This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/AQlhfGVcA8R2Bwt2uq11a9BJ3I8.roa File: AQlhfGVcA8R2Bwt2uq11a9BJ3I8.roa (raw, json) Hash identifier: ZpJgowIRgidE/63sx4+7oMD9312HUQ//RvFSY5dDQVE= Subject key identifier: 01:09:61:7C:65:5C:03:C4:76:07:0B:76:BA:AD:75:6B:D0:49:DC:8F Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5 Certificate serial: 019B79ECBC7D47B0ED1E6CFA6CD8B6E3DEA6 Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/AQlhfGVcA8R2Bwt2uq11a9BJ3I8.roa Signing time: Thu 01 Jan 2026 14:18:36 +0000 ROA not before: Thu 01 Jan 2026 14:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 37.143.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 02:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:bc:7d:47:b0:ed:1e:6c:fa:6c:d8:b6:e3:de:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5 Validity Not Before: Jan 1 14:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0109617c655c03c476070b76baad756bd049dc8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:60:fa:66:3e:d8:ae:76:67:b3:51:48:cd:6d: 29:28:45:83:c4:c9:72:f1:fa:ca:69:e5:fe:65:0c: 92:8f:16:32:37:bf:fa:7d:a2:98:a4:ee:f1:e2:6c: 6e:62:07:c8:86:d3:4e:ac:34:49:ef:97:30:86:d4: f6:bf:15:3d:52:0a:08:79:4e:f0:cc:fb:f4:22:d9: 5e:23:af:32:30:7e:66:d1:ad:98:7d:30:b2:7f:36: 04:3a:13:d7:7a:d1:f0:ad:aa:49:40:42:9e:83:82: 50:38:bc:e6:f9:f5:bb:e7:66:c3:71:c3:e9:b1:07: 6e:41:72:72:ae:f8:96:0e:14:08:de:71:3a:3f:e4: 40:ce:bd:d5:6a:07:3a:ba:cb:3b:6e:29:88:21:6e: e6:8c:96:b6:d6:8e:28:8e:2d:73:39:e4:c9:72:6c: 49:d5:ee:c3:97:9a:1f:47:d1:fb:9a:c1:77:0e:b6: f3:1e:08:87:08:24:76:06:f3:af:c9:de:47:56:4d: ca:2a:5f:3e:5e:07:4f:82:d8:d1:d2:1b:da:2e:99: 33:14:3d:9c:9e:66:38:ac:ab:9b:fe:a9:d6:dc:bc: 3e:92:6a:5d:70:3c:6a:c8:17:0b:29:fe:21:4c:18: 29:3b:d6:db:bf:db:29:14:4d:4f:d8:f4:e0:eb:de: f3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:09:61:7C:65:5C:03:C4:76:07:0B:76:BA:AD:75:6B:D0:49:DC:8F X509v3 Authority Key Identifier: keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/AQlhfGVcA8R2Bwt2uq11a9BJ3I8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.143.0.0/22 Signature Algorithm: sha256WithRSAEncryption b5:88:f0:13:c4:e6:7a:10:e4:78:d8:e0:77:2f:e9:e6:fa:e5: 11:ad:40:05:e2:2c:33:20:b2:e4:13:24:fb:83:85:89:d2:94: 6a:79:c0:43:81:d1:1a:56:c3:4c:db:54:78:52:9b:38:fa:5c: ad:32:f0:ac:34:3d:84:74:a5:74:ee:5d:64:10:72:d0:f4:a2: 32:44:96:bb:45:7e:9d:f3:7f:1c:f1:f4:37:a3:28:3d:47:c2: 4f:29:06:87:de:20:fd:88:dc:0f:da:19:7d:5c:21:a6:57:4b: c1:a7:22:d0:89:17:8d:e1:34:5b:29:da:b1:ab:bb:29:6a:de: 16:75:44:9f:ba:3b:70:57:84:55:bd:9a:1e:b4:ad:15:98:85: ed:61:a7:43:54:c7:e5:98:f9:01:17:0c:18:32:fc:6c:20:ab: f9:2b:49:95:a6:90:13:b4:3b:30:05:59:3b:78:f4:89:80:b1: 94:d9:ed:0c:b4:b8:d4:2a:10:06:8e:65:fd:3a:dc:c5:31:83: d0:97:52:d1:53:d6:d8:c1:9f:89:26:ee:27:1c:a0:a9:c9:6f: ee:98:7b:47:d6:24:65:89:5d:a8:97:6a:d0:b8:f8:a5:a4:b3: b4:c0:35:cf:6e:4a:ff:24:2a:22:fa:a0:f8:4a:07:ca:29:a1: 99:81:0f:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Lx9R7DtHmz6bNi2496mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNjM2M2Q0MjhiNzkxNWMxMDg4MjVmMDk3MDYwMDRiOGVh M2Q0YjUwHhcNMjYwMTAxMTQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTA5NjE3YzY1NWMwM2M0NzYwNzBiNzZiYWFkNzU2YmQwNDlkYzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmD6Zj7YrnZns1FIzW0pKEWDxMly 8frKaeX+ZQySjxYyN7/6faKYpO7x4mxuYgfIhtNOrDRJ75cwhtT2vxU9UgoIeU7w zPv0ItleI68yMH5m0a2YfTCyfzYEOhPXetHwrapJQEKeg4JQOLzm+fW752bDccPp sQduQXJyrviWDhQI3nE6P+RAzr3Vagc6uss7bimIIW7mjJa21o4oji1zOeTJcmxJ 1e7Dl5ofR9H7msF3DrbzHgiHCCR2BvOvyd5HVk3KKl8+XgdPgtjR0hvaLpkzFD2c nmY4rKub/qnW3Lw+kmpdcDxqyBcLKf4hTBgpO9bbv9spFE1P2PTg697ztQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAEJYXxlXAPEdgcLdrqtdWvQSdyPMB8GA1UdIwQY MBaAFA9jY9Qot5FcEIgl8JcGAEuOo9S1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEt MmUxYzBhZjRmYWE0LzEvQVFsaGZHVmNBOFIyQnd0MnVxMTFhOUJKM0k4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEtMmUxYzBhZjRmYWE0 LzEvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJY8AMA0G CSqGSIb3DQEBCwUAA4IBAQC1iPATxOZ6EOR42OB3L+nm+uURrUAF4iwzILLkEyT7 g4WJ0pRqecBDgdEaVsNM21R4Ups4+lytMvCsND2EdKV07l1kEHLQ9KIyRJa7RX6d 838c8fQ3oyg9R8JPKQaH3iD9iNwP2hl9XCGmV0vBpyLQiReN4TRbKdqxq7spat4W dUSfujtwV4RVvZoetK0VmIXtYadDVMflmPkBFwwYMvxsIKv5K0mVppATtDswBVk7 ePSJgLGU2e0MtLjUKhAGjmX9OtzFMYPQl1LRU9bYwZ+JJu4nHKCpyW/umHtH1iRl iV2ol2rQuPilpLO0wDXPbkr/JCoi+qD4SgfKKaGZgQ+h -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:13 2026 by rpki-client