This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/anEMLhBSR-ZUhDs4y9V3c82TLb4.roa File: anEMLhBSR-ZUhDs4y9V3c82TLb4.roa (raw, json) Hash identifier: JlsU25C/lCNOkItP54ekDC6SLLrLG7JIzKd/WFTWKEE= Subject key identifier: 6A:71:0C:2E:10:52:47:E6:54:84:3B:38:CB:D5:77:73:CD:93:2D:BE Certificate issuer: /CN=85add8eaaeb3a478d7e5df3e7ee1c323f166bf28 Certificate serial: 019B7CEDEE4168D67B4663D9B23D13765A61 Authority key identifier: 85:AD:D8:EA:AE:B3:A4:78:D7:E5:DF:3E:7E:E1:C3:23:F1:66:BF:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/anEMLhBSR-ZUhDs4y9V3c82TLb4.roa Signing time: Fri 02 Jan 2026 04:18:46 +0000 ROA not before: Fri 02 Jan 2026 04:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 45.84.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ee:41:68:d6:7b:46:63:d9:b2:3d:13:76:5a:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85add8eaaeb3a478d7e5df3e7ee1c323f166bf28 Validity Not Before: Jan 2 04:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a710c2e105247e654843b38cbd57773cd932dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:af:f7:3b:76:1a:de:25:6b:34:0d:95:36:4f: 49:f5:b9:29:f3:46:b9:ce:ac:ad:91:ad:36:21:70: 93:6a:93:dc:ae:6a:e1:2c:97:b9:f8:69:4c:3e:ff: ec:70:4e:3e:27:d2:f0:a8:29:b6:71:78:14:5b:de: e7:42:35:87:ed:65:31:89:eb:a5:85:5e:10:12:ef: 26:47:6c:f5:85:8b:45:50:77:c0:ad:e2:d7:7d:cc: 57:38:06:ec:e6:04:93:2c:8c:0c:c5:26:79:54:70: b9:1a:34:ea:c2:b7:b0:ee:87:b4:d2:83:f9:db:71: 82:53:c7:52:40:5e:a4:b9:dd:0a:fd:4b:b5:92:22: 18:48:91:69:8d:8d:17:c2:af:d1:f4:6e:12:a7:33: 22:c0:62:88:07:e9:e9:06:5c:4b:a6:cf:f2:75:1b: ee:d9:7e:7b:9d:4b:ee:f2:d6:f1:87:6d:09:43:19: fc:59:78:4f:d1:93:bc:0c:f1:3b:53:7f:ec:25:86: 55:e9:cc:85:66:ce:3a:4c:7c:ea:79:21:e9:95:16: 54:b8:8a:c7:d1:32:11:c7:2c:bf:23:a0:e7:3e:92: be:4e:39:a0:27:6a:4f:ed:4b:4e:63:46:5b:14:50: 42:c2:4b:f1:3e:cd:bd:f5:c1:89:fa:e7:a8:8a:81: 0d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:71:0C:2E:10:52:47:E6:54:84:3B:38:CB:D5:77:73:CD:93:2D:BE X509v3 Authority Key Identifier: keyid:85:AD:D8:EA:AE:B3:A4:78:D7:E5:DF:3E:7E:E1:C3:23:F1:66:BF:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/anEMLhBSR-ZUhDs4y9V3c82TLb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.238.0/24 Signature Algorithm: sha256WithRSAEncryption a9:f7:34:7b:58:7c:8c:c0:e0:c6:25:f1:0d:5b:81:12:2b:16: 1b:de:fe:12:4f:e7:f8:be:7c:e3:a3:55:92:e5:69:0d:87:25: d0:94:c3:48:b3:e9:1f:bd:12:5a:fa:f6:4c:da:e5:d4:63:28: 45:90:2b:d0:82:8f:ac:52:6f:76:c8:73:6e:bf:8e:08:d7:47: 34:18:cd:42:dd:50:2c:3a:65:4f:34:a7:54:c0:8d:45:d5:4a: 24:6b:92:5e:6e:79:d7:80:a9:6d:36:1f:65:77:02:a4:30:21: 16:38:e7:9d:d8:8b:8e:35:64:6b:85:26:e2:85:ab:b0:34:55: d8:ca:cf:d5:8f:fa:d9:d1:18:6e:82:8a:e8:20:a3:87:fe:0f: 3f:53:1e:46:0f:fa:c0:6e:e8:16:75:34:33:ff:2e:21:3f:42: 46:af:61:e8:d4:36:ec:68:c7:21:15:5c:8c:68:42:63:f7:f1: 9b:6b:f6:98:93:35:45:f8:2e:38:ce:3d:80:9c:8b:66:9a:7c: ee:01:21:d2:cf:23:f0:de:9d:04:a0:a4:80:9f:08:c4:7f:fc: 81:d6:9d:f3:a8:16:30:70:66:a4:11:38:62:de:a1:cf:2f:c1: 3e:08:2b:24:d6:dd:15:3b:54:8d:82:04:d8:1a:d3:d4:74:c8: d2:a1:3a:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87e5BaNZ7RmPZsj0TdlphMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1YWRkOGVhYWViM2E0NzhkN2U1ZGYzZTdlZTFjMzIzZjE2 NmJmMjgwHhcNMjYwMTAyMDQxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTcxMGMyZTEwNTI0N2U2NTQ4NDNiMzhjYmQ1Nzc3M2NkOTMyZGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa/3O3Ya3iVrNA2VNk9J9bkp80a5 zqytka02IXCTapPcrmrhLJe5+GlMPv/scE4+J9LwqCm2cXgUW97nQjWH7WUxieul hV4QEu8mR2z1hYtFUHfAreLXfcxXOAbs5gSTLIwMxSZ5VHC5GjTqwrew7oe00oP5 23GCU8dSQF6kud0K/Uu1kiIYSJFpjY0Xwq/R9G4SpzMiwGKIB+npBlxLps/ydRvu 2X57nUvu8tbxh20JQxn8WXhP0ZO8DPE7U3/sJYZV6cyFZs46THzqeSHplRZUuIrH 0TIRxyy/I6DnPpK+TjmgJ2pP7UtOY0ZbFFBCwkvxPs299cGJ+ueoioENfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGpxDC4QUkfmVIQ7OMvVd3PNky2+MB8GA1UdIwQY MBaAFIWt2Oqus6R41+XfPn7hwyPxZr8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGEzWTZxNnpwSGpYNWQ4LWZ1SERJX0ZtdnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kNDRkZDAtMDViNy00NDI3LWEwODIt MWI3ZWMzOGU5ZjQ0LzEvYW5FTUxoQlNSLVpVaERzNHk5VjNjODJUTGI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9kNDRkZDAtMDViNy00NDI3LWEwODItMWI3ZWMzOGU5ZjQ0 LzEvaGEzWTZxNnpwSGpYNWQ4LWZ1SERJX0ZtdnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVTuMA0G CSqGSIb3DQEBCwUAA4IBAQCp9zR7WHyMwODGJfENW4ESKxYb3v4ST+f4vnzjo1WS 5WkNhyXQlMNIs+kfvRJa+vZM2uXUYyhFkCvQgo+sUm92yHNuv44I10c0GM1C3VAs OmVPNKdUwI1F1Uoka5JebnnXgKltNh9ldwKkMCEWOOed2IuONWRrhSbihauwNFXY ys/Vj/rZ0RhugoroIKOH/g8/Ux5GD/rAbugWdTQz/y4hP0JGr2Ho1DbsaMchFVyM aEJj9/Gba/aYkzVF+C44zj2AnItmmnzuASHSzyPw3p0EoKSAnwjEf/yB1p3zqBYw cGakEThi3qHPL8E+CCsk1t0VO1SNggTYGtPUdMjSoTqw -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:03 2026 by rpki-client