This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/eAL2yGu51atOWwkpo2p94ROsNrA.roa
File: eAL2yGu51atOWwkpo2p94ROsNrA.roa (raw, json)
Hash identifier: O7Bo5KNlfLKlpNN5rLaMCA8Bb6SLj1sab1AgXIEp/xc=
Subject key identifier: 78:02:F6:C8:6B:B9:D5:AB:4E:5B:09:29:A3:6A:7D:E1:13:AC:36:B0
Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial: 019B7A5A77386D65E47BB5B79BD75970CDB0
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/eAL2yGu51atOWwkpo2p94ROsNrA.roa
Signing time: Thu 01 Jan 2026 16:18:27 +0000
ROA not before: Thu 01 Jan 2026 16:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211619
IP address blocks: 45.95.168.0/24 maxlen: 24
45.95.169.0/24 maxlen: 24
45.95.170.0/24 maxlen: 24
150.40.96.0/19 maxlen: 24
203.31.217.0/24 maxlen: 24
2a0e:bfc0::/32 maxlen: 32
2a0e:bfc1::/32 maxlen: 32
2a0e:bfc2::/32 maxlen: 32
2a0e:bfc3::/32 maxlen: 32
2a0e:bfc4::/32 maxlen: 32
2a0e:bfc5::/32 maxlen: 32
2a0e:bfc6::/32 maxlen: 32
2a0e:bfc7::/40 maxlen: 40
2a0e:bfc7:100::/40 maxlen: 40
2a0e:bfc7:200::/40 maxlen: 40
2a0e:bfc7:1000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:77:38:6d:65:e4:7b:b5:b7:9b:d7:59:70:cd:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Validity
Not Before: Jan 1 16:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7802f6c86bb9d5ab4e5b0929a36a7de113ac36b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b8:d5:bd:26:ea:8a:c1:ae:82:68:a8:96:57:
c4:d3:3a:91:57:54:c9:51:95:93:a2:0e:09:fa:a2:
2c:b9:33:26:93:6f:12:4b:30:98:30:99:7b:7c:f4:
ad:49:3c:31:ee:83:7f:19:be:ea:b7:8a:38:f8:1f:
3d:4d:48:81:e8:ee:d4:dc:9c:3e:98:2b:77:13:04:
d0:d3:0e:1f:5f:27:ea:0f:64:92:e4:6c:99:3c:67:
c3:1d:60:3e:00:87:c4:04:08:ad:66:33:27:ca:12:
3b:f0:a8:d6:6c:0b:0f:7b:65:10:c5:07:ee:c9:f2:
51:85:1a:33:d3:6f:6c:7c:bf:62:9c:41:63:d1:f0:
c3:4d:bf:5e:15:21:fc:31:23:eb:73:07:5a:6b:d4:
db:f3:39:e8:ab:f3:ca:5a:5e:07:01:bf:c0:77:a6:
7d:e9:9e:9d:8f:7d:b0:3f:b7:33:00:82:48:6e:8e:
4a:a1:7b:15:06:7c:51:43:13:1b:5e:15:0d:9e:62:
b8:8a:b1:18:26:5a:aa:31:83:6a:64:2c:83:af:9d:
44:07:32:27:37:ec:f6:04:b2:d8:af:26:1f:67:3c:
29:3c:42:a1:3b:84:89:de:cb:a6:21:eb:f8:8b:41:
ad:ef:8f:a3:ad:d7:86:de:04:e7:a5:6d:7a:c6:90:
90:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:02:F6:C8:6B:B9:D5:AB:4E:5B:09:29:A3:6A:7D:E1:13:AC:36:B0
X509v3 Authority Key Identifier:
keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/eAL2yGu51atOWwkpo2p94ROsNrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.168.0-45.95.170.255
150.40.96.0/19
203.31.217.0/24
IPv6:
2a0e:bfc0::-2a0e:bfc7:2ff:ffff:ffff:ffff:ffff:ffff
2a0e:bfc7:1000::/38
Signature Algorithm: sha256WithRSAEncryption
40:94:9e:89:14:46:03:6c:2d:17:f1:09:70:6c:2f:13:67:c2:
0f:8c:a2:3d:c5:ca:27:3a:19:54:12:30:55:dc:e9:58:d4:a9:
09:e9:f7:8a:81:2e:8a:2f:69:dc:4d:0d:ba:17:7f:b4:9b:91:
79:e0:ab:10:10:35:36:a8:cd:c7:7e:e4:44:7e:08:cf:e8:99:
18:06:15:49:64:61:be:1c:9d:af:26:9f:14:1e:ca:bc:d1:b0:
fb:9e:96:37:47:17:40:0d:95:58:8f:c4:ef:ec:61:fb:f1:03:
85:4b:bf:5f:44:ac:1f:90:7f:ef:e1:aa:0d:3c:f2:81:00:04:
54:4a:89:5d:cd:f2:0c:64:d4:61:7c:03:12:94:6a:4a:94:a8:
46:5c:b4:d3:c6:c0:0b:ea:05:9d:af:01:41:aa:62:3e:ec:bb:
6f:f6:0c:63:71:b7:de:e0:08:85:db:70:fe:92:d0:b3:ba:e2:
98:b9:3e:67:80:02:d0:a3:18:6e:69:7a:a8:6d:93:98:3f:d6:
a0:b2:bd:9a:5c:0b:f8:2c:f1:82:fd:07:ef:e5:a6:b8:5f:92:
9a:0e:85:0d:09:8b:79:75:66:42:fb:8d:b1:13:2a:b2:ba:9a:
b4:ee:35:2a:c3:24:6d:1a:eb:73:65:33:8b:24:ef:d0:bb:07:
1a:ae:40:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 03:23:02 2026 by rpki-client