This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/aM3jDyUSBlPTCNMfpXY5YwnPsA8.roa File: aM3jDyUSBlPTCNMfpXY5YwnPsA8.roa (raw, json) Hash identifier: jUnTNL0+v3OE/gFOXVeP3LxsqBN3nJHAQLUeEsSvDk8= Subject key identifier: 68:CD:E3:0F:25:12:06:53:D3:08:D3:1F:A5:76:39:63:09:CF:B0:0F Certificate issuer: /CN=5871720a8884167fef82a49267661fb346d7561a Certificate serial: 019B7C7FE4F49895A4CB534E052878BAF065 Authority key identifier: 58:71:72:0A:88:84:16:7F:EF:82:A4:92:67:66:1F:B3:46:D7:56:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/aM3jDyUSBlPTCNMfpXY5YwnPsA8.roa Signing time: Fri 02 Jan 2026 02:18:34 +0000 ROA not before: Fri 02 Jan 2026 02:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208070 IP address blocks: 45.159.168.0/22 maxlen: 22 45.159.168.0/24 maxlen: 24 45.159.169.0/24 maxlen: 24 45.159.170.0/24 maxlen: 24 45.159.171.0/24 maxlen: 24 2a01:fc00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:e4:f4:98:95:a4:cb:53:4e:05:28:78:ba:f0:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5871720a8884167fef82a49267661fb346d7561a Validity Not Before: Jan 2 02:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68cde30f25120653d308d31fa576396309cfb00f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:60:74:02:6c:0d:76:0c:2c:cd:8e:65:be:9c: 48:b1:5e:df:d4:ff:50:f0:66:e0:29:d0:09:f7:ed: c6:10:ee:72:af:2f:9b:df:ae:52:65:f1:d2:f5:0f: 62:79:a4:ed:d6:51:b6:72:97:e3:8b:c3:c7:6f:74: d4:19:b6:30:6b:57:d3:93:09:c4:4f:08:0a:1a:a5: ff:1a:47:da:b4:02:58:a9:af:22:61:fb:52:93:31: 1f:bc:18:4e:02:c1:23:82:e6:33:15:7b:84:a5:93: b3:7f:8b:03:a4:38:8e:57:16:f1:5a:ee:b7:02:1c: f6:9e:30:b5:90:9c:fe:90:a3:cc:38:ff:92:d5:66: ea:9c:47:7b:02:da:45:46:61:21:0d:29:1f:76:a0: e8:01:a8:e8:5c:ae:4e:c2:74:8a:70:5b:e7:b0:0d: 2e:17:95:20:df:ba:51:ed:61:f0:28:f2:26:9a:f6: 12:49:6c:86:b6:e4:f1:de:66:95:3e:b4:85:24:1a: 0f:aa:4a:62:ea:eb:c1:dd:62:57:1c:50:84:51:3f: be:8a:1c:cc:9e:80:f6:e9:a2:d4:3f:cb:8c:71:ca: 3c:9d:71:50:38:ac:3c:70:8a:f4:7b:53:b7:22:a8: cc:29:f2:70:fd:03:ed:d0:93:91:68:99:f9:de:ae: cd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CD:E3:0F:25:12:06:53:D3:08:D3:1F:A5:76:39:63:09:CF:B0:0F X509v3 Authority Key Identifier: keyid:58:71:72:0A:88:84:16:7F:EF:82:A4:92:67:66:1F:B3:46:D7:56:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/aM3jDyUSBlPTCNMfpXY5YwnPsA8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.168.0/22 IPv6: 2a01:fc00::/29 Signature Algorithm: sha256WithRSAEncryption bd:9b:1c:0c:67:74:26:28:53:9c:fc:7c:f2:ef:83:81:71:64: c2:0a:a6:52:d4:8c:a0:e0:1e:6e:c2:a9:56:30:68:c9:32:57: fe:72:ca:ff:da:d3:3b:e8:02:20:f2:01:ef:95:b4:a0:d4:26: 88:ae:26:d3:c1:b9:4a:fa:08:ef:b7:32:4e:06:e7:e0:53:d4: 80:8f:0a:52:4a:24:57:c2:d2:91:d7:96:d6:af:47:95:1c:38: 9c:fa:53:a4:81:35:cd:37:6b:05:77:04:20:45:10:dc:6c:a8: 81:04:70:27:1e:3e:13:35:c3:f2:e2:5b:a0:48:91:e1:f0:46: 2f:32:2d:4c:42:ea:b0:66:a5:3b:07:a4:84:f2:35:77:0f:f0: d1:4e:cc:da:76:3b:1e:8c:de:af:65:7c:e5:d1:d7:8e:1f:8e: c7:cb:d8:31:bd:a3:26:bb:55:be:e2:2b:82:c9:4e:57:0e:d3: 36:7e:09:6e:fd:4d:88:e5:ad:f0:fb:0d:08:0b:38:e7:8f:f1: 32:a5:2b:0d:18:d4:14:64:ff:c3:92:e9:85:49:33:b9:95:3e: f7:e5:cb:ee:23:3e:7a:41:ac:9f:7b:db:08:96:e4:77:d2:31: 75:6f:97:7d:13:c1:70:15:29:99:4f:13:94:8e:d0:ab:e2:10: 2b:74:fd:f4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8f+T0mJWky1NOBSh4uvBlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NzE3MjBhODg4NDE2N2ZlZjgyYTQ5MjY3NjYxZmIzNDZk NzU2MWEwHhcNMjYwMTAyMDIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGNkZTMwZjI1MTIwNjUzZDMwOGQzMWZhNTc2Mzk2MzA5Y2ZiMDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+GB0AmwNdgwszY5lvpxIsV7f1P9Q 8GbgKdAJ9+3GEO5yry+b365SZfHS9Q9ieaTt1lG2cpfji8PHb3TUGbYwa1fTkwnE TwgKGqX/GkfatAJYqa8iYftSkzEfvBhOAsEjguYzFXuEpZOzf4sDpDiOVxbxWu63 Ahz2njC1kJz+kKPMOP+S1WbqnEd7AtpFRmEhDSkfdqDoAajoXK5OwnSKcFvnsA0u F5Ug37pR7WHwKPImmvYSSWyGtuTx3maVPrSFJBoPqkpi6uvB3WJXHFCEUT++ihzM noD26aLUP8uMcco8nXFQOKw8cIr0e1O3IqjMKfJw/QPt0JORaJn53q7NCQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGjN4w8lEgZT0wjTH6V2OWMJz7APMB8GA1UdIwQY MBaAFFhxcgqIhBZ/74KkkmdmH7NG11YaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0hGeUNvaUVGbl92Z3FTU1oyWWZzMGJYVmhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wZmE2MDItZjZiOC00N2FlLWJmMDYt N2RhODljZGE5ZjcxLzEvYU0zakR5VVNCbFBUQ05NZnBYWTVZd25Qc0E4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8wZmE2MDItZjZiOC00N2FlLWJmMDYtN2RhODljZGE5Zjcx LzEvV0hGeUNvaUVGbl92Z3FTU1oyWWZzMGJYVmhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZ+oMA0E AgACMAcDBQMqAfwAMA0GCSqGSIb3DQEBCwUAA4IBAQC9mxwMZ3QmKFOc/Hzy74OB cWTCCqZS1Iyg4B5uwqlWMGjJMlf+csr/2tM76AIg8gHvlbSg1CaIribTwblK+gjv tzJOBufgU9SAjwpSSiRXwtKR15bWr0eVHDic+lOkgTXNN2sFdwQgRRDcbKiBBHAn Hj4TNcPy4lugSJHh8EYvMi1MQuqwZqU7B6SE8jV3D/DRTszadjsejN6vZXzl0deO H47Hy9gxvaMmu1W+4iuCyU5XDtM2fglu/U2I5a3w+w0ICzjnj/EypSsNGNQUZP/D kumFSTO5lT735cvuIz56Qayfe9sIluR30jF1b5d9E8FwFSmZTxOUjtCr4hArdP30 -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:17 2026 by rpki-client