This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/AHY4ZcpWBg0aIiFkhUXaY2emMvk.roa File: AHY4ZcpWBg0aIiFkhUXaY2emMvk.roa (raw, json) Hash identifier: XYjuOSawg9GbeUiAsIFDnNUeoKdfUJFTjZesq9ksMa4= Subject key identifier: 00:76:38:65:CA:56:06:0D:1A:22:21:64:85:45:DA:63:67:A6:32:F9 Certificate issuer: /CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62 Certificate serial: 019B7D5D350B6D7328C36DC824334F6559E5 Authority key identifier: A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/AHY4ZcpWBg0aIiFkhUXaY2emMvk.roa Signing time: Fri 02 Jan 2026 06:20:18 +0000 ROA not before: Fri 02 Jan 2026 06:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6079 IP address blocks: 130.180.224.0/19 maxlen: 19 130.180.224.0/22 maxlen: 22 130.180.240.0/21 maxlen: 21 130.180.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:35:0b:6d:73:28:c3:6d:c8:24:33:4f:65:59:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62 Validity Not Before: Jan 2 06:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00763865ca56060d1a2221648545da6367a632f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:54:70:10:16:d1:33:97:57:ab:3d:6b:64:06: 7b:87:57:82:88:b3:25:a4:43:fe:b0:09:18:54:18: 43:ce:95:a4:d3:36:c8:37:f6:d8:56:25:ed:30:80: 23:3f:56:90:d9:1c:95:96:b9:03:cd:8f:93:c7:8c: 6c:d1:b5:38:e5:07:5e:a7:62:dc:c3:ff:4c:1d:92: 6e:64:bd:2c:74:60:dd:bd:43:58:54:d0:a6:0e:bb: 82:45:74:c0:c8:63:3b:c5:be:12:23:bc:ea:f6:b8: 4a:7a:f5:61:a0:da:0b:d6:de:e5:77:c4:61:fd:aa: 53:8c:4c:59:a7:3e:08:84:dc:0f:e7:9f:07:7d:1c: 09:2a:f1:49:30:2b:d8:01:19:85:c3:f9:af:35:e7: 31:45:a9:f8:be:3f:43:10:7c:51:0a:95:a7:81:f9: 02:f9:84:b7:ed:a8:11:78:10:ef:fc:1c:8f:6a:26: 3b:d7:42:c4:cf:e7:e2:c6:7f:0b:bc:3b:b9:fc:2d: 5c:01:3a:91:32:61:76:8e:57:9a:74:3d:fd:b8:37: 6f:43:bc:a3:fb:28:94:7f:55:06:a8:8c:9b:87:36: 89:d9:28:93:e8:6e:cc:4c:a9:42:9a:74:d0:a6:a8: 57:44:66:81:92:e1:a5:6d:66:d5:6f:93:49:4f:c7: 69:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:76:38:65:CA:56:06:0D:1A:22:21:64:85:45:DA:63:67:A6:32:F9 X509v3 Authority Key Identifier: keyid:A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/AHY4ZcpWBg0aIiFkhUXaY2emMvk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.180.224.0/19 Signature Algorithm: sha256WithRSAEncryption 9d:3c:a4:96:6a:f9:0d:bc:c2:cf:aa:d1:77:f8:27:87:c5:66: 83:41:d7:31:43:96:f0:16:b3:a5:cd:fe:f8:e1:43:f3:83:4d: bf:22:4d:0c:00:58:38:83:e1:31:49:46:43:40:76:35:34:fd: 7b:7e:c7:41:0a:e9:58:88:72:01:4a:b7:8f:f8:d3:6c:37:01: 08:60:03:a1:55:b3:56:c9:af:73:62:26:44:68:6e:60:ef:40: 84:77:79:90:62:09:86:2c:19:93:70:e9:3f:8a:34:be:4d:ae: e4:04:fe:7c:64:58:6b:d7:bc:df:7b:a8:8c:4b:ab:d6:91:9e: be:1c:4a:19:f8:a2:ba:30:06:74:2b:87:3b:7b:84:10:a2:1a: 45:4b:03:9c:5d:8a:8f:fd:71:bb:b2:0c:7b:c3:d1:90:4c:00: 6b:ed:30:0c:47:1a:4a:6d:2c:dd:85:71:12:ff:79:d1:31:4b: 6a:bf:c9:00:d0:62:62:bc:f7:4e:ef:47:a0:99:6c:95:07:cf: 07:7d:84:44:59:a4:1e:24:76:4e:e0:4d:e5:dd:f9:a1:32:16: b5:0b:da:22:7b:6d:08:39:40:0c:93:5e:44:37:9a:31:a5:f0: 83:92:ae:34:70:34:ba:0e:62:bf:12:0d:8c:cf:55:b2:9d:39: e0:51:0b:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XTULbXMow23IJDNPZVnlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MmRiOWI4MGRmYjljOTU2NzhiMDdlZjJjOTUzZDYzMTA3 ZjVmNjIwHhcNMjYwMTAyMDYyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDc2Mzg2NWNhNTYwNjBkMWEyMjIxNjQ4NTQ1ZGE2MzY3YTYzMmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlRwEBbRM5dXqz1rZAZ7h1eCiLMl pEP+sAkYVBhDzpWk0zbIN/bYViXtMIAjP1aQ2RyVlrkDzY+Tx4xs0bU45Qdep2Lc w/9MHZJuZL0sdGDdvUNYVNCmDruCRXTAyGM7xb4SI7zq9rhKevVhoNoL1t7ld8Rh /apTjExZpz4IhNwP558HfRwJKvFJMCvYARmFw/mvNecxRan4vj9DEHxRCpWngfkC +YS37agReBDv/ByPaiY710LEz+fixn8LvDu5/C1cATqRMmF2jleadD39uDdvQ7yj +yiUf1UGqIybhzaJ2SiT6G7MTKlCmnTQpqhXRGaBkuGlbWbVb5NJT8dpbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAB2OGXKVgYNGiIhZIVF2mNnpjL5MB8GA1UdIwQY MBaAFKktubgN+5yVZ4sH7yyVPWMQf19iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVMyNXVBMzduSlZuaXdmdkxKVTlZeEJfWDJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80MmIzYmItMTkzNS00NzhiLWEzMDIt Y2I3YTVmZDFhYzQ3LzEvQUhZNFpjcFdCZzBhSWlGa2hVWGFZMmVtTXZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC80MmIzYmItMTkzNS00NzhiLWEzMDItY2I3YTVmZDFhYzQ3 LzEvcVMyNXVBMzduSlZuaXdmdkxKVTlZeEJfWDJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgrTgMA0G CSqGSIb3DQEBCwUAA4IBAQCdPKSWavkNvMLPqtF3+CeHxWaDQdcxQ5bwFrOlzf74 4UPzg02/Ik0MAFg4g+ExSUZDQHY1NP17fsdBCulYiHIBSreP+NNsNwEIYAOhVbNW ya9zYiZEaG5g70CEd3mQYgmGLBmTcOk/ijS+Ta7kBP58ZFhr17zfe6iMS6vWkZ6+ HEoZ+KK6MAZ0K4c7e4QQohpFSwOcXYqP/XG7sgx7w9GQTABr7TAMRxpKbSzdhXES /3nRMUtqv8kA0GJivPdO70egmWyVB88HfYREWaQeJHZO4E3l3fmhMha1C9oie20I OUAMk15EN5oxpfCDkq40cDS6DmK/Eg2Mz1WynTngUQvb -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:59 2026 by rpki-client