This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/ahVZlR8V-SCq0qGs2Ba8PCHK87c.roa File: ahVZlR8V-SCq0qGs2Ba8PCHK87c.roa (raw, json) Hash identifier: 4mAnuGZm3yJjfvM0MnpTHsToaK6IwB9ToRFiX7Ssoj8= Subject key identifier: 6A:15:59:95:1F:15:F9:20:AA:D2:A1:AC:D8:16:BC:3C:21:CA:F3:B7 Certificate issuer: /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41 Certificate serial: 019B7A5ABBF7280790B818EACA497A63185F Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/ahVZlR8V-SCq0qGs2Ba8PCHK87c.roa Signing time: Thu 01 Jan 2026 16:18:45 +0000 ROA not before: Thu 01 Jan 2026 16:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57494 IP address blocks: 109.71.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 13:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:bb:f7:28:07:90:b8:18:ea:ca:49:7a:63:18:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41 Validity Not Before: Jan 1 16:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a1559951f15f920aad2a1acd816bc3c21caf3b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3f:0c:19:17:3a:85:03:0b:1b:ee:49:df:9c: 38:f0:dc:02:40:4e:55:11:8f:8b:26:08:b9:dc:df: 6a:0d:4b:03:8c:5b:14:3a:d5:ef:4f:e5:c4:38:61: 6d:6c:bb:ab:2b:a3:f1:01:b4:b3:ec:6e:c1:fb:8e: be:62:69:b2:3b:88:0f:3b:b3:38:57:c2:2e:e7:c2: 73:15:b1:8e:8e:62:52:46:8a:7c:63:97:85:32:b7: 1f:89:95:5f:79:c6:9e:a4:62:09:93:a6:b0:ae:75: bf:74:6f:ee:d0:8a:11:8f:a8:3e:f4:98:68:f2:ce: 6e:2c:0e:b9:4a:72:c6:5e:cc:8a:c4:07:72:ac:b6: e8:a9:75:8f:a5:05:90:fc:ed:d5:eb:d2:ab:ae:91: ec:a4:82:82:87:17:19:38:55:b3:0d:6a:9d:70:0f: 9e:4c:21:a0:21:1b:45:c0:67:27:94:7e:91:8e:a6: dc:78:98:bd:16:a5:a8:8b:23:29:58:bf:7a:34:c5: 18:af:e6:b1:e3:64:a1:98:c0:69:d0:67:63:e3:26: 7b:94:fd:9b:3b:bd:4d:64:da:47:01:6c:40:78:6f: bb:1b:79:b5:d4:3e:2d:9f:5d:66:f2:e2:32:e3:b1: 15:a1:54:ef:27:e1:a0:a2:af:f9:f1:37:04:f7:1a: 0e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:15:59:95:1F:15:F9:20:AA:D2:A1:AC:D8:16:BC:3C:21:CA:F3:B7 X509v3 Authority Key Identifier: keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/ahVZlR8V-SCq0qGs2Ba8PCHK87c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.71.242.0/24 Signature Algorithm: sha256WithRSAEncryption 04:b5:19:4b:57:88:b9:1b:b4:f0:99:74:dc:69:4d:59:94:92: d4:32:eb:23:04:7b:1c:79:28:5b:3a:a9:bd:bb:53:f3:b1:33: db:98:80:01:a8:06:3a:a9:f6:6a:02:e0:5c:fa:45:9d:9f:16: 63:ee:13:23:0d:49:73:ff:a7:bc:25:20:58:cd:63:34:03:79: ac:f0:16:7e:f2:e6:65:4a:fe:c6:1f:bc:6f:c4:83:7c:77:b7: ec:b5:8b:66:0c:29:5d:1a:62:1c:47:a7:ff:50:99:d5:0c:9d: 9e:7c:25:22:c2:62:10:7e:3d:0e:59:2c:53:f2:9e:37:e0:ce: e9:11:6b:b8:4f:ce:79:a3:60:49:37:1b:71:fd:1c:82:c8:22: c9:60:59:fb:44:ea:70:f0:43:99:b0:da:1c:bd:be:f9:8e:92: a9:ca:6f:10:cf:0d:f3:e7:ab:dc:b8:b6:31:f7:91:d1:7f:15: 31:98:72:b9:4b:72:89:5b:34:c7:81:e6:11:96:9a:f6:6e:66: 15:57:68:60:83:50:b4:6a:d0:eb:f7:aa:bd:3c:2d:65:d3:87: 9a:74:bc:25:27:da:b8:89:3b:1b:ca:de:ca:48:0b:90:0f:29: a3:79:58:ec:24:e3:73:20:59:b9:b8:a7:cb:6d:8a:60:53:0a: 42:63:72:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wrv3KAeQuBjqykl6YxhfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2ZWYwYTBlZThmYTE1NGQ3YWRhNDM4YWYxMjEyMjY5Y2Uw YWNjNDEwHhcNMjYwMTAxMTYxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTE1NTk5NTFmMTVmOTIwYWFkMmExYWNkODE2YmMzYzIxY2FmM2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD8MGRc6hQMLG+5J35w48NwCQE5V EY+LJgi53N9qDUsDjFsUOtXvT+XEOGFtbLurK6PxAbSz7G7B+46+YmmyO4gPO7M4 V8Iu58JzFbGOjmJSRop8Y5eFMrcfiZVfecaepGIJk6awrnW/dG/u0IoRj6g+9Jho 8s5uLA65SnLGXsyKxAdyrLboqXWPpQWQ/O3V69KrrpHspIKChxcZOFWzDWqdcA+e TCGgIRtFwGcnlH6RjqbceJi9FqWoiyMpWL96NMUYr+ax42ShmMBp0Gdj4yZ7lP2b O71NZNpHAWxAeG+7G3m11D4tn11m8uIy47EVoVTvJ+Ggoq/58TcE9xoOaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGoVWZUfFfkgqtKhrNgWvDwhyvO3MB8GA1UdIwQY MBaAFHbvCg7o+hVNetpDivEhImnOCsxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHU4S0R1ajZGVTE2MmtPSzhTRWlhYzRLekVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8xNjg2YzMtZGE3MC00YjU0LWFiMmIt M2JlOTk1ZDJiYmRhLzEvYWhWWmxSOFYtU0NxMHFHczJCYThQQ0hLODdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8xNjg2YzMtZGE3MC00YjU0LWFiMmItM2JlOTk1ZDJiYmRh LzEvZHU4S0R1ajZGVTE2MmtPSzhTRWlhYzRLekVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUfyMA0G CSqGSIb3DQEBCwUAA4IBAQAEtRlLV4i5G7TwmXTcaU1ZlJLUMusjBHsceShbOqm9 u1PzsTPbmIABqAY6qfZqAuBc+kWdnxZj7hMjDUlz/6e8JSBYzWM0A3ms8BZ+8uZl Sv7GH7xvxIN8d7fstYtmDCldGmIcR6f/UJnVDJ2efCUiwmIQfj0OWSxT8p434M7p EWu4T855o2BJNxtx/RyCyCLJYFn7ROpw8EOZsNocvb75jpKpym8Qzw3z56vcuLYx 95HRfxUxmHK5S3KJWzTHgeYRlpr2bmYVV2hgg1C0atDr96q9PC1l04eadLwlJ9q4 iTsbyt7KSAuQDymjeVjsJONzIFm5uKfLbYpgUwpCY3I2 -----END CERTIFICATE-----Generated at Wed Jan 21 16:56:56 2026 by rpki-client