This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/apMckl_x5LcdR_beZIyAo4rk0Dk.roa File: apMckl_x5LcdR_beZIyAo4rk0Dk.roa (raw, json) Hash identifier: I5Qds8uqRDqOxfiCNxdxJVvfewu9+/A3Y6nbRWgkwZ4= Subject key identifier: 6A:93:1C:92:5F:F1:E4:B7:1D:47:F6:DE:64:8C:80:A3:8A:E4:D0:39 Certificate issuer: /CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62 Certificate serial: 019B77C73F8D4F2AB0996E053BF29005D15B Authority key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/apMckl_x5LcdR_beZIyAo4rk0Dk.roa Signing time: Thu 01 Jan 2026 04:18:25 +0000 ROA not before: Thu 01 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12649 IP address blocks: 194.191.108.0/24 maxlen: 24 195.48.70.0/24 maxlen: 24 195.49.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3f:8d:4f:2a:b0:99:6e:05:3b:f2:90:05:d1:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62 Validity Not Before: Jan 1 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a931c925ff1e4b71d47f6de648c80a38ae4d039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:de:cf:a6:14:96:dc:ba:f8:e5:5c:9d:a0:2a: d2:a8:17:2a:2c:26:0d:f8:27:27:39:c3:53:3c:1c: 29:23:93:8b:c4:33:6b:d8:dd:ab:d0:fa:45:cf:15: 09:08:34:03:2a:a1:c0:86:22:31:25:21:f9:59:d0: 0e:00:28:59:79:dc:d2:ec:7d:ef:43:79:5f:61:1b: 51:7c:1c:98:e8:1a:05:e9:fd:6e:f9:8a:8c:96:6e: ef:5c:c3:58:fc:45:0d:ea:ed:a4:02:9a:a6:d9:64: 9c:cf:de:c7:dc:a0:df:28:31:f1:b4:63:a6:77:92: a8:00:87:e1:0a:c5:1e:21:6b:60:e4:20:e6:27:2a: 8e:0c:50:1a:92:a3:b3:18:07:d0:05:64:ea:7a:08: 45:6a:3e:50:44:c2:d3:46:ef:f1:02:a5:f0:f8:2e: 34:59:27:b3:cc:e3:de:56:e6:0f:ea:cc:c5:c0:9c: 8a:47:13:03:90:79:39:cf:cd:b5:3d:92:d2:51:7e: 15:30:ce:04:ff:76:50:93:50:01:ea:89:81:db:47: d5:7c:f7:a6:0d:ed:28:4f:8d:e1:5e:eb:81:3b:7a: b3:32:de:64:ab:26:30:18:86:b1:a8:68:2c:05:bc: e9:f7:4b:b7:d8:90:c5:f6:18:04:fa:09:df:1f:2b: e2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:93:1C:92:5F:F1:E4:B7:1D:47:F6:DE:64:8C:80:A3:8A:E4:D0:39 X509v3 Authority Key Identifier: keyid:A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/apMckl_x5LcdR_beZIyAo4rk0Dk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.191.108.0/24 195.48.70.0/24 195.49.41.0/24 Signature Algorithm: sha256WithRSAEncryption 57:23:c7:82:2c:a8:8b:9b:19:b0:3e:f7:a9:6b:f9:bb:da:cc: f7:f7:ce:76:5d:4a:b2:48:0e:4c:56:97:5e:2b:25:c0:d7:45: 84:84:1e:cd:f0:5c:eb:85:51:ed:0e:cc:3d:11:57:af:8b:d0: f9:e5:27:b6:fb:6b:b9:aa:15:1d:44:c7:65:71:14:ba:98:03: 73:01:24:88:66:a1:3a:41:eb:ee:ed:a8:0c:00:a7:f3:01:bb: cc:15:2c:c4:cf:03:6d:aa:26:de:1a:6c:6b:17:69:1f:5d:ed: 61:22:5c:eb:ac:68:24:6a:51:c1:12:0b:eb:69:6b:4e:a3:f7: d3:02:eb:9e:21:fa:50:5c:2c:20:a5:83:d8:aa:44:ff:e2:a4: b7:f5:93:58:50:42:3c:d5:db:24:0b:60:dc:f1:f1:54:7b:ff: fd:80:3a:e8:ba:2f:14:cb:2c:f7:4a:ad:6c:64:1d:e8:4e:fb: 52:f9:83:60:19:6e:37:70:6d:2b:d6:41:bc:fd:ac:82:c7:ad: b1:45:e8:4c:b9:49:c6:6b:7e:b2:1d:aa:f7:95:6e:87:6c:15: 79:d3:91:33:a3:21:da:a2:ee:33:c4:8f:ad:63:a4:62:87:5c: da:ca:58:6e:b3:d8:79:c7:71:f3:76:d3:90:33:7f:ac:e5:fe: 04:44:fc:c1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xz+NTyqwmW4FO/KQBdFbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NGM2NzA2ZTNmYmViZGZmMTQ2YThhMTRlYzJhMzI4NGE5 MmJhNjIwHhcNMjYwMTAxMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTkzMWM5MjVmZjFlNGI3MWQ0N2Y2ZGU2NDhjODBhMzhhZTRkMDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo97PphSW3Lr45VydoCrSqBcqLCYN +CcnOcNTPBwpI5OLxDNr2N2r0PpFzxUJCDQDKqHAhiIxJSH5WdAOAChZedzS7H3v Q3lfYRtRfByY6BoF6f1u+YqMlm7vXMNY/EUN6u2kApqm2WScz97H3KDfKDHxtGOm d5KoAIfhCsUeIWtg5CDmJyqODFAakqOzGAfQBWTqeghFaj5QRMLTRu/xAqXw+C40 WSezzOPeVuYP6szFwJyKRxMDkHk5z821PZLSUX4VMM4E/3ZQk1AB6omB20fVfPem De0oT43hXuuBO3qzMt5kqyYwGIaxqGgsBbzp90u32JDF9hgE+gnfHyvizwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGqTHJJf8eS3HUf23mSMgKOK5NA5MB8GA1UdIwQY MBaAFKdMZwbj++vf8UaooU7CoyhKkrpiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDB4bkJ1UDc2OV94UnFpaFRzS2pLRXFTdW1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hMGM0NDQtOTc5Ni00ZjA2LTgzZjIt YWE3ODhhNDIwYWVjLzEvYXBNY2tsX3g1TGNkUl9iZVpJeUFvNHJrMERrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9hMGM0NDQtOTc5Ni00ZjA2LTgzZjItYWE3ODhhNDIwYWVj LzEvcDB4bkJ1UDc2OV94UnFpaFRzS2pLRXFTdW1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwr9sAwQA wzBGAwQAwzEpMA0GCSqGSIb3DQEBCwUAA4IBAQBXI8eCLKiLmxmwPvepa/m72sz3 9852XUqySA5MVpdeKyXA10WEhB7N8FzrhVHtDsw9EVevi9D55Se2+2u5qhUdRMdl cRS6mANzASSIZqE6Qevu7agMAKfzAbvMFSzEzwNtqibeGmxrF2kfXe1hIlzrrGgk alHBEgvraWtOo/fTAuueIfpQXCwgpYPYqkT/4qS39ZNYUEI81dskC2Dc8fFUe//9 gDroui8Uyyz3Sq1sZB3oTvtS+YNgGW43cG0r1kG8/ayCx62xRehMuUnGa36yHar3 lW6HbBV505EzoyHaou4zxI+tY6Rih1zaylhus9h5x3HzdtOQM3+s5f4ERPzB -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:12 2026 by rpki-client