This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/ArhOlmQqtQ-lRc30NWT3OiTVfrw.roa File: ArhOlmQqtQ-lRc30NWT3OiTVfrw.roa (raw, json) Hash identifier: GSr0Kdoffizs1f3/ISgR1fRxyFY0oJ1xUGMO3XpZlU0= Subject key identifier: 02:B8:4E:96:64:2A:B5:0F:A5:45:CD:F4:35:64:F7:3A:24:D5:7E:BC Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Certificate serial: 019B7FF1C33CBBC0E55792FBA3256E930D9B Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/ArhOlmQqtQ-lRc30NWT3OiTVfrw.roa Signing time: Fri 02 Jan 2026 18:21:49 +0000 ROA not before: Fri 02 Jan 2026 18:21:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213073 IP address blocks: 2a03:5840:100::/44 maxlen: 44 2a03:5840:100::/48 maxlen: 48 2a03:5840:10a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:c3:3c:bb:c0:e5:57:92:fb:a3:25:6e:93:0d:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Validity Not Before: Jan 2 18:21:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02b84e96642ab50fa545cdf43564f73a24d57ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b8:1a:1a:61:c7:13:2c:2d:d1:5a:1f:13:89: 5c:b3:4c:9f:ba:af:92:4b:56:07:5c:f6:92:f9:7e: 1c:d0:73:fd:20:3e:1a:62:8c:c0:f0:fa:00:a5:ac: 99:a1:e5:34:b2:c9:7f:25:dd:c7:13:6c:e3:1b:15: 9d:e1:78:5f:8c:66:72:2e:47:79:e3:db:5c:cb:f8: c5:56:05:48:74:2a:36:93:28:00:e1:2c:6c:ca:43: 26:cc:26:34:56:cf:29:47:46:7d:65:6f:db:11:43: e9:46:0b:2b:7f:79:52:ba:32:09:23:57:69:0e:d2: 91:34:ff:4d:81:13:ca:20:77:2d:3c:30:5d:a5:f0: 00:fe:17:6a:d2:12:23:82:39:ac:18:de:1f:52:02: bf:4e:de:7f:c3:6a:b1:94:c1:2a:a4:fc:93:fd:f6: fd:0a:36:de:cf:40:43:9a:fd:aa:1d:d2:78:a5:7e: 0e:b3:26:a2:9d:6b:7b:ae:8d:5c:aa:05:66:f8:3b: 38:dc:8a:68:77:6b:4d:bb:72:1e:ea:8c:69:b4:91: 24:68:2a:e8:f1:70:6d:18:d1:bb:e5:93:db:36:dd: 1c:58:f7:ec:3b:0f:2e:e7:02:ca:b5:5e:69:df:f0: 56:9e:9b:5b:ac:ce:04:a7:cb:33:ca:79:09:5f:d7: 0c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B8:4E:96:64:2A:B5:0F:A5:45:CD:F4:35:64:F7:3A:24:D5:7E:BC X509v3 Authority Key Identifier: keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/ArhOlmQqtQ-lRc30NWT3OiTVfrw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:5840:100::/44 Signature Algorithm: sha256WithRSAEncryption 63:fc:b6:b8:89:af:48:39:57:ad:b4:ee:b8:2c:0c:80:6f:06: 3a:d2:70:75:81:7f:62:45:31:a7:f7:3a:3c:1a:6e:4c:32:ba: 80:d7:44:82:ae:30:2f:e4:97:72:a5:75:4f:f6:a1:18:05:a5: 1e:c3:28:e5:b9:fe:ae:bd:09:59:12:b3:b7:a9:ee:96:79:4a: 7a:5f:47:e6:4a:61:c9:6a:90:77:45:26:d1:45:87:71:92:d8: f6:bb:3c:e7:2c:f2:26:04:cc:9d:e7:63:4c:b6:f3:10:ba:25: f7:87:e5:7e:9e:3a:2f:02:21:4c:d2:58:21:c1:1d:24:cd:a8: 56:6a:9c:03:dd:a4:f1:b9:55:21:56:03:13:d3:be:4d:f6:7d: e0:2a:49:b0:c3:e0:88:0c:53:8a:2f:3e:37:35:9e:61:70:54: 9c:78:0d:f7:09:41:82:5d:d1:ff:62:36:a0:1c:e1:b4:15:8c: 09:3d:24:d6:be:e0:12:91:dd:29:cf:d8:d3:7e:86:e1:91:22: 8d:0a:3e:5c:fe:b3:9c:62:04:bd:00:53:57:88:3c:35:05:10: 7e:b8:96:77:9f:f3:94:e8:fe:48:36:09:dc:66:e1:be:6c:9e: 46:34:9d:35:d9:cd:69:73:0e:33:77:7d:b3:7e:51:21:34:f7: 56:44:57:3a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8cM8u8DlV5L7oyVukw2bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1 ODYzNWEwHhcNMjYwMTAyMTgyMTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmI4NGU5NjY0MmFiNTBmYTU0NWNkZjQzNTY0ZjczYTI0ZDU3ZWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7gaGmHHEywt0VofE4lcs0yfuq+S S1YHXPaS+X4c0HP9ID4aYozA8PoApayZoeU0ssl/Jd3HE2zjGxWd4XhfjGZyLkd5 49tcy/jFVgVIdCo2kygA4SxsykMmzCY0Vs8pR0Z9ZW/bEUPpRgsrf3lSujIJI1dp DtKRNP9NgRPKIHctPDBdpfAA/hdq0hIjgjmsGN4fUgK/Tt5/w2qxlMEqpPyT/fb9 Cjbez0BDmv2qHdJ4pX4OsyainWt7ro1cqgVm+Ds43Ipod2tNu3Ie6oxptJEkaCro 8XBtGNG75ZPbNt0cWPfsOw8u5wLKtV5p3/BWnptbrM4Ep8szynkJX9cMwQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAK4TpZkKrUPpUXN9DVk9zok1X68MB8GA1UdIwQY MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt NmNiODk3OTFkN2ZkLzEvQXJoT2xtUXF0US1sUmMzME5XVDNPaVRWZnJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgNYQAEA MA0GCSqGSIb3DQEBCwUAA4IBAQBj/La4ia9IOVettO64LAyAbwY60nB1gX9iRTGn 9zo8Gm5MMrqA10SCrjAv5JdypXVP9qEYBaUewyjluf6uvQlZErO3qe6WeUp6X0fm SmHJapB3RSbRRYdxktj2uzznLPImBMyd52NMtvMQuiX3h+V+njovAiFM0lghwR0k zahWapwD3aTxuVUhVgMT075N9n3gKkmww+CIDFOKLz43NZ5hcFSceA33CUGCXdH/ YjagHOG0FYwJPSTWvuASkd0pz9jTfobhkSKNCj5c/rOcYgS9AFNXiDw1BRB+uJZ3 n/OU6P5INgncZuG+bJ5GNJ012c1pcw4zd32zflEhNPdWRFc6 -----END CERTIFICATE-----Generated at Sun Jan 18 08:03:23 2026 by rpki-client