This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/AXk7rGyx4rrlN1bnMRHqMX3FNMY.roa File: AXk7rGyx4rrlN1bnMRHqMX3FNMY.roa (raw, json) Hash identifier: MC089EXMBRYMWTR010ivQ/lYUqwtiDu4XwzNjJMKglk= Subject key identifier: 01:79:3B:AC:6C:B1:E2:BA:E5:37:56:E7:31:11:EA:31:7D:C5:34:C6 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B357C9DA30265F049F79F75FFA3F69B Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/AXk7rGyx4rrlN1bnMRHqMX3FNMY.roa Signing time: Thu 01 Jan 2026 20:17:41 +0000 ROA not before: Thu 01 Jan 2026 20:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50887 IP address blocks: 80.96.8.0/23 maxlen: 23 81.181.204.0/23 maxlen: 23 85.120.240.0/23 maxlen: 23 217.156.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:7c:9d:a3:02:65:f0:49:f7:9f:75:ff:a3:f6:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01793bac6cb1e2bae53756e73111ea317dc534c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:17:b7:4b:fc:9b:2e:15:67:ef:09:26:9a:4d: ec:b6:ab:36:7e:6d:9b:53:6e:47:65:cc:86:61:cc: 65:1c:2b:a4:03:a4:b6:42:ad:67:9f:0a:cb:cd:26: 16:19:f2:6d:9d:c9:81:74:68:4f:23:c0:a8:39:9b: c9:83:65:f7:09:d3:c8:72:d7:8d:2b:10:19:6c:89: 60:fe:e8:64:05:66:01:3c:cf:2d:7f:71:c6:33:f5: 05:b0:fc:4b:7f:40:47:b2:c6:fe:c2:96:9f:bc:26: 1c:f8:73:e2:89:4f:a5:c9:54:f1:22:40:bb:05:0f: 57:99:1a:16:48:cf:65:fb:36:eb:78:86:be:65:5f: 60:e1:c7:26:c7:a6:28:4d:22:4e:6b:6e:26:ce:55: 9a:17:b0:b1:c0:e5:4a:6b:d2:5c:d6:52:d9:cf:60: 03:6b:61:53:cd:8b:a5:65:6a:31:4d:cc:dc:ef:3c: 87:fe:ba:82:9f:78:f8:7c:e3:91:81:10:b5:73:cd: a8:d5:fb:8b:6f:ed:fd:d0:52:d4:9d:29:6a:b3:a9: 43:3a:1b:ac:6b:5a:27:f7:91:66:39:b8:89:f2:68: 7b:3d:b7:35:0f:b4:31:0b:7b:b0:91:90:14:70:2e: f8:ee:28:65:f9:10:46:bc:c2:e1:40:0a:62:15:a0: 8e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:79:3B:AC:6C:B1:E2:BA:E5:37:56:E7:31:11:EA:31:7D:C5:34:C6 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/AXk7rGyx4rrlN1bnMRHqMX3FNMY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.96.8.0/23 81.181.204.0/23 85.120.240.0/23 217.156.70.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:a1:0f:ce:a9:97:f5:50:11:26:05:e1:cc:63:47:6a:6d:e6: ae:84:c9:8d:18:d8:d7:df:03:40:27:a3:4c:a4:75:07:76:b2: 53:bb:61:9a:45:54:dc:fe:04:90:2d:8e:d4:7d:45:64:fc:f5: 9d:32:c8:c2:3a:1b:57:12:9a:2a:68:cc:81:91:4c:d8:b0:b3: 57:28:6b:39:b2:23:29:36:c7:d0:3d:6e:07:75:60:7a:3b:95: bc:69:e8:a5:fa:72:1f:1c:18:ff:04:e1:52:dc:80:bb:33:3f: 08:b0:26:37:20:40:92:ac:93:29:8a:b3:bf:b5:37:4b:11:f9: df:fd:d2:6d:ef:27:ce:ab:a5:a3:8a:4e:ab:c5:55:87:18:e3: 2e:44:fc:79:93:ec:ee:5a:a3:72:04:7f:db:ba:68:93:c3:58: dd:1f:77:70:26:39:1b:5e:0c:70:96:95:c9:9f:14:72:92:4e: dd:55:67:47:c0:44:e8:ce:55:d0:74:5e:b0:7f:e7:6a:74:9d: 38:d7:ae:30:ba:ac:68:33:68:f8:b1:01:16:dd:cf:f7:f2:26: ca:ba:5a:78:87:99:5b:29:d5:d4:a7:7e:af:7a:11:2f:43:2f: 27:f9:de:bb:aa:46:2a:2e:a8:7a:fc:e3:ab:59:80:2f:a0:db: 1f:74:82:ae -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7NXydowJl8En3n3X/o/abMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTc5M2JhYzZjYjFlMmJhZTUzNzU2ZTczMTExZWEzMTdkYzUzNGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3he3S/ybLhVn7wkmmk3stqs2fm2b U25HZcyGYcxlHCukA6S2Qq1nnwrLzSYWGfJtncmBdGhPI8CoOZvJg2X3CdPIcteN KxAZbIlg/uhkBWYBPM8tf3HGM/UFsPxLf0BHssb+wpafvCYc+HPiiU+lyVTxIkC7 BQ9XmRoWSM9l+zbreIa+ZV9g4ccmx6YoTSJOa24mzlWaF7CxwOVKa9Jc1lLZz2AD a2FTzYulZWoxTczc7zyH/rqCn3j4fOORgRC1c82o1fuLb+390FLUnSlqs6lDOhus a1on95FmObiJ8mh7Pbc1D7QxC3uwkZAUcC747ihl+RBGvMLhQApiFaCOaQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFAF5O6xsseK65TdW5zER6jF9xTTGMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvQVhrN3JHeXg0cnJsTjFibk1SSHFNWDNGTk1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBUGAIAwQB UbXMAwQBVXjwAwQB2ZxGMA0GCSqGSIb3DQEBCwUAA4IBAQBeoQ/OqZf1UBEmBeHM Y0dqbeauhMmNGNjX3wNAJ6NMpHUHdrJTu2GaRVTc/gSQLY7UfUVk/PWdMsjCOhtX EpoqaMyBkUzYsLNXKGs5siMpNsfQPW4HdWB6O5W8aeil+nIfHBj/BOFS3IC7Mz8I sCY3IECSrJMpirO/tTdLEfnf/dJt7yfOq6Wjik6rxVWHGOMuRPx5k+zuWqNyBH/b umiTw1jdH3dwJjkbXgxwlpXJnxRykk7dVWdHwETozlXQdF6wf+dqdJ04164wuqxo M2j4sQEW3c/38ibKulp4h5lbKdXUp36vehEvQy8n+d67qkYqLqh6/OOrWYAvoNsf dIKu -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:50 2026 by rpki-client