This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/ap-hePAObGM0xD9pl1yT2LqZzQg.roa File: ap-hePAObGM0xD9pl1yT2LqZzQg.roa (raw, json) Hash identifier: mxBd1kBKjM1E0LiaQSAHHf7cP2igd3O8Gy2yRTKiPCI= Subject key identifier: 6A:9F:A1:78:F0:0E:6C:63:34:C4:3F:69:97:5C:93:D8:BA:99:CD:08 Certificate issuer: /CN=5d6317f6936e6b578b38c3dfb198025498fcaea1 Certificate serial: 019B7CED3F43AAEA8BFFE5FE9D55BCA41195 Authority key identifier: 5D:63:17:F6:93:6E:6B:57:8B:38:C3:DF:B1:98:02:54:98:FC:AE:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/ap-hePAObGM0xD9pl1yT2LqZzQg.roa Signing time: Fri 02 Jan 2026 04:18:01 +0000 ROA not before: Fri 02 Jan 2026 04:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208659 IP address blocks: 45.81.92.0/22 maxlen: 22 45.81.92.0/24 maxlen: 24 45.81.93.0/24 maxlen: 24 45.81.94.0/24 maxlen: 24 45.81.95.0/24 maxlen: 24 2a0e:5480::/29 maxlen: 29 2a0e:5480::/30 maxlen: 30 2a0e:5484::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.crl rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:3f:43:aa:ea:8b:ff:e5:fe:9d:55:bc:a4:11:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d6317f6936e6b578b38c3dfb198025498fcaea1 Validity Not Before: Jan 2 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a9fa178f00e6c6334c43f69975c93d8ba99cd08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bb:92:04:3a:f4:c2:d3:d4:aa:a2:a2:04:36: 4f:72:2c:bd:7d:cd:7d:a1:9f:ae:ff:1b:e1:a0:35: 45:47:cb:5a:db:b9:5a:3a:09:26:c6:c9:b8:fa:8c: 0d:19:08:8f:67:a6:20:3c:20:db:99:4c:18:0b:52: fa:76:ee:d4:d1:b9:dd:d3:1e:2a:a5:59:e6:d1:90: 41:24:e0:30:17:32:0c:95:52:ae:2f:f6:a0:e3:31: 53:53:c4:7d:0b:c0:c0:72:78:37:f9:3d:43:93:ff: f4:76:31:1d:89:4c:64:34:70:5b:f2:3d:4c:04:11: c9:95:5b:92:38:ef:85:07:6b:d3:3b:ba:7a:55:39: 6e:8c:98:d8:f9:98:67:4d:f2:79:62:8e:5b:a3:17: de:11:48:a1:65:ae:d5:28:b7:ae:fa:37:5a:10:f0: 19:4c:1b:6e:d0:36:36:ac:e5:98:15:4d:ad:54:95: 3d:41:6c:38:7b:f0:c8:44:68:a5:06:a3:12:f6:5b: 47:00:35:d2:6c:bb:51:78:24:ef:81:7d:da:92:6c: 33:31:ae:d8:2c:a2:5b:86:b9:f6:f2:7c:32:a3:88: 3c:ba:f3:a2:93:d2:32:98:f7:99:fb:8c:50:14:dc: 77:9a:ee:09:eb:3f:25:c4:13:62:b8:50:86:23:e8: a5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9F:A1:78:F0:0E:6C:63:34:C4:3F:69:97:5C:93:D8:BA:99:CD:08 X509v3 Authority Key Identifier: keyid:5D:63:17:F6:93:6E:6B:57:8B:38:C3:DF:B1:98:02:54:98:FC:AE:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/ap-hePAObGM0xD9pl1yT2LqZzQg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.92.0/22 IPv6: 2a0e:5480::/29 Signature Algorithm: