This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/AckxmrJL4FFK3qSlJv26X4kMqGk.roa File: AckxmrJL4FFK3qSlJv26X4kMqGk.roa (raw, json) Hash identifier: AAURjxaPG6RHFVS0p5ovkXi+DRbhyo9RwLP14iG0GSQ= Subject key identifier: 01:C9:31:9A:B2:4B:E0:51:4A:DE:A4:A5:26:FD:BA:5F:89:0C:A8:69 Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA49CB7426E1A24B1326B215A174BE0 Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/AckxmrJL4FFK3qSlJv26X4kMqGk.roa Signing time: Thu 01 Jan 2026 22:19:04 +0000 ROA not before: Thu 01 Jan 2026 22:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61302 IP address blocks: 194.147.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:9c:b7:42:6e:1a:24:b1:32:6b:21:5a:17:4b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01c9319ab24be0514adea4a526fdba5f890ca869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:42:06:8c:b5:4d:bf:f1:3b:d6:53:e8:66:f3: d2:06:41:9b:79:f7:a8:5b:a6:be:7a:cb:91:14:a0: b5:d4:1b:fd:f1:02:8f:ce:c7:d4:de:8c:8a:5c:e4: cb:0e:a5:87:f7:82:e3:a8:53:92:2b:94:5e:44:fb: 80:85:93:96:d9:68:c7:a6:84:df:8a:86:d7:85:d8: d4:ec:e8:ff:89:1a:8f:e5:5e:b5:13:8e:ad:d5:43: cc:4d:0f:4b:36:01:59:4a:83:2d:ba:c2:59:cf:dc: 5a:14:89:b0:ec:25:e1:c6:f1:49:82:0c:e0:a3:d9: 20:bf:29:a6:5f:f5:bc:25:42:01:e3:f7:a6:b1:a9: 0d:10:2a:fb:f8:5c:2f:cd:d4:99:28:fd:b8:2f:3f: c7:ab:a6:80:de:18:8e:a1:63:26:89:7c:7d:60:3b: a1:7b:13:21:8d:ac:33:d8:bd:81:5a:a0:e7:32:0e: 19:35:09:12:e2:53:04:56:c0:72:b4:d9:01:ed:10: a8:30:a7:e5:ea:e2:e0:fd:b2:fd:0c:42:33:60:27: 2a:8b:17:bd:7f:c2:ef:80:a6:49:73:57:e5:a0:3e: 5f:86:83:ba:f3:c1:32:c7:f5:6a:e5:1d:33:73:4d: bb:8e:64:2a:32:de:ed:16:b6:a5:55:d6:77:6f:31: 35:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C9:31:9A:B2:4B:E0:51:4A:DE:A4:A5:26:FD:BA:5F:89:0C:A8:69 X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/AckxmrJL4FFK3qSlJv26X4kMqGk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.78.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:39:67:68:c8:1b:d6:e1:36:08:7e:3a:12:a9:24:30:71:42: 76:ee:38:6e:36:86:bb:42:b9:59:b8:e4:89:78:3e:56:36:bf: 85:a9:b6:d7:16:17:23:c3:bc:5e:e1:b5:c3:68:da:7a:b6:60: 7a:0f:31:7f:8b:05:3b:d0:f4:e1:4b:6f:80:ef:67:87:b2:34: 01:bf:b2:24:58:fb:bd:70:22:59:5c:80:b0:03:f6:91:d6:a7: ab:70:76:b7:e0:e7:2d:36:c1:e3:61:a8:66:37:0d:8f:2e:ec: 44:44:d5:97:c5:49:4e:e1:4d:65:55:a8:29:f8:c5:33:cb:db: e3:f8:d6:55:3d:9f:eb:84:27:fd:e2:d1:78:ee:3c:45:87:16: 68:35:0b:36:48:28:38:aa:57:b3:92:b8:a2:b9:06:ef:13:6d: ca:99:f5:75:09:37:b7:68:b5:86:ae:ad:28:e2:3c:3d:c3:19: e1:ca:8d:03:2a:04:d5:bf:9a:df:03:a6:d9:26:e3:42:c7:b3: ea:cc:48:c5:e7:51:f2:01:9d:ad:48:c2:35:51:72:b6:1f:ec: e6:01:9a:32:21:9e:da:48:d0:46:1a:e3:d7:ff:fb:2c:68:f0: 25:4b:47:4b:51:0a:a1:cb:58:4e:4a:c9:2f:11:26:ab:5c:ca: 03:6c:dd:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pJy3Qm4aJLEyayFaF0vgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWM5MzE5YWIyNGJlMDUxNGFkZWE0YTUyNmZkYmE1Zjg5MGNhODY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0IGjLVNv/E71lPoZvPSBkGbefeo W6a+esuRFKC11Bv98QKPzsfU3oyKXOTLDqWH94LjqFOSK5ReRPuAhZOW2WjHpoTf iobXhdjU7Oj/iRqP5V61E46t1UPMTQ9LNgFZSoMtusJZz9xaFImw7CXhxvFJggzg o9kgvymmX/W8JUIB4/emsakNECr7+FwvzdSZKP24Lz/Hq6aA3hiOoWMmiXx9YDuh exMhjawz2L2BWqDnMg4ZNQkS4lMEVsBytNkB7RCoMKfl6uLg/bL9DEIzYCcqixe9 f8LvgKZJc1floD5fhoO688Eyx/Vq5R0zc027jmQqMt7tFralVdZ3bzE15QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAHJMZqyS+BRSt6kpSb9ul+JDKhpMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvQWNreG1ySkw0RkZLM3FTbEp2MjZYNGtNcUdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpNOMA0G CSqGSIb3DQEBCwUAA4IBAQA7OWdoyBvW4TYIfjoSqSQwcUJ27jhuNoa7QrlZuOSJ eD5WNr+FqbbXFhcjw7xe4bXDaNp6tmB6DzF/iwU70PThS2+A72eHsjQBv7IkWPu9 cCJZXICwA/aR1qercHa34OctNsHjYahmNw2PLuxERNWXxUlO4U1lVagp+MUzy9vj +NZVPZ/rhCf94tF47jxFhxZoNQs2SCg4qlezkriiuQbvE23KmfV1CTe3aLWGrq0o 4jw9wxnhyo0DKgTVv5rfA6bZJuNCx7PqzEjF51HyAZ2tSMI1UXK2H+zmAZoyIZ7a SNBGGuPX//ssaPAlS0dLUQqhy1hOSskvESarXMoDbN1E -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:57 2026 by rpki-client