qfDZSzrGgQL/AQIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFPEZtUoGYNQbOd6FlD4CWC0MHOr9MB8GA1UdIwQY MBaAFAKpYsH+ji4So1V2/WKYegy7pGPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYt N2QxMzQ5ODBjNWJlLzEvOFJtMVNnWmcxQnM1M29XVVBnSllMUXdjNnYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYtN2QxMzQ5ODBjNWJl LzEvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAaBAIAATAUMAwDBAMtX6gD BAAtX6oDBAWWKGAwHwQCAAIwGTAPAwUGKg6/wAMGACoOv8cCAwYCKg6/xxAwDQYJ KoZIhvcNAQELBQADggEBAFT//kkbDu+o4KwpdJ9XiMzVO1fBFxIzulvuIApUtPY3 UzF2QVOkJk2yt0bZBtfskEoqhAeTTm1gfylxyYuH5apFFTsIGz8ZOBIeJhVRuL9O 1IahdJXB53Uq83At660AjJfCrw5BVfsjXr2RSI2pqg9Qy6enW7Td8VHrnnsRHyfJ bEZWGLOVxmkkLhY/7W/zrVHkYJml+apWD1CISlow1LqKN8aHLDkZmkNbGzCU7NlI 3Th7qNh2fqlO8/QcErzE3C2Y01OW+/LgBf5+kTWGup2JEt6ivVkLRctukC+j7awK 8CWnkj4m6saEq86R2q1PPbPHi08SZx8+q9HKBGyEe3c= -----END CERTIFICATE-----Generated at Tue Feb 10 07:12:47 2026 by rpki-client