This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/Ak7xCfYZ94WpFcy69R3EY5zxAfs.roa File: Ak7xCfYZ94WpFcy69R3EY5zxAfs.roa (raw, json) Hash identifier: KMBeoo3V9b7HNS5xPrK/Qejr6Hp4pvP3hZ9BHsdOLDE= Subject key identifier: 02:4E:F1:09:F6:19:F7:85:A9:15:CC:BA:F5:1D:C4:63:9C:F1:01:FB Certificate issuer: /CN=107807c2518915138f555123605c0133dfdbb4fa Certificate serial: 019B7C80C9EC90E64931BABBE76B14754084 Authority key identifier: 10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/Ak7xCfYZ94WpFcy69R3EY5zxAfs.roa Signing time: Fri 02 Jan 2026 02:19:33 +0000 ROA not before: Fri 02 Jan 2026 02:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35280 IP address blocks: 132.70.0.0/16 maxlen: 16 132.71.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:c9:ec:90:e6:49:31:ba:bb:e7:6b:14:75:40:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=107807c2518915138f555123605c0133dfdbb4fa Validity Not Before: Jan 2 02:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=024ef109f619f785a915ccbaf51dc4639cf101fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d6:b7:c5:01:9d:3c:1d:32:b1:9c:d1:af:e2: 6e:c0:8c:b0:e5:3a:f0:18:56:c5:62:98:63:5d:64: a0:ea:f8:9b:59:f5:5b:9f:ad:d7:7e:ba:e5:f8:8a: db:77:c3:37:6a:31:11:cf:54:b1:a2:ea:ca:ad:1a: 8e:c0:83:0e:6a:bb:db:38:79:1e:29:85:18:66:79: 0a:44:98:55:84:ea:f7:67:36:54:94:fd:e2:41:96: 4c:27:58:fa:f2:00:9f:3e:e6:de:e5:c0:31:68:b6: 94:c4:a9:cf:77:67:b1:8f:2f:ed:c5:d8:90:3f:9b: 37:4f:75:4d:a6:8d:2f:21:40:24:70:be:45:08:99: f2:dd:a9:f7:84:97:2c:e3:6e:c3:b4:68:c6:28:93: 0f:86:cb:62:ff:67:da:e9:eb:6c:94:31:d1:46:0d: a1:d2:40:82:d0:e8:4a:d1:9f:50:d0:1d:9c:d7:8b: 26:33:c8:d9:69:f8:1d:77:26:24:94:40:3b:dd:7d: 6f:bb:ed:c9:1f:0a:99:a1:c0:56:05:56:3b:d1:14: 16:e6:80:c1:c7:dd:5f:5f:02:b0:46:f9:75:4c:0d: 2c:8c:50:6f:70:1e:76:42:8e:13:ef:89:0b:d4:96: f6:95:88:ad:b0:a7:78:33:d5:16:66:66:df:ef:54: ac:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4E:F1:09:F6:19:F7:85:A9:15:CC:BA:F5:1D:C4:63:9C:F1:01:FB X509v3 Authority Key Identifier: keyid:10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/Ak7xCfYZ94WpFcy69R3EY5zxAfs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.70.0.0/15 Signature Algorithm: sha256WithRSAEncryption 0a:cc:93:2e:97:81:aa:be:6a:f5:10:fe:63:91:66:fa:07:21: ef:e8:a2:45:21:db:b5:54:88:d2:69:74:dd:3b:5c:00:58:0c: 82:64:e6:da:81:30:a6:f4:fe:0a:1f:47:36:03:7a:80:45:8f: