This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/1-ExkBfmTQgTua2k7xVXZzRC2pE4.roa File: 1-ExkBfmTQgTua2k7xVXZzRC2pE4.roa (raw, json) Hash identifier: MyJmnfv/mIsbwbws3Sg5v913N+PhwDbGBu5SJ/qpFB0= Subject key identifier: F8:4C:64:05:F9:93:42:04:EE:6B:69:3B:C5:55:D9:CD:10:B6:A4:4E Certificate issuer: /CN=63ac247e6271f064916372b521fdc8649b254c55 Certificate serial: 019B7C7F52FA106A0C93C9D2A92E67F94928 Authority key identifier: 63:AC:24:7E:62:71:F0:64:91:63:72:B5:21:FD:C8:64:9B:25:4C:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6wkfmJx8GSRY3K1If3IZJslTFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/1-ExkBfmTQgTua2k7xVXZzRC2pE4.roa Signing time: Fri 02 Jan 2026 02:17:57 +0000 ROA not before: Fri 02 Jan 2026 02:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216472 IP address blocks: 164.138.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.mft rsync://rpki.ripe.net/repository/DEFAULT/Y6wkfmJx8GSRY3K1If3IZJslTFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:52:fa:10:6a:0c:93:c9:d2:a9:2e:67:f9:49:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63ac247e6271f064916372b521fdc8649b254c55 Validity Not Before: Jan 2 02:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f84c6405f9934204ee6b693bc555d9cd10b6a44e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2b:3b:30:55:6a:9e:03:b3:06:a0:86:96:d3: ff:8c:8b:1c:b1:c1:2a:df:16:3e:6d:1b:52:43:09: a6:be:77:d8:3f:06:eb:2d:d4:84:a3:b7:4f:33:85: 18:4d:ed:c6:48:40:26:a2:f0:22:25:06:9f:9e:58: aa:64:aa:bc:10:dc:83:57:d0:6c:1d:8d:bf:91:f6: fd:9e:c8:3e:5b:e7:1b:c9:82:f5:a7:65:5b:ce:59: e8:a2:af:8b:6b:10:e9:71:29:9b:08:47:82:0e:4a: 36:18:d2:5f:c4:58:e3:e2:57:38:54:fd:9a:c9:1d: 9a:76:d7:8d:10:41:63:71:5e:23:c9:10:54:1b:01: 87:d0:df:f1:79:d7:82:5f:78:f2:21:9f:97:7a:f2: 0d:a8:93:75:7a:d9:5a:fe:62:64:af:35:ea:7a:5c: a3:e4:fb:7c:47:52:c1:88:9f:3b:5e:f2:a9:c0:f5: 4d:12:37:a9:fe:d8:8f:71:ac:39:03:39:38:34:b2: 89:13:74:27:bb:a4:cd:1c:98:8e:01:90:73:22:5b: e8:fb:c9:68:c7:f7:d2:54:bd:e6:b2:38:20:e1:d1: 9f:8f:a7:4c:a6:5b:bd:aa:ce:2d:95:da:cc:3a:77: 81:2b:cb:7b:af:ca:0f:a6:3b:9c:cb:1f:8b:6c:2f: a7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4C:64:05:F9:93:42:04:EE:6B:69:3B:C5:55:D9:CD:10:B6:A4:4E X509v3 Authority Key Identifier: keyid:63:AC:24:7E:62:71:F0:64:91:63:72:B5:21:FD:C8:64:9B:25:4C:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6wkfmJx8GSRY3K1If3IZJslTFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/1-ExkBfmTQgTua2k7xVXZzRC2pE4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.138.205.