This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/acmzZO4WdYbcbfIVT_LX9qTPV78.roa File: acmzZO4WdYbcbfIVT_LX9qTPV78.roa (raw, json) Hash identifier: pEP2EoeuhTQlSixvaPnjA7Q75y0GUPve3N+3u4ET3rs= Subject key identifier: 69:C9:B3:64:EE:16:75:86:DC:6D:F2:15:4F:F2:D7:F6:A4:CF:57:BF Certificate issuer: /CN=a9ac1f8595bad558240d74068000a1cf708ba1a5 Certificate serial: 019B77592E4A4DA22BABBE8D33CF686162EC Authority key identifier: A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/acmzZO4WdYbcbfIVT_LX9qTPV78.roa Signing time: Thu 01 Jan 2026 02:18:11 +0000 ROA not before: Thu 01 Jan 2026 02:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212181 IP address blocks: 193.47.149.0/24 maxlen: 24 2a10:1180::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.crl rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:2e:4a:4d:a2:2b:ab:be:8d:33:cf:68:61:62:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9ac1f8595bad558240d74068000a1cf708ba1a5 Validity Not Before: Jan 1 02:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69c9b364ee167586dc6df2154ff2d7f6a4cf57bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1d:e7:84:6e:c2:3d:d1:75:41:40:e9:47:20: ce:69:bc:09:2f:9e:ab:5c:2e:b9:ad:1d:39:5d:a7: 3f:fd:02:0e:21:99:49:99:a5:74:9a:55:3f:b1:f6: 62:0d:92:b7:8f:3b:08:af:09:38:02:61:95:be:55: 62:ee:42:69:34:85:45:8c:47:bd:57:16:9d:ba:96: 4d:12:ca:eb:55:41:54:68:3f:8d:38:6b:35:43:f9: 47:13:ff:08:d2:a3:74:b5:ea:8b:d2:ea:93:f9:f9: e0:e4:64:e1:97:f6:e2:5a:9d:f9:3c:ab:eb:21:01: 4d:69:e6:69:58:59:3e:3f:1f:6e:ee:12:27:61:b7: c5:6d:85:62:d4:87:c6:79:b3:21:7c:a9:8c:5f:45: cf:cd:b1:7d:05:46:22:88:79:fa:b0:64:16:ed:e8: 25:09:35:38:27:3f:81:d5:20:0d:b8:6b:68:8e:65: 1b:f7:33:0a:8b:67:62:8e:bb:be:76:88:9b:24:f9: 08:61:ae:23:8e:bd:17:c3:9c:bc:bf:89:02:31:98: 85:6b:9b:2c:16:2d:51:be:7b:8d:e9:9a:39:b7:da: 03:eb:fa:86:b3:de:45:fd:b4:36:dc:2b:84:8c:b9: 63:fa:52:9e:44:d9:19:0d:7e:fb:5b:d5:8b:15:cb: 66:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C9:B3:64:EE:16:75:86:DC:6D:F2:15:4F:F2:D7:F6:A4:CF:57:BF X509v3 Authority Key Identifier: keyid:A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/acmzZO4WdYbcbfIVT_LX9qTPV78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.47.149.0/24 IPv6: 2a10:1180::/31 Signature Algorithm: sha256WithRSAEncryption 24:d6:4c:b4:d8:7a:64:62:9b:1d:57:53:a7:9e:6e:7b:86:e6: a0:89:b5:be:22:53:6d:b0:db:b2:f9:01:99:71:d1:4f:88:81: