This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/AUh_T5jGfFo8GQxa08JEtqxOcGI.roa File: AUh_T5jGfFo8GQxa08JEtqxOcGI.roa (raw, json) Hash identifier: L+kAuJ6XOrcCPywzErJNbk5PNu0tWQBhv4Njkaz1hMY= Subject key identifier: 01:48:7F:4F:98:C6:7C:5A:3C:19:0C:5A:D3:C2:44:B6:AC:4E:70:62 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80AB95FB7D6D23F74B70E2EA7B57F0 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/AUh_T5jGfFo8GQxa08JEtqxOcGI.roa Signing time: Fri 02 Jan 2026 02:19:25 +0000 ROA not before: Fri 02 Jan 2026 02:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142036 IP address blocks: 84.32.44.0/24 maxlen: 24 84.32.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:ab:95:fb:7d:6d:23:f7:4b:70:e2:ea:7b:57:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01487f4f98c67c5a3c190c5ad3c244b6ac4e7062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:90:26:cc:39:2a:54:5f:5a:3d:60:72:25:60: 65:21:b2:cf:ff:83:c8:31:5f:7a:5c:4c:59:2d:d0: 82:81:0d:2f:86:b9:46:77:c9:e4:31:b6:e1:40:43: 63:ef:e8:4c:fa:30:92:31:eb:da:02:a0:72:08:30: 3f:0a:49:28:3b:0f:44:d9:1a:4b:ea:66:d6:dd:08: 59:25:3f:57:5c:bf:70:16:1d:80:2d:10:51:1f:46: 20:61:f0:ae:51:a9:73:bb:e9:8c:08:16:1c:35:67: 3c:9c:64:dd:7f:b3:8e:81:cf:01:d4:9f:8c:21:0e: fc:96:8e:38:de:7f:c3:dd:34:97:9d:c3:87:d6:c5: 73:2e:5e:4c:b1:44:e6:62:14:07:14:ab:38:f1:5c: fd:22:41:26:a5:b1:38:a7:15:a5:55:f2:23:dd:26: 58:1d:1e:61:df:1f:be:3b:a9:3e:75:20:41:34:82: 97:ed:a9:81:97:26:6d:49:ac:04:90:35:49:5a:5f: 4f:63:75:cd:d7:98:3d:21:0e:10:3e:08:5d:fc:9f: b5:10:b5:2d:fc:3b:18:5f:29:52:36:85:d4:7b:aa: 25:e9:de:0f:f5:f8:67:84:45:30:cf:c2:ef:a2:8c: 8a:8b:05:6b:d0:89:59:df:15:8f:7b:aa:26:05:46: fc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:48:7F:4F:98:C6:7C:5A:3C:19:0C:5A:D3:C2:44:B6:AC:4E:70:62 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/AUh_T5jGfFo8GQxa08JEtqxOcGI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.44.0/23 Signature Algorithm: sha256WithRSAEncryption 43:aa:1c:76:d9:8f:25:b8:84:a2:51:8b:24:09:1a:ca:57:90: 53:4d:c7:fe:a5:b7:7a:05:2a:95:c1:d9:b3:d2:87:d0:45:2a: 65:15:5b:45:97:b9:00:8d:f4:f4:18:ed:c8:ad:d6:b8:62:e4: 72:71:a2:35:b2:68:59:04:72:91:b6:50:e0:49:f6:53:fc:0e: 5b:2f:d1:5f:09:fa:b3:f0:5c:7d:1b:07:63:66:e9:c8:5c:0a: bf:c6:e5:92:3a:ed:66:d1:04:f6:6e:2d:4a:17:11:8c:d8:d1: 75:2a:80:9f:f1:a8:6f:e2:a6:9a:18:8b:da:46:46:12:b1:88: db:3a:bd:b4:70:c0:39:88:9a:0c:96:50:60:9b:aa:2e:09:f7: bb:50:95:a7:93:0e:d2:5e:16:97:5f:f7:46:de:95:9a:00:68: dd:9e:62:ea:c5:ac:78:4d:66:5f:25:49:4c:d0:42:59:1f:1f: ef:d1:41:26:6b:c5:eb:5b:9e:29:0d:f9:4e:df:ad:6c:f5:d0: 7b:f6:77:05:df:fe:14:54:2b:97:3c:3f:d5:76:fe:35:0c:20: 34:99:61:55:0f:ea:d4:5f:5f:63:09:ec:4e:1f:e8:44:49:21: 5b:82:e1:ba:a4:73:08:dc:dd:b2:f3:61:1f:e1:4e:38:c1:e9: 5e:52:27:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gKuV+31tI/dLcOLqe1fwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTQ4N2Y0Zjk4YzY3YzVhM2MxOTBjNWFkM2MyNDRiNmFjNGU3MDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZAmzDkqVF9aPWByJWBlIbLP/4PI MV96XExZLdCCgQ0vhrlGd8nkMbbhQENj7+hM+jCSMevaAqByCDA/CkkoOw9E2RpL 6mbW3QhZJT9XXL9wFh2ALRBRH0YgYfCuUalzu+mMCBYcNWc8nGTdf7OOgc8B1J+M IQ78lo443n/D3TSXncOH1sVzLl5MsUTmYhQHFKs48Vz9IkEmpbE4pxWlVfIj3SZY HR5h3x++O6k+dSBBNIKX7amBlyZtSawEkDVJWl9PY3XN15g9IQ4QPghd/J+1ELUt /DsYXylSNoXUe6ol6d4P9fhnhEUwz8LvooyKiwVr0IlZ3xWPe6omBUb8TwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAFIf0+YxnxaPBkMWtPCRLasTnBiMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvQVVoX1Q1akdmRm84R1F4YTA4SkV0cXhPY0dJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVCAsMA0G CSqGSIb3DQEBCwUAA4IBAQBDqhx22Y8luISiUYskCRrKV5BTTcf+pbd6BSqVwdmz 0ofQRSplFVtFl7kAjfT0GO3Irda4YuRycaI1smhZBHKRtlDgSfZT/A5bL9FfCfqz 8Fx9GwdjZunIXAq/xuWSOu1m0QT2bi1KFxGM2NF1KoCf8ahv4qaaGIvaRkYSsYjb Or20cMA5iJoMllBgm6ouCfe7UJWnkw7SXhaXX/dG3pWaAGjdnmLqxax4TWZfJUlM 0EJZHx/v0UEma8XrW54pDflO361s9dB79ncF3/4UVCuXPD/Vdv41DCA0mWFVD+rU X19jCexOH+hESSFbguG6pHMI3N2y82Ef4U44weleUicM -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:13 2026 by rpki-client