This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/AXvoVGh-TQnpLj5cZLah8R7q004.roa File: AXvoVGh-TQnpLj5cZLah8R7q004.roa (raw, json) Hash identifier: vez1K9DhLhVP7itIo8ems7Xp/PgCKD6d5hc8ZDXximY= Subject key identifier: 01:7B:E8:54:68:7E:4D:09:E9:2E:3E:5C:64:B6:A1:F1:1E:EA:D3:4E Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019B7758BB02013A3F5E9FD8F83FAADE425A Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/AXvoVGh-TQnpLj5cZLah8R7q004.roa Signing time: Thu 01 Jan 2026 02:17:42 +0000 ROA not before: Thu 01 Jan 2026 02:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211863 IP address blocks: 93.190.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:bb:02:01:3a:3f:5e:9f:d8:f8:3f:aa:de:42:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Jan 1 02:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=017be854687e4d09e92e3e5c64b6a1f11eead34e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:62:54:72:45:e3:aa:b6:d5:67:78:d2:6c:79: a4:b7:60:67:70:30:8d:f2:f8:d6:94:aa:52:f8:69: 3e:6c:fc:b5:ab:08:03:fe:7a:46:11:2a:30:e7:4a: bb:89:e2:59:51:6b:b9:62:b3:d2:b8:a6:39:59:0c: a8:5f:ac:88:f1:7c:8a:a0:6b:84:49:ea:5d:43:0d: 5b:93:df:4a:eb:e4:c3:d0:ce:4b:6e:73:66:29:e6: 2d:5b:0b:a0:d6:b6:f6:1f:d5:15:e0:53:69:16:e4: cf:d7:08:ab:dc:0a:93:ae:75:82:e3:2e:f6:5a:ff: 90:ed:f9:c8:ff:2d:6f:06:ab:cf:3c:1c:37:4c:a6: df:40:48:da:a0:c4:ac:7f:61:55:99:9a:56:d6:db: 99:03:9b:c1:2e:80:88:10:12:97:33:bd:01:81:9b: 48:7d:61:dd:1c:37:99:33:59:df:15:22:17:52:97: db:b2:6f:ec:41:36:8e:2e:d5:c6:e9:6c:87:d1:40: b1:ba:fc:8a:67:5a:fa:ee:25:6b:0b:0a:18:5a:98: d8:de:0c:cc:a6:97:6d:4e:cf:6b:30:9e:8b:bd:3f: 65:bd:96:28:df:72:42:46:78:fe:aa:fc:2c:5c:d6: 66:23:05:9b:29:fe:36:4d:5e:4f:ac:aa:01:33:b0: 4c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7B:E8:54:68:7E:4D:09:E9:2E:3E:5C:64:B6:A1:F1:1E:EA:D3:4E X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/AXvoVGh-TQnpLj5cZLah8R7q004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.190.14.0/24 Signature Algorithm: sha256WithRSAEncryption 94:58:96:fc:88:c7:34:08:18:d9:61:64:83:dd:de:3f:18:bb: 4c:ed:2d:23:77:98:31:91:62:00:8d:bf:66:7a:dc:c1:a8:4c: bb:66:40:3f:b3:a1:77:29:7b:ba:98:05:5e:ef:5f:d7:8a:55: a6:c9:0f:f5:b4:f2:ae:5f:ba:9e:bc:e7:6d:9e:e7:8b:1a:3a: d5:98:a1:c9:ce:2c:8f:fd:d6:82:31:4f:c4:a4:0b:09:da:87: ad:0f:64:da:52:ff:9e:e1:64:f9:14:ec:6a:19:84:99:0b:5c: 50:e7:a8:c1:79:99:16:96:a0:e6:19:f1:c1:d8:9e:36:0e:96: ca:4a:5a:36:6b:4f:3a:93:52:e0:e6:84:a9:6f:23:a0:22:24: 18:ee:19:9d:90:e8:83:68:01:96:a9:e9:8d:62:8c:84:1b:7e: ce:e3:15:2c:98:3c:a6:8d:70:34:84:b0:e2:3b:f2:9f:f1:8a: 7f:54:fe:b3:51:38:28:1c:2e:d6:02:86:3b:b1:7b:88:ce:dc: ab:f0:07:ca:37:22:7d:2c:50:32:c5:d5:5b:1e:d2:84:42:d2: 33:ef:cc:a2:b1:a3:06:f2:55:89:bb:c5:7e:d7:75:3f:d8:bc: 43:26:82:de:51:5b:8c:6e:a9:0c:bf:c4:44:ce:b1:2b:79:05: 74:48:1a:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WLsCATo/Xp/Y+D+q3kJaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjYwMTAxMDIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTdiZTg1NDY4N2U0ZDA5ZTkyZTNlNWM2NGI2YTFmMTFlZWFkMzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmJUckXjqrbVZ3jSbHmkt2BncDCN 8vjWlKpS+Gk+bPy1qwgD/npGESow50q7ieJZUWu5YrPSuKY5WQyoX6yI8XyKoGuE SepdQw1bk99K6+TD0M5LbnNmKeYtWwug1rb2H9UV4FNpFuTP1wir3AqTrnWC4y72 Wv+Q7fnI/y1vBqvPPBw3TKbfQEjaoMSsf2FVmZpW1tuZA5vBLoCIEBKXM70BgZtI fWHdHDeZM1nfFSIXUpfbsm/sQTaOLtXG6WyH0UCxuvyKZ1r67iVrCwoYWpjY3gzM ppdtTs9rMJ6LvT9lvZYo33JCRnj+qvwsXNZmIwWbKf42TV5PrKoBM7BMzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAF76FRofk0J6S4+XGS2ofEe6tNOMB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvQVh2b1ZHaC1UUW5wTGo1Y1pMYWg4UjdxMDA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXb4OMA0G CSqGSIb3DQEBCwUAA4IBAQCUWJb8iMc0CBjZYWSD3d4/GLtM7S0jd5gxkWIAjb9m etzBqEy7ZkA/s6F3KXu6mAVe71/XilWmyQ/1tPKuX7qevOdtnueLGjrVmKHJziyP /daCMU/EpAsJ2oetD2TaUv+e4WT5FOxqGYSZC1xQ56jBeZkWlqDmGfHB2J42DpbK Slo2a086k1Lg5oSpbyOgIiQY7hmdkOiDaAGWqemNYoyEG37O4xUsmDymjXA0hLDi O/Kf8Yp/VP6zUTgoHC7WAoY7sXuIztyr8AfKNyJ9LFAyxdVbHtKEQtIz78yisaMG 8lWJu8V+13U/2LxDJoLeUVuMbqkMv8REzrEreQV0SBpr -----END CERTIFICATE-----Generated at Wed Jan 21 14:11:07 2026 by rpki-client