This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/AHtaW66JMITwcArnsmCRwFXXsoI.roa File: AHtaW66JMITwcArnsmCRwFXXsoI.roa (raw, json) Hash identifier: ZcCP5/OLK7h3hkYbytBpwMfpzhJ4QDRnFvoryxgp3QU= Subject key identifier: 00:7B:5A:5B:AE:89:30:84:F0:70:0A:E7:B2:60:91:C0:55:D7:B2:82 Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Certificate serial: 019B78A317C639360DF3E3241B7BE15C8C4C Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/AHtaW66JMITwcArnsmCRwFXXsoI.roa Signing time: Thu 01 Jan 2026 08:18:33 +0000 ROA not before: Thu 01 Jan 2026 08:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58612 IP address blocks: 45.142.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:17:c6:39:36:0d:f3:e3:24:1b:7b:e1:5c:8c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Validity Not Before: Jan 1 08:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=007b5a5bae893084f0700ae7b26091c055d7b282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e4:32:54:7d:5a:59:05:41:4b:bd:a1:0b:10: fd:cf:9d:b0:7b:ce:c2:d7:59:15:a9:2d:af:46:9b: 46:b9:6a:77:0a:d9:a7:0d:ef:72:a0:95:79:83:6b: 1e:9e:5a:f7:6c:a5:9a:aa:da:9b:af:fd:6b:f9:6d: 2f:3c:1a:72:5c:d6:c3:de:fd:eb:4a:a5:b2:30:2b: 84:91:d9:cc:35:ef:9e:c6:09:22:5f:84:ac:13:c6: fe:bb:9e:50:ba:05:4c:2a:15:18:0f:6e:00:d8:15: 09:3b:37:e2:54:d9:27:92:e0:d1:9c:bc:3d:99:f2: 29:e8:14:da:c6:c4:10:0d:de:29:b8:86:e9:4b:54: 65:5c:8d:9c:c0:ff:ec:45:5a:ab:d9:8f:a9:4f:e2: 8e:ca:c3:e8:61:22:7a:90:8c:1e:dc:91:d5:c4:80: d8:d0:b9:1e:46:b3:3a:cd:af:52:d7:31:0b:15:ea: aa:c7:c8:10:75:84:8b:22:04:2b:01:44:e1:1f:05: 41:59:71:34:71:1f:87:03:ba:68:d7:9d:19:56:32: 2f:7a:44:ef:b7:f9:f6:62:bf:3f:30:91:fe:a3:3b: b6:b5:d4:00:83:81:39:c7:7f:95:f4:ca:66:fe:f3: 24:f3:6b:6c:c9:e4:70:6d:31:eb:93:fd:3b:b9:2f: a4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7B:5A:5B:AE:89:30:84:F0:70:0A:E7:B2:60:91:C0:55:D7:B2:82 X509v3 Authority Key Identifier: keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/AHtaW66JMITwcArnsmCRwFXXsoI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.1.0/24 Signature Algorithm: sha256WithRSAEncryption 57:80:93:e4:d8:e2:ec:29:7a:a9:36:87:76:e6:45:b8:2a:05: dd:89:d5:43:f7:ee:f5:24:ec:47:ff:4b:a4:42:b5:ac:63:8d: 23:00:76:7c:46:8f:63:2f:c1:11:16:8f:8c:f9:d3:f1:bb:96: e2:83:ba:ca:65:c8:bf:2a:d1:5f:eb:63:8c:81:36:16:74:56: 54:26:66:18:d3:d0:1d:9a:03:12:09:ea:6e:00:28:7d:13:2e: c8:5d:87:e3:76:df:3e:09:e1:d0:58:5c:bc:f0:65:ea:92:57: c1:f0:34:34:76:ad:56:af:92:ab:6a:2c:26:d0:c8:69:87:2e: 60:44:ca:b4:98:c6:09:6b:7f:f6:20:3f:93:23:70:96:63:1c: 24:71:d9:9d:f5:9a:9e:6a:f0:6e:b7:7c:bc:d5:70:2e:6d:21: 78:ac:89:c0:ee:af:38:49:78:ec:94:b7:a1:a1:a8:3e:e9:7e: 93:58:34:19:3b:14:57:51:43:d8:32:32:93:64:69:ae:b6:3b: 7b:10:c0:1c:ca:1c:8a:aa:d8:cb:af:17:5e:3c:d6:5c:4c:83: 80:18:6f:4e:38:be:aa:49:7c:04:51:cc:02:d7:6c:ab:c4:cc: 6b:90:f5:28:ff:ee:a1:3f:7e:d4:63:7e:9f:68:fe:1d:eb:42: 0c:46:3c:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oxfGOTYN8+MkG3vhXIxMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy ODVkZTcwHhcNMjYwMTAxMDgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDdiNWE1YmFlODkzMDg0ZjA3MDBhZTdiMjYwOTFjMDU1ZDdiMjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+QyVH1aWQVBS72hCxD9z52we87C 11kVqS2vRptGuWp3CtmnDe9yoJV5g2senlr3bKWaqtqbr/1r+W0vPBpyXNbD3v3r SqWyMCuEkdnMNe+exgkiX4SsE8b+u55QugVMKhUYD24A2BUJOzfiVNknkuDRnLw9 mfIp6BTaxsQQDd4puIbpS1RlXI2cwP/sRVqr2Y+pT+KOysPoYSJ6kIwe3JHVxIDY 0LkeRrM6za9S1zELFeqqx8gQdYSLIgQrAUThHwVBWXE0cR+HA7po150ZVjIvekTv t/n2Yr8/MJH+ozu2tdQAg4E5x3+V9Mpm/vMk82tsyeRwbTHrk/07uS+k/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAB7WluuiTCE8HAK57JgkcBV17KCMB8GA1UdIwQY MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt NDc3MjMxMTkxYTM1LzEvQUh0YVc2NkpNSVR3Y0FybnNtQ1J3RlhYc29JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1 LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY4BMA0G CSqGSIb3DQEBCwUAA4IBAQBXgJPk2OLsKXqpNod25kW4KgXdidVD9+71JOxH/0uk QrWsY40jAHZ8Ro9jL8ERFo+M+dPxu5big7rKZci/KtFf62OMgTYWdFZUJmYY09Ad mgMSCepuACh9Ey7IXYfjdt8+CeHQWFy88GXqklfB8DQ0dq1Wr5Kraiwm0Mhphy5g RMq0mMYJa3/2ID+TI3CWYxwkcdmd9ZqeavBut3y81XAubSF4rInA7q84SXjslLeh oag+6X6TWDQZOxRXUUPYMjKTZGmutjt7EMAcyhyKqtjLrxdePNZcTIOAGG9OOL6q SXwEUcwC12yrxMxrkPUo/+6hP37UY36faP4d60IMRjxY -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:14 2026 by rpki-client