This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/Aqd9W6cfpHLafzRO-ayl_GNgqe0.roa File: Aqd9W6cfpHLafzRO-ayl_GNgqe0.roa (raw, json) Hash identifier: F2Adog2BirH6Gouzr8SZxmAWeuEuTARSmlF0Zm/Q4fY= Subject key identifier: 02:A7:7D:5B:A7:1F:A4:72:DA:7F:34:4E:F9:AC:A5:FC:63:60:A9:ED Certificate issuer: /CN=2cac84ceec57b35fa39534ae23009aea820239aa Certificate serial: 019B797DE10BD6D347CC01EB5671CC420CC3 Authority key identifier: 2C:AC:84:CE:EC:57:B3:5F:A3:95:34:AE:23:00:9A:EA:82:02:39:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/Aqd9W6cfpHLafzRO-ayl_GNgqe0.roa Signing time: Thu 01 Jan 2026 12:17:31 +0000 ROA not before: Thu 01 Jan 2026 12:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49446 IP address blocks: 91.213.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.crl rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e1:0b:d6:d3:47:cc:01:eb:56:71:cc:42:0c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cac84ceec57b35fa39534ae23009aea820239aa Validity Not Before: Jan 1 12:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02a77d5ba71fa472da7f344ef9aca5fc6360a9ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0a:14:dd:07:cb:f7:66:25:bf:55:99:7e:cd: ab:08:80:ac:fe:70:e8:51:39:66:20:72:8e:93:b1: 2a:f0:07:57:ab:cb:7c:dd:df:b5:30:2c:b8:05:15: 12:ea:4d:cd:8f:10:66:fd:d0:04:e9:7b:9a:15:b7: 4e:5a:40:d9:27:00:a5:0d:cf:f2:1a:ae:13:bc:7b: 68:99:94:6e:07:c7:cb:d5:ce:1a:80:7d:ef:60:5f: 62:14:e7:36:58:3e:2f:1d:f7:dd:0d:62:9c:12:06: 40:0e:e6:27:22:43:8c:6c:d6:50:e0:0a:a8:12:60: 15:9a:50:06:31:c4:aa:62:3d:8e:15:78:2a:4b:45: 7c:4b:42:a7:b0:42:c9:cf:e6:81:01:f5:a6:4a:bf: 8d:34:b6:2d:fa:19:24:6a:90:19:b6:3a:db:f3:e3: 20:be:6c:1f:27:a0:ed:ef:8c:7d:85:76:73:c2:64: cc:ba:87:b0:7c:a0:e9:a5:1a:29:e0:10:38:2e:71: c6:a7:cf:39:1b:4d:6f:67:73:ca:6f:45:91:a3:b1: cf:e4:08:02:d8:6d:ef:1d:8f:54:84:4d:24:d7:34: 1e:46:52:a4:1e:79:f0:78:af:08:ca:9b:89:29:bd: 97:d5:aa:d3:0e:9a:db:d5:13:28:e4:45:4a:5f:11: 0b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A7:7D:5B:A7:1F:A4:72:DA:7F:34:4E:F9:AC:A5:FC:63:60:A9:ED X509v3 Authority Key Identifier: keyid:2C:AC:84:CE:EC:57:B3:5F:A3:95:34:AE:23:00:9A:EA:82:02:39:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/Aqd9W6cfpHLafzRO-ayl_GNgqe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.2.