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:fa:4e:a6:a1:b4:ce:40:11:d7:a5:de:88:16:1a:90:7e:49: 22:0e:8d:b8:c5:23:20:d1:f7:1d:0d:40:de:b5:38:d4:11:f1: c4:e8:9c:f7:2a:63:69:7f:06:64:78:70:94:de:e2:11:ed:7e: 04:1b:bc:81:30:20:0c:f0:cd:cd:a0:7c:53:51:d9:68:65:22: e1:f9:c6:76:d2:82:8f:63:f3:2a:b5:78:09:1d:ac:6f:0a:0a: a6:3d:af:c9:18:a7:61:08:2f:93:d4:6c:af:e3:ea:95:bf:fc: 4f:e7:c8:46:e8:eb:cd:87:75:53:15:e2:09:c9:1a:15:61:16: 28:63:da:a0:5b:1c:70:72:6f:35:d7:f1:5f:54:08:5c:79:a8: ee:6e:7d:d9:e1:aa:dc:59:6e:61:8c:a1:de:25:0a:cf:d8:e2: 78:39:13:8a:a2:ae:41:71:ca:11:2f:c0:18:c6:eb:21:35:78: 6d:a3:3f:37:d7:93:71:09:9c:f7:94:d5:e3:7a:de:6a:89:cf: 0e:9d:1e:2c:11:73:34:41:8f:86:bd:dc:ca:39:97:c8:2d:df: 60:d2:b2:ea:bf:cd:c0:ff:e3:83:d2:43:e4:5a:06:c4:92:5d: 30:c9:45:51:12:29:e3:01:3c:03:b6:b9:62:99:af:13:fa:37: 89:60:44:82 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8f1L6EGoMk8nSqS5n+UkoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYWMyNDdlNjI3MWYwNjQ5MTYzNzJiNTIxZmRjODY0OWIy NTRjNTUwHhcNMjYwMTAyMDIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODRjNjQwNWY5OTM0MjA0ZWU2YjY5M2JjNTU1ZDljZDEwYjZhNDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCs7MFVqngOzBqCGltP/jIscscEq 3xY+bRtSQwmmvnfYPwbrLdSEo7dPM4UYTe3GSEAmovAiJQafnliqZKq8ENyDV9Bs HY2/kfb9nsg+W+cbyYL1p2Vbzlnooq+LaxDpcSmbCEeCDko2GNJfxFjj4lc4VP2a yR2adteNEEFjcV4jyRBUGwGH0N/xedeCX3jyIZ+XevINqJN1etla/mJkrzXqelyj 5Pt8R1LBiJ87XvKpwPVNEjep/tiPcaw5Azk4NLKJE3Qnu6TNHJiOAZBzIlvo+8lo x/fSVL3msjgg4dGfj6dMplu9qs4tldrMOneBK8t7r8oPpjucyx+LbC+n8QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPhMZAX5k0IE7mtpO8VV2c0QtqROMB8GA1UdIwQY MBaAFGOsJH5icfBkkWNytSH9yGSbJUxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTZ3a2ZtSng4R1NSWTNLMUlmM0laSnNsVEZVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zYWQ1ZTYtNDQwYi00NTNjLWEyOWIt NmZiNjdkOWI4NjA5LzEvMS1FeGtCZm1UUWdUdWEyazd4VlhaelJDMnBFNC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYWMvM2FkNWU2LTQ0MGItNDUzYy1hMjliLTZmYjY3ZDliODYw OS8xL1k2d2tmbUp4OEdTUlkzSzFJZjNJWkpzbFRGVS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKSKzTAN BgkqhkiG9w0BAQsFAAOCAQEAfPpOpqG0zkAR16XeiBYakH5JIg6NuMUjINH3HQ1A 3rU41BHxxOic9ypjaX8GZHhwlN7iEe1+BBu8gTAgDPDNzaB8U1HZaGUi4fnGdtKC j2PzKrV4CR2sbwoKpj2vyRinYQgvk9Rsr+Pqlb/8T+fIRujrzYd1UxXiCckaFWEW KGPaoFsccHJvNdfxX1QIXHmo7m592eGq3FluYYyh3iUKz9jieDkTiqKuQXHKES/A GMbrITV4baM/N9eTcQmc95TV43reaonPDp0eLBFzNEGPhr3cyjmXyC3fYNKy6r/N wP/jg9JD5FoGxJJdMMlFURIp4wE8A7a5YpmvE/o3iWBEgg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:54 2026 by rpki-client