This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/AK3OaQtT8Kw8T3bBIQLrdKayS_E.roa File: AK3OaQtT8Kw8T3bBIQLrdKayS_E.roa (raw, json) Hash identifier: cZM6bRBL8FJhure0e1xLvnVC4q2KbkNC+kXNZLH+L8Y= Subject key identifier: 00:AD:CE:69:0B:53:F0:AC:3C:4F:76:C1:21:02:EB:74:A6:B2:4B:F1 Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C7777E62451A2DA47604985BA6A0CD Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/AK3OaQtT8Kw8T3bBIQLrdKayS_E.roa Signing time: Thu 01 Jan 2026 04:18:39 +0000 ROA not before: Thu 01 Jan 2026 04:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202768 IP address blocks: 91.107.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:77:7e:62:45:1a:2d:a4:76:04:98:5b:a6:a0:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00adce690b53f0ac3c4f76c12102eb74a6b24bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f5:ba:03:c9:a1:08:b8:fc:4d:e4:77:ec:9b: 0b:7a:39:36:bb:b3:c7:f7:e6:93:32:8b:2b:90:85: 38:67:97:a6:f6:99:82:c6:45:d0:47:c2:ad:ab:9d: 05:b6:c1:b4:44:6c:f6:ad:c1:10:2d:ad:bf:59:d8: c8:da:ef:27:05:5c:8b:5f:10:06:f2:b0:64:37:66: 19:4c:e3:23:cb:bc:66:52:53:24:ca:95:fc:1b:4b: 66:ce:95:80:03:83:bb:f4:cb:8a:aa:e4:2a:13:44: cd:02:01:9d:73:40:e7:cc:cb:d7:cc:49:c1:f3:98: bb:57:79:64:5a:32:5d:0b:a8:8b:4b:67:20:95:23: ac:43:28:c1:9b:e0:4f:19:42:07:04:52:79:56:94: e6:ab:db:0c:53:ab:b3:b3:06:7a:1d:32:8b:89:18: 0e:a3:ca:25:e4:96:46:cd:f7:9f:ad:e9:e5:1c:a6: 98:42:3f:1c:ee:c1:04:91:38:00:ce:ab:34:28:fa: 66:a2:26:79:0b:4f:d6:45:eb:fd:21:8c:12:5a:4b: ad:3c:03:7b:3d:e5:97:78:c0:65:2b:a3:6e:cd:22: e1:32:d3:1a:df:13:d9:02:89:f0:6a:79:92:c9:42: da:f2:b0:c2:75:50:28:de:31:b9:20:17:53:56:fc: 72:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:AD:CE:69:0B:53:F0:AC:3C:4F:76:C1:21:02:EB:74:A6:B2:4B:F1 X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/AK3OaQtT8Kw8T3bBIQLrdKayS_E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.107.115.0/24 Signature Algorithm: sha256WithRSAEncryption 16:ef:70:86:40:fe:0d:75:e0:bb:59:b0:0e:8b:87:d7:5c:32: 2e:1e:16:86:5c:07:f8:59:ca:d0:ea:53:98:f9:76:7c:6c:e8: cd:73:61:b4:0c:02:fa:f3:3c:ab:0e:d0:4d:4f:c7:be:76:74: e4:68:cc:d7:af:bb:21:be:42:bf:89:b6:15:68:55:fb:b7:23: 5c:78:57:f4:51:18:1e:c9:8a:ab:7f:93:74:4a:86:11:2b:c5: 6d:f7:1e:dd:0f:5c:0e:6c:c2:1a:3b:b3:0b:19:2c:29:ab:b3: 57:42:8b:76:02:2d:c2:72:23:43:71:18:21:03:cc:b9:e0:35: 1c:b8:a0:27:67:f2:7c:a2:67:d4:bf:57:c3:0c:02:ab:52:b6: db:28:d1:db:fb:27:50:71:97:b0:de:3b:93:14:0d:93:0f:94: 9d:c1:2d:bb:5d:5c:82:2b:69:c9:4d:29:8d:d9:a3:42:47:aa: f9:08:6c:83:e7:d3:f5:5a:18:c1:14:8e:19:42:f7:3e:7f:90: b7:8c:2b:fc:38:27:fd:1b:5d:9a:b6:cf:f3:24:1b:2c:30:b6: 54:84:0b:54:1f:83:1e:cb:2e:57:e1:3d:4f:56:ae:e9:7a:04: 3e:41:fb:d7:13:d1:41:15:44:8a:8f:30:82:39:54:c1:52:c9: 10:70:c5:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3d+YkUaLaR2BJhbpqDNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGFkY2U2OTBiNTNmMGFjM2M0Zjc2YzEyMTAyZWI3NGE2YjI0YmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvW6A8mhCLj8TeR37JsLejk2u7PH 9+aTMosrkIU4Z5em9pmCxkXQR8Ktq50FtsG0RGz2rcEQLa2/WdjI2u8nBVyLXxAG 8rBkN2YZTOMjy7xmUlMkypX8G0tmzpWAA4O79MuKquQqE0TNAgGdc0DnzMvXzEnB 85i7V3lkWjJdC6iLS2cglSOsQyjBm+BPGUIHBFJ5VpTmq9sMU6uzswZ6HTKLiRgO o8ol5JZGzfefrenlHKaYQj8c7sEEkTgAzqs0KPpmoiZ5C0/WRev9IYwSWkutPAN7 PeWXeMBlK6NuzSLhMtMa3xPZAonwanmSyULa8rDCdVAo3jG5IBdTVvxy8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFACtzmkLU/CsPE92wSEC63SmskvxMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvQUszT2FRdFQ4S3c4VDNiQklRTHJkS2F5U19FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2tzMA0G CSqGSIb3DQEBCwUAA4IBAQAW73CGQP4NdeC7WbAOi4fXXDIuHhaGXAf4WcrQ6lOY +XZ8bOjNc2G0DAL68zyrDtBNT8e+dnTkaMzXr7shvkK/ibYVaFX7tyNceFf0URge yYqrf5N0SoYRK8Vt9x7dD1wObMIaO7MLGSwpq7NXQot2Ai3CciNDcRghA8y54DUc uKAnZ/J8omfUv1fDDAKrUrbbKNHb+ydQcZew3juTFA2TD5SdwS27XVyCK2nJTSmN 2aNCR6r5CGyD59P1WhjBFI4ZQvc+f5C3jCv8OCf9G12ats/zJBssMLZUhAtUH4Me yy5X4T1PVq7pegQ+QfvXE9FBFUSKjzCCOVTBUskQcMWB -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:03 2026 by rpki-client