This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/AnmyPTbeKIdDpKQo2ow_d3sowCk.roa File: AnmyPTbeKIdDpKQo2ow_d3sowCk.roa (raw, json) Hash identifier: 5yDe2nBXJJOjrwl2r1aO5EGRjZW/0EOoxp3H2cvGJfM= Subject key identifier: 02:79:B2:3D:36:DE:28:87:43:A4:A4:28:DA:8C:3F:77:7B:28:C0:29 Certificate issuer: /CN=5ee004befa553ddb35564fb7762b05eb222ecf93 Certificate serial: 019B7EA6EE2C9FD91AB45920852ACBF6FA18 Authority key identifier: 5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/AnmyPTbeKIdDpKQo2ow_d3sowCk.roa Signing time: Fri 02 Jan 2026 12:20:27 +0000 ROA not before: Fri 02 Jan 2026 12:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29014 IP address blocks: 81.28.224.0/20 maxlen: 24 2a00:1c38::/32 maxlen: 48 2a00:1c39::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ee:2c:9f:d9:1a:b4:59:20:85:2a:cb:f6:fa:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee004befa553ddb35564fb7762b05eb222ecf93 Validity Not Before: Jan 2 12:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0279b23d36de288743a4a428da8c3f777b28c029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f9:35:c1:5a:17:e0:44:3d:73:4b:63:03:28: 19:0e:26:12:9e:94:f0:c1:64:5b:00:5c:4c:7d:88: 03:5e:15:bd:ea:ae:14:c5:17:98:83:ea:2c:62:31: 73:d5:20:fe:01:ca:59:17:ae:65:8b:8d:6f:24:a6: f0:44:36:64:50:75:6c:65:f9:61:10:de:30:31:a3: 16:f6:6b:d9:9d:c6:93:0b:0f:81:b0:cc:32:9c:fe: 2c:1b:d9:2f:5d:fc:2c:e1:61:71:dc:27:f4:13:98: c1:eb:7a:d4:38:a2:70:59:bc:49:8f:78:8c:da:7f: e2:61:05:57:cf:43:08:a6:dd:87:f3:a0:73:75:d6: 5b:9d:f9:33:95:74:41:70:e7:b3:57:3f:f7:64:9e: 2d:9f:8e:00:b5:d5:4d:db:48:1b:32:39:f7:02:7b: 91:75:d7:4f:f6:90:80:67:38:d0:59:eb:55:9f:37: c3:b6:62:68:3e:f0:f9:11:1a:bd:c6:04:08:4b:6a: 74:98:b1:08:32:db:a1:f9:99:b0:d5:10:03:c3:b2: 7d:82:05:9b:9f:c7:d6:dc:39:a9:8c:34:7f:8f:1f: 6c:df:1e:76:14:39:b0:bf:8d:b8:fd:83:3d:39:0e: af:97:d9:40:72:56:e4:70:eb:8d:29:2a:3a:5a:f5: 74:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:79:B2:3D:36:DE:28:87:43:A4:A4:28:DA:8C:3F:77:7B:28:C0:29 X509v3 Authority Key Identifier: keyid:5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/AnmyPTbeKIdDpKQo2ow_d3sowCk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.28.224.0/20 IPv6: 2a00:1c38::/31 Signature Algorithm: sha256WithRSAEncryption a5:c0:f4:ef:20:49:c4:f9:21:59:93:71:24:2e:67:78:ec:0f: bb:f6:92:b4:05:43:e6:a9:d3:65:5e:8b:81:61:e7:fe:cd:4b: