This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/AQy-kY2cHFUJdvCu8RaXSm0u9OQ.roa File: AQy-kY2cHFUJdvCu8RaXSm0u9OQ.roa (raw, json) Hash identifier: RBQiu9sWWqL4vqKsGVfSX3sl/SJ1Xr1YL1xHQKrA3HM= Subject key identifier: 01:0C:BE:91:8D:9C:1C:55:09:76:F0:AE:F1:16:97:4A:6D:2E:F4:E4 Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85 Certificate serial: 019B77C712057A381156768C94150AE265B9 Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/AQy-kY2cHFUJdvCu8RaXSm0u9OQ.roa Signing time: Thu 01 Jan 2026 04:18:13 +0000 ROA not before: Thu 01 Jan 2026 04:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39868 IP address blocks: 85.112.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:12:05:7a:38:11:56:76:8c:94:15:0a:e2:65:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85 Validity Not Before: Jan 1 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=010cbe918d9c1c550976f0aef116974a6d2ef4e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6f:4f:48:c3:c4:37:06:6c:56:d0:4f:aa:d6: 55:f6:79:27:4c:6d:57:ea:3f:85:1a:e7:c8:a7:ac: 62:c9:fe:94:78:40:47:c8:fa:f6:12:3f:a3:3b:28: 99:1e:ae:2e:3d:b6:5b:46:6c:ab:ec:14:45:d1:5c: 81:a3:2f:0d:ac:a5:00:54:df:1e:16:93:be:3e:ad: c3:87:f5:95:2e:da:0c:c6:c0:a1:a2:e9:59:03:06: 50:02:bd:a4:ed:07:6a:a4:fd:a0:e6:79:12:e0:9a: 38:36:1c:c8:0f:bc:22:0f:fe:60:0c:fb:5d:56:19: 08:e2:b7:64:d0:a6:46:bd:22:23:a2:9e:d6:91:3f: 60:8a:7c:79:07:22:ae:42:cd:64:c6:90:59:a0:11: 25:ae:a0:a7:af:5a:01:96:dd:45:f9:89:10:67:66: 48:36:4f:d6:78:27:5a:79:ec:c3:a7:4e:fd:53:86: de:62:79:29:79:73:76:46:57:7b:c2:fe:7f:e3:a0: d7:28:14:13:69:2c:d7:10:05:46:8f:a4:a0:fa:22: 71:dd:80:d1:5c:b0:21:c5:94:a6:e3:12:9e:14:d0: e0:de:42:02:25:74:5c:bd:9a:e3:40:89:0e:63:96: 2d:98:4b:3f:10:94:7e:41:55:87:df:c3:4c:85:cc: 8d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0C:BE:91:8D:9C:1C:55:09:76:F0:AE:F1:16:97:4A:6D:2E:F4:E4 X509v3 Authority Key Identifier: keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/AQy-kY2cHFUJdvCu8RaXSm0u9OQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.112.79.0/24 Signature Algorithm: sha256WithRSAEncryption 13:59:95:14:b1:84:8d:80:04:b2:ca:04:66:30:57:e6:6d:71: ae:b9:78:8d:6b:37:4e:a2:b0:5f:3e:b3:5b:31:2a:f3:d3:a1: 09:63:4b:8a:0b:35:50:11:21:37:6a:9b:16:f2:df:0d:78:a7: 99:cc:63:c5:38:2c:26:8a:7c:fa:85:a4:fc:3b:e9:8f:79:f9: ed:b5:40:3c:06:21:90:50:df:77:35:9d:7c:13:21:29:35:1d: a7:30:21:64:00:bf:e9:18:ca:23:55:4a:58:1a:ec:f2:f3:b8: 2b:ae:65:d3:2e:9f:cd:3d:9c:40:e7:83:c4:e2:39:a3:fd:db: 70:24:d7:39:72:3e:e9:f4:38:ed:1f:ee:98:38:14:4e:19:c7: 48:40:aa:9b:22:42:40:b9:57:4a:5d:c4:10:4f:e6:c1:0d:75: 8f:ef:95:29:18:7d:73:dc:81:2b:28:79:7d:ac:ff:c8:0a:4d: f2:69:db:51:df:f4:4c:6a:fd:ba:b3:9b:7a:43:1a:a8:41:8d: e5:0e:eb:e1:d8:fe:81:86:67:6b:18:df:1f:84:11:fb:8e:f4: d9:15:95:4a:06:01:a4:11:a0:64:6b:c3:05:46:e9:f8:77:4a: b0:c8:c2:b5:ff:de:7a:f7:f7:89:9c:1e:22:4d:f3:87:2b:15: f6:7e:a4:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xxIFejgRVnaMlBUK4mW5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlY2Q2NGM5NzgzN2Q3YmZhYzA2NjM3ZGQ5NTJiZGVkZTBj MjVkODUwHhcNMjYwMTAxMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTBjYmU5MThkOWMxYzU1MDk3NmYwYWVmMTE2OTc0YTZkMmVmNGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG9PSMPENwZsVtBPqtZV9nknTG1X 6j+FGufIp6xiyf6UeEBHyPr2Ej+jOyiZHq4uPbZbRmyr7BRF0VyBoy8NrKUAVN8e FpO+Pq3Dh/WVLtoMxsChoulZAwZQAr2k7QdqpP2g5nkS4Jo4NhzID7wiD/5gDPtd VhkI4rdk0KZGvSIjop7WkT9ginx5ByKuQs1kxpBZoBElrqCnr1oBlt1F+YkQZ2ZI Nk/WeCdaeezDp079U4beYnkpeXN2Rld7wv5/46DXKBQTaSzXEAVGj6Sg+iJx3YDR XLAhxZSm4xKeFNDg3kICJXRcvZrjQIkOY5YtmEs/EJR+QVWH38NMhcyNQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAEMvpGNnBxVCXbwrvEWl0ptLvTkMB8GA1UdIwQY MBaAFK7NZMl4N9e/rAZjfdlSve3gwl2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnMxa3lYZzMxNy1zQm1OOTJWSzk3ZURDWFlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81OTJkNGYtZDcxZS00ZThiLWE2MzIt MWVjZGUxNzkxNTExLzEvQVF5LWtZMmNIRlVKZHZDdThSYVhTbTB1OU9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81OTJkNGYtZDcxZS00ZThiLWE2MzItMWVjZGUxNzkxNTEx LzEvcnMxa3lYZzMxNy1zQm1OOTJWSzk3ZURDWFlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXBPMA0G CSqGSIb3DQEBCwUAA4IBAQATWZUUsYSNgASyygRmMFfmbXGuuXiNazdOorBfPrNb MSrz06EJY0uKCzVQESE3apsW8t8NeKeZzGPFOCwminz6haT8O+mPefnttUA8BiGQ UN93NZ18EyEpNR2nMCFkAL/pGMojVUpYGuzy87grrmXTLp/NPZxA54PE4jmj/dtw JNc5cj7p9DjtH+6YOBROGcdIQKqbIkJAuVdKXcQQT+bBDXWP75UpGH1z3IErKHl9 rP/ICk3yadtR3/RMav26s5t6QxqoQY3lDuvh2P6BhmdrGN8fhBH7jvTZFZVKBgGk EaBka8MFRun4d0qwyMK1/9569/eJnB4iTfOHKxX2fqTe -----END CERTIFICATE-----Generated at Tue Feb 10 02:58:25 2026 by rpki-client