This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/A69snNPiFFp-ZJHhhhFBxkLfqjc.roa File: A69snNPiFFp-ZJHhhhFBxkLfqjc.roa (raw, json) Hash identifier: VH0DEovfxx+abP3tX81hidYcbrd76YLHMgGtB2rBB34= Subject key identifier: 03:AF:6C:9C:D3:E2:14:5A:7E:64:91:E1:86:11:41:C6:42:DF:AA:37 Certificate issuer: /CN=c6f61e3eb3cb447aca6d9a4356cd75717a7b7c68 Certificate serial: 019B7F84AC6EF5C0EDC4EA68F7802D28E3ED Authority key identifier: C6:F6:1E:3E:B3:CB:44:7A:CA:6D:9A:43:56:CD:75:71:7A:7B:7C:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvYePrPLRHrKbZpDVs11cXp7fGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/A69snNPiFFp-ZJHhhhFBxkLfqjc.roa Signing time: Fri 02 Jan 2026 16:22:39 +0000 ROA not before: Fri 02 Jan 2026 16:22:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31723 IP address blocks: 185.160.144.0/22 maxlen: 24 217.171.112.0/20 maxlen: 24 2a07:be00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.crl rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.mft rsync://rpki.ripe.net/repository/DEFAULT/xvYePrPLRHrKbZpDVs11cXp7fGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ac:6e:f5:c0:ed:c4:ea:68:f7:80:2d:28:e3:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6f61e3eb3cb447aca6d9a4356cd75717a7b7c68 Validity Not Before: Jan 2 16:22:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03af6c9cd3e2145a7e6491e1861141c642dfaa37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f9:b9:74:09:b9:aa:34:ae:df:59:34:94:1f: a2:9d:e0:9d:49:38:d4:f9:b6:f4:e8:a3:ba:3d:25: 34:82:38:61:fd:c2:53:9b:fa:a9:89:6f:dc:44:09: 38:e9:70:5d:c7:c9:01:69:a9:d5:9a:c7:61:76:42: bc:d3:37:72:59:bf:71:84:26:a5:1a:2b:71:37:5d: 3c:4d:13:36:11:85:c5:f2:85:d0:44:c0:ed:43:7f: 10:84:13:e6:75:ba:f7:ab:d8:c1:6a:03:6d:3c:ef: 9a:75:ea:e3:5c:48:13:87:a1:4b:5d:23:ea:4c:4c: e9:27:6e:6c:ba:6f:1f:29:16:b6:30:e5:2d:ea:b9: 32:9c:87:45:35:b3:ae:84:0d:15:06:7a:47:ba:57: 18:c9:3a:a8:67:48:fe:b0:6d:7e:17:ea:fd:1a:9e: 9f:81:30:c6:51:ee:90:80:62:46:49:23:bf:40:34: 2d:34:6e:15:fb:79:d4:72:d8:35:43:83:77:69:f1: 3d:48:9d:d5:dc:89:ed:be:e2:56:af:a5:2d:b0:37: 3f:b9:57:18:86:9a:c0:1e:79:ca:4d:09:6d:90:f0: 37:cc:6f:0f:31:ea:8c:42:00:0a:d1:b3:de:8e:63: b4:fb:0c:9c:6f:a6:d2:7f:9b:6b:6b:4d:54:0c:a5: 5d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:AF:6C:9C:D3:E2:14:5A:7E:64:91:E1:86:11:41:C6:42:DF:AA:37 X509v3 Authority Key Identifier: keyid:C6:F6:1E:3E:B3:CB:44:7A:CA:6D:9A:43:56:CD:75:71:7A:7B:7C:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvYePrPLRHrKbZpDVs11cXp7fGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/A69snNPiFFp-ZJHhhhFBxkLfqjc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.160.144.0/22 