This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/AH1CvMZ01_H-a_ITlQFM4AycMmo.roa File: AH1CvMZ01_H-a_ITlQFM4AycMmo.roa (raw, json) Hash identifier: u3BCjSzWrcnJkrFgTqII/k2vw/8AtUm8xjCGISuAiSk= Subject key identifier: 00:7D:42:BC:C6:74:D7:F1:FE:6B:F2:13:95:01:4C:E0:0C:9C:32:6A Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C8008CDAAB69DB3CBAAA87838EB1FB7 Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/AH1CvMZ01_H-a_ITlQFM4AycMmo.roa Signing time: Fri 02 Jan 2026 02:18:44 +0000 ROA not before: Fri 02 Jan 2026 02:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8953 IP address blocks: 90.84.208.0/21 maxlen: 24 90.84.224.0/20 maxlen: 24 90.95.0.0/16 maxlen: 24 92.180.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:08:cd:aa:b6:9d:b3:cb:aa:a8:78:38:eb:1f:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=007d42bcc674d7f1fe6bf21395014ce00c9c326a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a0:8e:91:81:e5:32:24:be:78:49:67:bf:89: f2:f5:cc:41:1c:97:0f:8e:da:cc:b5:bf:67:f3:5d: a0:ce:37:d5:dd:e0:1e:f8:40:29:62:24:04:86:3d: eb:59:fe:14:55:ca:d8:84:05:71:4b:6d:12:27:1a: a1:36:62:bb:ee:2a:12:41:4c:e0:62:5c:81:64:db: 90:bf:26:7d:9e:bd:0c:6e:76:7d:86:ec:e6:e4:8b: d7:d8:28:44:9a:a0:0a:9c:63:8d:55:b2:8b:53:1f: 38:39:60:19:e1:03:0f:e6:c3:99:53:50:a0:b4:b6: 96:cd:81:55:2d:e2:1b:ba:b0:60:fb:15:25:f4:23: 59:80:73:a4:3d:4f:df:1e:69:4b:c8:91:17:fb:a0: e8:77:58:5d:43:f4:80:9e:cf:a0:d4:50:f3:6f:fd: ec:f5:c0:94:5d:16:67:93:b2:67:f6:cf:1f:00:8d: 98:7c:db:1d:4d:13:15:7e:f8:15:cf:f5:8b:4e:9e: 6f:29:18:6f:fe:06:29:d4:41:f3:30:76:13:b4:b1: 14:8a:66:19:5d:41:d3:36:2a:3f:dd:ef:30:49:1c: ff:b7:d4:d4:e6:0d:ff:c5:b4:9a:39:28:ca:ea:21: b2:e0:bb:1b:03:e5:e4:ba:c0:23:56:5b:55:4a:9f: 05:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7D:42:BC:C6:74:D7:F1:FE:6B:F2:13:95:01:4C:E0:0C:9C:32:6A X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/AH1CvMZ01_H-a_ITlQFM4AycMmo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 90.84.208.0/21 90.84.224.0/20 90.95.0.0/16 92.180.0.0/17 Signature Algorithm: sha256WithRSAEncryption 1e:14:3e:fd:2c:a8:c4:04:68:0a:1f:55:62:39:d4:47:1f:6e: c4:84:e8:0a:de:97:d1:42:7a:ad:d6:46:b2:47:87:dd:a6:74: dd:84:f9:5d:ef:76:9c:c4:65:46:9a:57:92:bd:f5:79:c4:89: 20:a7:1a:dc:eb:c9:7a:c0:64:d9:59:4a:d6:a0:da:a1:1b:e7: 7b:1e:bb:94:af:14:26:42:92:34:59:a2:4c:1c:93:fa:a8:e6: 43:4d:29:b8:0c:9e:80:5e:61:0c:99:2c:cd:ee:07:16:82:ac: 25:40:eb:2a:ba:8a:94:f5:35:46:15:f4:7f:cb:56:5a:f9:c7: f3:91:ba:ed:b8:ea:02:63:12:bc:30:bb:10:66:21:17:b2:b2: 18:1f:11:3b:e6:15:28:a1:32:1d:38:1a:0f:8d:d8:3f:68:15: 21:f2:b9:ec:e1:96:97:58:f5:cb:ab:51:6b:38:90:71:88:2c: b8:80:80:2a:26:e0:41:26:9e:c6:58:ff:0d:60:72:41:e9:fd: 53:21:e8:6d:db:9c:10:20:e9:ee:75:c0:e8:20:11:1b:46:c0: 68:7b:54:e3:c0:38:70:46:97:04:b9:36:5f:04:56:53:e8:db: 9f:f6:42:fd:b7:94:b1:32:54:aa:ea:ed:c4:33:d2:39:96:3e: c1:78:c3:ee -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8gAjNqrads8uqqHg46x+3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDdkNDJiY2M2NzRkN2YxZmU2YmYyMTM5NTAxNGNlMDBjOWMzMjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaCOkYHlMiS+eElnv4ny9cxBHJcP jtrMtb9n812gzjfV3eAe+EApYiQEhj3rWf4UVcrYhAVxS20SJxqhNmK77ioSQUzg YlyBZNuQvyZ9nr0MbnZ9huzm5IvX2ChEmqAKnGONVbKLUx84OWAZ4QMP5sOZU1Cg tLaWzYFVLeIburBg+xUl9CNZgHOkPU/fHmlLyJEX+6Dod1hdQ/SAns+g1FDzb/3s 9cCUXRZnk7Jn9s8fAI2YfNsdTRMVfvgVz/WLTp5vKRhv/gYp1EHzMHYTtLEUimYZ XUHTNio/3e8wSRz/t9TU5g3/xbSaOSjK6iGy4LsbA+XkusAjVltVSp8FIQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAB9QrzGdNfx/mvyE5UBTOAMnDJqMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvQUgxQ3ZNWjAxX0gtYV9JVGxRRk00QXljTW1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAATAXAwQDWlTQAwQE WlTgAwMAWl8DBAdctAAwDQYJKoZIhvcNAQELBQADggEBAB4UPv0sqMQEaAofVWI5 1EcfbsSE6Arel9FCeq3WRrJHh92mdN2E+V3vdpzEZUaaV5K99XnEiSCnGtzryXrA ZNlZStag2qEb53seu5SvFCZCkjRZokwck/qo5kNNKbgMnoBeYQyZLM3uBxaCrCVA 6yq6ipT1NUYV9H/LVlr5x/ORuu246gJjErwwuxBmIReyshgfETvmFSihMh04Gg+N 2D9oFSHyuezhlpdY9curUWs4kHGILLiAgCom4EEmnsZY/w1gckHp/VMh6G3bnBAg 6e51wOggERtGwGh7VOPAOHBGlwS5Nl8EVlPo25/2Qv23lLEyVKrq7cQz0jmWPsF4 w+4= -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:12 2026 by rpki-client