This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/AK-YlCPEVbLAZegzYkNrI96Oefg.roa File: AK-YlCPEVbLAZegzYkNrI96Oefg.roa (raw, json) Hash identifier: TQp9SWZ90VsXFNcjm672V8NJs6N2oP9XQNZuCEin7So= Subject key identifier: 00:AF:98:94:23:C4:55:B2:C0:65:E8:33:62:43:6B:23:DE:8E:79:F8 Certificate issuer: /CN=e1d75690d39c830180b3f55c49d140a2a04d3917 Certificate serial: 019C2428A9200258CCFAB496A2C1C771C34B Authority key identifier: E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/AK-YlCPEVbLAZegzYkNrI96Oefg.roa Signing time: Tue 03 Feb 2026 15:39:30 +0000 ROA not before: Tue 03 Feb 2026 15:39:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50377 IP address blocks: 109.234.244.0/24 maxlen: 24 185.184.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:24:28:a9:20:02:58:cc:fa:b4:96:a2:c1:c7:71:c3:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1d75690d39c830180b3f55c49d140a2a04d3917 Validity Not Before: Feb 3 15:39:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00af989423c455b2c065e83362436b23de8e79f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:36:bb:24:b8:d9:78:56:6f:67:d3:dd:3e:2b: c1:b9:52:20:23:2a:3c:b5:3b:05:07:c7:a9:2f:93: ab:c0:74:92:57:43:f9:55:69:04:83:8b:a5:c8:c1: fc:02:1f:4b:49:0c:95:b2:0e:9c:81:44:2c:7f:64: 7d:a4:62:80:ce:7f:ae:fa:85:b0:6b:dc:83:7b:a5: 97:27:8a:09:9d:95:ce:76:16:7e:56:43:af:43:f9: bd:27:8d:77:bf:33:af:c3:bc:e7:d8:84:11:ae:ed: 3b:71:64:2c:07:f3:c3:a7:d7:36:76:4a:37:b0:56: bb:f6:c7:44:05:76:64:a2:0a:c2:63:bd:bf:8c:03: 08:89:09:2c:1d:16:14:4b:2b:a2:75:68:99:e4:72: bb:24:87:4d:f7:ca:16:6d:34:c7:0c:5a:07:e9:7f: fe:1e:f8:1f:df:ed:48:ad:76:2e:08:9b:0a:ab:6b: 41:cd:d5:81:1d:66:fa:ef:43:e8:22:02:74:1b:98: ca:8f:e8:48:46:0f:49:ac:4f:31:bc:36:1f:a2:01: d4:5a:4e:96:ba:13:8f:5d:23:a7:2f:c0:18:7e:c6: 1e:0d:f1:18:cf:54:e0:a3:ff:f7:9e:15:bf:cb:fa: ee:97:d8:b0:8b:c9:4e:ab:d1:67:f6:5f:82:4f:2d: 42:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:AF:98:94:23:C4:55:B2:C0:65:E8:33:62:43:6B:23:DE:8E:79:F8 X509v3 Authority Key Identifier: keyid:E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/AK-YlCPEVbLAZegzYkNrI96Oefg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.234.244.0/24 185.184.64.