This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/AKAYJxK55ho0_-tu4n3xkwEVy0E.roa File: AKAYJxK55ho0_-tu4n3xkwEVy0E.roa (raw, json) Hash identifier: CwiOEuZ5WNXcf/WHMc8X4C6V6miMKO5JICnCl7N0bT4= Subject key identifier: 00:A0:18:27:12:B9:E6:1A:34:FF:EB:6E:E2:7D:F1:93:01:15:CB:41 Certificate issuer: /CN=d66433fb0fbddcc97eb01566928d60706ccc6623 Certificate serial: 019B7CED92274E6C31E8B4D2D906BAAE3269 Authority key identifier: D6:64:33:FB:0F:BD:DC:C9:7E:B0:15:66:92:8D:60:70:6C:CC:66:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/AKAYJxK55ho0_-tu4n3xkwEVy0E.roa Signing time: Fri 02 Jan 2026 04:18:22 +0000 ROA not before: Fri 02 Jan 2026 04:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38931 IP address blocks: 193.203.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:92:27:4e:6c:31:e8:b4:d2:d9:06:ba:ae:32:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d66433fb0fbddcc97eb01566928d60706ccc6623 Validity Not Before: Jan 2 04:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00a0182712b9e61a34ffeb6ee27df1930115cb41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:09:a0:2a:51:9e:1c:84:37:0b:0a:7e:2e:cd: da:ff:9c:df:76:fe:5a:20:29:9d:ba:fd:7e:c8:17: f1:7d:18:53:90:b5:c9:7c:34:24:3f:36:c1:c1:5a: c7:68:07:b9:1a:24:53:d2:43:0b:e9:77:e6:38:53: a9:2d:18:86:07:ef:6b:d8:df:4e:fd:c1:2c:b8:75: 1a:5a:d9:21:4d:6b:42:e6:08:9f:09:6d:d0:79:48: a5:54:f1:f6:00:c9:d1:39:84:2b:3a:dd:33:55:8a: c1:82:9d:bf:40:8c:8c:a8:6c:2b:99:c5:53:f2:70: c8:a1:a8:2e:58:1a:17:da:ca:85:d8:c1:ef:4d:1c: 98:7e:a7:4d:ad:7b:95:4f:90:b0:33:fc:c7:df:29: cc:58:30:f7:b0:12:12:54:e9:12:3e:73:0b:42:6f: 25:9a:7c:77:54:28:f8:ee:a3:05:cd:7a:91:4b:4a: 4c:16:0f:61:25:07:4d:12:d5:38:ae:45:43:40:c8: 7b:e7:a8:e3:00:0c:6a:95:e1:47:ca:87:e5:62:90: 40:d0:ee:e8:75:ce:03:2c:ef:e5:14:47:45:8f:03: 5f:33:33:c5:90:46:a3:2a:36:c3:de:c0:81:0d:19: b0:44:53:5a:94:ab:54:0a:66:55:98:ec:65:c6:a0: 20:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A0:18:27:12:B9:E6:1A:34:FF:EB:6E:E2:7D:F1:93:01:15:CB:41 X509v3 Authority Key Identifier: keyid:D6:64:33:FB:0F:BD:DC:C9:7E:B0:15:66:92:8D:60:70:6C:CC:66:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/AKAYJxK55ho0_-tu4n3xkwEVy0E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.203.218.