This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/AqX4cpDOhHTmMNAn1DGYnWhw8HU.roa File: AqX4cpDOhHTmMNAn1DGYnWhw8HU.roa (raw, json) Hash identifier: 9bBkQHe0thtU1VviyjAqiTDBasPAlpZJlmdOXLKeTa4= Subject key identifier: 02:A5:F8:72:90:CE:84:74:E6:30:D0:27:D4:31:98:9D:68:70:F0:75 Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E3833457076E0256C7AF791859BFC4A Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/AqX4cpDOhHTmMNAn1DGYnWhw8HU.roa Signing time: Fri 02 Jan 2026 10:19:30 +0000 ROA not before: Fri 02 Jan 2026 10:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212128 IP address blocks: 46.161.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:33:45:70:76:e0:25:6c:7a:f7:91:85:9b:fc:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02a5f87290ce8474e630d027d431989d6870f075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:65:0c:66:70:0c:5b:26:cf:d1:2f:4d:50:d5: 48:9f:e2:ac:36:ab:09:e2:98:6a:a9:62:54:3b:9d: ce:94:10:2d:a8:43:82:4b:e6:a2:d1:31:b2:f1:b7: 14:5f:fc:d0:9a:e5:37:b6:e7:31:1a:fe:62:5a:47: e6:98:13:ac:e2:e9:14:0c:47:a2:bf:01:71:f0:8c: 21:5e:41:a2:04:0b:65:66:c9:9d:8f:0f:85:70:8a: be:e6:1f:9f:1a:19:86:2b:d3:90:8f:a6:c5:4a:56: be:db:4f:61:e9:36:cb:82:3f:60:f2:fa:31:fb:d5: 7f:5b:78:71:4c:82:26:d8:39:af:34:1a:af:8f:98: c5:93:ba:63:78:27:ae:c6:ef:70:1c:46:21:f3:02: 3d:79:b2:c8:65:b3:b5:0a:26:ee:0c:ae:13:dd:b4: 44:2b:ef:c8:f5:54:c4:b7:65:d8:5d:db:c5:57:95: be:a4:0a:9e:0d:c9:22:74:c7:4c:95:8f:70:98:c8: 64:34:cf:9c:49:84:b7:6e:81:8d:c0:7d:94:c6:e4: 71:ca:b9:3e:f7:87:b7:55:73:e6:72:36:26:95:7a: 83:66:ae:25:c0:45:db:64:d2:62:de:a4:c1:05:8a: 98:72:71:3c:ff:f0:a6:6e:97:92:8e:29:bd:02:54: d1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A5:F8:72:90:CE:84:74:E6:30:D0:27:D4:31:98:9D:68:70:F0:75 X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/AqX4cpDOhHTmMNAn1DGYnWhw8HU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.161.4.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:0f:0c:e8:cd:eb:d5:26:ab:36:cd:c0:90:02:61:25:32:0f: b2:e6:b2:5f:dc:69:ff:04:00:f0:bf:84:a9:ad:94:79:d0:5c: ea:34:35:6b:77:3c:fc:60:63:94:7a:f7:bb:b9:51:91:5e:16: 78:2c:c6:ca:96:af:5a:d3:9b:95:fc:90:18:72:19:8c:5d:5a: 65:e2:52:cb:be:d3:06:07:93:71:58:f5:20:02:0c:31:e4:0b: eb:8a:17:bc:82:f0:ef:ca:8a:82:73:16:37:c4:c9:c7:46:19: 50:f7:93:03:b7:ce:d4:b6:a2:b4:0d:88:22:57:eb:1e:1a:0c: a2:8c:0f:50:fb:e6:ac:d8:1e:19:92:74:84:fd:28:1b:16:25: 72:c8:68:ed:a0:a2:25:2e:af:37:f4:a5:ab:c0:35:33:75:9f: 72:e4:a7:55:d9:2a:a7:07:15:ad:59:16:c7:75:8b:54:c5:16: 71:f4:d0:8a:66:a3:26:ee:af:86:21:4c:c4:0a:5f:0d:28:5a: fb:ae:2a:26:69:47:88:61:46:97:18:0f:eb:04:00:8e:1b:eb: 3a:64:0d:aa:6f:58:79:1b:d4:01:bb:a5:c2:8b:56:dd:1e:be: d1:a0:c4:3f:00:35:b5:cd:4a:2c:9d:3f:a7:5c:8b:4c:81:93: 6e:01:79:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ODNFcHbgJWx695GFm/xKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmE1Zjg3MjkwY2U4NDc0ZTYzMGQwMjdkNDMxOTg5ZDY4NzBmMDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GUMZnAMWybP0S9NUNVIn+KsNqsJ 4phqqWJUO53OlBAtqEOCS+ai0TGy8bcUX/zQmuU3tucxGv5iWkfmmBOs4ukUDEei vwFx8IwhXkGiBAtlZsmdjw+FcIq+5h+fGhmGK9OQj6bFSla+209h6TbLgj9g8vox +9V/W3hxTIIm2DmvNBqvj5jFk7pjeCeuxu9wHEYh8wI9ebLIZbO1CibuDK4T3bRE K+/I9VTEt2XYXdvFV5W+pAqeDckidMdMlY9wmMhkNM+cSYS3boGNwH2UxuRxyrk+ 94e3VXPmcjYmlXqDZq4lwEXbZNJi3qTBBYqYcnE8//CmbpeSjim9AlTR7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAKl+HKQzoR05jDQJ9QxmJ1ocPB1MB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvQXFYNGNwRE9oSFRtTU5BbjFER1luV2h3OEhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLqEEMA0G CSqGSIb3DQEBCwUAA4IBAQBaDwzozevVJqs2zcCQAmElMg+y5rJf3Gn/BADwv4Sp rZR50FzqNDVrdzz8YGOUeve7uVGRXhZ4LMbKlq9a05uV/JAYchmMXVpl4lLLvtMG B5NxWPUgAgwx5Avrihe8gvDvyoqCcxY3xMnHRhlQ95MDt87UtqK0DYgiV+seGgyi jA9Q++as2B4ZknSE/SgbFiVyyGjtoKIlLq839KWrwDUzdZ9y5KdV2SqnBxWtWRbH dYtUxRZx9NCKZqMm7q+GIUzECl8NKFr7riomaUeIYUaXGA/rBACOG+s6ZA2qb1h5 G9QBu6XCi1bdHr7RoMQ/ADW1zUosnT+nXItMgZNuAXkf -----END CERTIFICATE-----Generated at Tue Jan 20 09:22:00 2026 by rpki-client