This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/awM-mF2LuJSHr5AQaHNMqJ1enTM.roa File: awM-mF2LuJSHr5AQaHNMqJ1enTM.roa (raw, json) Hash identifier: Y5juHU/HVAVlVF39MoV3F3X1JaAmaMtik3VRP6Mzl6Q= Subject key identifier: 6B:03:3E:98:5D:8B:B8:94:87:AF:90:10:68:73:4C:A8:9D:5E:9D:33 Certificate issuer: /CN=acf910f36291c3c224ddb596d956543197f163de Certificate serial: 019B79ED1ABB4D2282583EE9D57A1AAA096A Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/awM-mF2LuJSHr5AQaHNMqJ1enTM.roa Signing time: Thu 01 Jan 2026 14:19:00 +0000 ROA not before: Thu 01 Jan 2026 14:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8220 IP address blocks: 92.249.5.0/24 maxlen: 24 217.147.121.0/24 maxlen: 24 217.147.124.0/22 maxlen: 22 217.147.124.0/24 maxlen: 24 217.147.125.0/24 maxlen: 24 217.147.126.0/24 maxlen: 24 217.147.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:1a:bb:4d:22:82:58:3e:e9:d5:7a:1a:aa:09:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acf910f36291c3c224ddb596d956543197f163de Validity Not Before: Jan 1 14:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b033e985d8bb89487af901068734ca89d5e9d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:29:0d:d9:0c:2f:04:f4:ed:ad:d9:52:5f:34: 60:cf:7d:8d:93:a8:06:90:04:9a:55:40:ad:15:ea: aa:3b:12:52:38:27:cf:3b:69:2b:8b:c2:2e:56:24: 86:4a:7e:1f:2c:6f:bc:9b:1f:29:b3:5a:ed:78:54: 44:d0:bf:88:ff:b6:44:20:87:f6:9b:fb:38:0b:16: e0:b2:8e:44:31:59:2d:00:90:f2:1e:6c:90:74:bb: 0b:c3:09:2e:b0:47:46:b6:38:65:c3:1e:8c:92:f6: b4:4e:a2:00:f0:b7:44:34:c9:0e:6a:ea:37:53:ab: 5a:35:a0:8c:5f:3d:5b:d7:84:ea:6c:3f:0d:53:2a: 4d:c2:54:7f:ca:67:4d:17:a0:22:61:4b:bd:8f:80: ab:70:e9:c2:5c:ee:e6:f0:42:11:c7:19:bc:ad:9f: 93:8a:ed:7b:4e:f1:db:bc:8f:ae:24:98:60:7a:fb: 30:be:46:e8:24:87:55:ab:3f:b7:3d:02:f0:f5:99: 87:e0:3d:2c:1e:04:7e:c7:73:b1:81:db:02:03:63: ca:0d:65:bc:56:a8:8c:a9:8d:d7:42:43:0a:ba:ae: 4b:fd:cd:18:f2:fc:f0:cd:a9:75:b7:4f:b2:d5:12: 8a:71:93:1a:ff:fb:d5:65:1d:63:d5:22:d3:e4:c3: 3d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:03:3E:98:5D:8B:B8:94:87:AF:90:10:68:73:4C:A8:9D:5E:9D:33 X509v3 Authority Key Identifier: keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/awM-mF2LuJSHr5AQaHNMqJ1enTM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.249.5.0/24 217.147.121.0/24 217.147.124.