This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/AkISYLOC_fnGrIUjLvM1LtDRQ5k.roa File: AkISYLOC_fnGrIUjLvM1LtDRQ5k.roa (raw, json) Hash identifier: SsHVMDv4qWTRMiOyQPgpmacaVt+8MOyUS0XN6APKH7k= Subject key identifier: 02:42:12:60:B3:82:FD:F9:C6:AC:85:23:2E:F3:35:2E:D0:D1:43:99 Certificate issuer: /CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb Certificate serial: 019B79113C94E44F22C9F07D78D981964540 Authority key identifier: 7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/AkISYLOC_fnGrIUjLvM1LtDRQ5k.roa Signing time: Thu 01 Jan 2026 10:18:51 +0000 ROA not before: Thu 01 Jan 2026 10:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200521 IP address blocks: 192.148.208.0/24 maxlen: 24 192.148.209.0/24 maxlen: 24 192.148.210.0/24 maxlen: 24 192.148.211.0/24 maxlen: 24 192.148.212.0/24 maxlen: 24 192.148.213.0/24 maxlen: 24 192.148.214.0/24 maxlen: 24 192.148.215.0/24 maxlen: 24 192.187.16.0/24 maxlen: 24 192.187.17.0/24 maxlen: 24 192.187.18.0/24 maxlen: 24 192.187.19.0/24 maxlen: 24 192.187.20.0/24 maxlen: 24 192.187.21.0/24 maxlen: 24 192.187.22.0/24 maxlen: 24 192.187.23.0/24 maxlen: 24 212.128.88.0/24 maxlen: 24 212.128.89.0/24 maxlen: 24 212.128.96.0/22 maxlen: 22 212.128.100.0/24 maxlen: 24 212.128.101.0/24 maxlen: 24 212.128.102.0/24 maxlen: 24 212.128.103.0/24 maxlen: 24 212.128.104.0/24 maxlen: 24 212.128.105.0/24 maxlen: 24 212.128.106.0/24 maxlen: 24 212.128.107.0/24 maxlen: 24 212.128.108.0/24 maxlen: 24 212.128.109.0/24 maxlen: 24 212.128.110.0/24 maxlen: 24 212.128.111.0/24 maxlen: 24 212.128.112.0/24 maxlen: 24 212.128.113.0/24 maxlen: 24 212.128.114.0/24 maxlen: 24 212.128.116.0/23 maxlen: 23 212.128.118.0/24 maxlen: 24 212.128.119.0/24 maxlen: 24 212.128.120.0/24 maxlen: 24 212.128.121.0/24 maxlen: 24 212.128.122.0/24 maxlen: 24 212.128.123.0/24 maxlen: 24 212.128.125.0/24 maxlen: 24 212.128.126.0/24 maxlen: 24 212.128.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:3c:94:e4:4f:22:c9:f0:7d:78:d9:81:96:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb Validity Not Before: Jan 1 10:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02421260b382fdf9c6ac85232ef3352ed0d14399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:eb:90:83:7e:74:e9:fe:76:36:01:1c:8c:0a: 55:44:9a:e9:15:00:59:08:b2:53:e7:51:41:c2:f8: 74:3f:f6:19:98:82:48:61:58:1a:ce:28:59:18:ab: 2c:80:fe:2c:0d:f3:34:5a:e8:df:d0:a9:12:b5:0a: a7:5f:92:ac:2e:59:4c:29:4f:ba:5e:8c:2b:62:90: c1:33:dd:cb:57:56:b7:e2:8e:54:29:81:50:9c:5b: 77:09:19:58:7f:ee:2d:c0:f9:9c:92:32:d0:ab:92: 6b:1f:fa:c6:af:13:e4:df:da:24:db:53:4f:98:c6: 21:02:3b:b9:b0:7a:b8:35:6c:d0:88:0d:d0:31:2e: 77:e2:16:05:fd:0f:a4:f7:08:19:da:53:48:76:c1: 43:29:bd:c7:61:fa:65:98:3f:30:57:7f:2c:47:6f: 0e:e7:d7:4e:8e:23:43:e3:49:1d:2f:09:c3:6c:58: 87:c8:24:be:29:06:6d:20:39:81:9b:ae:eb:1f:fc: 64:b9:53:be:db:f6:9b:6f:2e:08:81:bd:38:33:28: e2:77:c8:86:57:02:eb:92:92:be:91:ee:50:05:f4: fc:6d:72:7e:dd:5c:25:9a:43:a7:bc:0f:66:99:af: 61:fc:71:5e:fd:67:c8:47:8c:23:8b:02:22:14:fd: