This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/AVPuOu9WJgQFeY3OKziZugz6I8w.roa File: AVPuOu9WJgQFeY3OKziZugz6I8w.roa (raw, json) Hash identifier: GA/D9jB65LyEclzGHWIX2nscOtPzaUo+KGMXTzHX+8Y= Subject key identifier: 01:53:EE:3A:EF:56:26:04:05:79:8D:CE:2B:38:99:BA:0C:FA:23:CC Certificate issuer: /CN=acf910f36291c3c224ddb596d956543197f163de Certificate serial: 019B79ED1B2585BDF7012E9AA5AB5100379D Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/AVPuOu9WJgQFeY3OKziZugz6I8w.roa Signing time: Thu 01 Jan 2026 14:19:00 +0000 ROA not before: Thu 01 Jan 2026 14:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14537 IP address blocks: 92.249.5.0/24 maxlen: 24 217.147.120.0/24 maxlen: 24 217.147.121.0/24 maxlen: 24 217.147.124.0/22 maxlen: 22 217.147.124.0/24 maxlen: 24 217.147.125.0/24 maxlen: 24 217.147.126.0/24 maxlen: 24 217.147.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 14:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:1b:25:85:bd:f7:01:2e:9a:a5:ab:51:00:37:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acf910f36291c3c224ddb596d956543197f163de Validity Not Before: Jan 1 14:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0153ee3aef56260405798dce2b3899ba0cfa23cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2e:78:1a:11:ac:e7:fe:12:c7:b0:67:7c:27: 13:72:dc:17:2e:18:b4:d5:1e:1c:ed:e4:41:d8:e4: cb:7c:c5:2e:61:f4:f2:46:ac:8e:f5:83:6e:3b:0c: 33:d6:d5:c5:62:fa:05:82:62:2f:70:5a:4e:0c:78: bf:e9:10:78:ea:4f:54:b8:25:0d:4c:61:90:20:2f: d1:72:30:ac:70:56:cb:a1:92:f6:69:ad:b4:f4:e2: a2:88:e5:6b:ed:16:19:94:de:8c:db:01:e3:e2:12: 95:87:c9:e7:93:0e:98:41:e5:9b:93:59:15:42:d7: d2:f4:29:2b:f2:99:7d:b1:84:e6:b6:ca:7f:a8:e7: 54:59:63:07:9d:f8:9e:f6:01:de:ea:8b:40:05:73: af:0d:df:52:d1:95:97:87:cc:92:44:8f:ee:38:55: cb:be:f2:85:5e:f6:1d:e9:66:14:91:e8:06:a7:ae: a6:03:2a:c8:0b:3c:45:be:2a:da:e9:90:9c:6d:d9: a0:28:a4:3d:b3:a9:2c:4e:8a:0b:50:9e:50:e6:08: 58:3b:53:9a:ce:9a:a1:d1:a4:90:b1:28:44:ab:f4: 1e:36:f9:f6:16:f1:49:c0:25:94:6a:1d:82:7f:8a: 2b:3a:75:32:81:8d:bb:8a:15:c1:f1:d8:86:34:8d: 01:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:53:EE:3A:EF:56:26:04:05:79:8D:CE:2B:38:99:BA:0C:FA:23:CC X509v3 Authority Key Identifier: keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/AVPuOu9WJgQFeY3OKziZugz6I8w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.249.5.0/24 217.147.120.0/23 217.147.124.