217.171.112.0/20 IPv6: 2a07:be00::/29 Signature Algorithm: sha256WithRSAEncryption 89:46:2f:c1:61:ab:46:24:92:40:e0:e2:53:03:ab:c9:a2:8e: b8:c1:ba:92:03:de:c7:b5:f1:08:8a:76:c9:9e:49:fb:dd:45: 23:4c:16:fe:6f:79:5e:d9:a1:23:a4:b6:fa:fd:e3:5a:31:10: cb:76:d4:14:1d:87:86:d5:96:ac:5e:93:fa:38:4b:80:c2:70: 85:d0:a2:76:8c:4f:97:68:aa:06:22:04:af:ce:03:52:c9:32: e1:07:bd:d8:14:03:38:8a:57:21:ae:0b:1d:f5:7f:b9:e2:8c: 0c:ef:98:08:43:f2:7f:f5:eb:1d:96:0f:7b:0a:00:c0:81:f6: dd:1c:fe:0b:1c:ce:1f:b8:42:61:3c:01:64:97:19:f8:aa:94: 24:fb:f0:35:c8:df:45:c1:a0:3b:5d:bd:9b:0d:fe:aa:89:89: f4:59:52:2b:d6:65:e6:17:26:10:96:ff:ac:03:fd:b7:83:65: 2f:4a:83:b7:de:da:ec:ea:fe:22:e0:91:e7:59:9c:76:10:de: 6b:95:e4:f8:eb:c0:93:4e:52:0f:50:f1:fd:bc:f7:77:1c:b6: 58:97:2c:a8:c4:63:36:60:3f:bb:a3:36:03:7b:04:77:bd:90: 61:ab:81:6c:c7:4a:8d:98:62:1a:ae:78:e8:8d:e4:30:6e:f3: 31:a0:73:08 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/hKxu9cDtxOpo94AtKOPtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZjYxZTNlYjNjYjQ0N2FjYTZkOWE0MzU2Y2Q3NTcxN2E3 YjdjNjgwHhcNMjYwMTAyMTYyMjM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2FmNmM5Y2QzZTIxNDVhN2U2NDkxZTE4NjExNDFjNjQyZGZhYTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Pm5dAm5qjSu31k0lB+ineCdSTjU +bb06KO6PSU0gjhh/cJTm/qpiW/cRAk46XBdx8kBaanVmsdhdkK80zdyWb9xhCal GitxN108TRM2EYXF8oXQRMDtQ38QhBPmdbr3q9jBagNtPO+aderjXEgTh6FLXSPq TEzpJ25sum8fKRa2MOUt6rkynIdFNbOuhA0VBnpHulcYyTqoZ0j+sG1+F+r9Gp6f gTDGUe6QgGJGSSO/QDQtNG4V+3nUctg1Q4N3afE9SJ3V3IntvuJWr6UtsDc/uVcY hprAHnnKTQltkPA3zG8PMeqMQgAK0bPejmO0+wycb6bSf5tra01UDKVdrwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAOvbJzT4hRafmSR4YYRQcZC36o3MB8GA1UdIwQY MBaAFMb2Hj6zy0R6ym2aQ1bNdXF6e3xoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHZZZVByUExSSHJLYlpwRFZzMTFjWHA3ZkdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny80NTRmMDMtMDg3Ny00NDVkLWJmYjEt NzcwMzI1MGJmYmFiLzEvQTY5c25OUGlGRnAtWkpIaGhoRkJ4a0xmcWpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny80NTRmMDMtMDg3Ny00NDVkLWJmYjEtNzcwMzI1MGJmYmFi LzEveHZZZVByUExSSHJLYlpwRFZzMTFjWHA3ZkdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuaCQAwQE 2atwMA0EAgACMAcDBQMqB74AMA0GCSqGSIb3DQEBCwUAA4IBAQCJRi/BYatGJJJA 4OJTA6vJoo64wbqSA97HtfEIinbJnkn73UUjTBb+b3le2aEjpLb6/eNaMRDLdtQU HYeG1ZasXpP6OEuAwnCF0KJ2jE+XaKoGIgSvzgNSyTLhB73YFAM4ilchrgsd9X+5 4owM75gIQ/J/9esdlg97CgDAgfbdHP4LHM4fuEJhPAFklxn4qpQk+/A1yN9FwaA7 Xb2bDf6qiYn0WVIr1mXmFyYQlv+sA/23g2UvSoO33trs6v4i4JHnWZx2EN5rleT4 68CTTlIPUPH9vPd3HLZYlyyoxGM2YD+7ozYDewR3vZBhq4Fsx0qNmGIarnjojeQw bvMxoHMI -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:12 2026 by rpki-client