This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/Axm6d1alqEnfu0vZueA3GQcIATg.roa File: Axm6d1alqEnfu0vZueA3GQcIATg.roa (raw, json) Hash identifier: +dNIyPFCVGYMfpVf51l51gN+nP6OIQk6gVR+KK+wc/U= Subject key identifier: 03:19:BA:77:56:A5:A8:49:DF:BB:4B:D9:B9:E0:37:19:07:08:01:38 Certificate issuer: /CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c Certificate serial: 019C1E3E73BE9DF728AF9085DDC932D122DC Authority key identifier: 55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/Axm6d1alqEnfu0vZueA3GQcIATg.roa Signing time: Mon 02 Feb 2026 12:05:34 +0000 ROA not before: Mon 02 Feb 2026 12:05:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48687 IP address blocks: 91.221.136.0/23 maxlen: 32 91.240.190.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:3e:73:be:9d:f7:28:af:90:85:dd:c9:32:d1:22:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c Validity Not Before: Feb 2 12:05:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0319ba7756a5a849dfbb4bd9b9e0371907080138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9e:b2:c0:d1:78:03:e1:aa:f4:13:8a:41:b1: f7:dc:16:22:28:46:2c:f4:f4:09:89:b4:9b:29:ee: 99:25:9f:d4:8b:52:b5:f5:ad:e8:6e:58:0d:23:00: c6:c9:97:14:23:be:f0:93:e1:7d:c3:f5:83:61:d3: 77:a9:91:00:26:15:35:dc:93:d8:1d:5a:42:83:6d: ed:fd:b0:3b:3b:a8:2b:9e:78:6d:56:2b:aa:d9:15: 8a:72:52:26:ba:c2:f5:d0:14:6a:81:f6:5e:33:5d: 8e:78:a1:24:e6:bd:c0:37:f7:fd:0e:89:fc:2b:11: a0:f4:1a:48:a1:3a:00:58:29:70:55:04:c1:09:82: a3:63:f8:ad:c3:d3:7f:48:fb:12:42:37:77:ec:e2: ab:aa:81:7f:fc:6a:07:42:7b:db:37:64:f9:d1:7d: d3:e5:f1:cc:73:ad:47:93:af:e9:71:56:10:1d:27: 79:bd:6f:63:6b:ba:6e:5e:94:9c:52:85:86:66:00: e1:a1:45:80:45:dc:61:f0:b0:4b:29:30:ad:99:02: 2d:ed:b1:76:74:52:9e:ac:71:67:1d:5a:bc:12:5d: 73:d3:30:d4:54:57:4e:8f:94:ab:72:e0:a6:d5:db: d7:24:a8:29:36:b8:78:1c:2d:de:69:44:b4:1c:aa: dc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:19:BA:77:56:A5:A8:49:DF:BB:4B:D9:B9:E0:37:19:07:08:01:38 X509v3 Authority Key Identifier: keyid:55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/Axm6d1alqEnfu0vZueA3GQcIATg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.136.0/23 91.240.190.0/23 Signature Algorithm: sha256WithRSAEncryption 53:0a:7f:82:d6:97:fb:f7:98:c4:07:f6:5f:d8:cb:db:92:eb: 32:b7:1e:6d:ca:05:e5:7b:36:9e:92:ed:11:e4:0c:22:b0:90: a3:81:38:2f:75:dc:45:8b:ca:cc:e8:63:a5:c6:f4:ff:26:ed: 2c:f8:d7:d4:89:6f:1b:3b:08:79:7e:77:99:cc:b9:79:19:f0: a8:a6:f7:46:66:46:93:cd:ec:c8:4b:c1:99:f4:5f:5d:03:54: 8c:3f:dd:27:e5:f9:1b:d0:e5:b8:2a:d9:52:55:87:f6:98:e5: 6b:70:4f:75:b1:b8:99:6a:2c:33:50:98:22:d9:3a:bd:d7:09: 6e:d9:d2:9b:61:76:26:9f:e6:6a:02:0d:ec:18:d9:23:ed:c6: b0:07:f5:85:c3:a3:d4:30:54:01:ab:dc:af:e8:16:2a:67:cc: 73:fd:56:74:b7:bb:77:2f:5a:8d:b2:1f:1d:16:c3:e9:85:e4: 60:d2:2c:55:63:72:87:b9:35:a8:db:52:84:f9:a6:29:4f:ac: e3:72:97:c6:fe:5c:39:7e:84:c7:98:aa:29:a9:5e:7b:7b:cc: ae:6b:80:6d:75:91:a3:85:fe:26:1c:35:90:69:eb:f2:8c:7c: 2d:94:50:9a:4a:86:b6:ff:7d:2f:8d:ce:18:9a:89:71:4c:c1: 4b:b9:83:28 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZwePnO+nfcor5CF3cky0SLcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NmE1ZmEwZGNmYjM0NDMzZjliODYwZDk1ZTJjNDQyNTQ3 YzVmOWMwHhcNMjYwMjAyMTIwNTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzE5YmE3NzU2YTVhODQ5ZGZiYjRiZDliOWUwMzcxOTA3MDgwMTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv56ywNF4A+Gq9BOKQbH33BYiKEYs 9PQJibSbKe6ZJZ/Ui1K19a3oblgNIwDGyZcUI77wk+F9w/WDYdN3qZEAJhU13JPY HVpCg23t/bA7O6grnnhtViuq2RWKclImusL10BRqgfZeM12OeKEk5r3AN/f9Don8 KxGg9BpIoToAWClwVQTBCYKjY/itw9N/SPsSQjd37OKrqoF//GoHQnvbN2T50X3T 5fHMc61Hk6/pcVYQHSd5vW9ja7puXpScUoWGZgDhoUWARdxh8LBLKTCtmQIt7bF2 dFKerHFnHVq8El1z0zDUVFdOj5SrcuCm1dvXJKgpNrh4HC3eaUS0HKrcEQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAMZundWpahJ37tL2bngNxkHCAE4MB8GA1UdIwQY MBaAFFVqX6Dc+zRDP5uGDZXixEJUfF+cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVldwZm9OejdORU1fbTRZTmxlTEVRbFI4WDV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lMjNkMzAtNzZlMy00NDkxLThkNzUt MmZkYTRjMjczYTQ4LzEvQXhtNmQxYWxxRW5mdTB2WnVlQTNHUWNJQVRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9lMjNkMzAtNzZlMy00NDkxLThkNzUtMmZkYTRjMjczYTQ4 LzEvVldwZm9OejdORU1fbTRZTmxlTEVRbFI4WDV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW92IAwQB W/C+MA0GCSqGSIb3DQEBCwUAA4IBAQBTCn+C1pf795jEB/Zf2Mvbkusytx5tygXl ezaeku0R5AwisJCjgTgvddxFi8rM6GOlxvT/Ju0s+NfUiW8bOwh5fneZzLl5GfCo pvdGZkaTzezIS8GZ9F9dA1SMP90n5fkb0OW4KtlSVYf2mOVrcE91sbiZaiwzUJgi 2Tq91wlu2dKbYXYmn+ZqAg3sGNkj7cawB/WFw6PUMFQBq9yv6BYqZ8xz/VZ0t7t3 L1qNsh8dFsPpheRg0ixVY3KHuTWo21KE+aYpT6zjcpfG/lw5foTHmKopqV57e8yu a4BtdZGjhf4mHDWQaevyjHwtlFCaSoa2/30vjc4YmolxTMFLuYMo -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:36 2026 by rpki-client