This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/rFkBKmekaWEWcgTz540jcyEXmYU.roa File: rFkBKmekaWEWcgTz540jcyEXmYU.roa (raw, json) Hash identifier: 5PLW4ckop7hn9GY5yPl/HQAm2V9w6KrT171rmOICXN4= Subject key identifier: AC:59:01:2A:67:A4:69:61:16:72:04:F3:E7:8D:23:73:21:17:99:85 Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5B0779840FF6122D12E416B6489134 Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/rFkBKmekaWEWcgTz540jcyEXmYU.roa Signing time: Fri 02 Jan 2026 06:17:56 +0000 ROA not before: Fri 02 Jan 2026 06:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210718 IP address blocks: 93.115.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:07:79:84:0f:f6:12:2d:12:e4:16:b6:48:91:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac59012a67a46961167204f3e78d237321179985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5d:3c:cc:ee:51:00:3c:73:c7:4b:17:6d:7c: fc:d9:58:3e:39:53:12:58:76:d1:15:e9:a0:fa:b0: 04:bd:4d:c1:0c:51:77:0b:73:04:1d:cd:62:d2:a2: cd:17:44:c5:1b:9b:a9:cc:d0:25:e6:bc:ac:6f:d5: 48:36:07:90:06:61:3f:86:3e:ac:d6:ad:a3:fd:c1: bc:56:a5:c1:ea:99:5a:59:70:0f:94:e9:74:4d:dd: 0b:b8:a5:e7:38:00:61:0b:aa:92:09:80:a2:46:34: ff:37:b9:eb:86:20:b8:3b:46:7c:1e:ec:90:c0:f8: b8:a2:17:6d:92:3e:64:76:1f:e5:7f:f8:31:1e:1e: d5:20:8c:c3:5f:f3:96:97:69:80:8f:47:1d:19:16: 59:77:6c:7d:b5:43:c4:21:fc:a1:a5:8c:13:0c:6e: 76:f2:6d:95:9e:aa:27:74:77:57:47:26:69:88:92: 4c:1c:ae:fa:82:22:80:e4:89:c4:83:72:76:61:ca: cb:de:50:3a:5d:35:d6:5e:6f:e3:1b:9d:38:ef:0b: 53:1a:8b:22:cb:4f:c8:52:a1:a0:1c:db:b4:ca:75: d0:b9:5c:e6:a8:a6:06:0d:b5:3f:4e:f3:88:05:27: c9:ce:8a:49:3c:18:92:ad:18:f3:7e:cf:50:a8:c8: 9a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:59:01:2A:67:A4:69:61:16:72:04:F3:E7:8D:23:73:21:17:99:85 X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/rFkBKmekaWEWcgTz540jcyEXmYU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.115.101.0/24 Signature Algorithm: sha256WithRSAEncryption 37:88:6b:4c:2f:b3:1f:44:85:00:6a:0e:59:27:4a:37:bf:b1: 13:92:4f:73:20:ec:16:9b:9d:9c:d2:8b:2d:f9:76:43:c2:09: 01:5a:88:75:c5:a3:61:e7:08:79:63:1c:ef:40:f7:ae:52:26: c7:a9:2c:0c:38:c7:a5:c7:d8:72:4f:2c:b9:ef:38:58:c1:af: e5:d3:23:38:87:dc:3b:39:33:11:8c:5e:f1:38:8c:2e:8e:4f: 5f:8c:91:a0:d4:39:d6:1c:d0:54:b9:00:c2:63:cd:69:94:52: e6:97:e4:b2:e8:1e:d4:58:b8:0f:8f:e9:82:50:f4:73:ea:13: f2:96:a4:05:54:3c:e9:6b:ff:68:9b:1e:ff:c4:6b:9c:05:67: 8a:09:7e:49:3a:d5:47:3e:99:49:47:45:1f:d6:8c:1c:df:91: 0b:c3:f0:2a:6c:24:11:12:62:bb:1b:1e:11:e6:df:cb:74:95: d5:2d:f8:d2:a3:f0:e0:e8:9c:d3:d6:f6:06:22:51:66:84:af: 9f:7c:b7:c6:31:b6:30:eb:42:24:7e:1b:4b:d1:c1:38:0f:92: 06:3c:3c:0c:cb:8f:7f:f2:73:50:7d:c7:10:b4:43:0f:08:33: bd:38:f4:80:c8:09:88:6d:70:e6:3b:32:ea:b6:eb:21:b7:61: d8:13:09:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9Wwd5hA/2Ei0S5Ba2SJE0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzU5MDEyYTY3YTQ2OTYxMTY3MjA0ZjNlNzhkMjM3MzIxMTc5OTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4108zO5RADxzx0sXbXz82Vg+OVMS WHbRFemg+rAEvU3BDFF3C3MEHc1i0qLNF0TFG5upzNAl5rysb9VINgeQBmE/hj6s 1q2j/cG8VqXB6plaWXAPlOl0Td0LuKXnOABhC6qSCYCiRjT/N7nrhiC4O0Z8HuyQ wPi4ohdtkj5kdh/lf/gxHh7VIIzDX/OWl2mAj0cdGRZZd2x9tUPEIfyhpYwTDG52 8m2VnqondHdXRyZpiJJMHK76giKA5InEg3J2YcrL3lA6XTXWXm/jG5047wtTGosi y0/IUqGgHNu0ynXQuVzmqKYGDbU/TvOIBSfJzopJPBiSrRjzfs9QqMiaTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKxZASpnpGlhFnIE8+eNI3MhF5mFMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvckZrQkttZWthV0VXY2dUejU0MGpjeUVYbVlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXNlMA0G CSqGSIb3DQEBCwUAA4IBAQA3iGtML7MfRIUAag5ZJ0o3v7ETkk9zIOwWm52c0ost +XZDwgkBWoh1xaNh5wh5YxzvQPeuUibHqSwMOMelx9hyTyy57zhYwa/l0yM4h9w7 OTMRjF7xOIwujk9fjJGg1DnWHNBUuQDCY81plFLml+Sy6B7UWLgPj+mCUPRz6hPy lqQFVDzpa/9omx7/xGucBWeKCX5JOtVHPplJR0Uf1owc35ELw/AqbCQREmK7Gx4R 5t/LdJXVLfjSo/Dg6JzT1vYGIlFmhK+ffLfGMbYw60IkfhtL0cE4D5IGPDwMy49/ 8nNQfccQtEMPCDO9OPSAyAmIbXDmOzLqtusht2HYEwlY -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:16 2026 by rpki-client