This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ruAktt4DnjiMLLni4RFe8VCa55k.roa File: ruAktt4DnjiMLLni4RFe8VCa55k.roa (raw, json) Hash identifier: duYVax7qbFF4HdNATRNnScOux+WpSiMcxZh/O+EDAzE= Subject key identifier: AE:E0:24:B6:DE:03:9E:38:8C:2C:B9:E2:E1:11:5E:F1:50:9A:E7:99 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EAF623EE7F7A2ADF00D986126AFEB Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ruAktt4DnjiMLLni4RFe8VCa55k.roa Signing time: Thu 01 Jan 2026 12:18:23 +0000 ROA not before: Thu 01 Jan 2026 12:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7155 IP address blocks: 82.103.105.0/24 maxlen: 24 195.34.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:af:62:3e:e7:f7:a2:ad:f0:0d:98:61:26:af:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aee024b6de039e388c2cb9e2e1115ef1509ae799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:12:65:1c:4a:83:22:ce:1b:50:f1:f4:55:8f: 44:75:6f:ef:d9:7a:76:ff:e6:7d:41:86:fe:0a:e3: 1b:69:1c:c4:1f:61:97:d7:cd:b7:ec:e0:91:b2:42: e7:40:8c:2c:31:b3:dc:43:18:f1:a0:85:94:67:12: 20:25:7a:67:2b:6d:1b:d6:17:c1:70:d3:8a:cb:8f: 1c:a1:73:f7:9c:23:60:5a:10:68:d0:be:d7:10:5c: fe:6d:c6:37:c4:0b:4a:7c:93:ce:78:e6:6a:eb:fb: 0b:47:b5:2a:92:31:1d:d9:97:6c:01:c8:84:bd:e0: a6:6e:d3:95:8b:d9:91:d6:1d:fd:c7:ed:e2:28:eb: eb:c9:3c:da:e4:5b:5c:b7:e4:07:6e:b1:0b:01:b7: f7:78:73:c2:df:cf:a9:76:b6:be:44:83:1e:3c:e8: 1d:9b:73:d3:01:82:de:6a:58:6f:60:d2:9b:57:09: 8d:59:02:a5:5a:5e:f9:42:26:13:e3:64:ce:85:c6: 1e:11:40:d8:b3:4c:76:a5:e5:a7:9f:82:82:d1:e8: f8:2c:ee:d5:0a:19:55:34:d0:e4:d7:af:5b:5e:a9: eb:7d:1e:ad:1e:3e:29:8c:47:7b:43:49:83:19:a5: 8f:38:c7:80:28:cc:52:b9:f0:47:0e:65:ba:b2:ea: 9d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E0:24:B6:DE:03:9E:38:8C:2C:B9:E2:E1:11:5E:F1:50:9A:E7:99 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ruAktt4DnjiMLLni4RFe8VCa55k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.103.105.0/24 195.34.109.0/24 Signature Algorithm: sha256WithRSAEncryption 64:92:df:d7:b4:7d:1c:62:d2:18:25:c9:c6:5c:16:f0:57:90: a5:57:0c:f5:4a:de:0a:8e:ba:ca:92:4c:70:57:a7:19:9b:f0: 77:00:a3:19:53:8f:4e:16:e2:fd:35:35:d8:12:14:f5:e3:f8: f4:3b:33:71:03:33:1b:5b:98:b4:1c:7d:26:d9:18:33:d7:96: d7:cb:87:96:74:80:35:20:47:c5:f0:48:d0:1c:36:b1:c4:38: e0:05:1b:8a:ef:33:09:6d:47:f2:48:90:0e:8c:17:73:03:ec: 57:dc:a3:a9:47:eb:95:ed:8d:0e:2b:a5:80:2c:7a:ec:09:20: 20:7d:2f:f0:b0:8c:5f:d2:37:6b:54:00:08:f2:7b:d2:15:40: 33:3e:93:19:0e:86:b4:6b:39:92:e9:c3:b7:c0:54:d1:79:b0: fc:d1:80:83:18:a4:55:6d:38:dc:9d:ea:f3:a3:a7:e1:fa:eb: 51:5f:cb:00:aa:9d:df:91:80:73:29:33:38:31:ad:fa:b5:81: 9c:04:d3:2f:e6:2b:ee:5d:66:c0:c2:d3:01:82:75:00:42:44: 82:77:36:9d:ad:c7:f0:17:a8:ef:b1:67:a8:cd:ef:5f:27:be: 40:8b:ea:c1:5b:16:b4:3c:84:eb:70:0c:b5:7f:15:7c:9c:a4: e2:0d:f8:26 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fq9iPuf3oq3wDZhhJq/rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWUwMjRiNmRlMDM5ZTM4OGMyY2I5ZTJlMTExNWVmMTUwOWFlNzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xJlHEqDIs4bUPH0VY9EdW/v2Xp2 /+Z9QYb+CuMbaRzEH2GX18237OCRskLnQIwsMbPcQxjxoIWUZxIgJXpnK20b1hfB cNOKy48coXP3nCNgWhBo0L7XEFz+bcY3xAtKfJPOeOZq6/sLR7UqkjEd2ZdsAciE veCmbtOVi9mR1h39x+3iKOvryTza5Ftct+QHbrELAbf3eHPC38+pdra+RIMePOgd m3PTAYLealhvYNKbVwmNWQKlWl75QiYT42TOhcYeEUDYs0x2peWnn4KC0ej4LO7V ChlVNNDk169bXqnrfR6tHj4pjEd7Q0mDGaWPOMeAKMxSufBHDmW6suqduwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK7gJLbeA544jCy54uERXvFQmueZMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvcnVBa3R0NERuamlNTExuaTRSRmU4VkNhNTVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUmdpAwQA wyJtMA0GCSqGSIb3DQEBCwUAA4IBAQBkkt/XtH0cYtIYJcnGXBbwV5ClVwz1St4K jrrKkkxwV6cZm/B3AKMZU49OFuL9NTXYEhT14/j0OzNxAzMbW5i0HH0m2Rgz15bX y4eWdIA1IEfF8EjQHDaxxDjgBRuK7zMJbUfySJAOjBdzA+xX3KOpR+uV7Y0OK6WA LHrsCSAgfS/wsIxf0jdrVAAI8nvSFUAzPpMZDoa0azmS6cO3wFTRebD80YCDGKRV bTjcnerzo6fh+utRX8sAqp3fkYBzKTM4Ma36tYGcBNMv5ivuXWbAwtMBgnUAQkSC dzadrcfwF6jvsWeoze9fJ75Ai+rBWxa0PITrcAy1fxV8nKTiDfgm -----END CERTIFICATE-----Generated at Mon Jan 26 17:24:35 2026 by rpki-client