This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/ap_KBBwMetCUgf_yqig9NPG5GpY.roa File: ap_KBBwMetCUgf_yqig9NPG5GpY.roa (raw, json) Hash identifier: 9v8lmt7h/soP3D+lntkITlcRnDn6phDZu9Zze6nhdUM= Subject key identifier: 6A:9F:CA:04:1C:0C:7A:D0:94:81:FF:F2:AA:28:3D:34:F1:B9:1A:96 Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019B7E3892E6C2DEEAD0FB9FF9D3B9760755 Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/ap_KBBwMetCUgf_yqig9NPG5GpY.roa Signing time: Fri 02 Jan 2026 10:19:55 +0000 ROA not before: Fri 02 Jan 2026 10:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31197 IP address blocks: 81.209.144.0/22 maxlen: 22 81.209.179.0/24 maxlen: 24 81.209.185.0/24 maxlen: 24 81.209.200.0/23 maxlen: 23 82.197.138.0/24 maxlen: 24 82.197.152.0/21 maxlen: 21 83.125.12.0/22 maxlen: 22 83.133.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:92:e6:c2:de:ea:d0:fb:9f:f9:d3:b9:76:07:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Jan 2 10:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a9fca041c0c7ad09481fff2aa283d34f1b91a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:be:3c:78:ca:23:9e:2c:c5:f5:0f:5a:1e:29: d3:73:b8:a8:13:a0:53:c4:4c:56:35:e4:88:e8:54: 72:a2:d4:f9:56:f0:88:66:3e:51:f4:3f:af:bc:9a: 15:fb:f1:76:05:07:f1:2a:6f:57:35:a2:2e:d4:24: d4:5a:da:ea:8e:52:9c:e3:07:4f:cd:a4:f7:07:b8: 2b:2d:fe:df:93:eb:bc:9a:a0:77:75:39:cd:f1:27: bf:3f:f3:13:39:82:c5:81:f1:b8:94:64:c4:e5:25: 4c:50:08:77:52:e4:50:2c:67:66:1d:b0:b6:a2:61: 0c:be:a9:02:49:7e:10:50:e5:b5:d5:01:a7:69:19: 14:67:c5:63:12:6b:a3:f7:a0:64:f2:13:de:f1:ce: eb:2d:f4:a8:c3:ba:d4:aa:28:10:ff:e8:2f:bb:e8: c8:1e:b0:0d:91:a6:8e:35:72:6b:d2:a9:00:c7:94: be:fd:f0:7c:17:6a:20:ce:c8:71:6d:69:56:28:93: a8:62:a7:5b:cc:b6:82:6a:a5:d1:7f:dd:58:b7:36: 51:ef:c7:c1:70:eb:11:7d:e4:55:75:3b:91:fc:96: f9:32:1e:e9:0e:48:35:80:29:21:b1:5f:df:c1:33: 12:f0:52:57:16:5f:92:d0:01:5c:e4:d2:c8:bc:f1: 7b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9F:CA:04:1C:0C:7A:D0:94:81:FF:F2:AA:28:3D:34:F1:B9:1A:96 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/ap_KBBwMetCUgf_yqig9NPG5GpY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.209.144.0/22 81.209.179.0/24 81.209.185.0/24 81.209.200.0/23 82.197.138.0/24 82.197.152.0/21 83.125.12.0/22 83.133.184.0/21 Signature Algorithm: sha256WithRSAEncryption 0d:b8:19:1b:29:29:a0:a7:a2:88:25:70:d3:4a:a7:eb:70:12: 2a:ce:da:97:64:2a:7b:ce:c3:d1:81:6d:45:02:31:6d:27:20: ad:8a:4f:8f:f6:81:9a:2e:a4:7a:e1:d0:5c:39:fb:22:b6:51: 0a:45:7d:11:87:71:fc:d6:93:98:63:26:ed:89:79:ab:d9:c1: 35:57:b6:bb:ef:84:04:08:c0:1f:cb:f8:b9:58:d0:fc:a5:83: bf:37:0e:32:ef:79:c1:fb:de:10:73:ea:9f:70:ec:4a:24:aa: df:62:6f:10:22:dc:bb:6b:9f:35:67:c5:4a:36:f0:40:db:fd: ad:95:15:26:da:71:ff:f1:f1:18:d0:0b:5b:7f:07:07:1c:0a: e9:6e:98:7a:95:34:38:63:a8:8f:14:ad:db:e1:d2:18:26:bb: 22:6b:57:b2:fa:89:f2:eb:4c:be:9e:c3:dd:78:41:ee:94:a7: ea:40:f3:4c:71:cc:b1:da:9d:f1:08:f8:4c:07:5d:94:a0:d7: 43:af:d1:17:99:08:b5:05:e0:06:c9:4e:29:ed:fc:2f:a6:aa: 04:a6:10:94:ba:5f:e1:77:fe:ed:de:35:36:4d:01:ef:51:e1: 47:80:e5:7f:40:a9:02:de:ca:28:4e:de:79:83:80:aa:38:2d: 01:3e:29:1a -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt+OJLmwt7q0Puf+dO5dgdVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwMTAyMTAxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTlmY2EwNDFjMGM3YWQwOTQ4MWZmZjJhYTI4M2QzNGYxYjkxYTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5r48eMojnizF9Q9aHinTc7ioE6BT xExWNeSI6FRyotT5VvCIZj5R9D+vvJoV+/F2BQfxKm9XNaIu1CTUWtrqjlKc4wdP zaT3B7grLf7fk+u8mqB3dTnN8Se/P/MTOYLFgfG4lGTE5SVMUAh3UuRQLGdmHbC2 omEMvqkCSX4QUOW11QGnaRkUZ8VjEmuj96Bk8hPe8c7rLfSow7rUqigQ/+gvu+jI HrANkaaONXJr0qkAx5S+/fB8F2ogzshxbWlWKJOoYqdbzLaCaqXRf91YtzZR78fB cOsRfeRVdTuR/Jb5Mh7pDkg1gCkhsV/fwTMS8FJXFl+S0AFc5NLIvPF7oQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFGqfygQcDHrQlIH/8qooPTTxuRqWMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvYXBfS0JCd01ldENVZ2ZfeXFpZzlOUEc1R3BZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCUdGQAwQA UdGzAwQAUdG5AwQBUdHIAwQAUsWKAwQDUsWYAwQCU30MAwQDU4W4MA0GCSqGSIb3 DQEBCwUAA4IBAQANuBkbKSmgp6KIJXDTSqfrcBIqztqXZCp7zsPRgW1FAjFtJyCt ik+P9oGaLqR64dBcOfsitlEKRX0Rh3H81pOYYybtiXmr2cE1V7a774QECMAfy/i5 WND8pYO/Nw4y73nB+94Qc+qfcOxKJKrfYm8QIty7a581Z8VKNvBA2/2tlRUm2nH/ 8fEY0AtbfwcHHArpbph6lTQ4Y6iPFK3b4dIYJrsia1ey+ony60y+nsPdeEHulKfq QPNMccyx2p3xCPhMB12UoNdDr9EXmQi1BeAGyU4p7fwvpqoEphCUul/hd/7t3jU2 TQHvUeFHgOV/QKkC3sooTt55g4CqOC0BPika -----END CERTIFICATE-----Generated at Thu Feb 5 13:56:11 2026 by rpki-client