This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/akW7_4B1c1-TUlyABJDZZ5C9MTs.roa File: akW7_4B1c1-TUlyABJDZZ5C9MTs.roa (raw, json) Hash identifier: R6h75h04kvMzsvpJpfqerZYqo36Vm9P1L15UtjUMqOQ= Subject key identifier: 6A:45:BB:FF:80:75:73:5F:93:52:5C:80:04:90:D9:67:90:BD:31:3B Certificate issuer: /CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc Certificate serial: 019B78A30922F7B2146FAE31A364B3F298B3 Authority key identifier: AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/akW7_4B1c1-TUlyABJDZZ5C9MTs.roa Signing time: Thu 01 Jan 2026 08:18:29 +0000 ROA not before: Thu 01 Jan 2026 08:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204773 IP address blocks: 93.95.210.0/24 maxlen: 24 185.42.123.0/24 maxlen: 24 212.18.99.0/24 maxlen: 24 2a13:3000::/30 maxlen: 30 2a13:3004::/31 maxlen: 31 2a13:3006::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:09:22:f7:b2:14:6f:ae:31:a3:64:b3:f2:98:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc Validity Not Before: Jan 1 08:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a45bbff8075735f93525c800490d96790bd313b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1f:82:f3:88:56:ff:c2:99:87:92:26:fb:cc: 27:60:26:d5:c5:a8:90:c5:83:cf:db:4e:b8:94:55: d4:9b:2b:a5:a4:e2:a2:fd:27:cf:72:00:9c:bc:e3: 4a:d9:f3:e0:56:74:33:9e:66:c8:2e:f0:b0:05:e7: ee:9b:0d:0d:16:93:5a:60:29:c9:20:bf:51:8f:d2: ab:17:fb:9a:bd:a6:f8:90:d8:ac:60:f9:06:f0:0e: a3:c2:74:be:6a:99:50:a6:cd:2b:31:a1:ea:cd:a3: 62:d3:2c:1c:e2:ae:b3:95:42:83:37:8f:bd:eb:00: f0:2b:75:26:00:4e:87:94:0d:ee:6d:53:2b:3c:a0: c6:dc:c5:29:7d:e3:f1:72:e2:47:1b:a8:aa:5c:7a: c4:ab:20:bd:fe:af:ed:38:ba:a8:23:bb:59:90:25: 01:ce:97:54:bd:a5:28:e3:45:83:3b:71:45:c5:32: ad:19:2b:58:e7:1a:33:1a:11:20:d2:0d:c1:40:31: 65:f4:d1:93:de:cd:4f:2d:89:b4:f7:f2:cf:84:c1: c7:db:11:fa:91:6f:1b:bb:77:d9:70:33:40:30:24: ea:0d:57:c7:c1:b1:29:37:fc:d2:18:fa:b6:7c:f4: 5b:7b:a7:50:0d:67:5a:17:89:6b:5a:70:35:1e:c2: ae:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:45:BB:FF:80:75:73:5F:93:52:5C:80:04:90:D9:67:90:BD:31:3B X509v3 Authority Key Identifier: keyid:AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/akW7_4B1c1-TUlyABJDZZ5C9MTs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.95.210.0/24 185.42.123.0/24 212.18.99.0/24 IPv6: 2a13:3000::-2a13:3006:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 6b:9f:b0:9b:d6:ce:b5:0a:51:d5:5d:80:5c:39:a9:8d:ba:5a: fb:98:ca:69:27:a3:fe:c7:0a:2a:13:5a:3c:e0:01:ed:46:d6: d3:21:12:07:2f:b8:d3:c1:c3:0c:ba:6b:e5:f2:32:c5:58:20: 0f:3e:c3:83:d6:35:82:d6:32:8d:e2:75:3b:fb:9a:65:62:e1: 6f:3f:0f:8a:2f:94:b2:52:05:f6:03:d2:f1:a2:e2:af:03:36: a5:51:33:f3:43:a1:ff:ce:f7:26:54:59:b0:62:23:c1:97:72: eb:11:52:64:cd:68:c6:1e:5b:55:f8:5a:61:b0:93:df:90:df: 1a:76:69:48:e6:76:77:98:40:a1:50:be:92:97:58:62:06:21: 06:8b:34:b5:d8:8b:46:6a:51:be:eb:e6:51:26:6f:d0:58:65: 1a:65:e0:7d:c1:e0:f0:8e:ad:03:7a:bb:f0:12:c4:b9:c2:e6: 60:89:8f:bd:e7:7d:92:43:c2:9e:a4:3a:5f:73:e5:46:d5:34: 3f:4e:2b:01:2c:11:c1:3c:fe:16:92:ad:7b:f3:b8:84:f7:aa: 10:ea:a7:75:e8:0e:65:85:36:42:f6:b5:ab:12:63:bb:f6:17: 3d:a0:02:99:99:8d:2f:4d:83:42:95:87:72:9a:fa:4c:9f:66: ee:d7:03:d7 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt4owki97IUb64xo2Sz8pizMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZWFhMDk2ZWJiMzc2NTdlNGQzYWQyMTc2NjQxMTcyZDZl MjAyYmMwHhcNMjYwMTAxMDgxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTQ1YmJmZjgwNzU3MzVmOTM1MjVjODAwNDkwZDk2NzkwYmQzMTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR+C84hW/8KZh5Im+8wnYCbVxaiQ xYPP2064lFXUmyulpOKi/SfPcgCcvONK2fPgVnQznmbILvCwBefumw0NFpNaYCnJ IL9Rj9KrF/uavab4kNisYPkG8A6jwnS+aplQps0rMaHqzaNi0ywc4q6zlUKDN4+9 6wDwK3UmAE6HlA3ubVMrPKDG3MUpfePxcuJHG6iqXHrEqyC9/q/tOLqoI7tZkCUB zpdUvaUo40WDO3FFxTKtGStY5xozGhEg0g3BQDFl9NGT3s1PLYm09/LPhMHH2xH6 kW8bu3fZcDNAMCTqDVfHwbEpN/zSGPq2fPRbe6dQDWdaF4lrWnA1HsKuaQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFGpFu/+AdXNfk1JcgASQ2WeQvTE7MB8GA1UdIwQY MBaAFK7qoJbrs3ZX5NOtIXZkEXLW4gK8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnVxZ2x1dXpkbGZrMDYwaGRtUVJjdGJpQXJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iZWNmNDgtMDM1YS00NDcxLWJkZjMt ZmZkNWJmNTk2OWRmLzEvYWtXN180QjFjMS1UVWx5QUJKRFpaNUM5TVRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9iZWNmNDgtMDM1YS00NDcxLWJkZjMtZmZkNWJmNTk2OWRm LzEvcnVxZ2x1dXpkbGZrMDYwaGRtUVJjdGJpQXJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAYBAIAATASAwQAXV/SAwQA uSp7AwQA1BJjMBUEAgACMA8wDQMEBCoTMAMFACoTMAYwDQYJKoZIhvcNAQELBQAD ggEBAGufsJvWzrUKUdVdgFw5qY26WvuYymkno/7HCioTWjzgAe1G1tMhEgcvuNPB wwy6a+XyMsVYIA8+w4PWNYLWMo3idTv7mmVi4W8/D4ovlLJSBfYD0vGi4q8DNqVR M/NDof/O9yZUWbBiI8GXcusRUmTNaMYeW1X4WmGwk9+Q3xp2aUjmdneYQKFQvpKX WGIGIQaLNLXYi0ZqUb7r5lEmb9BYZRpl4H3B4PCOrQN6u/ASxLnC5mCJj73nfZJD wp6kOl9z5UbVND9OKwEsEcE8/haSrXvzuIT3qhDqp3XoDmWFNkL2tasSY7v2Fz2g ApmZjS9Ng0KVh3Ka+kyfZu7XA9c= -----END CERTIFICATE-----Generated at Sun Jan 11 17:51:06 2026 by rpki-client