This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/ACyMokyAcIhgnojfOOZk2Fp2M_g.roa File: ACyMokyAcIhgnojfOOZk2Fp2M_g.roa (raw, json) Hash identifier: RWgqlqxsw+gEGVmD//0j4E4TFF91yMaTTc+WhaSYKqM= Subject key identifier: 00:2C:8C:A2:4C:80:70:88:60:9E:88:DF:38:E6:64:D8:5A:76:33:F8 Certificate issuer: /CN=96d7ba651403d18dddb7a74b20ddc21deb94220e Certificate serial: 019B7B3692D92371FD4F6BC483706438ADDB Authority key identifier: 96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/ACyMokyAcIhgnojfOOZk2Fp2M_g.roa Signing time: Thu 01 Jan 2026 20:18:52 +0000 ROA not before: Thu 01 Jan 2026 20:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6453 IP address blocks: 185.205.24.0/22 maxlen: 24 185.205.24.0/24 maxlen: 24 185.205.25.0/24 maxlen: 24 185.205.26.0/24 maxlen: 24 185.205.27.0/24 maxlen: 24 193.105.119.0/24 maxlen: 24 195.85.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:92:d9:23:71:fd:4f:6b:c4:83:70:64:38:ad:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96d7ba651403d18dddb7a74b20ddc21deb94220e Validity Not Before: Jan 1 20:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=002c8ca24c807088609e88df38e664d85a7633f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c7:46:c9:6e:ab:e1:00:f4:ce:57:0f:b6:7a: 3b:a2:00:74:31:8b:fb:28:33:d7:90:e8:d6:23:19: 2b:f5:d1:1c:4d:20:52:b5:58:44:23:15:7e:7e:c7: 08:4c:b5:3a:a9:10:70:65:69:6b:3e:af:8c:9b:82: 57:38:99:d1:73:79:4a:80:4b:a6:a4:86:8e:b6:20: 23:7e:34:d5:19:09:cb:fc:e8:06:5e:98:de:a8:fe: 61:64:2f:12:06:d8:5d:e5:99:fc:5e:2e:38:70:da: 11:03:8f:3e:d3:db:84:83:07:9c:73:36:7f:24:a5: 66:5e:78:15:0a:6a:9b:a1:c4:7a:77:64:65:44:e9: a3:ae:93:42:51:3e:62:10:3c:80:5b:ef:57:02:87: cc:49:81:e3:bf:6b:bd:66:e3:2f:60:32:a4:f6:16: 65:3a:26:42:25:90:24:bc:c2:96:57:19:e9:f1:5a: ed:d4:e8:49:ed:65:f0:ff:21:86:5f:a0:aa:8a:58: b8:b6:c8:ee:a6:ac:fd:b9:8c:95:28:83:9b:f1:6b: 2d:25:1b:8e:b6:1b:ae:10:15:2f:02:9c:de:a9:4a: 88:67:e9:e9:ba:59:3b:5d:52:f9:33:37:21:1c:03: a8:3b:77:38:f0:9c:e8:5d:9b:8d:82:1c:0c:fa:f5: a2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2C:8C:A2:4C:80:70:88:60:9E:88:DF:38:E6:64:D8:5A:76:33:F8 X509v3 Authority Key Identifier: keyid:96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/ACyMokyAcIhgnojfOOZk2Fp2M_g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.205.24.0/22 193.105.119.0/24 195.85.224.