This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/AkErl4jlY9bXi8pqa-fwgrweKKU.roa File: AkErl4jlY9bXi8pqa-fwgrweKKU.roa (raw, json) Hash identifier: 0XWDTE5Tv62kIn8zLAqHgpnppEVXV8X+MfUWwrRak7w= Subject key identifier: 02:41:2B:97:88:E5:63:D6:D7:8B:CA:6A:6B:E7:F0:82:BC:1E:28:A5 Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Certificate serial: 019B7C80A10805B9E7683098C3264BE4E82F Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/AkErl4jlY9bXi8pqa-fwgrweKKU.roa Signing time: Fri 02 Jan 2026 02:19:23 +0000 ROA not before: Fri 02 Jan 2026 02:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211895 IP address blocks: 85.204.127.0/24 maxlen: 24 89.33.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a1:08:05:b9:e7:68:30:98:c3:26:4b:e4:e8:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Validity Not Before: Jan 2 02:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02412b9788e563d6d78bca6a6be7f082bc1e28a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4b:ef:db:20:cf:f1:2f:7e:57:89:eb:44:54: 4a:26:9c:50:3d:21:4b:07:eb:9d:9f:18:8d:39:69: be:7a:f1:86:06:07:3b:9f:13:50:24:1f:e3:66:2f: ba:be:c2:e8:c6:c0:0d:7f:d2:ce:24:f2:9c:3a:37: 61:17:c5:74:4c:f7:10:05:38:65:29:06:0a:cf:33: 53:b2:f8:f9:b5:f1:4a:b2:bf:56:c4:ee:98:98:09: 14:cd:d0:0f:a2:ee:5b:e4:73:47:86:cc:94:aa:ec: ea:0e:55:04:9e:3a:be:6d:61:3c:f5:39:33:c1:eb: da:58:5a:56:98:18:72:9b:40:c5:16:9b:2b:79:bc: ea:17:8b:9d:7b:d2:45:97:63:13:12:e7:04:12:d1: 53:6e:2f:65:0d:38:6b:53:aa:2e:b9:4b:28:38:be: 98:63:e3:9c:a6:04:06:4f:7b:0b:59:27:51:20:7d: e2:3c:b9:3d:77:41:ad:de:87:3f:d2:87:99:27:2e: 52:c9:aa:cf:a3:4f:83:4b:dc:97:9c:00:88:86:d4: 4f:18:90:4b:88:42:76:34:6a:fd:af:90:c6:2e:44: 54:54:27:c5:17:87:84:48:75:f3:9f:59:e7:47:67: 72:a5:fa:a3:73:9b:7d:56:da:28:e2:d3:55:63:7a: c4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:41:2B:97:88:E5:63:D6:D7:8B:CA:6A:6B:E7:F0:82:BC:1E:28:A5 X509v3 Authority Key Identifier: keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/AkErl4jlY9bXi8pqa-fwgrweKKU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.204.127.0/24 89.33.163.0/24 Signature Algorithm: sha256WithRSAEncryption 07:f7:9e:f8:e5:5b:38:de:95:84:d1:28:28:cf:b7:02:23:c6: 65:dd:91:3d:25:a2:a0:6c:56:6b:ef:42:f0:63:3a:d8:4c:88: 4b:cc:47:02:75:cf:b3:65:6a:b8:9e:91:7d:7c:be:92:23:a2: 11:7e:7e:7c:35:ea:90:da:d1:04:99:69:d2:91:fc:71:06:e9: a7:d2:2d:bd:ae:dc:f2:31:28:bd:12:21:3f:f4:8f:fe:03:9c: 72:3b:d5:81:00:fc:0f:c1:1b:72:42:19:c0:be:ff:92:39:d8: 64:5d:94:37:dc:d4:a3:09:3e:4a:66:f4:17:55:e1:ab:38:8c: 24:4b:1d:51:ac:9d:5e:67:e2:1c:f6:71:6d:a4:94:ff:4d:ba: 70:23:f3:a4:6f:ef:06:59:e8:cc:cf:82:80:8e:16:31:f2:ab: 2b:fd:ce:9b:15:61:19:33:5e:e2:3d:54:22:22:8e:26:3c:5f: d3:21:a0:4b:f4:19:3c:89:33:e0:16:3f:9e:94:da:9e:ed:41: df:5f:4a:ff:7a:8e:8d:3b:ac:55:a0:f1:88:b8:90:1b:94:1c: d1:ae:0a:45:c5:22:ac:5f:23:0a:4a:8f:54:54:60:73:91:60: 34:4e:39:88:0c:29:60:9d:0d:2e:84:55:c8:8d:2d:0c:be:5f: 84:86:95:5d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gKEIBbnnaDCYwyZL5OgvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5 M2FlYjkwHhcNMjYwMTAyMDIxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjQxMmI5Nzg4ZTU2M2Q2ZDc4YmNhNmE2YmU3ZjA4MmJjMWUyOGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkvv2yDP8S9+V4nrRFRKJpxQPSFL B+udnxiNOWm+evGGBgc7nxNQJB/jZi+6vsLoxsANf9LOJPKcOjdhF8V0TPcQBThl KQYKzzNTsvj5tfFKsr9WxO6YmAkUzdAPou5b5HNHhsyUquzqDlUEnjq+bWE89Tkz wevaWFpWmBhym0DFFpsrebzqF4ude9JFl2MTEucEEtFTbi9lDThrU6ouuUsoOL6Y Y+OcpgQGT3sLWSdRIH3iPLk9d0Gt3oc/0oeZJy5SyarPo0+DS9yXnACIhtRPGJBL iEJ2NGr9r5DGLkRUVCfFF4eESHXzn1nnR2dypfqjc5t9Vtoo4tNVY3rEIQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAJBK5eI5WPW14vKamvn8IK8HiilMB8GA1UdIwQY MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt NWQ0OGI2NWNlNTczLzEvQWtFcmw0amxZOWJYaThwcWEtZndncndlS0tVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVcx/AwQA WSGjMA0GCSqGSIb3DQEBCwUAA4IBAQAH95745Vs43pWE0Sgoz7cCI8Zl3ZE9JaKg bFZr70LwYzrYTIhLzEcCdc+zZWq4npF9fL6SI6IRfn58NeqQ2tEEmWnSkfxxBumn 0i29rtzyMSi9EiE/9I/+A5xyO9WBAPwPwRtyQhnAvv+SOdhkXZQ33NSjCT5KZvQX VeGrOIwkSx1RrJ1eZ+Ic9nFtpJT/TbpwI/Okb+8GWejMz4KAjhYx8qsr/c6bFWEZ M17iPVQiIo4mPF/TIaBL9Bk8iTPgFj+elNqe7UHfX0r/eo6NO6xVoPGIuJAblBzR rgpFxSKsXyMKSo9UVGBzkWA0TjmIDClgnQ0uhFXIjS0Mvl+EhpVd -----END CERTIFICATE-----Generated at Wed Jan 21 10:48:13 2026 by rpki-client