This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/ANtitpMQT-uK7LHD0X0IbBsKjWM.roa File: ANtitpMQT-uK7LHD0X0IbBsKjWM.roa (raw, json) Hash identifier: 5c2CNK7pBthzGV4Sg561qpwP1GJzRFFkA4PDWmW+aSg= Subject key identifier: 00:DB:62:B6:93:10:4F:EB:8A:EC:B1:C3:D1:7D:08:6C:1B:0A:8D:63 Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 019B76EB8C06B893EAEC8191431FE17B9420 Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/ANtitpMQT-uK7LHD0X0IbBsKjWM.roa Signing time: Thu 01 Jan 2026 00:18:26 +0000 ROA not before: Thu 01 Jan 2026 00:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206995 IP address blocks: 176.42.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8c:06:b8:93:ea:ec:81:91:43:1f:e1:7b:94:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Jan 1 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00db62b693104feb8aecb1c3d17d086c1b0a8d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:28:d5:c5:72:d5:e0:3c:4e:cf:fc:dc:fe:99: e4:78:1e:72:f5:30:1a:fb:14:7a:e2:50:27:4f:5c: 04:dd:0a:1c:2f:57:1b:b0:bd:19:ed:2c:07:5e:87: ef:f4:47:dd:2a:85:fa:11:02:13:79:11:4e:3b:ce: 08:b7:c3:35:2b:96:55:46:d2:48:8c:ce:a1:0c:88: 2d:39:53:4c:b6:6c:e9:c9:f7:e4:10:b6:26:31:75: 37:2d:a2:77:2b:6c:aa:a3:ca:46:81:2b:5a:30:ff: d0:04:1a:77:81:09:b3:94:9c:39:df:76:be:57:de: 46:cf:49:a6:7d:2d:ff:60:69:ae:c3:cf:11:16:b7: 4d:5a:92:17:da:7b:40:d1:f5:02:35:29:38:2a:f1: a9:60:d4:92:45:a7:23:06:dc:af:99:38:b2:9e:b8: cd:0a:83:a6:13:ad:74:37:59:78:be:76:f6:8b:55: 0a:82:c9:44:47:9e:6d:72:37:07:56:0f:56:b9:a5: 77:14:e4:99:78:ba:40:de:94:c5:ed:da:31:bd:5f: 9b:c5:b5:47:95:d5:0b:55:36:4c:83:1d:d3:57:a6: 77:cb:34:d1:ec:51:67:30:d1:76:4c:d0:59:5f:76: 15:94:92:dc:a5:57:9e:9b:23:48:7a:c9:0c:e7:87: 81:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DB:62:B6:93:10:4F:EB:8A:EC:B1:C3:D1:7D:08:6C:1B:0A:8D:63 X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/ANtitpMQT-uK7LHD0X0IbBsKjWM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.42.9.0/24 Signature Algorithm: sha256WithRSAEncryption 66:6f:3f:5d:52:fa:38:0b:83:1d:d2:b4:90:cd:fb:ca:ba:9f: 0c:d8:44:45:4c:18:b9:82:af:99:5f:83:ad:07:97:6a:d6:2e: 8b:d3:c9:df:b9:a9:7e:de:f7:e4:1c:fb:0a:2a:8f:70:02:a6: ab:ca:ce:5b:22:73:a1:5c:61:ed:80:af:c6:35:5a:31:5e:bf: 3c:8e:0b:92:24:61:cd:b2:c8:8c:e3:22:e5:cf:70:16:07:d7: 18:68:72:d1:21:c3:4a:ed:ed:b3:60:07:af:55:de:ba:b6:ec: 26:82:39:cc:13:a9:0c:43:2c:3e:a4:3e:95:20:98:60:38:09: 7e:ef:33:7d:89:6c:8a:f4:79:ff:72:76:f7:d8:92:c0:02:6e: 08:88:68:39:d0:8d:aa:1e:be:7a:2b:3b:06:14:47:48:05:28: 4c:02:74:26:60:9d:63:68:bc:d1:36:69:20:4c:b5:30:4b:05: 0c:cb:2b:ca:9a:a4:3d:66:35:62:87:a4:23:e3:4a:b8:80:e6: 0a:1b:81:ec:e9:f8:d3:4e:30:65:4e:1e:1e:65:1f:64:56:f6: bb:8a:af:88:59:e2:0b:18:47:64:f7:2b:5d:f5:6c:32:63:48: 79:76:f9:3b:32:87:83:a9:a6:25:cd:33:c1:73:44:78:e5:bf: 3a:27:d5:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264wGuJPq7IGRQx/he5QgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjYwMTAxMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGRiNjJiNjkzMTA0ZmViOGFlY2IxYzNkMTdkMDg2YzFiMGE4ZDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyjVxXLV4DxOz/zc/pnkeB5y9TAa +xR64lAnT1wE3QocL1cbsL0Z7SwHXofv9EfdKoX6EQITeRFOO84It8M1K5ZVRtJI jM6hDIgtOVNMtmzpyffkELYmMXU3LaJ3K2yqo8pGgStaMP/QBBp3gQmzlJw533a+ V95Gz0mmfS3/YGmuw88RFrdNWpIX2ntA0fUCNSk4KvGpYNSSRacjBtyvmTiynrjN CoOmE610N1l4vnb2i1UKgslER55tcjcHVg9WuaV3FOSZeLpA3pTF7doxvV+bxbVH ldULVTZMgx3TV6Z3yzTR7FFnMNF2TNBZX3YVlJLcpVeemyNIeskM54eBUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFADbYraTEE/riuyxw9F9CGwbCo1jMB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvQU50aXRwTVFULXVLN0xIRDBYMEliQnNLaldNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsCoJMA0G CSqGSIb3DQEBCwUAA4IBAQBmbz9dUvo4C4Md0rSQzfvKup8M2ERFTBi5gq+ZX4Ot B5dq1i6L08nfual+3vfkHPsKKo9wAqarys5bInOhXGHtgK/GNVoxXr88jguSJGHN ssiM4yLlz3AWB9cYaHLRIcNK7e2zYAevVd66tuwmgjnME6kMQyw+pD6VIJhgOAl+ 7zN9iWyK9Hn/cnb32JLAAm4IiGg50I2qHr56KzsGFEdIBShMAnQmYJ1jaLzRNmkg TLUwSwUMyyvKmqQ9ZjVih6Qj40q4gOYKG4Hs6fjTTjBlTh4eZR9kVva7iq+IWeIL GEdk9ytd9WwyY0h5dvk7MoeDqaYlzTPBc0R45b86J9Vo -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:14 2026 by rpki-client