This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/AK5LSz17AEl6pgan1mzVzZ5IuZg.roa File: AK5LSz17AEl6pgan1mzVzZ5IuZg.roa (raw, json) Hash identifier: dFcuyViiZBTUNbXabvlF35EDQCQczaDNGz3AGi8EzB4= Subject key identifier: 00:AE:4B:4B:3D:7B:00:49:7A:A6:06:A7:D6:6C:D5:CD:9E:48:B9:98 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C696C260C38162829CC625D65CB8B9 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/AK5LSz17AEl6pgan1mzVzZ5IuZg.roa Signing time: Thu 01 Jan 2026 04:17:42 +0000 ROA not before: Thu 01 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16262 IP address blocks: 46.8.52.0/23 maxlen: 32 46.8.153.0/24 maxlen: 24 109.248.168.0/24 maxlen: 24 109.248.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:96:c2:60:c3:81:62:82:9c:c6:25:d6:5c:b8:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00ae4b4b3d7b00497aa606a7d66cd5cd9e48b998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bd:fc:0b:f2:33:15:df:24:68:67:5c:51:c5: fb:95:34:d2:d6:90:05:82:b0:46:0b:89:43:68:98: 10:6a:ac:7b:92:9f:61:71:58:b5:f1:fc:ac:19:26: 0d:55:3b:bf:71:6d:f1:94:f3:2f:1d:9a:32:ae:2a: 50:fa:fa:f8:88:59:2f:fd:fb:b0:68:10:7b:8b:8c: 9c:19:b3:fd:91:0c:eb:66:a7:e0:ee:d5:42:93:c8: 12:64:eb:02:17:ff:3c:c7:7e:ee:81:23:95:f2:33: f5:33:27:7c:12:0f:03:a3:92:9b:be:3e:61:f3:6d: ad:23:41:3d:55:69:05:3a:89:4b:42:59:76:63:b1: 7a:b7:c2:b6:5a:90:24:90:ac:59:0e:15:58:a4:0a: 3f:c5:02:85:55:fe:e8:ba:d9:a3:0e:b6:de:6f:f0: 86:b5:8c:9a:de:f3:b0:09:46:7e:20:d7:c3:f8:12: da:b0:4a:28:dd:80:bc:4e:b4:98:a1:40:4c:f5:be: ba:09:51:7c:95:62:5e:c1:dc:78:34:9c:ce:7d:aa: 04:a6:52:39:9d:0f:85:ea:c4:3a:d6:9c:6e:07:94: 49:37:13:d8:05:4d:38:d2:52:39:10:a9:c3:e3:1d: 10:7b:5c:0f:e1:bb:e1:a1:50:0d:76:5f:19:03:8a: 3f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:AE:4B:4B:3D:7B:00:49:7A:A6:06:A7:D6:6C:D5:CD:9E:48:B9:98 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/AK5LSz17AEl6pgan1mzVzZ5IuZg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.8.52.0/23 46.8.153.0/24 109.248.168.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:0d:43:02:62:29:e3:92:6a:d1:69:54:7b:dc:dc:9c:58:5a: 85:4d:56:9b:de:ab:52:f5:04:28:6a:a5:5e:e6:94:f5:e9:d0: b2:84:1b:b3:d7:97:c4:6c:63:ae:cb:c2:c5:95:16:44:b1:b8: 6b:dc:24:69:8a:b5:1b:ef:e5:33:8a:3e:0a:e6:e7:90:6c:d7: 91:fa:dc:e5:0d:1d:47:54:36:85:fa:e0:0e:77:c4:95:77:5a: da:d6:ee:93:a1:74:29:a0:53:ba:ea:b8:68:22:33:fb:f2:61: 83:54:8f:7b:a2:46:03:1f:2e:c9:1c:7d:ea:67:92:10:e8:31: 19:5d:e1:96:8a:cc:79:23:7f:c0:c4:cc:61:3a:cc:92:1b:34: 31:94:08:dc:93:eb:d3:c2:44:a0:5c:f8:1c:ee:b5:03:ab:0d: cd:77:e6:26:48:2e:9b:32:23:fb:66:e2:74:4f:98:3a:9c:e8: a2:5f:aa:0e:52:af:10:4d:5b:ba:68:57:99:72:c9:48:da:ae: 0c:80:98:ce:d9:72:fe:c5:ef:81:6d:99:28:50:de:3f:9f:a6: c2:19:be:61:2b:d8:e7:ab:e4:79:f7:05:c7:9d:3e:d6:35:72: f0:8e:5d:4f:55:f8:6a:07:0f:de:c7:e5:df:2a:06:52:39:b5: cd:36:71:75 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xpbCYMOBYoKcxiXWXLi5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGFlNGI0YjNkN2IwMDQ5N2FhNjA2YTdkNjZjZDVjZDllNDhiOTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3L38C/IzFd8kaGdcUcX7lTTS1pAF grBGC4lDaJgQaqx7kp9hcVi18fysGSYNVTu/cW3xlPMvHZoyripQ+vr4iFkv/fuw aBB7i4ycGbP9kQzrZqfg7tVCk8gSZOsCF/88x37ugSOV8jP1Myd8Eg8Do5Kbvj5h 822tI0E9VWkFOolLQll2Y7F6t8K2WpAkkKxZDhVYpAo/xQKFVf7outmjDrbeb/CG tYya3vOwCUZ+INfD+BLasEoo3YC8TrSYoUBM9b66CVF8lWJewdx4NJzOfaoEplI5 nQ+F6sQ61pxuB5RJNxPYBU040lI5EKnD4x0Qe1wP4bvhoVANdl8ZA4o/YwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFACuS0s9ewBJeqYGp9Zs1c2eSLmYMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvQUs1TFN6MTdBRWw2cGdhbjFtelZ6WjVJdVpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLgg0AwQA LgiZAwQBbfioMA0GCSqGSIb3DQEBCwUAA4IBAQCPDUMCYinjkmrRaVR73NycWFqF TVab3qtS9QQoaqVe5pT16dCyhBuz15fEbGOuy8LFlRZEsbhr3CRpirUb7+Uzij4K 5ueQbNeR+tzlDR1HVDaF+uAOd8SVd1ra1u6ToXQpoFO66rhoIjP78mGDVI97okYD Hy7JHH3qZ5IQ6DEZXeGWisx5I3/AxMxhOsySGzQxlAjck+vTwkSgXPgc7rUDqw3N d+YmSC6bMiP7ZuJ0T5g6nOiiX6oOUq8QTVu6aFeZcslI2q4MgJjO2XL+xe+BbZko UN4/n6bCGb5hK9jnq+R59wXHnT7WNXLwjl1PVfhqBw/ex+XfKgZSObXNNnF1 -----END CERTIFICATE-----Generated at Sun Jan 25 18:10:51 2026 by rpki-client