This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AHrNQ7ZUAu0CwECgzSzmCWXy1MQ.roa File: AHrNQ7ZUAu0CwECgzSzmCWXy1MQ.roa (raw, json) Hash identifier: I/bKGZrMdq3JSU4eaKSq+mN0U1SOdfDNTJ2/EfniJPo= Subject key identifier: 00:7A:CD:43:B6:54:02:ED:02:C0:40:A0:CD:2C:E6:09:65:F2:D4:C4 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5ACFD6EFAFA209DEDC6583E3044B91 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AHrNQ7ZUAu0CwECgzSzmCWXy1MQ.roa Signing time: Thu 01 Jan 2026 16:18:50 +0000 ROA not before: Thu 01 Jan 2026 16:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213606 IP address blocks: 81.168.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:cf:d6:ef:af:a2:09:de:dc:65:83:e3:04:4b:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=007acd43b65402ed02c040a0cd2ce60965f2d4c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7f:17:69:71:63:9a:4b:c6:15:47:6e:71:0e: e2:96:e2:5d:e5:07:17:b4:1d:c6:65:64:d9:16:e1: eb:71:8d:85:b5:f8:3a:5e:9f:45:bd:05:01:82:d7: c5:03:e4:f6:00:62:a9:41:6d:74:91:57:7a:23:70: cc:19:27:86:9f:88:8d:9a:db:c1:59:5f:86:55:67: 0b:6c:2f:fe:bf:cc:89:98:de:21:39:a9:ab:2f:19: 66:0d:16:af:86:55:80:10:31:df:c2:c5:0f:c0:61: 3a:cc:2b:2d:98:56:78:60:8a:19:6f:00:97:7e:a3: 2b:41:ad:bf:23:f7:53:e0:fd:34:68:df:f9:0b:c9: ac:88:cf:a3:89:ed:cc:7e:f9:b8:62:b9:ae:5d:5e: 76:6a:a7:55:3a:96:eb:a0:c8:a4:ea:0b:7b:59:7a: 82:50:4c:29:8e:42:e7:9f:e3:69:48:57:58:5c:91: 29:76:7f:35:e2:aa:c7:9a:e5:10:3c:4f:0d:e2:76: 06:b8:bb:f3:f8:64:07:0f:68:07:f7:9f:1f:0e:78: 2a:0d:76:17:e8:15:18:0c:0c:fc:e4:10:25:24:92: 80:e9:dd:ba:e6:17:03:f7:cf:a7:03:9b:a0:eb:86: d0:fb:7a:03:2d:7d:33:d6:3a:fc:66:5b:64:ee:3f: 5a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7A:CD:43:B6:54:02:ED:02:C0:40:A0:CD:2C:E6:09:65:F2:D4:C4 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AHrNQ7ZUAu0CwECgzSzmCWXy1MQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.168.122.0/24 Signature Algorithm: sha256WithRSAEncryption 94:d2:bd:28:2d:a9:ad:95:87:95:d3:83:69:41:c2:c2:67:ec: a5:39:82:c3:69:ad:f5:63:37:26:6f:85:e2:b9:62:25:67:5e: 06:35:10:ba:06:0d:b1:37:b9:fa:cb:19:62:ed:15:8d:3c:9f: ad:17:4e:d8:e0:0b:10:a5:9b:33:34:c5:d8:7f:14:01:c6:58: 57:22:ae:a1:0b:ab:ed:f1:57:f7:78:b8:03:99:52:43:53:84: 95:f3:00:b3:2f:a5:78:f6:54:e2:82:57:62:8a:09:30:b8:7f: b9:67:80:84:82:f2:09:d1:7c:e9:16:9c:6a:de:93:29:ba:40: 86:23:1c:15:62:09:ed:96:63:d9:94:31:4c:b8:96:bf:9a:ef: 5f:75:a6:6a:cd:da:a3:45:fe:ab:e9:f0:08:24:e1:49:f7:92: a2:85:dc:f5:12:90:9b:f2:bd:6a:d0:e2:ab:75:80:70:88:f8: 6d:0d:99:2c:28:ba:d6:e6:44:7a:24:4e:af:27:73:80:f5:b5: 2e:d7:b4:86:4c:55:ae:49:1e:1c:84:30:d9:bc:fa:20:fa:30: c1:3e:a1:87:49:d3:70:b2:5c:9b:da:ac:01:87:59:b9:a4:dc: 0e:de:50:c9:7c:c1:30:a9:f3:31:b9:f9:51:b0:1c:67:6b:be: 3d:fa:27:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Ws/W76+iCd7cZYPjBEuRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDdhY2Q0M2I2NTQwMmVkMDJjMDQwYTBjZDJjZTYwOTY1ZjJkNGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA238XaXFjmkvGFUducQ7iluJd5QcX tB3GZWTZFuHrcY2Ftfg6Xp9FvQUBgtfFA+T2AGKpQW10kVd6I3DMGSeGn4iNmtvB WV+GVWcLbC/+v8yJmN4hOamrLxlmDRavhlWAEDHfwsUPwGE6zCstmFZ4YIoZbwCX fqMrQa2/I/dT4P00aN/5C8msiM+jie3Mfvm4YrmuXV52aqdVOpbroMik6gt7WXqC UEwpjkLnn+NpSFdYXJEpdn814qrHmuUQPE8N4nYGuLvz+GQHD2gH958fDngqDXYX 6BUYDAz85BAlJJKA6d265hcD98+nA5ug64bQ+3oDLX0z1jr8Zltk7j9aCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAB6zUO2VALtAsBAoM0s5gll8tTEMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvQUhyTlE3WlVBdTBDd0VDZ3pTem1DV1h5MU1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUah6MA0G CSqGSIb3DQEBCwUAA4IBAQCU0r0oLamtlYeV04NpQcLCZ+ylOYLDaa31Yzcmb4Xi uWIlZ14GNRC6Bg2xN7n6yxli7RWNPJ+tF07Y4AsQpZszNMXYfxQBxlhXIq6hC6vt 8Vf3eLgDmVJDU4SV8wCzL6V49lTigldiigkwuH+5Z4CEgvIJ0XzpFpxq3pMpukCG IxwVYgntlmPZlDFMuJa/mu9fdaZqzdqjRf6r6fAIJOFJ95Kihdz1EpCb8r1q0OKr dYBwiPhtDZksKLrW5kR6JE6vJ3OA9bUu17SGTFWuSR4chDDZvPog+jDBPqGHSdNw slyb2qwBh1m5pNwO3lDJfMEwqfMxuflRsBxna749+idG -----END CERTIFICATE-----Generated at Sun Jan 25 14:40:09 2026 by rpki-client