This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/AHGNkgRCI72tLc-zUS1Vqr4VnP4.roa File: AHGNkgRCI72tLc-zUS1Vqr4VnP4.roa (raw, json) Hash identifier: y1cZuyZ0nVASDH2N+WQpTkygoDPr8P3/qmuj1BIedtQ= Subject key identifier: 00:71:8D:92:04:42:23:BD:AD:2D:CF:B3:51:2D:55:AA:BE:15:9C:FE Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8C910F7A98C42AD91283894056BE7 Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/AHGNkgRCI72tLc-zUS1Vqr4VnP4.roa Signing time: Thu 01 Jan 2026 18:18:57 +0000 ROA not before: Thu 01 Jan 2026 18:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48546 IP address blocks: 87.110.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:c9:10:f7:a9:8c:42:ad:91:28:38:94:05:6b:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00718d92044223bdad2dcfb3512d55aabe159cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:84:de:00:35:6e:7b:36:e9:e8:84:28:0a:0c: b2:9d:70:e7:f9:89:6a:7f:ec:6f:b5:7f:fd:ba:2d: 65:da:0b:93:38:23:12:58:4a:73:8f:11:b8:f6:8d: a9:1e:af:db:48:b0:70:25:8e:85:98:23:85:11:bf: 06:b7:eb:9d:f6:0b:a0:e5:6d:92:97:da:bc:be:24: ad:bb:e0:ba:24:f1:da:c4:17:0d:00:8a:b3:0f:26: 23:0a:7d:24:99:29:68:37:26:4e:a6:fd:33:49:7e: b2:0d:6a:4b:7a:cb:dd:76:c4:7d:87:30:d3:a4:e6: a2:d0:79:31:cf:fb:3d:80:56:8e:50:25:24:8a:ab: c4:19:d9:2e:f1:ef:49:3e:3a:fb:5d:10:db:14:60: cc:88:0e:4e:76:93:e4:f5:2f:b0:f5:37:cb:f3:d4: 1b:d6:94:86:22:3d:e1:e7:d5:56:0a:b2:3c:13:5c: e4:7e:37:51:71:6d:ac:57:18:85:c7:a4:eb:66:9e: 41:cc:58:6a:f0:50:fc:b0:17:c8:eb:25:e9:13:34: 41:15:7b:86:ec:0e:1b:f7:9d:8f:60:a2:95:fc:2b: c4:2e:e4:41:1c:c9:6a:d7:7a:7d:84:fa:28:9a:20: 23:a6:5f:b4:60:cc:58:30:78:00:ff:7e:f0:59:53: f8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:71:8D:92:04:42:23:BD:AD:2D:CF:B3:51:2D:55:AA:BE:15:9C:FE X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/AHGNkgRCI72tLc-zUS1Vqr4VnP4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.110.211.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:cc:b2:f5:7d:a5:5c:d0:8e:b9:9e:9a:d2:c6:90:29:9d:02: 41:eb:f3:27:50:94:20:13:19:f7:74:ff:cd:23:ab:bb:96:b3: 65:2b:5d:b2:4a:cf:9a:68:96:fe:10:35:ee:75:79:85:e6:9a: ee:d2:e6:35:0c:96:36:4d:40:16:eb:08:51:01:b5:66:f9:e7: 12:af:85:94:d1:d1:b6:f1:c8:fa:2f:ab:6a:2f:08:32:f7:3f: 40:5f:0c:c3:cb:3c:e6:82:27:e6:a9:e9:33:43:78:c0:4d:62: 2c:35:5b:ec:36:2a:9a:fa:e6:ce:0c:6c:3b:a3:b4:7f:ea:17: 01:61:2a:c3:12:89:15:20:37:0e:4e:eb:c0:1c:b1:e5:44:b6: 6e:92:cc:2a:49:64:ba:2b:ee:c3:c1:90:01:ec:96:e1:18:26: 6b:68:7f:60:6a:3c:77:91:ca:6c:42:b5:0c:1a:9a:6b:ed:f3: db:7c:ff:28:23:e4:4b:5b:0a:a3:5f:6d:2f:59:0d:8a:ca:bb: 73:60:25:6c:35:58:cd:80:ad:22:b2:a3:7e:f7:58:64:c4:b9: 9c:3d:0d:2c:c5:ac:da:99:b5:11:c4:64:07:9c:b5:63:e7:11: 6d:56:08:a9:03:c8:8b:f0:87:18:94:48:06:eb:eb:1e:d0:f7: 81:cd:77:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yMkQ96mMQq2RKDiUBWvnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDcxOGQ5MjA0NDIyM2JkYWQyZGNmYjM1MTJkNTVhYWJlMTU5Y2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApITeADVuezbp6IQoCgyynXDn+Ylq f+xvtX/9ui1l2guTOCMSWEpzjxG49o2pHq/bSLBwJY6FmCOFEb8Gt+ud9gug5W2S l9q8viStu+C6JPHaxBcNAIqzDyYjCn0kmSloNyZOpv0zSX6yDWpLesvddsR9hzDT pOai0Hkxz/s9gFaOUCUkiqvEGdku8e9JPjr7XRDbFGDMiA5OdpPk9S+w9TfL89Qb 1pSGIj3h59VWCrI8E1zkfjdRcW2sVxiFx6TrZp5BzFhq8FD8sBfI6yXpEzRBFXuG 7A4b952PYKKV/CvELuRBHMlq13p9hPoomiAjpl+0YMxYMHgA/37wWVP4XwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFABxjZIEQiO9rS3Ps1EtVaq+FZz+MB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvQUhHTmtnUkNJNzJ0TGMtelVTMVZxcjRWblA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV27TMA0G CSqGSIb3DQEBCwUAA4IBAQCLzLL1faVc0I65nprSxpApnQJB6/MnUJQgExn3dP/N I6u7lrNlK12ySs+aaJb+EDXudXmF5pru0uY1DJY2TUAW6whRAbVm+ecSr4WU0dG2 8cj6L6tqLwgy9z9AXwzDyzzmgifmqekzQ3jATWIsNVvsNiqa+ubODGw7o7R/6hcB YSrDEokVIDcOTuvAHLHlRLZukswqSWS6K+7DwZAB7JbhGCZraH9gajx3kcpsQrUM Gppr7fPbfP8oI+RLWwqjX20vWQ2KyrtzYCVsNVjNgK0isqN+91hkxLmcPQ0sxaza mbURxGQHnLVj5xFtVgipA8iL8IcYlEgG6+se0PeBzXfg -----END CERTIFICATE-----Generated at Fri Jan 9 09:36:15 2026 by rpki-client