This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/AHfZCvtyXR1N7LVfRri-RiC1E6I.roa File: AHfZCvtyXR1N7LVfRri-RiC1E6I.roa (raw, json) Hash identifier: Rc0GVzYrZ//kqYZ3Jv1c6BblzqpktiqTIXdTmceeo7U= Subject key identifier: 00:77:D9:0A:FB:72:5D:1D:4D:EC:B5:5F:46:B8:BE:46:20:B5:13:A2 Certificate issuer: /CN=e0d5d561e76ef259c4a02df30f35064dededf2d7 Certificate serial: 019B7E37FB33483CEA84EC80AE2E3BF59852 Authority key identifier: E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/AHfZCvtyXR1N7LVfRri-RiC1E6I.roa Signing time: Fri 02 Jan 2026 10:19:16 +0000 ROA not before: Fri 02 Jan 2026 10:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20570 IP address blocks: 2001:67c:d70::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:fb:33:48:3c:ea:84:ec:80:ae:2e:3b:f5:98:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0d5d561e76ef259c4a02df30f35064dededf2d7 Validity Not Before: Jan 2 10:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0077d90afb725d1d4decb55f46b8be4620b513a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:88:ea:5f:70:05:a4:6e:3c:35:e3:fe:49:2f: 8e:b2:ac:a7:3a:c6:ab:ef:0c:da:b7:fa:f4:b8:29: 6f:d8:a2:44:99:0e:f6:7c:6e:39:ff:17:29:74:51: 7d:f8:67:b2:34:10:8d:cb:b9:0c:ce:3c:e1:c0:3c: 81:13:6c:e4:08:c8:93:6e:c0:85:34:90:ad:2c:50: 7e:1e:a9:21:c5:f0:bc:ec:f3:28:c0:4d:d6:e3:30: 9c:66:6f:31:ae:dc:64:8d:a3:14:cb:e6:0e:17:51: fa:0d:75:07:51:6f:4f:71:5e:10:3c:18:6d:d0:51: 6b:f7:f6:2a:62:4e:bb:49:aa:10:06:85:28:c0:a5: 37:c4:7f:11:94:9c:97:94:6a:50:1d:8b:3e:95:d6: 40:a5:8a:b5:c2:53:17:5a:ce:e9:ca:de:db:86:1d: ea:15:07:57:b6:c8:44:1c:70:d2:aa:5d:cc:a8:a0: 3d:26:a2:23:1b:01:50:ae:63:fe:75:1a:01:80:eb: f6:d1:e6:e6:2d:03:81:a7:bf:0e:8a:b8:9a:50:d3: 4b:08:ec:ac:63:64:d3:b0:1f:b0:b5:54:c6:59:f9: 0b:c1:41:d5:3b:71:69:fe:55:5d:a1:e2:08:f8:3c: cd:15:a7:7d:80:e7:62:31:f5:7c:a1:c8:8c:36:a0: 77:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:77:D9:0A:FB:72:5D:1D:4D:EC:B5:5F:46:B8:BE:46:20:B5:13:A2 X509v3 Authority Key Identifier: keyid:E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/AHfZCvtyXR1N7LVfRri-RiC1E6I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:d70::/48 Signature Algorithm: sha256WithRSAEncryption 7a:12:62:a8:a6:28:74:05:1f:01:f1:43:44:93:2f:47:4e:99: da:01:18:98:e7:93:b5:19:b3:de:56:0c:0c:95:4d:02:6c:57: 15:ae:39:22:7a:5e:a7:1c:b0:28:71:3c:34:ff:64:af:a9:ff: ac:f9:49:5a:f9:e3:4e:57:be:0d:b6:10:b8:8b:d1:bd:52:af: ff:b0:97:a3:dd:15:ef:e8:53:36:86:9a:54:b7:8b:fb:7c:32: 72:ad:83:9d:17:f7:7b:64:25:f3:e3:16:85:80:1d:cb:8f:7a: 58:4f:54:5f:62:8d:66:0d:dd:98:e5:cd:54:9e:d7:88:bb:c6: 0d:e1:b8:5b:b6:0a:1d:69:4a:17:5d:3d:93:72:89:98:42:e0: 30:ee:a5:fe:d4:d6:51:f8:8b:75:9d:73:00:aa:65:b7:1c:79: f3:98:49:00:b3:ae:2c:80:c9:7f:e4:e5:7d:89:38:f2:0f:5a: aa:bb:6c:63:59:e4:3d:57:7f:06:b4:9e:c0:a7:34:61:e9:7f: b1:a7:f8:71:14:32:95:6f:aa:4c:c2:6b:67:a7:70:e4:c7:bc: e8:1b:eb:9b:f5:7f:4f:c3:76:22:c1:3e:d1:1d:ba:d7:ba:67: 2b:1a:48:32:f3:78:61:05:7c:1e:5c:52:05:3e:91:11:b3:6e: 4d:34:e2:f9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+N/szSDzqhOyAri479ZhSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZDVkNTYxZTc2ZWYyNTljNGEwMmRmMzBmMzUwNjRkZWRl ZGYyZDcwHhcNMjYwMTAyMTAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDc3ZDkwYWZiNzI1ZDFkNGRlY2I1NWY0NmI4YmU0NjIwYjUxM2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IjqX3AFpG48NeP+SS+OsqynOsar 7wzat/r0uClv2KJEmQ72fG45/xcpdFF9+GeyNBCNy7kMzjzhwDyBE2zkCMiTbsCF NJCtLFB+HqkhxfC87PMowE3W4zCcZm8xrtxkjaMUy+YOF1H6DXUHUW9PcV4QPBht 0FFr9/YqYk67SaoQBoUowKU3xH8RlJyXlGpQHYs+ldZApYq1wlMXWs7pyt7bhh3q FQdXtshEHHDSql3MqKA9JqIjGwFQrmP+dRoBgOv20ebmLQOBp78OiriaUNNLCOys Y2TTsB+wtVTGWfkLwUHVO3Fp/lVdoeII+DzNFad9gOdiMfV8ociMNqB3KwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAB32Qr7cl0dTey1X0a4vkYgtROiMB8GA1UdIwQY MBaAFODV1WHnbvJZxKAt8w81Bk3t7fLXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE5YVlllZHU4bG5Fb0MzekR6VUdUZTN0OHRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kNDU0NjktMGM3Yi00NDEwLWJiNWUt N2RjNTI4YWE1ZDRlLzEvQUhmWkN2dHlYUjFON0xWZlJyaS1SaUMxRTZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9kNDU0NjktMGM3Yi00NDEwLWJiNWUtN2RjNTI4YWE1ZDRl LzEvNE5YVlllZHU4bG5Fb0MzekR6VUdUZTN0OHRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA1w MA0GCSqGSIb3DQEBCwUAA4IBAQB6EmKopih0BR8B8UNEky9HTpnaARiY55O1GbPe VgwMlU0CbFcVrjkiel6nHLAocTw0/2Svqf+s+Ula+eNOV74NthC4i9G9Uq//sJej 3RXv6FM2hppUt4v7fDJyrYOdF/d7ZCXz4xaFgB3Lj3pYT1RfYo1mDd2Y5c1UnteI u8YN4bhbtgodaUoXXT2TcomYQuAw7qX+1NZR+It1nXMAqmW3HHnzmEkAs64sgMl/ 5OV9iTjyD1qqu2xjWeQ9V38GtJ7ApzRh6X+xp/hxFDKVb6pMwmtnp3Dkx7zoG+ub 9X9Pw3YiwT7RHbrXumcrGkgy83hhBXweXFIFPpERs25NNOL5 -----END CERTIFICATE-----Generated at Mon Jan 26 02:17:55 2026 by rpki-client