sha256WithRSAEncryption 65:1e:b9:15:79:56:d9:54:ee:53:23:f4:86:0d:88:2a:15:8b: 03:b6:46:af:f6:5d:ae:ad:9c:19:b6:30:57:d5:8e:dd:20:78: 48:c5:d8:49:53:63:86:3c:0b:cb:1b:9b:82:be:be:c0:12:f5: 9f:6e:6a:21:24:d0:ec:0f:af:83:41:36:e5:27:49:1a:fc:93: e0:7b:9c:99:00:3a:14:80:ba:b3:2f:97:ed:9b:0c:f5:ed:4d: 9a:1b:ee:a0:27:fc:ba:90:38:06:70:15:25:b0:13:21:81:b1: 4d:c3:9c:8d:c8:6e:c3:0b:2f:08:5a:de:bb:7f:d0:59:ce:16: d7:ec:82:40:46:02:53:6c:13:19:e1:25:2b:28:04:5a:3d:0b: a2:3d:79:49:45:5d:37:75:26:6b:7e:38:c8:36:82:21:19:a8: 8f:61:9a:a9:a4:b8:81:e0:b2:b7:89:42:20:ec:11:81:43:1f: a2:51:98:58:44:8d:94:98:34:78:38:4c:76:73:6a:a4:bb:b1: 81:90:ea:9f:91:24:f8:fb:18:ee:c3:e0:62:29:f9:61:8e:68: 7a:31:1c:13:ef:89:fd:7b:7a:65:e2:55:4d:1e:f9:ff:90:84: ad:ed:ca:eb:ec:e0:ce:91:57:96:40:f6:bc:64:b4:61:ae:37: d9:4d:5c:e4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87T9DquqL/+X+nVW8pBGVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNjMxN2Y2OTM2ZTZiNTc4YjM4YzNkZmIxOTgwMjU0OThm Y2FlYTEwHhcNMjYwMTAyMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTlmYTE3OGYwMGU2YzYzMzRjNDNmNjk5NzVjOTNkOGJhOTljZDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwruSBDr0wtPUqqKiBDZPciy9fc19 oZ+u/xvhoDVFR8ta27laOgkmxsm4+owNGQiPZ6YgPCDbmUwYC1L6du7U0bnd0x4q pVnm0ZBBJOAwFzIMlVKuL/ag4zFTU8R9C8DAcng3+T1Dk//0djEdiUxkNHBb8j1M BBHJlVuSOO+FB2vTO7p6VTlujJjY+ZhnTfJ5Yo5boxfeEUihZa7VKLeu+jdaEPAZ TBtu0DY2rOWYFU2tVJU9QWw4e/DIRGilBqMS9ltHADXSbLtReCTvgX3akmwzMa7Y LKJbhrn28nwyo4g8uvOik9IymPeZ+4xQFNx3mu4J6z8lxBNiuFCGI+ilAQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGqfoXjwDmxjNMQ/aZdck9i6mc0IMB8GA1UdIwQY MBaAFF1jF/aTbmtXizjD37GYAlSY/K6hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFdNWDlwTnVhMWVMT01QZnNaZ0NWSmo4cnFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8wMzQ5MGMtZWE0Ny00MDJhLThiYjAt ZDU2NThkMGYzMjkyLzEvYXAtaGVQQU9iR00weEQ5cGwxeVQyTHFaelFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8wMzQ5MGMtZWE0Ny00MDJhLThiYjAtZDU2NThkMGYzMjky LzEvWFdNWDlwTnVhMWVMT01QZnNaZ0NWSmo4cnFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVFcMA0E AgACMAcDBQMqDlSAMA0GCSqGSIb3DQEBCwUAA4IBAQBlHrkVeVbZVO5TI/SGDYgq FYsDtkav9l2urZwZtjBX1Y7dIHhIxdhJU2OGPAvLG5uCvr7AEvWfbmohJNDsD6+D QTblJ0ka/JPge5yZADoUgLqzL5ftmwz17U2aG+6gJ/y6kDgGcBUlsBMhgbFNw5yN yG7DCy8IWt67f9BZzhbX7IJARgJTbBMZ4SUrKARaPQuiPXlJRV03dSZrfjjINoIh GaiPYZqppLiB4LK3iUIg7BGBQx+iUZhYRI2UmDR4OEx2c2qku7GBkOqfkST4+xju w+BiKflhjmh6MRwT74n9e3pl4lVNHvn/kISt7crr7ODOkVeWQPa8ZLRhrjfZTVzk -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:40 2026 by rpki-client