ea:a3:d2:06:a1:8c:09:34:fa:b1:fc:44:35:5b:f7:8e:5b:48: ab:a8:1a:d6:4e:f5:e3:66:45:1a:5a:4b:cf:b4:10:c8:b0:dc: 71:6d:ee:96:ff:2a:be:91:e6:83:93:79:47:20:4f:6d:4a:dd: 5b:71:35:5e:08:1b:fa:58:59:81:55:b0:80:1e:3b:e3:d2:da: 0e:b8:84:ed:0d:18:d4:74:0e:c2:5e:b7:49:21:0a:af:52:27: dd:96:7b:86:9b:3c:08:8c:ea:33:92:c4:3c:43:9c:a6:03:4a: 58:8f:43:5e:d9:0a:5e:57:6c:14:e0:de:bb:dc:b8:e2:84:38: 29:0e:5d:b8:6f:b0:06:a1:01:28:24:25:56:b4:52:aa:57:22: 6e:26:bf:03:0e:6d:be:35:d0:c0:1c:fe:6f:bb:03:1d:b0:55: fd:b2:15:e8:0e:ef:64:b2:2b:bd:aa:46:87:79:e3:45:21:37: 9c:25:2a:b8:47:b8:1a:da:ff:19:e6:0a:5f:f3:82:a9:52:f5: f0:c9:c9:41:7d:d5:59:e1:2b:b9:b1:87:b1:3b:44:cd:0e:cc: 16:39:a1:65 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WS5KTaIrq76NM89oYWLsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5YWMxZjg1OTViYWQ1NTgyNDBkNzQwNjgwMDBhMWNmNzA4 YmExYTUwHhcNMjYwMTAxMDIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWM5YjM2NGVlMTY3NTg2ZGM2ZGYyMTU0ZmYyZDdmNmE0Y2Y1N2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh3nhG7CPdF1QUDpRyDOabwJL56r XC65rR05Xac//QIOIZlJmaV0mlU/sfZiDZK3jzsIrwk4AmGVvlVi7kJpNIVFjEe9 VxadupZNEsrrVUFUaD+NOGs1Q/lHE/8I0qN0teqL0uqT+fng5GThl/biWp35PKvr IQFNaeZpWFk+Px9u7hInYbfFbYVi1IfGebMhfKmMX0XPzbF9BUYiiHn6sGQW7egl CTU4Jz+B1SANuGtojmUb9zMKi2dijru+doibJPkIYa4jjr0Xw5y8v4kCMZiFa5ss Fi1RvnuN6Zo5t9oD6/qGs95F/bQ23CuEjLlj+lKeRNkZDX77W9WLFctmrwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGnJs2TuFnWG3G3yFU/y1/akz1e/MB8GA1UdIwQY MBaAFKmsH4WVutVYJA10BoAAoc9wi6GlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWF3ZmhaVzYxVmdrRFhRR2dBQ2h6M0NMb2FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80ZWRjMzYtNGQ1My00N2NmLWE2ZmMt YjUxMTU0NjI4ZmIzLzEvYWNtelpPNFdkWWJjYmZJVlRfTFg5cVRQVjc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni80ZWRjMzYtNGQ1My00N2NmLWE2ZmMtYjUxMTU0NjI4ZmIz LzEvcWF3ZmhaVzYxVmdrRFhRR2dBQ2h6M0NMb2FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwS+VMA0E AgACMAcDBQEqEBGAMA0GCSqGSIb3DQEBCwUAA4IBAQAk1ky02HpkYpsdV1Onnm57 huagibW+IlNtsNuy+QGZcdFPiIHqo9IGoYwJNPqx/EQ1W/eOW0irqBrWTvXjZkUa WkvPtBDIsNxxbe6W/yq+keaDk3lHIE9tSt1bcTVeCBv6WFmBVbCAHjvj0toOuITt DRjUdA7CXrdJIQqvUifdlnuGmzwIjOozksQ8Q5ymA0pYj0Ne2QpeV2wU4N673Lji hDgpDl24b7AGoQEoJCVWtFKqVyJuJr8DDm2+NdDAHP5vuwMdsFX9shXoDu9ksiu9 qkaHeeNFITecJSq4R7ga2v8Z5gpf84KpUvXwyclBfdVZ4Su5sYexO0TNDswWOaFl -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:14 2026 by rpki-client