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:40:e5:b9:90:59:69:4c:6a:d2:da:e4:5b:6f:46:97:da:63: ad:cf:15:a3:8c:06:8e:9d:c7:76:c9:4b:2e:6d:ca:44:fb:dc: be:45:f4:b9:2e:99:f5:52:78:12:95:68:10:0f:83:5b:8d:c6: 73:54:a4:d9:31:ad:5e:27:1d:f0:c2:9e:1e:db:05:42:e5:90: b8:d5:f4:98:0e:b1:5a:04:97:45:97:7a:3f:0d:86:c5:f7:77: 90:ee:4c:ad:16:c8:68:ee:07:56:94:65:61:ec:0b:9e:ed:d9: 85:0d:df:93:27:17:99:ea:3d:0c:1a:d8:6d:66:74:6c:2b:ed: 92:71:79:cf:4b:86:94:a0:08:15:4b:66:d4:fa:85:0c:6c:bd: b6:7f:8d:80:d8:e9:f0:8e:a1:3a:35:e3:ef:bf:42:60:a0:36: 9e:1d:fa:cb:ab:24:9b:57:87:71:79:1f:69:3c:56:5f:f6:e1: 5d:5e:76:b0:ee:fd:b1:ab:97:b3:7d:51:9b:c3:87:99:18:86: a1:64:9c:57:f8:ba:97:20:22:4d:a2:dc:3a:62:4d:83:ce:b9: 48:96:9d:f9:a7:a6:9a:b2:b8:ae:f2:dd:14:01:1b:29:76:04: 0d:2f:b7:f7:f9:c9:5b:f3:aa:b3:a3:bc:57:72:57:c6:15:4f: 00:9c:18:be -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5feEL1tNHzAHrVnHMQgzDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYWM4NGNlZWM1N2IzNWZhMzk1MzRhZTIzMDA5YWVhODIw MjM5YWEwHhcNMjYwMTAxMTIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmE3N2Q1YmE3MWZhNDcyZGE3ZjM0NGVmOWFjYTVmYzYzNjBhOWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQoU3QfL92Ylv1WZfs2rCICs/nDo UTlmIHKOk7Eq8AdXq8t83d+1MCy4BRUS6k3NjxBm/dAE6XuaFbdOWkDZJwClDc/y Gq4TvHtomZRuB8fL1c4agH3vYF9iFOc2WD4vHffdDWKcEgZADuYnIkOMbNZQ4Aqo EmAVmlAGMcSqYj2OFXgqS0V8S0KnsELJz+aBAfWmSr+NNLYt+hkkapAZtjrb8+Mg vmwfJ6Dt74x9hXZzwmTMuoewfKDppRop4BA4LnHGp885G01vZ3PKb0WRo7HP5AgC 2G3vHY9UhE0k1zQeRlKkHnnweK8IypuJKb2X1arTDprb1RMo5EVKXxELHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAKnfVunH6Ry2n80TvmspfxjYKntMB8GA1UdIwQY MBaAFCyshM7sV7Nfo5U0riMAmuqCAjmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEt5RXp1eFhzMS1qbFRTdUl3Q2E2b0lDT2FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82ODdjZDUtNjM0NS00ZjY0LWJlNDYt ZWRlNzBjOGVkNTEzLzEvQXFkOVc2Y2ZwSExhZnpSTy1heWxfR05ncWUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC82ODdjZDUtNjM0NS00ZjY0LWJlNDYtZWRlNzBjOGVkNTEz LzEvTEt5RXp1eFhzMS1qbFRTdUl3Q2E2b0lDT2FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9UCMA0G CSqGSIb3DQEBCwUAA4IBAQAaQOW5kFlpTGrS2uRbb0aX2mOtzxWjjAaOncd2yUsu bcpE+9y+RfS5Lpn1UngSlWgQD4NbjcZzVKTZMa1eJx3wwp4e2wVC5ZC41fSYDrFa BJdFl3o/DYbF93eQ7kytFsho7gdWlGVh7Aue7dmFDd+TJxeZ6j0MGthtZnRsK+2S cXnPS4aUoAgVS2bU+oUMbL22f42A2OnwjqE6NePvv0JgoDaeHfrLqySbV4dxeR9p PFZf9uFdXnaw7v2xq5ezfVGbw4eZGIahZJxX+LqXICJNotw6Yk2DzrlIlp35p6aa sriu8t0UARspdgQNL7f3+clb86qzo7xXclfGFU8AnBi+ -----END CERTIFICATE-----Generated at Tue Feb 10 01:07:23 2026 by rpki-client