This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/C1-Nxppz5nVJinA3y75we-6LfzM.roa File: C1-Nxppz5nVJinA3y75we-6LfzM.roa (raw, json) Hash identifier: WXUyQHF2WEC2q0GIVU/Dqgq4uaaTnMJgZlUofAOuj0k= Subject key identifier: 0B:5F:8D:C6:9A:73:E6:75:49:8A:70:37:CB:BE:70:7B:EE:8B:7F:33 Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4 Certificate serial: 019C08045FF580309F65CF1223D9A748E325 Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/C1-Nxppz5nVJinA3y75we-6LfzM.roa Signing time: Thu 29 Jan 2026 04:30:30 +0000 ROA not before: Thu 29 Jan 2026 04:30:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201744 IP address blocks: 45.95.171.0/24 maxlen: 24 150.40.97.0/24 maxlen: 24 150.40.109.0/24 maxlen: 24 150.40.110.0/24 maxlen: 24 150.40.111.0/24 maxlen: 24 150.40.112.0/24 maxlen: 24 203.31.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 10:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:08:04:5f:f5:80:30:9f:65:cf:12:23:d9:a7:48:e3:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4 Validity Not Before: Jan 29 04:30:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b5f8dc69a73e675498a7037cbbe707bee8b7f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c1:07:74:12:ee:4f:da:30:df:31:1d:34:bc: 34:45:dd:dd:aa:ce:8a:21:29:97:90:52:9a:db:a4: 0f:9a:b8:e7:05:af:f2:58:cb:65:ea:a4:89:05:a1: 5f:56:06:fb:16:05:8f:f2:c3:28:8d:0a:89:12:c7: 76:5f:cb:c9:4a:71:03:e5:13:0f:fb:85:a0:a4:28: 4f:e4:eb:ff:0f:52:4f:fc:f4:86:53:4c:57:2f:33: 09:46:a8:8c:2c:ed:53:b0:8e:34:01:99:00:60:dc: cf:ff:3d:62:2c:46:5c:de:79:fa:97:e1:e6:2d:b6: b8:56:dc:8d:5c:bc:9b:7f:ff:e4:39:54:27:76:d4: fd:ca:c7:9d:fa:ca:e9:6a:46:7b:1f:ce:71:27:14: 16:62:6a:65:c5:db:bb:f3:9a:25:ff:d2:9e:ff:ea: c2:eb:f7:1a:7a:4e:20:7f:a3:72:d6:df:6c:66:f6: ca:bc:54:68:10:59:56:e6:a7:a1:27:1b:80:d2:f2: 61:ad:05:e9:56:80:cf:7f:6d:88:41:29:a8:ac:d9: 70:e4:b7:bc:22:83:60:ba:ac:9b:3f:2c:4f:d0:7e: e4:c0:7d:b0:ff:d1:ff:55:1a:66:f3:a1:10:25:e9: a4:32:49:0d:c8:1f:ef:d2:a2:d1:ed:04:9a:2c:9e: a2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:5F:8D:C6:9A:73:E6:75:49:8A:70:37:CB:BE:70:7B:EE:8B:7F:33 X509v3 Authority Key Identifier: keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/C1-Nxppz5nVJinA3y75we-6LfzM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.171.0/24 150.40.97.0/24 150.40.109.0-150.40.112.255 203.31.217.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:d8:d3:93:0f:13:bd:ce:c3:6c:5e:c3:e7:10:0f:79:87:47: 9c:9d:e9:42:91:fe:01:ac:2f:62:13:1d:34:df:8b:78:6c:cd: c3:1d:0a:fb:7d:c5:59:ab:8a:a8:83:bd:f9:f5:c9:43:c6:ee: d6:37:4d:d7:f1:84:42:6e:9a:3f:9b:c1:d5:96:26:38:94:75: 07:8b:35:07:a1:ff:a7:97:53:96:4a:d3:f3:91:db:74:7d:1d: 1f:29:2e:63:97:1c:c8:96:45:1d:99:73:89:a0:93:32:a3:d0: 78:ff:7d:ff:2e:8b:35:a7:cb:02:35:d4:8d:91:7b:a9:85:eb: a1:ca:29:4d:d4:ab:eb:ad:c6:65:9f:a4:45:56:5c:e0:7d:52: 5f:a1:87:ae:ae:90:6d:f2:2e:d2:09:5d:c3:f0:b5:c5:d6:23: 5c:0d:aa:73:49:30:bc:8d:e9:dd:52:f7:f5:e6:91:70:26:a2: e2:e5:d0:16:52:ec:cf:fc:ef:4d:7b:a3:07:ea:ae:46:a3:e5: c2:5d:1c:b0:1a:70:42:53:d5:b4:02:de:07:3d:24:9f:c5:54: 5a:f1:1a:ad:c5:27:cd:0e:19:6b:39:c3:cd:a7:13:cc:1d:34: 4f:6a:02:6a:64:b5:ce:05:4a:8f:05:fd:43:e9:2c:17:e8:15: eb:21:4f:f1 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZwIBF/1gDCfZc8SI9mnSOMlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYTk2MmMxZmU4ZTJlMTJhMzU1NzZmZDYyOTg3YTBjYmJh NDYzZDQwHhcNMjYwMTI5MDQzMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjVmOGRjNjlhNzNlNjc1NDk4YTcwMzdjYmJlNzA3YmVlOGI3ZjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsEHdBLuT9ow3zEdNLw0Rd3dqs6K ISmXkFKa26QPmrjnBa/yWMtl6qSJBaFfVgb7FgWP8sMojQqJEsd2X8vJSnED5RMP +4WgpChP5Ov/D1JP/PSGU0xXLzMJRqiMLO1TsI40AZkAYNzP/z1iLEZc3nn6l+Hm Lba4VtyNXLybf//kOVQndtT9ysed+srpakZ7H85xJxQWYmplxdu785ol/9Ke/+rC 6/caek4gf6Ny1t9sZvbKvFRoEFlW5qehJxuA0vJhrQXpVoDPf22IQSmorNlw5Le8 IoNguqybPyxP0H7kwH2w/9H/VRpm86EQJemkMkkNyB/v0qLR7QSaLJ6ibQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFAtfjcaac+Z1SYpwN8u+cHvui38zMB8GA1UdIwQY MBaAFAKpYsH+ji4So1V2/WKYegy7pGPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYt N2QxMzQ5ODBjNWJlLzEvQzEtTnhwcHo1blZKaW5BM3k3NXdlLTZMZnpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYtN2QxMzQ5ODBjNWJl LzEvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQALV+rAwQA lihhMAwDBACWKG0DBACWKHADBADLH9kwDQYJKoZIhvcNAQELBQADggEBAC7Y05MP E73Ow2xew+cQD3mHR5yd6UKR/gGsL2ITHTTfi3hszcMdCvt9xVmriqiDvfn1yUPG 7tY3TdfxhEJumj+bwdWWJjiUdQeLNQeh/6eXU5ZK0/OR23R9HR8pLmOXHMiWRR2Z c4mgkzKj0Hj/ff8uizWnywI11I2Re6mF66HKKU3Uq+utxmWfpEVWXOB9Ul+hh66u kG3yLtIJXcPwtcXWI1wNqnNJMLyN6d1S9/XmkXAmouLl0BZS7M/87017owfqrkaj 5cJdHLAacEJT1bQC3gc9JJ/FVFrxGq3FJ80OGWs5w82nE8wdNE9qAmpktc4FSo8F /UPpLBfoFeshT/E= -----END CERTIFICATE-----Generated at Tue Feb 3 19:35:03 2026 by rpki-client