This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/AtniHnWS_m5XJnsdI3EUIOstzH4.roa File: AtniHnWS_m5XJnsdI3EUIOstzH4.roa (raw, json) Hash identifier: KMRx9/qM9+4wF0F9XLzExOU323HbvcZo4zC4bgJQesg= Subject key identifier: 02:D9:E2:1E:75:92:FE:6E:57:26:7B:1D:23:71:14:20:EB:2D:CC:7E Certificate issuer: /CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814 Certificate serial: 019B791113904579C01C7021361C9788898F Authority key identifier: A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/AtniHnWS_m5XJnsdI3EUIOstzH4.roa Signing time: Thu 01 Jan 2026 10:18:40 +0000 ROA not before: Thu 01 Jan 2026 10:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12843 IP address blocks: 45.14.124.0/22 maxlen: 22 2a0e:e80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:13:90:45:79:c0:1c:70:21:36:1c:97:88:89:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814 Validity Not Before: Jan 1 10:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02d9e21e7592fe6e57267b1d23711420eb2dcc7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:24:b8:e2:ab:c5:a2:af:e1:f1:36:ac:93:97: a8:43:13:5e:bb:a8:87:5c:8c:20:44:eb:cc:33:f0: 73:4c:0e:30:df:93:ba:a6:b4:77:3b:2b:94:65:31: 2a:c1:4f:c9:e2:0c:2c:12:70:47:00:b3:7e:be:40: 9c:c7:a6:53:34:78:f4:54:5b:cd:ce:c4:71:84:a6: a6:62:41:d7:82:9c:fd:69:91:83:7d:d6:e8:da:af: df:a1:a3:25:3c:71:ba:2b:a9:43:70:e3:c9:fb:fd: b0:59:7d:a3:47:0f:6f:27:4d:66:1f:a6:73:86:d6: 50:eb:eb:ee:35:7f:f2:99:01:6b:0c:e5:a1:6d:99: d7:09:5f:21:7b:81:2a:68:0e:b7:9a:46:59:e2:ce: e5:39:fd:75:2c:9b:f4:d5:dc:76:94:94:44:52:38: 0e:e4:d6:8c:65:bd:9b:5a:e3:a7:24:fa:cf:9a:b4: cc:35:bb:74:c7:5c:e8:9b:95:b3:fd:b0:e6:de:de: f7:f1:3d:18:f7:f7:bd:65:1b:85:6d:34:09:d5:10: a4:ab:f6:7c:4b:45:14:33:78:e6:09:f8:c3:77:ad: f5:a1:c6:48:08:1a:65:07:5c:6c:77:cd:6d:a1:89: a8:83:75:2c:88:da:4e:61:00:6d:0a:b3:4e:35:d9: 84:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D9:E2:1E:75:92:FE:6E:57:26:7B:1D:23:71:14:20:EB:2D:CC:7E X509v3 Authority Key Identifier: keyid:A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/AtniHnWS_m5XJnsdI3EUIOstzH4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.124.0/22 IPv6: 2a0e:e80::/29 Signature Algorithm: sha256WithRSAEncryption 10:ad:e8:e6:a7:c2:30:ee:76:f0:09:38:0c:e0:b0:9d:b0:8c: 65:19:2b:f9:bd:70:d9:c7:5a:79:56:48:fa:ee:e2:d9:95:bb: c6:16:12:73:72:eb:56:eb:d4:12:a8:a9:4f:70:dc:ea:4f:9f: a1:53:ec:04:79:f0:2f:2c:78:3c:23:ef:a8:7b:2c:b7:b8:b9: 51:9b:aa:dd:c6:9d:4b:e2:36:36:86:75:01:0d:97:62:19:84: 41:d3:f8:31:2b:2f:8e:b5:54:27:bc:bb:24:93:c7:e1:d5:30: a7:a2:c8:aa:20:f9:53:24:2e:29:4c:36:65:e7:3a:75:92:8b: 3d:39:db:21:93:75:8d:d8:31:5c:1f:48:ac:2f:a5:18:cf:4a: e5:ba:f2:b8:da:96:37:e2:74:ae:8f:e6:60:f6:62:6d:50:7e: 6d:c2:e2:d6:1e:8c:67:89:83:81:9f:47:62:41:95:8e:d7:88: 55:da:04:30:e4:44:c4:91:b0:23:cc:a9:c1:4d:4f:09:6c:6d: 38:6a:07:35:06:e8:69:7d:21:19:c0:70:85:37:fe:45:6a:49: 48:9a:0c:37:f4:81:08:39:e6:f4:36:b3:d7:7e:a3:0f:3f:80: b9:8a:19:82:f1:f7:8b:e1:c8:8e:97:1c:9e:b8:f7:d8:a8:0a: b4:4b:4c:43 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EROQRXnAHHAhNhyXiImPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZTMxMjhmZDA5ZGMxOGU2NmVlNDIxMmE3ZTY0ZjNlNGU3 NGE4MTQwHhcNMjYwMTAxMTAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmQ5ZTIxZTc1OTJmZTZlNTcyNjdiMWQyMzcxMTQyMGViMmRjYzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yS44qvFoq/h8Task5eoQxNeu6iH XIwgROvMM/BzTA4w35O6prR3OyuUZTEqwU/J4gwsEnBHALN+vkCcx6ZTNHj0VFvN zsRxhKamYkHXgpz9aZGDfdbo2q/foaMlPHG6K6lDcOPJ+/2wWX2jRw9vJ01mH6Zz htZQ6+vuNX/ymQFrDOWhbZnXCV8he4EqaA63mkZZ4s7lOf11LJv01dx2lJREUjgO 5NaMZb2bWuOnJPrPmrTMNbt0x1zom5Wz/bDm3t738T0Y9/e9ZRuFbTQJ1RCkq/Z8 S0UUM3jmCfjDd631ocZICBplB1xsd81toYmog3UsiNpOYQBtCrNONdmEYwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFALZ4h51kv5uVyZ7HSNxFCDrLcx+MB8GA1UdIwQY MBaAFKDjEo/QncGOZu5CEqfmTz5OdKgUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb09NU2o5Q2R3WTVtN2tJU3AtWlBQazUwcUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wYjRlNzMtYTE1NC00MDU5LWI2MjIt OGZkNWNhYmE1NGU5LzEvQXRuaUhuV1NfbTVYSm5zZEkzRVVJT3N0ekg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wYjRlNzMtYTE1NC00MDU5LWI2MjItOGZkNWNhYmE1NGU5 LzEvb09NU2o5Q2R3WTVtN2tJU3AtWlBQazUwcUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLQ58MA0E AgACMAcDBQMqDg6AMA0GCSqGSIb3DQEBCwUAA4IBAQAQrejmp8Iw7nbwCTgM4LCd sIxlGSv5vXDZx1p5Vkj67uLZlbvGFhJzcutW69QSqKlPcNzqT5+hU+wEefAvLHg8 I++oeyy3uLlRm6rdxp1L4jY2hnUBDZdiGYRB0/gxKy+OtVQnvLskk8fh1TCnosiq IPlTJC4pTDZl5zp1kos9Odshk3WN2DFcH0isL6UYz0rluvK42pY34nSuj+Zg9mJt UH5twuLWHoxniYOBn0diQZWO14hV2gQw5ETEkbAjzKnBTU8JbG04agc1BuhpfSEZ wHCFN/5FaklImgw39IEIOeb0NrPXfqMPP4C5ihmC8feL4ciOlxyeuPfYqAq0S0xD -----END CERTIFICATE-----Generated at Mon Jan 26 19:33:33 2026 by rpki-client