This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/prAX8QK9sJ83-_8sb5b9uyxyLB0.roa File: prAX8QK9sJ83-_8sb5b9uyxyLB0.roa (raw, json) Hash identifier: MGpYm8TiAMHtR6UX1RiE9OEkX3HH/xl2rU9chl3K2sQ= Subject key identifier: A6:B0:17:F1:02:BD:B0:9F:37:FB:FF:2C:6F:96:FD:BB:2C:72:2C:1D Certificate issuer: /CN=633e752ca0dc423c74f508405ba5228a8c2e5157 Certificate serial: 019B79111A8DA34F437E5A8055EAF8A47B05 Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/prAX8QK9sJ83-_8sb5b9uyxyLB0.roa Signing time: Thu 01 Jan 2026 10:18:42 +0000 ROA not before: Thu 01 Jan 2026 10:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198696 IP address blocks: 194.49.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:1a:8d:a3:4f:43:7e:5a:80:55:ea:f8:a4:7b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157 Validity Not Before: Jan 1 10:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6b017f102bdb09f37fbff2c6f96fdbb2c722c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b2:9a:00:42:69:7d:51:da:70:37:3b:56:37: 26:70:25:30:cb:de:75:99:2b:55:61:bf:f4:50:a9: 3a:3b:2c:a3:90:31:95:8e:36:9a:f0:38:cb:df:29: 4b:1c:1b:63:77:04:4e:39:52:81:10:e6:3d:a5:af: db:55:43:00:45:67:78:5c:8e:b5:b0:37:5b:d4:dd: 61:19:d1:f3:af:18:4d:85:18:c7:ad:06:2c:e0:bb: c3:91:44:54:b9:48:1d:38:36:9a:93:07:1d:15:55: 32:7a:91:f4:d2:d2:9a:2d:a2:0f:76:16:b6:25:2f: b3:6a:0d:b8:a1:3d:6d:b7:1d:e1:f6:2e:f5:c8:f5: 86:cd:3a:fe:53:be:e1:df:fa:e4:d3:53:54:b7:3d: 97:10:cc:36:8b:a9:26:2f:7c:06:49:e8:14:be:cd: 86:99:2e:bb:66:0c:f7:19:cf:cc:66:da:3f:09:15: 57:5c:7e:92:1f:23:ab:77:32:7f:0d:0b:0b:66:23: 96:a0:05:6c:75:91:ff:bb:99:6c:be:4d:ec:0d:f0: 9e:5b:e9:4b:41:eb:c9:a6:14:4e:9f:82:a2:11:15: d0:20:05:32:6e:60:ca:a1:82:4f:db:f6:49:3a:9d: 8b:13:56:2d:b7:96:43:f9:3c:13:09:14:21:a7:5a: 4c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B0:17:F1:02:BD:B0:9F:37:FB:FF:2C:6F:96:FD:BB:2C:72:2C:1D X509v3 Authority Key Identifier: keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/prAX8QK9sJ83-_8sb5b9uyxyLB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.49.124.0/24 Signature Algorithm: sha256WithRSAEncryption 90:fb:b8:a6:17:71:20:5e:dd:6d:d3:f0:d5:51:fe:39:a2:56: 43:22:d9:f0:4a:4d:ee:c8:29:be:b7:b4:cb:4c:28:a6:45:26: 23:7a:2a:e6:99:36:6f:0f:a9:e8:b9:09:4f:5d:d0:34:59:49: 32:e4:d7:7c:f4:27:50:c7:eb:3d:27:d4:31:bc:be:f0:94:95: d4:07:a7:af:50:61:3f:4c:41:02:1e:fb:cd:24:90:e6:9b:f1: e5:fb:ee:cb:c8:da:53:dd:c4:10:ae:0f:a4:a5:4d:3f:33:da: 1b:fc:d2:53:c8:ef:8a:b5:5c:17:41:5e:d6:fb:28:1a:26:6e: c2:80:b2:03:16:ce:01:4e:83:9e:26:57:e8:a5:8a:6d:23:60: 1c:a2:1c:8c:5c:dd:37:d2:ad:50:cb:dc:66:10:59:d6:39:23: da:fd:fe:81:f9:84:2a:41:11:0d:44:1b:64:cd:f4:3a:93:1e: 99:fd:95:66:6b:98:df:df:a7:6e:c3:9a:9f:5f:07:2d:c2:a4: 92:67:41:59:9f:b0:92:ea:9f:07:8b:c0:1b:8c:bd:bd:e6:3f: b4:ee:9f:ec:22:11:27:85:af:20:3c:6b:ec:4f:b0:45:61:6f: b0:cd:d2:93:96:b9:19:c5:6f:e6:ca:9e:15:55:0c:d5:6d:b9: 37:32:a6:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ERqNo09DflqAVer4pHsFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzM2U3NTJjYTBkYzQyM2M3NGY1MDg0MDViYTUyMjhhOGMy ZTUxNTcwHhcNMjYwMTAxMTAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmIwMTdmMTAyYmRiMDlmMzdmYmZmMmM2Zjk2ZmRiYjJjNzIyYzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7KaAEJpfVHacDc7VjcmcCUwy951 mStVYb/0UKk6OyyjkDGVjjaa8DjL3ylLHBtjdwROOVKBEOY9pa/bVUMARWd4XI61 sDdb1N1hGdHzrxhNhRjHrQYs4LvDkURUuUgdODaakwcdFVUyepH00tKaLaIPdha2 JS+zag24oT1ttx3h9i71yPWGzTr+U77h3/rk01NUtz2XEMw2i6kmL3wGSegUvs2G mS67Zgz3Gc/MZto/CRVXXH6SHyOrdzJ/DQsLZiOWoAVsdZH/u5lsvk3sDfCeW+lL QevJphROn4KiERXQIAUybmDKoYJP2/ZJOp2LE1Ytt5ZD+TwTCRQhp1pMUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKawF/ECvbCfN/v/LG+W/bssciwdMB8GA1UdIwQY MBaAFGM+dSyg3EI8dPUIQFulIoqMLlFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXo1MUxLRGNRangwOVFoQVc2VWlpb3d1VVZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jOGUyMTQtOGU0NS00Yzk2LThhNzkt ZGU2MTg3YjcyOThhLzEvcHJBWDhRSzlzSjgzLV84c2I1Yjl1eXh5TEIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9jOGUyMTQtOGU0NS00Yzk2LThhNzktZGU2MTg3YjcyOThh LzEvWXo1MUxLRGNRangwOVFoQVc2VWlpb3d1VVZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjF8MA0G CSqGSIb3DQEBCwUAA4IBAQCQ+7imF3EgXt1t0/DVUf45olZDItnwSk3uyCm+t7TL TCimRSYjeirmmTZvD6nouQlPXdA0WUky5Nd89CdQx+s9J9QxvL7wlJXUB6evUGE/ TEECHvvNJJDmm/Hl++7LyNpT3cQQrg+kpU0/M9ob/NJTyO+KtVwXQV7W+ygaJm7C gLIDFs4BToOeJlfopYptI2AcohyMXN030q1Qy9xmEFnWOSPa/f6B+YQqQRENRBtk zfQ6kx6Z/ZVma5jf36duw5qfXwctwqSSZ0FZn7CS6p8Hi8AbjL295j+07p/sIhEn ha8gPGvsT7BFYW+wzdKTlrkZxW/myp4VVQzVbbk3MqaC -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:31 2026 by rpki-client