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:7d:12:87:5b:78:21:2a:05:da:88:13:88:90:23:14:34:3d: 11:56:79:e6:22:78:5a:12:06:b7:15:eb:98:ed:90:79:6b:41: c8:f5:4d:b0:0e:ac:b9:12:51:d5:c5:fe:56:e8:5a:e1:83:69: e0:50:00:be:ad:95:a8:59:44:4c:ae:3c:f2:5a:05:ee:f9:6e: b1:28:87:2c:33:fa:67:3b:6e:d6:42:58:ea:d4:16:66:40:48: 6f:87:87:4e:04:30:8a:ef:9f:66:ac:24:f8:07:62:28:13:cd: 8f:93:d7:d9:1d:30:95:90:63:ee:6f:59:3b:fd:97:a8:b1:30: ab:dc:64:65:63:8e:db:36:16:ab:ea:c6:f8:34:a3:d1:82:e4: 70:e8:90:13:41:97:f3:6a:7b:58:28:90:81:f5:7d:8d:02:7d: 62:65:3b:20:bd:e6:0f:a4:1e:16:af:7c:e0:6d:5d:a6:09:63: a9:f7:15:60:91:43:9c:54:d8:90:c4:2e:8c:30:84:e9:ff:57: ab:95:1e:b6:c9:d0:40:61:ef:94:81:40:69:7a:a0:5c:32:09: 84:68:ae:1d:9c:4a:77:2d:00:f1:e1:f3:e5:6d:fa:68:05:a8: d9:d4:05:b4:35:4b:b7:16:c7:ab:fc:f8:63:1e:4e:35:e7:b2: 67:8e:bf:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87ZInTmwx6LTS2Qa6rjJpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NjQzM2ZiMGZiZGRjYzk3ZWIwMTU2NjkyOGQ2MDcwNmNj YzY2MjMwHhcNMjYwMTAyMDQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGEwMTgyNzEyYjllNjFhMzRmZmViNmVlMjdkZjE5MzAxMTVjYjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wmgKlGeHIQ3Cwp+Ls3a/5zfdv5a ICmduv1+yBfxfRhTkLXJfDQkPzbBwVrHaAe5GiRT0kML6XfmOFOpLRiGB+9r2N9O /cEsuHUaWtkhTWtC5gifCW3QeUilVPH2AMnROYQrOt0zVYrBgp2/QIyMqGwrmcVT 8nDIoaguWBoX2sqF2MHvTRyYfqdNrXuVT5CwM/zH3ynMWDD3sBISVOkSPnMLQm8l mnx3VCj47qMFzXqRS0pMFg9hJQdNEtU4rkVDQMh756jjAAxqleFHyoflYpBA0O7o dc4DLO/lFEdFjwNfMzPFkEajKjbD3sCBDRmwRFNalKtUCmZVmOxlxqAgZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFACgGCcSueYaNP/rbuJ98ZMBFctBMB8GA1UdIwQY MBaAFNZkM/sPvdzJfrAVZpKNYHBszGYjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW1Rei13LTkzTWwtc0JWbWtvMWdjR3pNWmlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8zMGU2ZmUtZGFmZC00YzBlLWIyMDkt MDVkMmNkZmExNmE2LzEvQUtBWUp4SzU1aG8wXy10dTRuM3hrd0VWeTBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8zMGU2ZmUtZGFmZC00YzBlLWIyMDktMDVkMmNkZmExNmE2 LzEvMW1Rei13LTkzTWwtc0JWbWtvMWdjR3pNWmlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwcvaMA0G CSqGSIb3DQEBCwUAA4IBAQANfRKHW3ghKgXaiBOIkCMUND0RVnnmInhaEga3FeuY 7ZB5a0HI9U2wDqy5ElHVxf5W6Frhg2ngUAC+rZWoWURMrjzyWgXu+W6xKIcsM/pn O27WQljq1BZmQEhvh4dOBDCK759mrCT4B2IoE82Pk9fZHTCVkGPub1k7/ZeosTCr 3GRlY47bNhar6sb4NKPRguRw6JATQZfzantYKJCB9X2NAn1iZTsgveYPpB4Wr3zg bV2mCWOp9xVgkUOcVNiQxC6MMITp/1erlR62ydBAYe+UgUBpeqBcMgmEaK4dnEp3 LQDx4fPlbfpoBajZ1AW0NUu3Fser/PhjHk4157Jnjr8k -----END CERTIFICATE-----Generated at Mon Feb 9 22:28:38 2026 by rpki-client