This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/AERNn4owYT_oFprNQTks1fSYJJM.roa File: AERNn4owYT_oFprNQTks1fSYJJM.roa (raw, json) Hash identifier: WANrLW61ZUKcYfUjxfufxPxcZSDYLVPZQdRxrID6fuo= Subject key identifier: 00:44:4D:9F:8A:30:61:3F:E8:16:9A:CD:41:39:2C:D5:F4:98:24:93 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C8037D31FC140D12DC3BD7307189CC3 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/AERNn4owYT_oFprNQTks1fSYJJM.roa Signing time: Fri 02 Jan 2026 02:18:56 +0000 ROA not before: Fri 02 Jan 2026 02:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216354 IP address blocks: 2a0f:7803:fec0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:37:d3:1f:c1:40:d1:2d:c3:bd:73:07:18:9c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00444d9f8a30613fe8169acd41392cd5f4982493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fe:45:f7:4d:bd:69:4d:e2:d2:36:a7:a4:90: 02:a3:c0:7a:b9:2f:9e:f5:f8:1e:61:5d:e0:b3:3e: 4e:b9:b1:ac:a8:20:41:3a:d7:53:e0:49:96:f7:d1: fb:6f:5a:51:90:e6:02:38:f5:d7:40:a8:ba:2d:3c: 31:02:e9:c1:eb:8c:ad:54:67:f8:81:9e:f1:51:cf: ba:57:27:7d:09:f3:75:2a:b0:c8:d6:61:71:0a:96: c2:91:3b:ee:c3:19:85:05:fd:55:73:5c:fa:66:6a: b4:8b:2c:7a:c0:97:d7:7b:50:8d:5b:36:85:75:af: 4f:31:21:6c:02:9e:5b:b0:92:58:97:59:c2:68:28: 71:97:30:ac:25:c0:b2:2b:02:36:9b:0f:bf:e8:63: 36:cd:42:dc:de:6b:27:12:29:3f:b3:c0:17:2d:9c: dc:9a:f8:de:ef:ea:90:ba:23:5e:76:fe:43:f5:7b: 2e:9d:6b:85:95:18:69:9d:90:9d:48:31:e5:51:c6: f2:50:f9:c0:24:be:ad:37:ac:b0:39:be:b7:dc:20: f2:ce:cb:38:c9:74:82:44:43:8f:d0:dd:32:cf:96: c7:5a:16:e4:28:23:7d:f4:2b:c2:fa:54:cf:13:99: ca:c8:4a:3a:be:7b:4b:06:73:d8:53:0f:50:0b:32: f5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:44:4D:9F:8A:30:61:3F:E8:16:9A:CD:41:39:2C:D5:F4:98:24:93 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/AERNn4owYT_oFprNQTks1fSYJJM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:fec0::/44 Signature Algorithm: sha256WithRSAEncryption 32:b4:1c:c7:14:b0:37:40:aa:5f:0e:0b:aa:d6:c6:8f:31:ec: 3e:92:11:62:12:15:95:38:34:02:8e:f6:37:3e:90:5f:04:65: fc:04:fb:20:88:29:9d:d7:bd:2e:19:36:e6:74:a9:ae:fc:e4: 20:01:93:4d:f4:9c:c2:d8:61:dc:5e:0d:09:1a:b5:0f:3f:92: d1:3b:9c:ab:0e:63:35:e3:11:1b:61:a9:a3:30:2f:74:43:0a: 7e:82:af:12:93:bd:09:11:1e:d4:38:8f:1e:f7:88:f9:3c:19: c6:98:aa:fe:a4:3c:34:7b:a0:a6:01:58:4a:15:e4:3f:fb:6a: eb:bc:87:07:dd:d0:15:0a:90:60:16:da:25:9a:94:0e:a5:46: 64:a2:1b:e8:f9:4c:67:95:b9:c0:6e:14:cc:1f:53:71:0b:9a: f4:bd:03:3e:14:05:73:de:ff:42:6c:89:39:e9:a6:71:07:9d: db:e1:89:76:4b:8f:1d:67:9c:a4:b1:41:f9:0b:62:fb:41:44: cc:37:06:49:75:a3:13:bd:cf:4a:79:45:dd:63:a7:8a:10:4a: 22:fa:64:1c:c3:38:6d:43:3a:e3:5a:2f:a7:8f:83:bd:63:2f: 17:74:50:09:9b:7a:de:30:20:55:fd:11:d3:fa:89:12:39:d3: fa:d0:7e:63 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gDfTH8FA0S3DvXMHGJzDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDQ0NGQ5ZjhhMzA2MTNmZTgxNjlhY2Q0MTM5MmNkNWY0OTgyNDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/5F9029aU3i0janpJACo8B6uS+e 9fgeYV3gsz5OubGsqCBBOtdT4EmW99H7b1pRkOYCOPXXQKi6LTwxAunB64ytVGf4 gZ7xUc+6Vyd9CfN1KrDI1mFxCpbCkTvuwxmFBf1Vc1z6Zmq0iyx6wJfXe1CNWzaF da9PMSFsAp5bsJJYl1nCaChxlzCsJcCyKwI2mw+/6GM2zULc3msnEik/s8AXLZzc mvje7+qQuiNedv5D9XsunWuFlRhpnZCdSDHlUcbyUPnAJL6tN6ywOb633CDyzss4 yXSCREOP0N0yz5bHWhbkKCN99CvC+lTPE5nKyEo6vntLBnPYUw9QCzL1sQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFABETZ+KMGE/6BaazUE5LNX0mCSTMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvQUVSTm40b3dZVF9vRnByTlFUa3MxZlNZSkpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A/7A MA0GCSqGSIb3DQEBCwUAA4IBAQAytBzHFLA3QKpfDguq1saPMew+khFiEhWVODQC jvY3PpBfBGX8BPsgiCmd170uGTbmdKmu/OQgAZNN9JzC2GHcXg0JGrUPP5LRO5yr DmM14xEbYamjMC90Qwp+gq8Sk70JER7UOI8e94j5PBnGmKr+pDw0e6CmAVhKFeQ/ +2rrvIcH3dAVCpBgFtolmpQOpUZkohvo+UxnlbnAbhTMH1NxC5r0vQM+FAVz3v9C bIk56aZxB53b4Yl2S48dZ5yksUH5C2L7QUTMNwZJdaMTvc9KeUXdY6eKEEoi+mQc wzhtQzrjWi+nj4O9Yy8XdFAJm3reMCBV/RHT+okSOdP60H5j -----END CERTIFICATE-----Generated at Wed Jan 21 16:58:21 2026 by rpki-client