This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/AQhcS-k2oK3bxQWS20M2leCjNhA.roa File: AQhcS-k2oK3bxQWS20M2leCjNhA.roa (raw, json) Hash identifier: aNhFqj72CW3EXnrLF0fWAMHOsCvh/EfcGLmpjcOZo1U= Subject key identifier: 01:08:5C:4B:E9:36:A0:AD:DB:C5:05:92:DB:43:36:95:E0:A3:36:10 Certificate issuer: /CN=12e28039646dcc32eceb58428f97cc994b998577 Certificate serial: 019B78A2EC4CB1D13E63227926B730A64A5F Authority key identifier: 12:E2:80:39:64:6D:CC:32:EC:EB:58:42:8F:97:CC:99:4B:99:85:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EuKAOWRtzDLs61hCj5fMmUuZhXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/AQhcS-k2oK3bxQWS20M2leCjNhA.roa Signing time: Thu 01 Jan 2026 08:18:21 +0000 ROA not before: Thu 01 Jan 2026 08:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 217.117.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.crl rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.mft rsync://rpki.ripe.net/repository/DEFAULT/EuKAOWRtzDLs61hCj5fMmUuZhXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ec:4c:b1:d1:3e:63:22:79:26:b7:30:a6:4a:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12e28039646dcc32eceb58428f97cc994b998577 Validity Not Before: Jan 1 08:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01085c4be936a0addbc50592db433695e0a33610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:67:c7:b8:73:c9:49:f6:fa:de:d1:57:3e:66: 41:84:b2:ab:96:c7:bc:68:bb:c2:7f:64:bb:1c:f5: d9:fe:e9:fe:1a:4a:56:68:86:8e:b1:18:81:2e:93: 97:48:0f:2a:76:81:bd:a9:b4:92:02:63:00:88:cf: 97:96:dd:bc:9b:8c:53:19:9e:15:17:d4:2c:01:3f: f6:26:af:bc:5a:2b:4e:b2:83:16:79:d5:ff:3b:46: ab:af:90:6f:ee:f3:f2:4b:3e:88:c2:a0:9b:a4:85: d6:91:11:80:d3:c6:99:d9:90:46:0f:16:34:aa:bf: c5:9c:ac:c4:27:37:dc:ec:a0:d7:a3:9a:85:52:bc: 8b:a4:67:df:07:12:9b:48:fa:75:d1:fa:c3:ab:ab: b3:cc:1a:a0:26:51:b0:b8:ad:f3:11:2d:06:16:ab: 46:d0:c7:d8:08:d5:85:b1:3b:cc:ee:86:68:96:09: 2e:44:51:f7:cf:ff:6e:ad:d3:e3:80:1f:dc:3a:7d: cf:a7:83:f8:fa:9c:9e:87:07:08:ad:6c:cb:05:32: 1f:9a:bb:de:7d:56:3c:7c:3f:e1:5a:e4:14:3e:0b: fd:52:f1:af:1e:cf:36:56:79:b1:d0:cb:ee:a5:b2: ee:8f:ff:ad:6f:f9:ab:88:95:48:0a:1e:12:24:b9: 2a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:08:5C:4B:E9:36:A0:AD:DB:C5:05:92:DB:43:36:95:E0:A3:36:10 X509v3 Authority Key Identifier: keyid:12:E2:80:39:64:6D:CC:32:EC:EB:58:42:8F:97:CC:99:4B:99:85:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EuKAOWRtzDLs61hCj5fMmUuZhXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/AQhcS-k2oK3bxQWS20M2leCjNhA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.117.96.