This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa File: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (raw, json) Hash identifier: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ= Subject key identifier: 68:79:CA:49:C2:F1:E8:8C:A8:DD:63:C7:64:BC:89:57:4B:57:65:ED Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019B7A5B05D4A16A2919BC2C1B478849C5A1 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa Signing time: Thu 01 Jan 2026 16:19:04 +0000 ROA not before: Thu 01 Jan 2026 16:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44436 IP address blocks: 45.11.185.0/24 maxlen: 24 194.59.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:05:d4:a1:6a:29:19:bc:2c:1b:47:88:49:c5:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jan 1 16:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6879ca49c2f1e88ca8dd63c764bc89574b5765ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d8:5e:94:13:8e:b4:c5:42:23:63:8f:a8:69: ad:71:a5:cf:09:f8:82:cf:0f:c2:cb:3e:08:92:e9: 7e:bb:55:c9:75:67:4f:31:36:bc:f0:97:da:9f:28: fb:56:c2:5e:71:75:f5:53:13:c2:ae:83:fb:87:7d: 3c:b6:10:af:09:e8:6b:f7:85:e3:09:7d:a7:02:cd: 7c:30:8b:e7:e7:a4:31:ec:05:e5:39:47:bb:40:e4: e6:19:f0:d4:a9:5a:96:29:4d:22:d2:11:08:09:fd: f3:45:76:f9:b3:15:8e:41:40:da:04:99:4f:18:b6: 22:cb:2b:fd:41:2c:80:13:25:99:ce:f9:78:d1:dd: 83:f9:8b:8f:ab:c4:b0:80:de:e1:f3:c4:12:8e:29: 7b:c8:d3:f4:75:32:f4:2f:8d:47:bb:34:fc:22:b7: 33:6c:5d:8a:00:c0:9a:07:c1:9c:b1:c6:c2:cf:9a: fb:b9:91:38:6f:d2:99:e4:55:14:61:5e:0c:8f:8f: e5:a5:8a:c8:76:37:ae:c6:0c:3f:f3:3a:63:29:f0: 93:b9:da:49:51:64:5b:19:6e:58:c1:a0:eb:d7:a8: c8:7c:87:69:59:5b:7e:72:b9:ca:99:28:15:31:a9: 9f:14:32:c4:51:6f:98:8b:51:de:1c:90:c1:0b:db: 04:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:79:CA:49:C2:F1:E8:8C:A8:DD:63:C7:64:BC:89:57:4B:57:65:ED X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.185.0/24 194.59.214.0/24 Signature Algorithm: sha256WithRSAEncryption 13:f3:19:3f:7e:cf:3b:04:99:60:da:de:7d:86:c1:d5:b9:d0: b5:06:49:e3:97:aa:80:da:13:8f:c1:d0:42:e7:72:0a:70:74: 72:a0:a6:7a:de:22:c1:83:bb:32:03:19:99:54:95:67:67:8b: d5:a3:13:33:a8:8a:95:18:0e:32:60:e6:00:d4:65:53:af:bd: ad:0a:34:d3:23:72:9d:03:ec:16:dd:cb:1d:a6:80:3e:5e:63: 6b:b3:48:c2:fb:c8:76:82:f8:95:05:15:cf:eb:7c:46:f4:e4: 70:c3:41:df:50:1a:23:27:ab:d1:4f:ab:23:04:ca:f1:23:bc: 9e:89:81:32:de:15:7c:10:f0:d1:61:4b:70:42:ad:05:76:68: d3:ac:f0:70:ab:50:55:8d:8b:4b:69:61:0c:99:6e:83:46:12: 8f:0b:79:e7:f6:cf:65:5c:19:65:a5:5f:8f:43:93:29:c7:c7: 83:42:4c:07:86:4d:ab:43:1b:d5:58:64:c0:af:46:4d:b4:c3: 6e:10:9f:66:0f:54:71:00:28:75:d1:8b:32:39:93:b8:99:17: 28:71:08:1e:8a:45:a9:27:6c:f9:17:ba:18:a3:0f:b4:93:d5: 29:88:e3:f0:ac:ed:ca:ec:12:1b:df:16:e0:ea:9a:ef:7d:53: 56:1c:6f:68 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WwXUoWopGbwsG0eIScWhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMTAxMTYxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODc5Y2E0OWMyZjFlODhjYThkZDYzYzc2NGJjODk1NzRiNTc2NWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAythelBOOtMVCI2OPqGmtcaXPCfiC zw/Cyz4Ikul+u1XJdWdPMTa88Jfanyj7VsJecXX1UxPCroP7h308thCvCehr94Xj CX2nAs18MIvn56Qx7AXlOUe7QOTmGfDUqVqWKU0i0hEICf3zRXb5sxWOQUDaBJlP GLYiyyv9QSyAEyWZzvl40d2D+YuPq8SwgN7h88QSjil7yNP0dTL0L41HuzT8Ircz bF2KAMCaB8GcscbCz5r7uZE4b9KZ5FUUYV4Mj4/lpYrIdjeuxgw/8zpjKfCTudpJ UWRbGW5YwaDr16jIfIdpWVt+crnKmSgVMamfFDLEUW+Yi1HeHJDBC9sEjQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGh5yknC8eiMqN1jx2S8iVdLV2XtMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvYUhuS1NjTHg2SXlvM1dQSFpMeUpWMHRYWmUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQu5AwQA wjvWMA0GCSqGSIb3DQEBCwUAA4IBAQAT8xk/fs87BJlg2t59hsHVudC1Bknjl6qA 2hOPwdBC53IKcHRyoKZ63iLBg7syAxmZVJVnZ4vVoxMzqIqVGA4yYOYA1GVTr72t CjTTI3KdA+wW3csdpoA+XmNrs0jC+8h2gviVBRXP63xG9ORww0HfUBojJ6vRT6sj BMrxI7yeiYEy3hV8EPDRYUtwQq0FdmjTrPBwq1BVjYtLaWEMmW6DRhKPC3nn9s9l XBllpV+PQ5Mpx8eDQkwHhk2rQxvVWGTAr0ZNtMNuEJ9mD1RxACh10YsyOZO4mRco cQgeikWpJ2z5F7oYow+0k9UpiOPwrO3K7BIb3xbg6prvfVNWHG9o -----END CERTIFICATE-----Generated at Mon Jan 5 13:05:24 2026 by rpki-client