This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/7o1SWwCM_cXOFE762glcqqrc0g8.roa File: 7o1SWwCM_cXOFE762glcqqrc0g8.roa (raw, json) Hash identifier: sE4Y/ceaKQXMuGNY66ML+K4wpI2dw3LerD1iYOVm02w= Subject key identifier: EE:8D:52:5B:00:8C:FD:C5:CE:14:4E:FA:DA:09:5C:AA:AA:DC:D2:0F Certificate issuer: /CN=4142d3f9b31126e0850265715c9fc32174b557a4 Certificate serial: 019B775900AEEF2C22D1E266B12C0D2DE860 Authority key identifier: 41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/7o1SWwCM_cXOFE762glcqqrc0g8.roa Signing time: Thu 01 Jan 2026 02:18:00 +0000 ROA not before: Thu 01 Jan 2026 02:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207617 IP address blocks: 45.159.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:00:ae:ef:2c:22:d1:e2:66:b1:2c:0d:2d:e8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4142d3f9b31126e0850265715c9fc32174b557a4 Validity Not Before: Jan 1 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee8d525b008cfdc5ce144efada095caaaadcd20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:dd:a3:a8:34:23:ce:57:87:4d:b7:81:c9:66: a9:3b:4b:36:0b:4f:2d:a3:49:9d:72:e6:31:25:ec: d1:ac:60:f4:0e:a3:54:61:ca:24:d5:6f:42:37:92: c5:ac:ac:55:ec:31:dd:6a:85:dd:b1:ec:bc:48:c1: 70:5b:53:69:61:aa:36:99:3a:9f:da:24:7e:dc:2e: db:83:72:14:fa:a7:38:ef:94:e2:3b:5b:4f:11:01: f5:c4:b1:49:8b:89:ac:80:c8:8d:49:05:1b:0e:fe: c7:c3:ef:d7:48:4d:8e:59:70:1d:78:01:65:af:54: 71:e2:be:a3:1c:1d:ca:fa:5c:3f:0f:42:4e:0d:ba: 81:44:52:18:df:c1:31:21:f7:48:5b:8e:b3:d7:0f: b3:e0:31:33:d2:f4:a6:0d:53:cc:73:dc:f1:e7:f1: 35:f3:6c:1e:d8:16:31:42:83:32:16:68:38:6b:37: 11:fc:b9:1b:d3:bc:8c:21:7d:cc:6c:85:ce:b5:d8: ea:4e:62:7f:ca:c5:4c:cd:e6:93:00:9f:50:91:f5: 5d:ab:87:51:64:84:17:12:9c:1c:d6:e6:6e:2b:ed: 28:e2:7d:20:b7:86:0c:1b:a3:85:83:e2:8b:3a:29: 10:33:1a:f3:62:81:dd:a8:08:52:45:a3:1c:b7:83: a7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8D:52:5B:00:8C:FD:C5:CE:14:4E:FA:DA:09:5C:AA:AA:DC:D2:0F X509v3 Authority Key Identifier: keyid:41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/7o1SWwCM_cXOFE762glcqqrc0g8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.31.0/24 Signature Algorithm: sha256WithRSAEncryption 23:df:10:00:02:ec:ce:41:22:07:e4:e4:f8:9e:d9:83:5d:b2: 65:ae:d0:ad:40:9d:cb:d2:a8:ed:19:db:1c:b0:35:22:98:bb: 50:39:ce:21:c2:26:4c:1c:44:b8:30:1e:5e:c4:99:f9:12:e2: 10:39:5f:9b:ba:1a:74:fc:6e:40:3d:c0:9b:d0:6e:c7:ff:fd: 5d:dd:9b:4e:2c:72:99:32:3c:4a:6d:f4:b4:ff:aa:36:43:b2: 48:1f:c4:e5:a9:d3:a0:37:30:72:76:3a:6e:10:0e:a7:0b:75: b4:c2:8f:e4:d5:a8:f7:45:1e:67:53:68:9f:2d:25:df:16:2a: 51:ac:4d:0a:bc:56:7d:cf:b2:74:43:08:42:c5:96:55:01:e6: 6d:6e:4f:45:ad:94:a3:fc:ba:fb:39:d6:8f:2c:c8:4b:16:49: 6b:27:c8:d8:51:1d:9c:fd:77:87:e1:22:21:44:a6:af:3d:5b: fd:c9:8b:e2:db:20:50:c0:dc:04:05:74:45:2f:e4:b2:80:59: f0:47:82:7b:32:d1:30:e8:56:ae:a8:c9:89:13:b3:04:47:f8: 12:a1:f7:7d:e7:42:38:13:14:23:c0:c4:69:10:0b:1c:c2:ba: 86:2c:80:7d:34:8f:ef:0b:f2:73:e0:a9:64:44:24:d8:b5:59: 07:d9:82:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQCu7ywi0eJmsSwNLehgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNDJkM2Y5YjMxMTI2ZTA4NTAyNjU3MTVjOWZjMzIxNzRi NTU3YTQwHhcNMjYwMTAxMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZThkNTI1YjAwOGNmZGM1Y2UxNDRlZmFkYTA5NWNhYWFhZGNkMjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd2jqDQjzleHTbeByWapO0s2C08t o0mdcuYxJezRrGD0DqNUYcok1W9CN5LFrKxV7DHdaoXdsey8SMFwW1NpYao2mTqf 2iR+3C7bg3IU+qc475TiO1tPEQH1xLFJi4msgMiNSQUbDv7Hw+/XSE2OWXAdeAFl r1Rx4r6jHB3K+lw/D0JODbqBRFIY38ExIfdIW46z1w+z4DEz0vSmDVPMc9zx5/E1 82we2BYxQoMyFmg4azcR/Lkb07yMIX3MbIXOtdjqTmJ/ysVMzeaTAJ9QkfVdq4dR ZIQXEpwc1uZuK+0o4n0gt4YMG6OFg+KLOikQMxrzYoHdqAhSRaMct4OnbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO6NUlsAjP3FzhRO+toJXKqq3NIPMB8GA1UdIwQY MBaAFEFC0/mzESbghQJlcVyfwyF0tVekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVVMVC1iTVJKdUNGQW1WeFhKX0RJWFMxVjZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hZTE5NTMtYmZjNC00MmI1LTk1MGIt OWM5OGQxMTE5N2I3LzEvN28xU1d3Q01fY1hPRkU3NjJnbGNxcXJjMGc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9hZTE5NTMtYmZjNC00MmI1LTk1MGItOWM5OGQxMTE5N2I3 LzEvUVVMVC1iTVJKdUNGQW1WeFhKX0RJWFMxVjZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ8fMA0G CSqGSIb3DQEBCwUAA4IBAQAj3xAAAuzOQSIH5OT4ntmDXbJlrtCtQJ3L0qjtGdsc sDUimLtQOc4hwiZMHES4MB5exJn5EuIQOV+buhp0/G5APcCb0G7H//1d3ZtOLHKZ MjxKbfS0/6o2Q7JIH8TlqdOgNzBydjpuEA6nC3W0wo/k1aj3RR5nU2ifLSXfFipR rE0KvFZ9z7J0QwhCxZZVAeZtbk9FrZSj/Lr7OdaPLMhLFklrJ8jYUR2c/XeH4SIh RKavPVv9yYvi2yBQwNwEBXRFL+SygFnwR4J7MtEw6FauqMmJE7MER/gSofd950I4 ExQjwMRpEAscwrqGLIB9NI/vC/Jz4KlkRCTYtVkH2YIO -----END CERTIFICATE-----Generated at Wed Jan 21 16:15:37 2026 by rpki-client