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:94:a2:81:e4:8e:8a:b4:d4:e1:37:5d:be:79:54:3f:4f:b2: 13:e9:45:9b:b9:7b:b2:2b:d2:d2:69:40:2e:85:a2:cf:84:a9: bd:89:e6:95:ee:6c:e0:1c:8f:b1:d3:ac:4c:fa:5d:a1:6a:31: 5e:3c:db:42:d9:9a:15:35:8c:c1:ce:96:5d:f1:ef:6b:7e:b4: 06:f3:4c:55:e1:2c:5d:b7:17:1d:f1:95:19:58:52:d0:c3:67: 8a:3f:2f:df:5b:6b:ac:4d:7f:0f:a1:94:d0:73:e4:42:51:f5: a0:e0:f1:42:79:db:28:35:7a:8c:a5:e0:90:35:24:a1:0c:45: f2:47:04:4a:e1:69:82:35:40:c6:98:7f:cd:f1:24:b7:3f:53: 54:1e:40:d8:54:9a:f7:41:c2:cc:f1:d3:26:92:27:6a:64:2f: d8:30:7a:c7:2b:0e:7e:f8:3c:0f:b5:2d:b2:be:a7:1a:82:67: 88:4d:e0:03:e6:f0:42:75:27:d9:f7:8a:e4:91:e2:df:c9:cb: 6b:25:2c:41:6e:17:81:bb:31:66:a7:ab:21:df:75:38:a7:5f: 3f:49:2a:77:38:2d:50:6c:d1:43:00:ab:1e:36:17:d7:36:41: a5:c1:ea:91:80:67:f1:bb:c2:7b:2a:38:17:ed:eb:75:07:86: 47:19:d6:3a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt57Rslhb33AS6apatRADedMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZjkxMGYzNjI5MWMzYzIyNGRkYjU5NmQ5NTY1NDMxOTdm MTYzZGUwHhcNMjYwMTAxMTQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTUzZWUzYWVmNTYyNjA0MDU3OThkY2UyYjM4OTliYTBjZmEyM2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS54GhGs5/4Sx7BnfCcTctwXLhi0 1R4c7eRB2OTLfMUuYfTyRqyO9YNuOwwz1tXFYvoFgmIvcFpODHi/6RB46k9UuCUN TGGQIC/RcjCscFbLoZL2aa209OKiiOVr7RYZlN6M2wHj4hKVh8nnkw6YQeWbk1kV QtfS9Ckr8pl9sYTmtsp/qOdUWWMHnfie9gHe6otABXOvDd9S0ZWXh8ySRI/uOFXL vvKFXvYd6WYUkegGp66mAyrICzxFvira6ZCcbdmgKKQ9s6ksTooLUJ5Q5ghYO1Oa zpqh0aSQsShEq/QeNvn2FvFJwCWUah2Cf4orOnUygY27ihXB8diGNI0B9QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAFT7jrvViYEBXmNzis4mboM+iPMMB8GA1UdIwQY MBaAFKz5EPNikcPCJN21ltlWVDGX8WPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xZjVlMDctMzJiNi00MTE0LThiMGQt ZDNiNThmNjk4MTQ4LzEvQVZQdU91OVdKZ1FGZVkzT0t6aVp1Z3o2STh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8xZjVlMDctMzJiNi00MTE0LThiMGQtZDNiNThmNjk4MTQ4 LzEvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXPkFAwQB 2ZN4AwQC2ZN8MA0GCSqGSIb3DQEBCwUAA4IBAQANlKKB5I6KtNThN12+eVQ/T7IT 6UWbuXuyK9LSaUAuhaLPhKm9ieaV7mzgHI+x06xM+l2hajFePNtC2ZoVNYzBzpZd 8e9rfrQG80xV4Sxdtxcd8ZUZWFLQw2eKPy/fW2usTX8PoZTQc+RCUfWg4PFCedso NXqMpeCQNSShDEXyRwRK4WmCNUDGmH/N8SS3P1NUHkDYVJr3QcLM8dMmkidqZC/Y MHrHKw5++DwPtS2yvqcagmeITeAD5vBCdSfZ94rkkeLfyctrJSxBbheBuzFmp6sh 33U4p18/SSp3OC1QbNFDAKseNhfXNkGlweqRgGfxu8J7KjgX7et1B4ZHGdY6 -----END CERTIFICATE-----Generated at Thu Jan 22 19:27:16 2026 by rpki-client