c5:67:b7:18:10:f0:9b:75:21:c2:49:17:ba:dc:53:d7:ba:aa: 9b:be:0f:c9:4b:3f:fa:a2:3e:63:6f:23:bd:ad:4c:b7:d1:71: 00:d7:61:8a:5a:ab:b5:95:85:d3:aa:52:93:82:a9:36:03:85: 0f:b3:c2:6f:ff:24:8e:00:5b:4a:15:18:02:b2:d3:1d:dd:a3: d2:5d:16:d3:e0:d4:2a:e7:9d:fe:94:32:91:47:65:d3:05:25: 5b:e5:85:b6:e2:16:71:d9:96:78:77:d2:a9:95:9b:1d:73:44: 0c:72:6c:1f:e3:5b:df:fa:fe:e9:bb:f6:8e:ec:11:57:72:f5: 33:7b:f6:39:b7:c2:51:04:1a:23:3a:3d:e6:c6:bc:39:5f:84: e8:0c:7e:56:02:11:26:a8:06:d8:cf:b7:76:65:8b:37:db:a6: 71:86:dc:71:50:09:37:d9:5e:e7:53:4f:a6:9e:d1:ca:f3:b3: 1d:aa:6e:10:a5:7c:06:2d:b2:ce:dd:04:cc:47:3a:1a:fc:8b: 69:41:0e:1c -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt8gMnskOZJMbq752sUdUCEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNzgwN2MyNTE4OTE1MTM4ZjU1NTEyMzYwNWMwMTMzZGZk YmI0ZmEwHhcNMjYwMTAyMDIxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjRlZjEwOWY2MTlmNzg1YTkxNWNjYmFmNTFkYzQ2MzljZjEwMWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvda3xQGdPB0ysZzRr+JuwIyw5Trw GFbFYphjXWSg6vibWfVbn63Xfrrl+Irbd8M3ajERz1SxourKrRqOwIMOarvbOHke KYUYZnkKRJhVhOr3ZzZUlP3iQZZMJ1j68gCfPube5cAxaLaUxKnPd2exjy/txdiQ P5s3T3VNpo0vIUAkcL5FCJny3an3hJcs427DtGjGKJMPhsti/2fa6etslDHRRg2h 0kCC0OhK0Z9Q0B2c14smM8jZafgddyYklEA73X1vu+3JHwqZocBWBVY70RQW5oDB x91fXwKwRvl1TA0sjFBvcB52Qo4T74kL1Jb2lYitsKd4M9UWZmbf71SstwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFAJO8Qn2GfeFqRXMuvUdxGOc8QH7MB8GA1UdIwQY MBaAFBB4B8JRiRUTj1VRI2BcATPf27T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUhnSHdsR0pGUk9QVlZFallGd0JNOV9idFBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yODYwYTQtM2I5NC00Mjc0LWEzYTIt ZjlhYzE1ZTY2Mzg2LzEvQWs3eENmWVo5NFdwRmN5NjlSM0VZNXp4QWZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8yODYwYTQtM2I5NC00Mjc0LWEzYTItZjlhYzE1ZTY2Mzg2 LzEvRUhnSHdsR0pGUk9QVlZFallGd0JNOV9idFBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBhEYwDQYJ KoZIhvcNAQELBQADggEBAArMky6Xgaq+avUQ/mORZvoHIe/ookUh27VUiNJpdN07 XABYDIJk5tqBMKb0/gofRzYDeoBFj8VntxgQ8Jt1IcJJF7rcU9e6qpu+D8lLP/qi PmNvI72tTLfRcQDXYYpaq7WVhdOqUpOCqTYDhQ+zwm//JI4AW0oVGAKy0x3do9Jd FtPg1Crnnf6UMpFHZdMFJVvlhbbiFnHZlnh30qmVmx1zRAxybB/jW9/6/um79o7s EVdy9TN79jm3wlEEGiM6PebGvDlfhOgMflYCESaoBtjPt3ZlizfbpnGG3HFQCTfZ XudTT6ae0crzsx2qbhClfAYtss7dBMxHOhr8i2lBDhw= -----END CERTIFICATE-----Generated at Tue Jan 20 08:02:10 2026 by rpki-client