This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/s_AKvxWCsACkF3KVOQOZnp7oWW8.roa File: s_AKvxWCsACkF3KVOQOZnp7oWW8.roa (raw, json) Hash identifier: 49Z2BVMcidGjzi+D5MSkcRcdFDX2/JcSVY9r82t0hoI= Subject key identifier: B3:F0:0A:BF:15:82:B0:00:A4:17:72:95:39:03:99:9E:9E:E8:59:6F Certificate issuer: /CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2 Certificate serial: 019B797DDB3C0598F360DDD91D406115D627 Authority key identifier: C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/s_AKvxWCsACkF3KVOQOZnp7oWW8.roa Signing time: Thu 01 Jan 2026 12:17:29 +0000 ROA not before: Thu 01 Jan 2026 12:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61211 IP address blocks: 194.36.45.0/24 maxlen: 24 194.36.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:db:3c:05:98:f3:60:dd:d9:1d:40:61:15:d6:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2 Validity Not Before: Jan 1 12:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3f00abf1582b000a41772953903999e9ee8596f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:26:3d:42:55:25:3c:ba:21:6f:fa:ff:2e:d3: f5:f1:8c:ee:0e:dc:b8:a9:8b:fa:95:90:1c:f3:fe: 06:68:bb:e6:37:ca:25:e5:a8:19:74:e8:57:c2:68: c8:97:18:53:01:05:be:e9:11:8a:cc:0a:c7:df:d7: 58:38:3e:36:ff:e5:61:ac:ee:c9:b9:53:ac:a1:3e: 2d:ea:1b:7f:e1:b3:d7:7e:39:c4:36:6a:7f:bd:3c: a1:f7:9f:55:e4:eb:9a:82:cf:81:f7:54:49:ee:4c: 78:03:de:6a:59:5b:cb:37:6c:bf:a7:9f:53:47:17: 6b:1a:d9:1c:a4:45:99:1d:b3:e4:a1:ff:7b:5d:d3: e8:28:8b:f6:32:ce:3e:ab:9a:7b:f0:69:41:10:1d: 62:d9:62:b3:fd:b3:6f:29:97:b5:62:69:61:7e:aa: 41:58:dd:a6:3b:cd:69:89:4d:c2:2e:5f:ef:6d:a7: 1c:10:54:2c:57:11:a7:85:a3:aa:95:d0:15:b2:dc: de:a7:56:9f:03:07:37:e5:e6:0e:d8:4b:ba:3a:73: ac:03:b0:54:d5:3e:81:4d:40:9b:8b:36:08:fe:48: df:4a:d5:fa:3f:0d:ab:b8:65:40:ac:23:f0:9b:0d: 5a:47:aa:bf:cc:2e:43:91:c8:89:e7:0b:34:d8:72: 77:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F0:0A:BF:15:82:B0:00:A4:17:72:95:39:03:99:9E:9E:E8:59:6F X509v3 Authority Key Identifier: keyid:C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/s_AKvxWCsACkF3KVOQOZnp7oWW8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.36.45.0-194.36.47.255 Signature Algorithm: sha256WithRSAEncryption 8f:0f:d9:d9:fb:1d:e5:fc:03:a2:cc:7d:4b:df:20:7e:fe:d1: d6:12:f9:33:d3:b7:16:ff:1d:3e:20:2e:a1:f5:41:08:43:d3: c5:e7:20:e2:00:78:1d:3f:1d:a8:9f:fd:17:a4:c8:93:65:4f: 68:7a:65:a2:87:7f:07:88:c3:97:04:4a:fa:fc:d6:5a:bb:c0: c6:f1:db:6a:6d:85:e6:6c:25:f7:a9:d5:0c:d6:eb:b4:43:e4: 3e:30:e8:6e:8b:2d:c3:2b:fc:48:ba:92:15:c2:f1:b0:42:37: cf:2f:5f:ad:df:8c:e0:d1:02:0c:2a:a2:9b:dd:ec:d5:2c:0e: 3f:c4:95:c7:a3:c8:31:d7:ce:20:22:51:43:96:e5:80:c5:3c: fb:18:5b:8e:27:5a:6e:86:e6:3c:de:09:55:99:94:bc:f7:29: 25:f3:83:ab:c8:06:74:3a:08:aa:8e:21:8e:21:46:51:4e:2f: 24:7e:00:e5:89:76:84:40:99:1a:c4:99:40:2b:83:2d:4a:07: 11:40:8e:84:d4:15:e7:20:b4:bd:cd:e1:5c:6d:84:7b:ea:5f: 8b:d9:9d:47:5d:15:c1:4b:5f:17:b0:f1:cb:30:22:cd:4f:4f: f9:05:0b:80:0b:1a:88:57:c9:20:61:31:40:17:7a:6f:9e:09: 79:bc:44:88 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5fds8BZjzYN3ZHUBhFdYnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YjU5ZjQxNzc5ZTZmMjQzNWY1OWYxYTE3MWMwODBhNWE3 YTQ0ZDIwHhcNMjYwMTAxMTIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2YwMGFiZjE1ODJiMDAwYTQxNzcyOTUzOTAzOTk5ZTllZTg1OTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCY9QlUlPLohb/r/LtP18YzuDty4 qYv6lZAc8/4GaLvmN8ol5agZdOhXwmjIlxhTAQW+6RGKzArH39dYOD42/+VhrO7J uVOsoT4t6ht/4bPXfjnENmp/vTyh959V5Ouags+B91RJ7kx4A95qWVvLN2y/p59T RxdrGtkcpEWZHbPkof97XdPoKIv2Ms4+q5p78GlBEB1i2WKz/bNvKZe1YmlhfqpB WN2mO81piU3CLl/vbaccEFQsVxGnhaOqldAVstzep1afAwc35eYO2Eu6OnOsA7BU 1T6BTUCbizYI/kjfStX6Pw2ruGVArCPwmw1aR6q/zC5DkciJ5ws02HJ3VQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLPwCr8VgrAApBdylTkDmZ6e6FlvMB8GA1UdIwQY MBaAFMm1n0F3nm8kNfWfGhccCApaekTSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWJXZlFYZWVieVExOVo4YUZ4d0lDbHA2Uk5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wMjdjOGItNDAwOS00ZGE2LWFlOTct NzIzNjdjYmIxOWVmLzEvc19BS3Z4V0NzQUNrRjNLVk9RT1pucDdvV1c4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8wMjdjOGItNDAwOS00ZGE2LWFlOTctNzIzNjdjYmIxOWVm LzEveWJXZlFYZWVieVExOVo4YUZ4d0lDbHA2Uk5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADCJC0D BATCJCAwDQYJKoZIhvcNAQELBQADggEBAI8P2dn7HeX8A6LMfUvfIH7+0dYS+TPT txb/HT4gLqH1QQhD08XnIOIAeB0/Haif/RekyJNlT2h6ZaKHfweIw5cESvr81lq7 wMbx22ptheZsJfep1QzW67RD5D4w6G6LLcMr/Ei6khXC8bBCN88vX63fjODRAgwq opvd7NUsDj/ElcejyDHXziAiUUOW5YDFPPsYW44nWm6G5jzeCVWZlLz3KSXzg6vI BnQ6CKqOIY4hRlFOLyR+AOWJdoRAmRrEmUArgy1KBxFAjoTUFecgtL3N4VxthHvq X4vZnUddFcFLXxew8cswIs1PT/kFC4ALGohXySBhMUAXem+eCXm8RIg= -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:36 2026 by rpki-client