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:fc:38:41:06:12:4a:4e:fd:a9:09:29:8d:15:d2:54:78:e5: 24:75:92:1c:33:fe:c7:5e:e8:d1:a8:18:5c:12:d6:e7:79:14: 77:ca:df:e0:d6:95:aa:e4:e5:1d:e8:c4:65:21:18:bb:4c:bc: 6a:0e:34:dd:56:0e:82:d0:26:ad:01:0a:e3:de:f4:49:00:26: c3:6c:6a:5a:dc:1d:f2:7c:53:58:46:b9:af:2d:ec:89:af:4a: 4a:03:7b:6f:ce:b3:31:99:f2:5e:2a:1f:9e:9d:ec:e2:84:c5: 9f:0f:f0:5b:cf:ad:34:07:d1:e9:11:bf:23:f9:63:b0:59:4f: d1:42:2d:88:94:7c:5a:69:8c:43:5b:91:39:0a:43:c3:3b:f8: 4a:36:f4:d6:c2:6f:8a:4b:db:49:91:fe:c8:86:5a:02:40:78: bb:87:a6:ea:11:cd:c3:d5:47:6b:28:58:0c:e0:41:0c:e2:ab: f2:c4:a4:e4:a5:85:9d:0d:06:58:1d:f3:cc:37:a7:b9:08:46: b6:89:ca:b7:83:18:65:b8:26:76:3b:19:b1:23:00:d4:2e:24: 04:a1:2b:4b:cb:26:51:2e:35:a9:32:e8:43:11:f2:55:11:0c: 28:b0:64:c9:ad:af:dd:c8:5c:73:9c:2d:05:32:51:64:e8:a4: 91:dd:ba:08 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt57Rq7TSKCWD7p1XoaqglqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZjkxMGYzNjI5MWMzYzIyNGRkYjU5NmQ5NTY1NDMxOTdm MTYzZGUwHhcNMjYwMTAxMTQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjAzM2U5ODVkOGJiODk0ODdhZjkwMTA2ODczNGNhODlkNWU5ZDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmikN2QwvBPTtrdlSXzRgz32Nk6gG kASaVUCtFeqqOxJSOCfPO2kri8IuViSGSn4fLG+8mx8ps1rteFRE0L+I/7ZEIIf2 m/s4Cxbgso5EMVktAJDyHmyQdLsLwwkusEdGtjhlwx6Mkva0TqIA8LdENMkOauo3 U6taNaCMXz1b14TqbD8NUypNwlR/ymdNF6AiYUu9j4CrcOnCXO7m8EIRxxm8rZ+T iu17TvHbvI+uJJhgevswvkboJIdVqz+3PQLw9ZmH4D0sHgR+x3OxgdsCA2PKDWW8 VqiMqY3XQkMKuq5L/c0Y8vzwzal1t0+y1RKKcZMa//vVZR1j1SLT5MM9gwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGsDPphdi7iUh6+QEGhzTKidXp0zMB8GA1UdIwQY MBaAFKz5EPNikcPCJN21ltlWVDGX8WPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xZjVlMDctMzJiNi00MTE0LThiMGQt ZDNiNThmNjk4MTQ4LzEvYXdNLW1GMkx1SlNIcjVBUWFITk1xSjFlblRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8xZjVlMDctMzJiNi00MTE0LThiMGQtZDNiNThmNjk4MTQ4 LzEvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXPkFAwQA 2ZN5AwQC2ZN8MA0GCSqGSIb3DQEBCwUAA4IBAQAN/DhBBhJKTv2pCSmNFdJUeOUk dZIcM/7HXujRqBhcEtbneRR3yt/g1pWq5OUd6MRlIRi7TLxqDjTdVg6C0CatAQrj 3vRJACbDbGpa3B3yfFNYRrmvLeyJr0pKA3tvzrMxmfJeKh+enezihMWfD/Bbz600 B9HpEb8j+WOwWU/RQi2IlHxaaYxDW5E5CkPDO/hKNvTWwm+KS9tJkf7IhloCQHi7 h6bqEc3D1UdrKFgM4EEM4qvyxKTkpYWdDQZYHfPMN6e5CEa2icq3gxhluCZ2Oxmx IwDULiQEoStLyyZRLjWpMuhDEfJVEQwosGTJra/dyFxznC0FMlFk6KSR3boI -----END CERTIFICATE-----Generated at Wed Jan 21 12:20:26 2026 by rpki-client