This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Ah-yE4HGZ3OirKVOmDu8zAhqZTE.roa File: Ah-yE4HGZ3OirKVOmDu8zAhqZTE.roa (raw, json) Hash identifier: E8yorOIrWxqnVYfsNb5/mw8YbBQarLCAuKuOVYATYpg= Subject key identifier: 02:1F:B2:13:81:C6:67:73:A2:AC:A5:4E:98:3B:BC:CC:08:6A:65:31 Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019B7CEDD9C55E990D6CD3602D2B06F1E0E7 Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Ah-yE4HGZ3OirKVOmDu8zAhqZTE.roa Signing time: Fri 02 Jan 2026 04:18:41 +0000 ROA not before: Fri 02 Jan 2026 04:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 176.57.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:d9:c5:5e:99:0d:6c:d3:60:2d:2b:06:f1:e0:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Jan 2 04:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=021fb21381c66773a2aca54e983bbccc086a6531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cb:5c:c9:c4:5e:3b:ed:e7:42:c0:fc:33:2e: e9:23:20:e6:ca:1e:2a:b1:a5:ed:d0:76:24:09:6e: 3f:fe:e6:01:85:6c:47:a6:f5:0b:f4:7d:1d:dd:61: 8d:5a:cc:66:dd:83:81:9f:86:33:8a:db:76:5b:e5: 54:44:39:0d:a0:f8:63:09:e4:6b:5e:ab:4c:7f:91: 30:60:c5:25:6f:57:de:f5:95:87:be:39:80:25:9e: c0:0b:16:62:aa:41:0e:73:09:bb:c3:fe:40:02:29: 6a:9b:d6:0c:13:ef:f2:c3:bb:54:ab:9b:13:2b:0e: 05:04:2d:bf:63:68:40:de:c2:38:1b:e3:ff:31:5d: b6:60:48:f3:d7:39:62:73:a8:75:5f:50:c0:45:bf: f3:53:61:ac:e0:dd:a5:38:38:87:34:09:4c:91:da: 3c:16:b7:1d:32:62:f4:4b:31:d8:51:9c:f0:c7:3b: 5e:14:c2:35:db:bf:3f:42:59:2d:01:f8:5b:5e:e9: 4c:58:f5:8c:c3:90:d5:ee:9f:c7:bf:44:c6:1b:d7: 1e:f2:b5:8e:8c:b3:6e:03:64:79:dd:87:39:fc:41: 04:ba:13:23:83:e5:d6:4b:20:ae:14:7f:41:ea:db: d1:d5:ee:9d:2d:a8:9c:8f:39:a7:c6:fe:de:46:04: 53:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:1F:B2:13:81:C6:67:73:A2:AC:A5:4E:98:3B:BC:CC:08:6A:65:31 X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Ah-yE4HGZ3OirKVOmDu8zAhqZTE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.57.59.0/24 Signature Algorithm: sha256WithRSAEncryption 07:3a:71:d7:69:92:40:06:7b:f2:46:a0:fa:c1:36:4a:df:64: 2c:bf:fa:dd:55:69:78:bd:d5:68:a8:89:23:a7:ad:6b:4f:ef: be:76:4b:ca:6a:df:2d:3c:ce:77:65:a2:20:66:83:b0:b8:4d: cc:68:fa:25:79:c0:ef:2b:58:aa:3c:26:8f:03:e7:2d:a8:a2: e9:fc:56:c6:ad:a5:8e:de:35:a8:11:8b:84:ac:84:22:ec:21: 46:cf:eb:07:61:3f:a0:22:33:58:f6:d8:e6:36:02:20:01:d4: f2:1b:24:9e:b9:e0:cc:a2:44:fb:c4:4a:f9:6f:d2:24:4f:43: e9:fb:b4:7e:18:a7:0c:f5:11:94:b7:05:6e:59:99:3e:5c:98: af:27:7f:e4:c9:97:00:ed:c9:d8:b2:66:9d:0e:4d:6a:28:ae: aa:cb:84:7b:07:0e:5f:c3:f1:7d:19:a5:ad:77:c9:93:5f:b3: e9:d3:98:c3:f5:55:7e:33:f5:95:25:6b:03:7a:8f:2c:2c:31: d0:1a:ed:68:30:c3:82:97:fa:06:86:b7:c7:4d:0b:3c:f5:8b: 72:ca:8c:ea:df:52:c6:20:84:11:f0:06:88:51:9f:7b:33:bd: 65:6c:a1:1b:e7:4c:7b:ca:ed:da:d2:db:14:5b:29:d4:49:22: 03:49:ff:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87dnFXpkNbNNgLSsG8eDnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjYwMTAyMDQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjFmYjIxMzgxYzY2NzczYTJhY2E1NGU5ODNiYmNjYzA4NmE2NTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvstcycReO+3nQsD8My7pIyDmyh4q saXt0HYkCW4//uYBhWxHpvUL9H0d3WGNWsxm3YOBn4Yzitt2W+VURDkNoPhjCeRr XqtMf5EwYMUlb1fe9ZWHvjmAJZ7ACxZiqkEOcwm7w/5AAilqm9YME+/yw7tUq5sT Kw4FBC2/Y2hA3sI4G+P/MV22YEjz1zlic6h1X1DARb/zU2Gs4N2lODiHNAlMkdo8 FrcdMmL0SzHYUZzwxzteFMI1278/QlktAfhbXulMWPWMw5DV7p/Hv0TGG9ce8rWO jLNuA2R53Yc5/EEEuhMjg+XWSyCuFH9B6tvR1e6dLaicjzmnxv7eRgRTuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAIfshOBxmdzoqylTpg7vMwIamUxMB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEvQWgteUU0SEdaM09pcktWT21EdTh6QWhxWlRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDk7MA0G CSqGSIb3DQEBCwUAA4IBAQAHOnHXaZJABnvyRqD6wTZK32Qsv/rdVWl4vdVoqIkj p61rT+++dkvKat8tPM53ZaIgZoOwuE3MaPolecDvK1iqPCaPA+ctqKLp/FbGraWO 3jWoEYuErIQi7CFGz+sHYT+gIjNY9tjmNgIgAdTyGySeueDMokT7xEr5b9IkT0Pp +7R+GKcM9RGUtwVuWZk+XJivJ3/kyZcA7cnYsmadDk1qKK6qy4R7Bw5fw/F9GaWt d8mTX7Pp05jD9VV+M/WVJWsDeo8sLDHQGu1oMMOCl/oGhrfHTQs89Ytyyozq31LG IIQR8AaIUZ97M71lbKEb50x7yu3a0tsUWynUSSIDSf+G -----END CERTIFICATE-----Generated at Fri Jan 2 17:52:44 2026 by rpki-client