This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/Axc_E2xRyuIueu7MxwSrAbNKRdM.roa File: Axc_E2xRyuIueu7MxwSrAbNKRdM.roa (raw, json) Hash identifier: BDjOOm0VSjHKXhROcrzw3kdn2+1ifBZy1hpq2pHuv2A= Subject key identifier: 03:17:3F:13:6C:51:CA:E2:2E:7A:EE:CC:C7:04:AB:01:B3:4A:45:D3 Certificate issuer: /CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d Certificate serial: 019B7D5C8C91D0C9292BDE0244D9DDEF88D2 Authority key identifier: AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/Axc_E2xRyuIueu7MxwSrAbNKRdM.roa Signing time: Fri 02 Jan 2026 06:19:35 +0000 ROA not before: Fri 02 Jan 2026 06:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 91.216.108.0/24 maxlen: 24 195.66.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 12:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:8c:91:d0:c9:29:2b:de:02:44:d9:dd:ef:88:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d Validity Not Before: Jan 2 06:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03173f136c51cae22e7aeeccc704ab01b34a45d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cc:79:42:ea:32:0c:38:d0:28:8b:5c:d8:d2: db:72:5b:16:ff:7d:da:56:e8:9d:86:37:7a:53:fd: dc:c3:7b:19:7a:c0:34:33:8f:25:1c:cb:e2:be:3a: 18:46:06:c7:86:cb:1b:e9:56:44:5b:fc:32:52:3d: 8d:8b:bb:98:44:ae:60:05:73:44:e2:c2:78:ff:3b: 11:c6:18:76:06:63:98:0a:e9:d7:bb:a1:34:eb:2e: cf:e9:2b:80:5d:42:4e:20:bc:67:d0:21:ee:80:25: e6:31:93:09:c2:c6:60:3e:05:88:b7:e3:97:26:74: 69:9d:00:a4:76:56:73:2e:35:16:60:f6:5d:96:df: 33:8a:b0:2b:20:0f:31:b9:ef:5f:60:39:a0:08:6f: e8:61:b4:3b:99:36:cc:b7:33:65:4e:03:a4:c0:05: 6d:03:0e:7a:4f:1e:a6:da:b3:89:e6:96:0e:38:5d: 57:53:44:6f:46:d0:9c:5c:37:df:0f:61:34:4a:21: 9e:0e:47:a6:74:66:63:e9:5a:f0:80:b5:95:4e:e6: 40:df:e9:34:75:8c:ab:9f:5a:8e:06:60:0e:5f:b8: 02:de:93:46:21:d3:53:a3:18:7e:1f:77:bf:c0:94: 65:a3:08:c6:0e:5e:85:7b:18:58:6b:ff:23:51:a4: 26:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:17:3F:13:6C:51:CA:E2:2E:7A:EE:CC:C7:04:AB:01:B3:4A:45:D3 X509v3 Authority Key Identifier: keyid:AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/Axc_E2xRyuIueu7MxwSrAbNKRdM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.108.0/24 195.66.76.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:c5:49:4d:b8:73:30:03:b6:31:f9:d0:4c:b4:a6:2d:cb:cf: 1c:e9:17:2f:2d:20:a0:7e:54:29:eb:9c:43:64:36:d8:38:05: cb:ad:38:67:e5:e7:06:86:3e:69:3d:2c:ab:5c:a6:d6:96:63: e1:25:d9:5c:ee:67:08:be:2d:dd:91:35:c6:c6:9d:c2:5c:39: 40:84:6b:86:7a:b8:92:1e:4b:55:78:74:a5:cf:7a:68:b8:f2: 04:fc:b6:d0:ed:22:49:46:4e:a1:ca:10:bf:ae:13:b4:74:14: c7:08:e9:39:5b:2a:d7:98:c3:01:cd:19:62:78:92:3c:da:c1: c4:90:00:dc:ac:0a:d4:17:b0:9d:26:ef:24:56:c9:1c:23:1a: f1:4c:97:4f:96:38:5e:aa:cd:d6:22:1b:a4:9d:00:78:9f:4a: e0:fb:64:dc:93:c0:6b:0b:3d:e7:f6:c2:cf:9d:58:a7:37:88: 84:ab:0e:0f:21:f4:7c:c8:c9:ae:5f:34:43:35:de:c5:5f:da: b0:01:4d:c0:77:17:f2:19:7f:cc:25:ce:fd:36:b2:13:6a:0b: 80:c4:7d:17:0f:74:53:7d:45:6e:33:da:fd:c6:32:53:10:41: 42:02:38:6d:e1:b4:66:c5:68:18:aa:bb:69:82:ce:bf:98:1a: 80:c1:19:5e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XIyR0MkpK94CRNnd74jSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNGM4MzBiMTEyNjE0ODNhNjJiNjY5NmE0YzM3MjBlOGFk ODhhMGQwHhcNMjYwMTAyMDYxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzE3M2YxMzZjNTFjYWUyMmU3YWVlY2NjNzA0YWIwMWIzNGE0NWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMx5QuoyDDjQKItc2NLbclsW/33a Vuidhjd6U/3cw3sZesA0M48lHMvivjoYRgbHhssb6VZEW/wyUj2Ni7uYRK5gBXNE 4sJ4/zsRxhh2BmOYCunXu6E06y7P6SuAXUJOILxn0CHugCXmMZMJwsZgPgWIt+OX JnRpnQCkdlZzLjUWYPZdlt8zirArIA8xue9fYDmgCG/oYbQ7mTbMtzNlTgOkwAVt Aw56Tx6m2rOJ5pYOOF1XU0RvRtCcXDffD2E0SiGeDkemdGZj6VrwgLWVTuZA3+k0 dYyrn1qOBmAOX7gC3pNGIdNToxh+H3e/wJRlowjGDl6FexhYa/8jUaQmJwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAMXPxNsUcriLnruzMcEqwGzSkXTMB8GA1UdIwQY MBaAFK1MgwsRJhSDpitmlqTDcg6K2IoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclV5REN4RW1GSU9tSzJhV3BNTnlEb3JZaWcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jNmE2YmEtYWUwNS00NTI0LTg0ZDEt MjIyY2ViNmMzNDRjLzEvQXhjX0UyeFJ5dUl1ZXU3TXh3U3JBYk5LUmRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jNmE2YmEtYWUwNS00NTI0LTg0ZDEtMjIyY2ViNmMzNDRj LzEvclV5REN4RW1GSU9tSzJhV3BNTnlEb3JZaWcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9hsAwQA w0JMMA0GCSqGSIb3DQEBCwUAA4IBAQAqxUlNuHMwA7Yx+dBMtKYty88c6RcvLSCg flQp65xDZDbYOAXLrThn5ecGhj5pPSyrXKbWlmPhJdlc7mcIvi3dkTXGxp3CXDlA hGuGeriSHktVeHSlz3pouPIE/LbQ7SJJRk6hyhC/rhO0dBTHCOk5WyrXmMMBzRli eJI82sHEkADcrArUF7CdJu8kVskcIxrxTJdPljheqs3WIhuknQB4n0rg+2Tck8Br Cz3n9sLPnVinN4iEqw4PIfR8yMmuXzRDNd7FX9qwAU3AdxfyGX/MJc79NrITaguA xH0XD3RTfUVuM9r9xjJTEEFCAjht4bRmxWgYqrtpgs6/mBqAwRle -----END CERTIFICATE-----Generated at Wed Jan 7 22:30:42 2026 by rpki-client