d1:7d:a9:9e:4e:34:c9:05:c6:a1:59:33:4e:bd:4a:0d:0b:e1: 24:ad:b3:b9:57:dd:a0:2a:e5:95:cc:9d:d7:f3:e3:c8:90:09: 13:5d:88:cb:08:f6:d5:5c:a1:30:76:35:a0:f8:07:96:b4:81: 89:77:ae:71:66:45:00:ea:ac:52:d4:a1:96:4b:f8:ab:9e:e5: 2f:c3:b5:91:89:56:f8:bb:d8:7d:05:26:28:64:bf:66:17:71: d6:34:66:cb:60:59:ba:51:b1:35:96:87:e3:36:d7:de:b2:e3: ad:89:65:1b:65:96:9c:bd:a8:db:37:be:6d:c9:5a:88:d8:de: d4:a7:fa:48:d1:2c:83:35:b6:1f:ad:36:a9:d9:2d:e5:34:2a: 58:b8:14:6d:dd:6b:dc:ed:d0:a0:07:e2:df:d0:5f:e1:fd:27: be:68:f7:5a:e9:5c:ec:5c:3d:1a:dc:a1:6c:20:0b:8d:56:43: e2:6a:14:16:84:0e:18:ec:b2:27:f3:92:d9:5d:5c:55:b1:79: 8b:01:86:98:13:26:dc:3a:65:3f:bc:11:88:8f:c4:0b:f5:3f: 1a:ae:22:91 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pu4sn9katFkghSrL9voYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTAwNGJlZmE1NTNkZGIzNTU2NGZiNzc2MmIwNWViMjIy ZWNmOTMwHhcNMjYwMTAyMTIyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjc5YjIzZDM2ZGUyODg3NDNhNGE0MjhkYThjM2Y3NzdiMjhjMDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfk1wVoX4EQ9c0tjAygZDiYSnpTw wWRbAFxMfYgDXhW96q4UxReYg+osYjFz1SD+AcpZF65li41vJKbwRDZkUHVsZflh EN4wMaMW9mvZncaTCw+BsMwynP4sG9kvXfws4WFx3Cf0E5jB63rUOKJwWbxJj3iM 2n/iYQVXz0MIpt2H86BzddZbnfkzlXRBcOezVz/3ZJ4tn44AtdVN20gbMjn3AnuR dddP9pCAZzjQWetVnzfDtmJoPvD5ERq9xgQIS2p0mLEIMtuh+Zmw1RADw7J9ggWb n8fW3DmpjDR/jx9s3x52FDmwv424/YM9OQ6vl9lAclbkcOuNKSo6WvV0vwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAJ5sj023iiHQ6SkKNqMP3d7KMApMB8GA1UdIwQY MBaAFF7gBL76VT3bNVZPt3YrBesiLs+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVBRXZ2cFZQZHMxVmstM2Rpc0Y2eUl1ejVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zYzM1ZWEtN2M5YS00OGUyLWIzYjIt ZTIyOGFhYjQ1MDE0LzEvQW5teVBUYmVLSWREcEtRbzJvd19kM3Nvd0NrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zYzM1ZWEtN2M5YS00OGUyLWIzYjItZTIyOGFhYjQ1MDE0 LzEvWHVBRXZ2cFZQZHMxVmstM2Rpc0Y2eUl1ejVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEURzgMA0E AgACMAcDBQEqABw4MA0GCSqGSIb3DQEBCwUAA4IBAQClwPTvIEnE+SFZk3EkLmd4 7A+79pK0BUPmqdNlXouBYef+zUvRfameTjTJBcahWTNOvUoNC+EkrbO5V92gKuWV zJ3X8+PIkAkTXYjLCPbVXKEwdjWg+AeWtIGJd65xZkUA6qxS1KGWS/irnuUvw7WR iVb4u9h9BSYoZL9mF3HWNGbLYFm6UbE1lofjNtfesuOtiWUbZZacvajbN75tyVqI 2N7Up/pI0SyDNbYfrTap2S3lNCpYuBRt3Wvc7dCgB+Lf0F/h/Se+aPda6VzsXD0a 3KFsIAuNVkPiahQWhA4Y7LIn85LZXVxVsXmLAYaYEybcOmU/vBGIj8QL9T8ariKR -----END CERTIFICATE-----Generated at Sun Jan 25 14:31:02 2026 by rpki-client