This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/ahxR1iTqeBFOP143gRwFt5yO29g.roa File: ahxR1iTqeBFOP143gRwFt5yO29g.roa (raw, json) Hash identifier: wPdQP2L3pRSTzcMk3v/3ELfzo7fD95eUibqdJGL8WL0= Subject key identifier: 6A:1C:51:D6:24:EA:78:11:4E:3F:5E:37:81:1C:05:B7:9C:8E:DB:D8 Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Certificate serial: 019B7C80819542523A2528357E0E5120893D Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/ahxR1iTqeBFOP143gRwFt5yO29g.roa Signing time: Fri 02 Jan 2026 02:19:15 +0000 ROA not before: Fri 02 Jan 2026 02:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205518 IP address blocks: 185.224.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:81:95:42:52:3a:25:28:35:7e:0e:51:20:89:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Validity Not Before: Jan 2 02:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a1c51d624ea78114e3f5e37811c05b79c8edbd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:50:5b:e2:eb:69:bc:4c:88:75:c0:dc:4c:c4: a4:27:56:40:70:50:40:18:1f:c8:31:78:5b:71:4d: a9:75:11:06:d5:97:ab:b3:40:b2:6c:a5:cd:91:79: 1a:d7:56:83:45:f8:d2:e3:0c:01:f8:99:c1:88:ce: 4b:cb:85:72:75:fa:a2:44:85:15:fb:9a:a7:55:fd: 76:50:47:d9:4c:4a:56:14:2c:73:be:a0:87:65:a8: e9:52:79:d5:2d:01:af:02:0c:8f:ac:ec:9d:94:f2: d7:36:90:4d:2d:01:bd:bc:15:e9:59:f6:a5:f4:a8: 71:4d:7c:a7:68:58:53:17:f8:9d:6c:77:eb:f8:95: 60:ac:ba:01:7b:8c:2c:a4:f2:05:c8:6d:a5:c2:bc: dd:c6:76:7c:57:d6:d7:57:d0:ee:13:18:84:12:6a: be:04:18:65:8a:40:0f:2f:bf:3e:c0:af:e4:f8:13: 3c:5e:b2:56:ce:b4:ff:e2:1d:db:34:b5:ca:2e:3f: 02:f6:69:bb:f0:d0:62:e9:9a:fc:a2:be:5a:a8:35: 01:50:5f:db:ef:ac:df:ba:e7:13:05:98:a9:77:03: ef:5c:64:7b:ab:eb:8b:1c:b3:c1:96:11:df:39:20: 82:5f:45:a2:c3:a8:c0:d4:6f:5b:20:ec:53:e4:37: 5f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:1C:51:D6:24:EA:78:11:4E:3F:5E:37:81:1C:05:B7:9C:8E:DB:D8 X509v3 Authority Key Identifier: keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/ahxR1iTqeBFOP143gRwFt5yO29g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.224.79.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:70:ae:77:45:71:f0:70:da:1c:6c:f5:35:83:8b:08:91:1e: fd:5e:5f:fb:4c:a2:af:90:c2:84:e6:f6:61:37:b5:ec:1d:fd: 02:d1:e2:25:18:dd:5c:14:77:e4:db:3b:bb:61:d2:17:ba:91: 0c:43:6d:bd:a6:c6:95:7b:96:fa:60:f0:d5:ec:af:05:77:1b: 8e:1d:23:87:7b:f5:77:10:03:c4:b7:a2:1f:68:e0:b4:86:bb: 03:9e:51:29:30:44:76:c5:76:e1:e3:63:9d:24:c6:cf:3d:46: ee:c1:d6:3c:5a:b2:a0:d8:88:5d:bb:d5:dc:0b:f7:e5:1a:3f: 0c:08:ac:d3:e2:29:e9:44:09:e2:ef:01:30:80:60:f3:7a:0e: 72:27:df:87:bc:2d:74:33:91:77:1c:e9:0d:71:12:79:be:9f: 29:e0:6b:d3:1b:11:4c:d6:4b:81:63:5d:6c:19:45:49:49:ca: c0:a4:b7:8c:64:75:47:17:86:6c:89:ca:d2:c6:d9:d0:cc:04: a2:7f:7f:c0:de:7b:a3:6a:61:04:b2:34:3c:1d:bd:f5:dc:44: bd:36:1e:ee:6a:46:2b:88:e7:9f:24:06:6b:45:31:16:88:48: 73:fd:8b:39:54:b8:5c:dc:26:f4:e5:9a:ff:fd:39:15:a0:db: cf:01:08:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gIGVQlI6JSg1fg5RIIk9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ5NjFmNjdmMjJjNjFlODRhNjZjOGFkOWMxYThjZTUx ZDA5OWIwHhcNMjYwMTAyMDIxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTFjNTFkNjI0ZWE3ODExNGUzZjVlMzc4MTFjMDViNzljOGVkYmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFBb4utpvEyIdcDcTMSkJ1ZAcFBA GB/IMXhbcU2pdREG1Zers0CybKXNkXka11aDRfjS4wwB+JnBiM5Ly4VydfqiRIUV +5qnVf12UEfZTEpWFCxzvqCHZajpUnnVLQGvAgyPrOydlPLXNpBNLQG9vBXpWfal 9KhxTXynaFhTF/idbHfr+JVgrLoBe4wspPIFyG2lwrzdxnZ8V9bXV9DuExiEEmq+ BBhlikAPL78+wK/k+BM8XrJWzrT/4h3bNLXKLj8C9mm78NBi6Zr8or5aqDUBUF/b 76zfuucTBZipdwPvXGR7q+uLHLPBlhHfOSCCX0Wiw6jA1G9bIOxT5DdfbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGocUdYk6ngRTj9eN4EcBbecjtvYMB8GA1UdIwQY MBaAFLkUlh9n8ixh6EpmyK2cGozlHQmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTIt Mjc0NzNjYTYxMmRlLzEvYWh4UjFpVHFlQkZPUDE0M2dSd0Z0NXlPMjlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTItMjc0NzNjYTYxMmRl LzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueBPMA0G CSqGSIb3DQEBCwUAA4IBAQB9cK53RXHwcNocbPU1g4sIkR79Xl/7TKKvkMKE5vZh N7XsHf0C0eIlGN1cFHfk2zu7YdIXupEMQ229psaVe5b6YPDV7K8FdxuOHSOHe/V3 EAPEt6IfaOC0hrsDnlEpMER2xXbh42OdJMbPPUbuwdY8WrKg2Ihdu9XcC/flGj8M CKzT4inpRAni7wEwgGDzeg5yJ9+HvC10M5F3HOkNcRJ5vp8p4GvTGxFM1kuBY11s GUVJScrApLeMZHVHF4ZsicrSxtnQzASif3/A3nujamEEsjQ8Hb313ES9Nh7uakYr iOefJAZrRTEWiEhz/Ys5VLhc3Cb05Zr//TkVoNvPAQiC -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:29 2026 by rpki-client