This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/anrHbhOJ_sDeOGsZqi6XBsId81s.roa File: anrHbhOJ_sDeOGsZqi6XBsId81s.roa (raw, json) Hash identifier: xMq6I1dSb7bxT2SD4A/tmxqXSuNiBJbAzYXnHtz1Ido= Subject key identifier: 6A:7A:C7:6E:13:89:FE:C0:DE:38:6B:19:AA:2E:97:06:C2:1D:F3:5B Certificate issuer: /CN=0199bfbb331f270932ef3f82f03add0c0b2f1572 Certificate serial: 019B7758F05FCB6F245A93ED71DEE5A44C37 Authority key identifier: 01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/anrHbhOJ_sDeOGsZqi6XBsId81s.roa Signing time: Thu 01 Jan 2026 02:17:55 +0000 ROA not before: Thu 01 Jan 2026 02:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56911 IP address blocks: 185.159.48.0/22 maxlen: 24 2a07:b2c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f0:5f:cb:6f:24:5a:93:ed:71:de:e5:a4:4c:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0199bfbb331f270932ef3f82f03add0c0b2f1572 Validity Not Before: Jan 1 02:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a7ac76e1389fec0de386b19aa2e9706c21df35b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b3:e3:19:09:f7:7e:98:9b:af:e9:aa:77:44: 00:5a:eb:be:c8:21:ab:04:72:86:0a:78:df:b6:71: d6:d7:b9:1f:0d:70:5f:6b:f5:fd:5e:55:83:3e:15: 26:9b:50:95:20:b3:25:ad:b0:91:80:3b:c2:e7:15: a2:2d:f4:00:b1:af:4a:ac:6e:32:02:69:fa:07:41: 0b:72:fa:42:29:18:77:13:2f:5f:59:69:08:a3:fb: 2f:f8:43:3e:16:70:a5:19:64:84:5d:d3:e0:d7:4a: 9a:e2:81:20:94:10:88:31:32:72:98:8a:f2:42:44: 34:0a:57:12:ae:6d:14:d2:05:b0:93:66:d1:f1:03: 91:e9:60:8b:f2:fc:2a:49:ba:10:4b:bf:2d:3f:9f: b4:0f:d1:dc:8a:9f:04:63:0b:66:51:eb:7c:9c:74: 6b:0e:78:26:eb:08:87:ed:a8:72:48:1b:fe:b3:de: 43:db:84:c3:d5:fc:d3:d9:7b:1e:97:ae:25:28:54: 19:c7:21:25:40:72:fe:53:3a:65:0b:42:b3:3c:bf: 90:dd:de:61:1d:de:80:a7:8f:af:f1:55:86:30:5a: 5c:94:dc:e3:3e:ca:f3:18:07:1e:95:87:72:00:54: 75:c5:b4:40:23:d3:20:87:a5:f7:6e:b8:c4:dc:63: cd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7A:C7:6E:13:89:FE:C0:DE:38:6B:19:AA:2E:97:06:C2:1D:F3:5B X509v3 Authority Key Identifier: keyid:01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/anrHbhOJ_sDeOGsZqi6XBsId81s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.159.48.0/22 IPv6: 2a07:b2c0::/32 Signature Algorithm: sha256WithRSAEncryption db:ad:98:a2:e4:ac:1a:0a:d2:59:22:bf:52:02:9c:e9:a8:a9: 31:85:9b:0d:4e:d5:6d:b5:68:6e:97:14:ed:5e:5e:0c:f4:e9: 88:26:ac:07:b0:03:43:1f:92:7b:79:2c:64:e7:87:99:f3:5b: 