This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/anf0mhLFVjO30tHqK8DD4UtFa3o.roa File: anf0mhLFVjO30tHqK8DD4UtFa3o.roa (raw, json) Hash identifier: s4316JS3tIlddV5sr2TRsQdL2R9UCVggunra0fUkRv8= Subject key identifier: 6A:77:F4:9A:12:C5:56:33:B7:D2:D1:EA:2B:C0:C3:E1:4B:45:6B:7A Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B26C12236F320771BAEE5257C84852202 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/anf0mhLFVjO30tHqK8DD4UtFa3o.roa Signing time: Tue 16 Dec 2025 10:42:29 +0000 ROA not before: Tue 16 Dec 2025 10:42:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44620 IP address blocks: 31.14.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:c1:22:36:f3:20:77:1b:ae:e5:25:7c:84:85:22:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Dec 16 10:42:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6a77f49a12c55633b7d2d1ea2bc0c3e14b456b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b0:d5:00:25:6d:7f:ee:02:7e:24:92:c7:de: b3:8f:fd:26:16:7b:ce:33:bf:79:6d:a0:c8:06:d7: ed:f9:b5:e5:1d:bf:c3:95:69:76:73:19:7f:c0:05: f8:8c:d8:ea:cc:66:4e:e4:9c:f5:71:9b:c6:62:08: a6:63:be:02:63:08:3b:9b:88:4a:b6:53:f4:a1:01: d6:22:c5:2c:78:fd:5e:ad:29:41:63:89:23:89:4f: ca:72:15:67:cf:35:1c:0f:c2:ec:92:49:9c:b0:e6: cb:88:bd:5e:1f:b8:a5:e2:8d:2d:79:f0:80:4a:0f: cc:18:3c:8b:8d:3c:de:36:da:61:58:b7:f2:5f:95: d4:6e:f9:e4:a0:55:d7:f7:fd:68:eb:45:38:69:75: ea:91:98:98:47:63:0a:cf:4c:a0:ea:c8:f2:68:67: b3:e2:3c:ea:1b:1c:7d:bd:3e:3d:0e:3f:17:8d:75: 7d:24:fe:9f:19:84:6e:c4:fb:b1:05:43:e9:6f:e1: 9f:be:eb:ec:ae:32:e5:1f:29:9d:38:6b:70:24:7b: 83:9c:ab:5d:8c:ce:37:5d:b9:eb:39:c5:92:f5:52: 2a:33:d6:b4:03:f1:ba:da:99:7e:bb:70:eb:73:5c: 66:c2:19:09:30:b6:15:7b:43:c5:ce:ed:6c:dc:d4: 4d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:77:F4:9A:12:C5:56:33:B7:D2:D1:EA:2B:C0:C3:E1:4B:45:6B:7A X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/anf0mhLFVjO30tHqK8DD4UtFa3o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.10.0/24 Signature Algorithm: sha256WithRSAEncryption 70:92:49:80:f4:92:3a:92:b8:8d:a9:d6:34:6e:82:9e:4a:f2: d6:20:0a:5e:d5:55:2a:2f:21:f4:e8:5f:00:ac:fd:61:15:1e: fe:2d:31:dd:fe:cc:5a:fd:9d:27:cb:8d:32:72:a2:51:19:9f: df:ad:60:74:3f:cb:8e:47:20:fa:58:93:dd:8a:fa:69:39:49: 7f:15:46:84:47:dc:aa:80:bf:16:96:b2:18:ba:e6:84:a8:26: 6d:54:dc:f3:51:e3:be:3d:d5:b5:11:1f:e3:a5:07:81:5f:26: c7:ed:1b:ce:40:75:0e:8a:d4:d1:37:41:f2:15:3e:d3:35:e6: c9:ec:31:b0:2d:5a:2f:04:b1:21:4e:c9:8f:15:dc:cd:b5:3e: 40:b0:4d:19:2f:51:c4:e3:a2:e9:92:98:c7:81:eb:ae:f2:5a: 8c:98:7a:a5:98:05:ae:f4:f1:10:52:ef:bf:86:f7:56:3c:9f: a3:5f:ea:06:64:dc:dc:03:6f:56:4c:21:4a:a5:40:99:df:89: 26:3f:ab:01:40:53:9b:ea:a6:63:14:0e:59:87:83:24:02:6d: 52:59:ee:38:36:f6:38:74:19:c3:b3:9b:cb:2a:7e:47:9a:97: 4b:ca:5d:89:f6:b1:66:04:16:cb:69:f5:64:69:99:38:ce:fb: ba:4d:70:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsmwSI28yB3G67lJXyEhSICMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjUxMjE2MTA0MjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTc3ZjQ5YTEyYzU1NjMzYjdkMmQxZWEyYmMwYzNlMTRiNDU2YjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7DVACVtf+4CfiSSx96zj/0mFnvO M795baDIBtft+bXlHb/DlWl2cxl/wAX4jNjqzGZO5Jz1cZvGYgimY74CYwg7m4hK tlP0oQHWIsUseP1erSlBY4kjiU/KchVnzzUcD8LskkmcsObLiL1eH7il4o0tefCA Sg/MGDyLjTzeNtphWLfyX5XUbvnkoFXX9/1o60U4aXXqkZiYR2MKz0yg6sjyaGez 4jzqGxx9vT49Dj8XjXV9JP6fGYRuxPuxBUPpb+GfvuvsrjLlHymdOGtwJHuDnKtd jM43XbnrOcWS9VIqM9a0A/G62pl+u3Drc1xmwhkJMLYVe0PFzu1s3NRNdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGp39JoSxVYzt9LR6ivAw+FLRWt6MB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvYW5mMG1oTEZWak8zMHRIcUs4REQ0VXRGYTNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHw4KMA0G CSqGSIb3DQEBCwUAA4IBAQBwkkmA9JI6kriNqdY0boKeSvLWIApe1VUqLyH06F8A rP1hFR7+LTHd/sxa/Z0ny40ycqJRGZ/frWB0P8uORyD6WJPdivppOUl/FUaER9yq gL8WlrIYuuaEqCZtVNzzUeO+PdW1ER/jpQeBXybH7RvOQHUOitTRN0HyFT7TNebJ 7DGwLVovBLEhTsmPFdzNtT5AsE0ZL1HE46LpkpjHgeuu8lqMmHqlmAWu9PEQUu+/ hvdWPJ+jX+oGZNzcA29WTCFKpUCZ34kmP6sBQFOb6qZjFA5Zh4MkAm1SWe44NvY4 dBnDs5vLKn5HmpdLyl2J9rFmBBbLafVkaZk4zvu6TXBN -----END CERTIFICATE-----Generated at Sat Dec 20 11:47:32 2025 by rpki-client