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:e4:34:c4:ee:f1:69:ec:df:c9:6e:a8:6a:81:11:5d:f8:5a: 3a:c9:95:e4:e9:2d:10:e2:83:16:7f:ee:95:98:d6:51:71:d0: 0c:6a:e4:20:76:e4:4a:fc:3b:0e:e7:69:98:ba:79:12:62:23: 59:92:c5:81:7c:b7:39:95:58:56:be:00:82:ae:86:51:bb:b5: af:76:4f:2d:ef:95:06:d6:04:5b:ee:ab:1b:e5:f9:b5:36:00: ac:1c:d3:30:2d:3b:3d:82:a7:09:60:6b:8a:2a:99:45:10:02: 80:c3:f2:04:f2:77:d7:8f:1b:f5:65:e5:db:38:8d:ad:2d:52: fa:b1:25:ac:a2:22:ed:c2:1b:36:06:cf:76:8a:16:f5:44:d0: ba:3a:45:bd:92:c9:43:04:b0:a4:58:c1:d5:fe:ec:39:c7:0e: 85:d5:18:b3:34:58:5d:95:4d:3e:d7:87:51:6e:5e:3c:98:d7: c7:77:e1:83:6d:c0:56:3b:33:83:b2:db:48:d6:e1:70:0b:37: 78:f3:60:60:a8:a2:67:5b:f7:4c:e3:3d:5f:b1:ab:02:83:5c: 61:39:b4:14:ca:01:bb:59:ae:4c:3b:c0:3d:b6:5e:26:9a:62: 24:8c:af:62:d8:f0:fd:e9:64:eb:26:17:bc:21:a3:3f:e2:8e: e2:8a:d7:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ouxMsdE+YyJ5JrcwpkpfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZTI4MDM5NjQ2ZGNjMzJlY2ViNTg0MjhmOTdjYzk5NGI5 OTg1NzcwHhcNMjYwMTAxMDgxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTA4NWM0YmU5MzZhMGFkZGJjNTA1OTJkYjQzMzY5NWUwYTMzNjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWfHuHPJSfb63tFXPmZBhLKrlse8 aLvCf2S7HPXZ/un+GkpWaIaOsRiBLpOXSA8qdoG9qbSSAmMAiM+Xlt28m4xTGZ4V F9QsAT/2Jq+8WitOsoMWedX/O0arr5Bv7vPySz6IwqCbpIXWkRGA08aZ2ZBGDxY0 qr/FnKzEJzfc7KDXo5qFUryLpGffBxKbSPp10frDq6uzzBqgJlGwuK3zES0GFqtG 0MfYCNWFsTvM7oZolgkuRFH3z/9urdPjgB/cOn3Pp4P4+pyehwcIrWzLBTIfmrve fVY8fD/hWuQUPgv9UvGvHs82Vnmx0MvupbLuj/+tb/mriJVICh4SJLkqgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAEIXEvpNqCt28UFkttDNpXgozYQMB8GA1UdIwQY MBaAFBLigDlkbcwy7OtYQo+XzJlLmYV3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXVLQU9XUnR6RExzNjFoQ2o1Zk1tVXVaaFhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80YWIxZTAtNmQ3ZC00NGZkLThkMjAt MzZkOTFkYmNmYzQxLzEvQVFoY1MtazJvSzNieFFXUzIwTTJsZUNqTmhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC80YWIxZTAtNmQ3ZC00NGZkLThkMjAtMzZkOTFkYmNmYzQx LzEvRXVLQU9XUnR6RExzNjFoQ2o1Zk1tVXVaaFhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XVgMA0G CSqGSIb3DQEBCwUAA4IBAQAa5DTE7vFp7N/JbqhqgRFd+Fo6yZXk6S0Q4oMWf+6V mNZRcdAMauQgduRK/DsO52mYunkSYiNZksWBfLc5lVhWvgCCroZRu7Wvdk8t75UG 1gRb7qsb5fm1NgCsHNMwLTs9gqcJYGuKKplFEAKAw/IE8nfXjxv1ZeXbOI2tLVL6 sSWsoiLtwhs2Bs92ihb1RNC6OkW9kslDBLCkWMHV/uw5xw6F1RizNFhdlU0+14dR bl48mNfHd+GDbcBWOzODsttI1uFwCzd482BgqKJnW/dM4z1fsasCg1xhObQUygG7 Wa5MO8A9tl4mmmIkjK9i2PD96WTrJhe8IaM/4o7iitfN -----END CERTIFICATE-----Generated at Mon Jan 19 11:47:28 2026 by rpki-client