f2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:42:12:60:B3:82:FD:F9:C6:AC:85:23:2E:F3:35:2E:D0:D1:43:99 X509v3 Authority Key Identifier: keyid:7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/AkISYLOC_fnGrIUjLvM1LtDRQ5k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.148.208.0/21 192.187.16.0/21 212.128.88.0/23 212.128.96.0-212.128.114.255 212.128.116.0-212.128.123.255 212.128.125.0-212.128.127.255 Signature Algorithm: sha256WithRSAEncryption 9c:9f:ec:c7:96:a7:12:bd:70:55:f2:c1:f4:31:73:d7:6a:67: 6a:62:6a:3a:7f:05:08:df:e0:86:76:58:f7:74:f6:35:19:d8: e2:16:94:80:5f:c8:ce:3c:4b:ca:9e:b3:00:90:17:67:e0:b3: c6:23:46:25:9f:44:1a:65:ed:9e:37:d3:58:f5:b3:aa:62:53: 7f:a9:5b:83:1f:71:07:b6:e9:d2:5d:d4:e3:f1:7e:da:9a:34: 40:f6:b6:6e:b9:f4:f7:71:59:e2:41:45:e1:88:d7:4b:5a:5f: e7:2f:1a:31:e3:ec:23:cc:20:ca:a2:12:02:7a:e2:d7:a9:b0: 03:a1:ee:23:05:af:bc:df:35:2e:b0:e3:02:e8:b5:98:3a:e2: 39:26:60:8e:c2:c2:d3:e8:16:62:c8:3b:87:67:46:b0:75:cf: 2f:64:c9:5d:92:9b:d3:17:97:bd:a5:ef:f1:ff:2b:41:42:ab: 4b:c7:01:7d:1f:05:47:88:dc:69:1c:db:e1:62:14:cd:81:f9: 34:e9:60:67:53:e2:6a:ee:e2:88:a5:61:d6:4d:70:a6:48:73: 07:a9:9f:7d:ba:30:c2:ea:09:ae:13:31:52:52:83:63:c0:2e: 5f:1b:04:21:88:aa:40:eb:9c:bb:0e:02:9b:89:21:32:a9:ca: 94:e0:51:e1 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt5ETyU5E8iyfB9eNmBlkVAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNTAwNzdkMmRkOGE2N2ExYWU4YjZhYmQ2YmJiMzQ4OTAy OGE1YmIwHhcNMjYwMTAxMTAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjQyMTI2MGIzODJmZGY5YzZhYzg1MjMyZWYzMzUyZWQwZDE0Mzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuuQg3506f52NgEcjApVRJrpFQBZ CLJT51FBwvh0P/YZmIJIYVgazihZGKssgP4sDfM0Wujf0KkStQqnX5KsLllMKU+6 XowrYpDBM93LV1a34o5UKYFQnFt3CRlYf+4twPmckjLQq5JrH/rGrxPk39ok21NP mMYhAju5sHq4NWzQiA3QMS534hYF/Q+k9wgZ2lNIdsFDKb3HYfplmD8wV38sR28O 59dOjiND40kdLwnDbFiHyCS+KQZtIDmBm67rH/xkuVO+2/abby4Igb04Myjid8iG VwLrkpK+ke5QBfT8bXJ+3VwlmkOnvA9mma9h/HFe/WfIR4wjiwIiFP3yOQIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFAJCEmCzgv35xqyFIy7zNS7Q0UOZMB8GA1UdIwQY MBaAFH9QB30t2KZ6Gui2q9a7s0iQKKW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjFBSGZTM1lwbm9hNkxhcjFydXpTSkFvcGJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMWMxY2UtZWE1OS00ZGNmLWJjY2Mt M2U3Y2FkZDg4YzcwLzEvQWtJU1lMT0NfZm5HcklVakx2TTFMdERSUTVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9jMWMxY2UtZWE1OS00ZGNmLWJjY2MtM2U3Y2FkZDg4Yzcw LzEvZjFBSGZTM1lwbm9hNkxhcjFydXpTSkFvcGJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQDwJTQAwQD wLsQAwQB1IBYMAwDBAXUgGADBADUgHIwDAMEAtSAdAMEAtSAeDAMAwQA1IB9AwQH 1IAAMA0GCSqGSIb3DQEBCwUAA4IBAQCcn+zHlqcSvXBV8sH0MXPXamdqYmo6fwUI 3+CGdlj3dPY1GdjiFpSAX8jOPEvKnrMAkBdn4LPGI0Yln0QaZe2eN9NY9bOqYlN/ qVuDH3EHtunSXdTj8X7amjRA9rZuufT3cVniQUXhiNdLWl/nLxox4+wjzCDKohIC euLXqbADoe4jBa+83zUusOMC6LWYOuI5JmCOwsLT6BZiyDuHZ0awdc8vZMldkpvT F5e9pe/x/ytBQqtLxwF9HwVHiNxpHNvhYhTNgfk06WBnU+Jq7uKIpWHWTXCmSHMH qZ99ujDC6gmuEzFSUoNjwC5fGwQhiKpA65y7DgKbiSEyqcqU4FHh -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:09 2026 by rpki-client