This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/AkX-mzKyW-zWL7niXL60Uuhd2-M.roa File: AkX-mzKyW-zWL7niXL60Uuhd2-M.roa (raw, json) Hash identifier: KT91YU3baNR7x3ucuvqSZ47bi2WtNK8I/Rkt9bmg+ew= Subject key identifier: 02:45:FE:9B:32:B2:5B:EC:D6:2F:B9:E2:5C:BE:B4:52:E8:5D:DB:E3 Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Certificate serial: 019B76EAFB3A1B9C7BC8A7AAC99882F37751 Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/AkX-mzKyW-zWL7niXL60Uuhd2-M.roa Signing time: Thu 01 Jan 2026 00:17:49 +0000 ROA not before: Thu 01 Jan 2026 00:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48136 IP address blocks: 95.131.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:fb:3a:1b:9c:7b:c8:a7:aa:c9:98:82:f3:77:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Validity Not Before: Jan 1 00:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0245fe9b32b25becd62fb9e25cbeb452e85ddbe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e8:86:60:98:94:ba:12:b5:ec:5e:af:7e:5d: cb:b0:67:5e:88:65:ce:d3:e4:95:dc:6a:fd:6f:97: bf:6c:a1:24:f6:c2:f3:3a:10:06:2e:d8:4d:11:d1: 35:29:08:47:5c:6d:43:97:f4:9a:39:cf:87:f5:8f: 0c:17:1a:e3:26:97:2a:c7:26:78:2a:93:44:0d:8a: bc:31:fc:a8:ee:80:64:f9:1d:a7:85:c2:69:f8:04: 49:69:2a:39:1b:a7:17:f3:51:80:97:99:35:5e:01: 40:22:da:88:34:48:67:e6:6f:3b:22:08:c9:3b:31: 54:f1:bd:95:16:51:95:ed:b4:f2:d4:95:7a:97:58: 99:51:3c:dd:6b:f3:20:fc:92:85:be:6c:0e:3a:a2: 15:ef:43:7b:18:cf:8e:20:32:d8:a6:3a:90:78:f2: b3:cc:b5:bd:f1:3b:9b:40:ff:78:71:b0:21:f1:29: 4f:54:e9:68:82:02:1e:63:3d:e1:17:5f:b7:39:58: 1b:8e:ea:78:61:a8:39:2a:bb:78:65:bc:47:7d:34: f7:32:05:f1:69:b3:b1:92:71:9e:a8:bd:92:92:79: 95:d2:5f:97:28:01:52:d5:57:f3:f6:ce:30:32:55: 00:fe:95:d4:90:ae:68:1c:02:9c:05:26:ab:0d:05: 7a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:45:FE:9B:32:B2:5B:EC:D6:2F:B9:E2:5C:BE:B4:52:E8:5D:DB:E3 X509v3 Authority Key Identifier: keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/AkX-mzKyW-zWL7niXL60Uuhd2-M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.131.32.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:04:75:e1:8e:9c:2e:51:53:2d:80:aa:7a:f8:0e:3a:f2:65: 73:db:ef:89:ff:fa:bb:5e:6a:d4:a5:cb:f9:9b:42:f4:ac:06: bb:9f:0f:ec:87:84:c3:25:eb:ad:b0:3a:c3:28:db:67:e4:dc: 1f:1e:64:01:f4:da:0c:d8:3a:7c:c0:2b:23:01:d3:be:21:bf: ef:64:83:14:a5:d3:ac:bd:76:c0:85:97:83:f5:8a:9f:4e:fa: 76:01:72:e7:f1:f2:d0:31:08:d6:eb:b3:a7:f2:07:b4:6e:5d: e5:df:81:3c:fc:96:06:98:82:9a:f5:aa:d1:61:42:8e:ac:58: 84:fc:f0:5e:08:d1:bd:61:0a:8f:93:a6:73:af:2d:ea:03:19: 22:fa:a2:62:a3:e2:65:08:a2:2e:3e:50:ab:fa:94:19:03:bc: dc:68:54:1f:a8:31:fd:87:b5:93:43:28:47:66:a7:79:05:44: b7:83:68:cf:6b:d8:8c:21:15:51:bb:52:f1:f0:14:44:d8:fb: b2:39:88:c3:26:00:29:ec:c9:34:3e:2a:ac:90:0d:24:ab:9a: 28:90:c6:c2:1e:d6:e9:c9:f9:e9:41:69:88:8d:73:c6:20:33: f4:55:3c:ef:d0:42:29:5a:73:0a:93:fc:e7:3e:d5:ad:9e:28: 0f:b6:31:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26vs6G5x7yKeqyZiC83dRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3 MzlkMjEwHhcNMjYwMTAxMDAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjQ1ZmU5YjMyYjI1YmVjZDYyZmI5ZTI1Y2JlYjQ1MmU4NWRkYmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+iGYJiUuhK17F6vfl3LsGdeiGXO 0+SV3Gr9b5e/bKEk9sLzOhAGLthNEdE1KQhHXG1Dl/SaOc+H9Y8MFxrjJpcqxyZ4 KpNEDYq8Mfyo7oBk+R2nhcJp+ARJaSo5G6cX81GAl5k1XgFAItqINEhn5m87IgjJ OzFU8b2VFlGV7bTy1JV6l1iZUTzda/Mg/JKFvmwOOqIV70N7GM+OIDLYpjqQePKz zLW98TubQP94cbAh8SlPVOloggIeYz3hF1+3OVgbjup4Yag5Krt4ZbxHfTT3MgXx abOxknGeqL2SknmV0l+XKAFS1Vfz9s4wMlUA/pXUkK5oHAKcBSarDQV6cwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAJF/psyslvs1i+54ly+tFLoXdvjMB8GA1UdIwQY MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt MWY5MjQ0OTVmY2RkLzEvQWtYLW16S3lXLXpXTDduaVhMNjBVdWhkMi1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4MgMA0G CSqGSIb3DQEBCwUAA4IBAQB/BHXhjpwuUVMtgKp6+A468mVz2++J//q7XmrUpcv5 m0L0rAa7nw/sh4TDJeutsDrDKNtn5NwfHmQB9NoM2Dp8wCsjAdO+Ib/vZIMUpdOs vXbAhZeD9YqfTvp2AXLn8fLQMQjW67On8ge0bl3l34E8/JYGmIKa9arRYUKOrFiE /PBeCNG9YQqPk6Zzry3qAxki+qJio+JlCKIuPlCr+pQZA7zcaFQfqDH9h7WTQyhH Zqd5BUS3g2jPa9iMIRVRu1Lx8BRE2PuyOYjDJgAp7Mk0PiqskA0kq5ookMbCHtbp yfnpQWmIjXPGIDP0VTzv0EIpWnMKk/znPtWtnigPtjHD -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:52 2026 by rpki-client