This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/_anBuNNw0qAbfJJyR7NUzCXshEI.roa File: _anBuNNw0qAbfJJyR7NUzCXshEI.roa (raw, json) Hash identifier: u/OzH4PvqgIz0IcQamVppLorgGwznO76WkLllc9zkBg= Subject key identifier: FD:A9:C1:B8:D3:70:D2:A0:1B:7C:92:72:47:B3:54:CC:25:EC:84:42 Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07 Certificate serial: 019B7F808DCF79072B93E53DD299247B99E1 Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/_anBuNNw0qAbfJJyR7NUzCXshEI.roa Signing time: Fri 02 Jan 2026 16:18:09 +0000 ROA not before: Fri 02 Jan 2026 16:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2200 IP address blocks: 134.59.0.0/16 maxlen: 16 157.169.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:8d:cf:79:07:2b:93:e5:3d:d2:99:24:7b:99:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07 Validity Not Before: Jan 2 16:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fda9c1b8d370d2a01b7c927247b354cc25ec8442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c9:22:7e:60:3e:86:04:9a:26:d0:cf:d5:58: 50:2b:9d:3b:b0:11:1c:ad:e0:b9:42:00:7e:75:d6: 6d:a2:a5:c0:df:9c:83:23:b4:3a:1b:44:9b:23:0a: b7:2a:4e:5f:3a:7c:d3:4c:07:f1:e6:d1:33:21:8b: e3:46:5f:d4:95:30:7b:ed:e7:fc:39:0e:ac:39:ec: bd:79:39:2e:e6:5c:c9:10:ed:92:98:ed:2e:6f:55: a9:2f:22:9a:f3:cd:bd:d0:25:a6:76:3a:81:ca:4e: 8f:d1:8f:9f:6b:3b:4d:89:5a:f9:61:d5:44:4b:19: 53:b1:ea:60:fa:d7:04:15:0b:89:f7:33:51:20:cb: e8:27:3b:0b:22:e3:c3:f7:dc:a1:a1:69:57:91:59: 8d:c0:a4:b7:db:b4:d6:44:52:62:29:37:57:ae:76: 26:9e:df:2f:de:b5:a5:8c:f1:e2:23:5b:0d:9e:1c: 11:db:38:c5:8c:da:b8:2b:17:e6:0f:5f:35:0d:f2: c9:a3:73:7d:f8:fa:17:02:5e:22:f3:3d:dc:95:92: 4c:00:bb:b9:af:05:bc:7e:16:83:e4:a2:d1:da:4c: 59:4e:bc:f2:f6:84:d7:23:e5:e8:0d:41:1c:76:50: 46:d9:a5:c4:d1:90:91:80:0e:4b:12:12:f7:bb:b5: 4e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A9:C1:B8:D3:70:D2:A0:1B:7C:92:72:47:B3:54:CC:25:EC:84:42 X509v3 Authority Key Identifier: keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/_anBuNNw0qAbfJJyR7NUzCXshEI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.59.0.0/16 157.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8a:1c:fc:f9:4d:0d:dd:74:7b:bc:ab:51:25:fb:7c:2a:12:3f: e0:5f:e4:a3:85:9d:bf:05:98:6b:51:e2:bc:ad:d0:86:15:e8: 25:09:e9:32:15:2f:65:4f:e4:24:eb:8a:fe:18:5e:51:dc:ca: d8:8e:0e:fb:8a:33:f7:b5:2b:a4:4a:25:28:d0:79:a2:2f:c3: 4c:3e:77:71:21:e2:16:41:a9:dd:ee:5a:17:8d:41:5d:4a:52: b6:a6:a5:de:54:94:6a:52:01:8c:26:af:06:93:d6:eb:7e:f9: 37:64:51:52:ce:01:3f:7b:1f:80:07:a6:3e:cd:44:b9:c8:ef: c8:be:13:72:40:33:84:b4:e0:2c:bb:2f:db:82:14:da:1d:2d: 66:38:db:23:f0:70:86:8b:b7:0d:1d:ee:66:ee:56:e3:89:59: 7f:92:13:4d:67:ff:59:52:29:0c:44:7c:86:5b:c6:87:36:2a: 99:10:8e:a0:87:11:83:6d:32:d3:20:99:52:6e:69:68:db:69: d7:86:24:04:53:63:4c:b0:ee:97:ad:3a:3f:a4:97:0f:b6:c3: 6d:d6:44:99:f9:0b:67:c3:76:53:ff:ea:aa:de:1b:07:5c:69: 6f:8c:e8:fb:7d:c1:f1:68:cf:80:10:da:42:e9:be:5d:53:83: 5f:45:6e:dc -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt/gI3PeQcrk+U90pkke5nhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNTgxNDc5ZGVlM2I1OTk0ZjExYzlkOTU2NDYzMWJmNWE0 MDRjMDcwHhcNMjYwMTAyMTYxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGE5YzFiOGQzNzBkMmEwMWI3YzkyNzI0N2IzNTRjYzI1ZWM4NDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8kifmA+hgSaJtDP1VhQK507sBEc reC5QgB+ddZtoqXA35yDI7Q6G0SbIwq3Kk5fOnzTTAfx5tEzIYvjRl/UlTB77ef8 OQ6sOey9eTku5lzJEO2SmO0ub1WpLyKa88290CWmdjqByk6P0Y+faztNiVr5YdVE SxlTsepg+tcEFQuJ9zNRIMvoJzsLIuPD99yhoWlXkVmNwKS327TWRFJiKTdXrnYm nt8v3rWljPHiI1sNnhwR2zjFjNq4KxfmD181DfLJo3N9+PoXAl4i8z3clZJMALu5 rwW8fhaD5KLR2kxZTrzy9oTXI+XoDUEcdlBG2aXE0ZCRgA5LEhL3u7VOfQIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFP2pwbjTcNKgG3ySckezVMwl7IRCMB8GA1UdIwQY MBaAFNJYFHne47WZTxHJ2VZGMb9aQEwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zMzZkYjMtNzFhOC00M2VmLTliOWYt NmE2YzZlMDk2MDcxLzEvX2FuQnVOTncwcUFiZkpKeVI3TlV6Q1hzaEVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8zMzZkYjMtNzFhOC00M2VmLTliOWYtNmE2YzZlMDk2MDcx LzEvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAhjsDAwCd qTANBgkqhkiG9w0BAQsFAAOCAQEAihz8+U0N3XR7vKtRJft8KhI/4F/ko4WdvwWY a1HivK3QhhXoJQnpMhUvZU/kJOuK/hheUdzK2I4O+4oz97UrpEolKNB5oi/DTD53 cSHiFkGp3e5aF41BXUpStqal3lSUalIBjCavBpPW6375N2RRUs4BP3sfgAemPs1E ucjvyL4TckAzhLTgLLsv24IU2h0tZjjbI/Bwhou3DR3uZu5W44lZf5ITTWf/WVIp DER8hlvGhzYqmRCOoIcRg20y0yCZUm5paNtp14YkBFNjTLDul606P6SXD7bDbdZE mfkLZ8N2U//qqt4bB1xpb4zo+33B8WjPgBDaQum+XVODX0Vu3A== -----END CERTIFICATE-----Generated at Tue Jan 13 00:09:47 2026 by rpki-client