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:ef:21:72:94:0d:d5:5f:46:d1:ac:c0:a2:ae:b9:b2:34:f9: aa:94:5a:5b:8b:81:2d:eb:5d:2e:19:aa:f0:dd:96:8b:f8:2c: 81:91:8f:1b:90:81:74:b2:be:ee:3c:ec:3d:18:94:3c:50:e5: d6:88:d0:42:b9:b2:37:0a:99:c2:0c:e7:59:5b:aa:15:b1:bc: 59:a6:52:fe:9a:6c:07:ec:f6:be:c1:04:e9:c2:7d:8c:33:2a: 43:d7:bc:ea:28:6a:ed:c4:8b:ef:bf:a4:0a:3a:23:ac:3c:c6: a6:8a:99:da:a1:d3:61:43:46:88:6d:b3:38:f0:85:be:78:e2: d1:a1:63:e0:8f:34:ad:f0:3c:96:27:a8:38:bb:3e:a3:1d:b9: a1:7b:e9:f7:d0:36:8b:e7:e7:9e:88:a1:26:23:0a:27:34:6c: 53:1a:e3:d0:fc:ac:1e:cb:b9:e3:af:87:c4:17:b0:e7:71:bd: f9:81:25:fb:ba:d0:51:5f:9e:72:77:1c:02:f8:d8:b5:e7:ff: 8c:06:75:1b:64:0c:05:a5:73:30:85:a7:82:3b:2a:62:69:e6: 62:0e:bf:3e:df:06:ad:ba:3d:f6:86:4d:ad:33:ba:e8:97:03: 70:1d:2c:f6:cc:1f:5f:3b:00:b5:ed:b1:7f:74:13:0a:d4:0d: 84:d1:76:34 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZwkKKkgAljM+rSWosHHccNLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZDc1NjkwZDM5YzgzMDE4MGIzZjU1YzQ5ZDE0MGEyYTA0 ZDM5MTcwHhcNMjYwMjAzMTUzOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGFmOTg5NDIzYzQ1NWIyYzA2NWU4MzM2MjQzNmIyM2RlOGU3OWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ta7JLjZeFZvZ9PdPivBuVIgIyo8 tTsFB8epL5OrwHSSV0P5VWkEg4ulyMH8Ah9LSQyVsg6cgUQsf2R9pGKAzn+u+oWw a9yDe6WXJ4oJnZXOdhZ+VkOvQ/m9J413vzOvw7zn2IQRru07cWQsB/PDp9c2dko3 sFa79sdEBXZkogrCY72/jAMIiQksHRYUSyuidWiZ5HK7JIdN98oWbTTHDFoH6X/+ Hvgf3+1IrXYuCJsKq2tBzdWBHWb670PoIgJ0G5jKj+hIRg9JrE8xvDYfogHUWk6W uhOPXSOnL8AYfsYeDfEYz1Tgo//3nhW/y/rul9iwi8lOq9Fn9l+CTy1CAQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFACvmJQjxFWywGXoM2JDayPejnn4MB8GA1UdIwQY MBaAFOHXVpDTnIMBgLP1XEnRQKKgTTkXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGRkV2tOT2Nnd0dBc19WY1NkRkFvcUJOT1JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yZGFkMzUtZGQwYS00ZDYzLThjMWUt YjlhMzZlYjllZTIxLzEvQUstWWxDUEVWYkxBWmVnellrTnJJOTZPZWZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8yZGFkMzUtZGQwYS00ZDYzLThjMWUtYjlhMzZlYjllZTIx LzEvNGRkV2tOT2Nnd0dBc19WY1NkRkFvcUJOT1JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAber0AwQC ubhAMA0GCSqGSIb3DQEBCwUAA4IBAQBe7yFylA3VX0bRrMCirrmyNPmqlFpbi4Et 610uGarw3ZaL+CyBkY8bkIF0sr7uPOw9GJQ8UOXWiNBCubI3CpnCDOdZW6oVsbxZ plL+mmwH7Pa+wQTpwn2MMypD17zqKGrtxIvvv6QKOiOsPMamipnaodNhQ0aIbbM4 8IW+eOLRoWPgjzSt8DyWJ6g4uz6jHbmhe+n30DaL5+eeiKEmIwonNGxTGuPQ/Kwe y7njr4fEF7Dncb35gSX7utBRX55ydxwC+Ni15/+MBnUbZAwFpXMwhaeCOypiaeZi Dr8+3watuj32hk2tM7rolwNwHSz2zB9fOwC17bF/dBMK1A2E0XY0 -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:15 2026 by rpki-client