18:64:2b:3c:c3:f4:7a:54:3f:3e:8b:cd:d0:59:bd:b1:cb:cd: 0e:13:49:4d:64:2f:07:a8:1b:be:0d:23:26:bf:da:07:04:54: dd:4d:c7:a0:fe:af:7a:5a:f1:e9:59:26:ad:0e:36:0b:fa:dd: db:af:2e:20:a9:82:4b:fe:da:95:54:59:8e:e3:9e:42:db:b6: f7:66:4e:85:47:10:40:63:30:97:84:4b:c3:9d:3f:71:c1:ab: 5d:8e:7a:29:7e:1e:a3:6c:ed:3b:b9:73:88:c8:6f:9a:19:1c: 71:0d:1a:04:e8:2c:93:79:65:32:3d:b4:f8:7f:ea:a2:06:a5: f0:3a:ec:d3:d1:5b:e5:0c:99:10:1d:04:a9:1f:0c:25:fd:e4: 9c:7e:1d:41:5c:ab:9e:a0:5e:e4:ae:3d:7b:e9:3a:92:56:2d: 7d:42:f1:07:08:d6:8a:a9:8e:e3:3a:16:94:c7:06:54:0e:59: de:0b:ea:85:3a:4c:0f:de:96:a6:d6:b4:7b:7f:2b:33:74:a6: fe:d4:5e:4e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WPBfy28kWpPtcd7lpEw3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxOTliZmJiMzMxZjI3MDkzMmVmM2Y4MmYwM2FkZDBjMGIy ZjE1NzIwHhcNMjYwMTAxMDIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTdhYzc2ZTEzODlmZWMwZGUzODZiMTlhYTJlOTcwNmMyMWRmMzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbPjGQn3fpibr+mqd0QAWuu+yCGr BHKGCnjftnHW17kfDXBfa/X9XlWDPhUmm1CVILMlrbCRgDvC5xWiLfQAsa9KrG4y Amn6B0ELcvpCKRh3Ey9fWWkIo/sv+EM+FnClGWSEXdPg10qa4oEglBCIMTJymIry QkQ0ClcSrm0U0gWwk2bR8QOR6WCL8vwqSboQS78tP5+0D9Hcip8EYwtmUet8nHRr Dngm6wiH7ahySBv+s95D24TD1fzT2Xsel64lKFQZxyElQHL+UzplC0KzPL+Q3d5h Hd6Ap4+v8VWGMFpclNzjPsrzGAcelYdyAFR1xbRAI9Mgh6X3brjE3GPNYwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGp6x24Tif7A3jhrGaoulwbCHfNbMB8GA1UdIwQY MBaAFAGZv7szHycJMu8/gvA63QwLLxVyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVptX3V6TWZKd2t5N3otQzhEcmREQXN2RlhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iNzVkZTItYjk5Ny00YmQzLWIxZWYt Yzc1NzFlZTFkOTliLzEvYW5ySGJoT0pfc0RlT0dzWnFpNlhCc0lkODFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9iNzVkZTItYjk5Ny00YmQzLWIxZWYtYzc1NzFlZTFkOTli LzEvQVptX3V6TWZKd2t5N3otQzhEcmREQXN2RlhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZ8wMA0E AgACMAcDBQAqB7LAMA0GCSqGSIb3DQEBCwUAA4IBAQDbrZii5KwaCtJZIr9SApzp qKkxhZsNTtVttWhulxTtXl4M9OmIJqwHsANDH5J7eSxk54eZ81sYZCs8w/R6VD8+ i83QWb2xy80OE0lNZC8HqBu+DSMmv9oHBFTdTceg/q96WvHpWSatDjYL+t3bry4g qYJL/tqVVFmO455C27b3Zk6FRxBAYzCXhEvDnT9xwatdjnopfh6jbO07uXOIyG+a GRxxDRoE6CyTeWUyPbT4f+qiBqXwOuzT0VvlDJkQHQSpHwwl/eScfh1BXKueoF7k rj176TqSVi19QvEHCNaKqY7jOhaUxwZUDlneC+qFOkwP3pam1rR7fyszdKb+1F5O -----END CERTIFICATE-----Generated at Mon Jan 26 10:49:19 2026 by rpki-client