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:48:d0:34:87:ea:c2:fa:32:59:71:0f:ef:bc:c3:14:fa:27: 9c:30:66:32:e0:49:7a:cd:e8:fd:76:a2:c9:37:f6:e6:26:11: f9:1e:1e:91:d3:b0:8a:48:2f:59:6f:2d:88:a9:32:78:4f:6a: 34:87:ee:40:79:5e:56:ef:4e:7e:61:12:6f:1d:43:1f:f4:8f: ea:7c:02:91:ec:0b:5b:47:01:fb:d7:02:87:31:3e:85:e4:6c: 36:d7:08:a1:0c:af:d9:17:b8:23:f3:9d:4b:42:8f:58:7f:3f: 1b:20:3b:97:20:cd:54:b7:16:2e:ed:bb:ea:8e:00:4a:c4:f9: 3a:63:82:77:05:cc:3c:f2:56:34:d2:d3:45:38:c5:48:0c:55: 9e:79:60:7c:14:93:83:d9:57:ec:79:3b:13:5a:a9:9e:f6:ea: 88:a4:92:95:12:3a:bb:0d:6a:d8:57:05:0b:cf:75:83:8b:08: ca:de:a5:e0:02:dc:ac:7d:e4:53:ad:e5:ab:c2:b9:40:84:af: ff:80:b4:4e:13:7c:48:a9:c9:4f:1b:86:39:d9:6a:21:b7:9c: 26:bd:c3:e8:c2:3c:e9:b4:d4:e5:b8:08:d3:2a:52:5d:92:2d: 05:e6:53:a0:f5:7b:44:33:90:3f:37:ce:54:c9:39:97:3a:02: 44:2d:a0:15 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7NpLZI3H9T2vEg3BkOK3bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZDdiYTY1MTQwM2QxOGRkZGI3YTc0YjIwZGRjMjFkZWI5 NDIyMGUwHhcNMjYwMTAxMjAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDJjOGNhMjRjODA3MDg4NjA5ZTg4ZGYzOGU2NjRkODVhNzYzM2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscdGyW6r4QD0zlcPtno7ogB0MYv7 KDPXkOjWIxkr9dEcTSBStVhEIxV+fscITLU6qRBwZWlrPq+Mm4JXOJnRc3lKgEum pIaOtiAjfjTVGQnL/OgGXpjeqP5hZC8SBthd5Zn8Xi44cNoRA48+09uEgwecczZ/ JKVmXngVCmqbocR6d2RlROmjrpNCUT5iEDyAW+9XAofMSYHjv2u9ZuMvYDKk9hZl OiZCJZAkvMKWVxnp8Vrt1OhJ7WXw/yGGX6Cqili4tsjupqz9uYyVKIOb8WstJRuO thuuEBUvApzeqUqIZ+npulk7XVL5MzchHAOoO3c48JzoXZuNghwM+vWiSQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAAsjKJMgHCIYJ6I3zjmZNhadjP4MB8GA1UdIwQY MBaAFJbXumUUA9GN3benSyDdwh3rlCIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHRlNlpSUUQwWTNkdDZkTElOM0NIZXVVSWc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8wZDMzYzktNmE4NC00Y2UzLTgxYjAt NDE4YWY5MGFjYjhhLzEvQUN5TW9reUFjSWhnbm9qZk9PWmsyRnAyTV9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8wZDMzYzktNmE4NC00Y2UzLTgxYjAtNDE4YWY5MGFjYjhh LzEvbHRlNlpSUUQwWTNkdDZkTElOM0NIZXVVSWc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuc0YAwQA wWl3AwQAw1XgMA0GCSqGSIb3DQEBCwUAA4IBAQBqSNA0h+rC+jJZcQ/vvMMU+iec MGYy4El6zej9dqLJN/bmJhH5Hh6R07CKSC9Zby2IqTJ4T2o0h+5AeV5W705+YRJv HUMf9I/qfAKR7AtbRwH71wKHMT6F5Gw21wihDK/ZF7gj851LQo9Yfz8bIDuXIM1U txYu7bvqjgBKxPk6Y4J3Bcw88lY00tNFOMVIDFWeeWB8FJOD2VfseTsTWqme9uqI pJKVEjq7DWrYVwULz3WDiwjK3qXgAtysfeRTreWrwrlAhK//gLROE3xIqclPG4Y5 2Woht5wmvcPowjzptNTluAjTKlJdki0F5lOg9XtEM5A/N85UyTmXOgJELaAV -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:38 2026 by rpki-client