This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/AkwJWIWQP9lpPVxPBDbcMMr-jIg.roa File: AkwJWIWQP9lpPVxPBDbcMMr-jIg.roa (raw, json) Hash identifier: 8WYA2a3QRGb11HmNfsjuB1SgF2nbvUPVRB53wqU/BnM= Subject key identifier: 02:4C:09:58:85:90:3F:D9:69:3D:5C:4F:04:36:DC:30:CA:FE:8C:88 Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d Certificate serial: 019AE94A8EE362B1E6CF51489F10B7EA0E45 Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/AkwJWIWQP9lpPVxPBDbcMMr-jIg.roa Signing time: Thu 04 Dec 2025 12:16:08 +0000 ROA not before: Thu 04 Dec 2025 12:16:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42649 IP address blocks: 128.76.64.0/18 maxlen: 18 178.239.48.0/20 maxlen: 20 185.24.248.0/22 maxlen: 22 185.149.56.0/24 maxlen: 24 185.149.57.0/24 maxlen: 24 185.149.58.0/24 maxlen: 24 185.149.59.0/24 maxlen: 24 185.195.92.0/24 maxlen: 24 185.195.93.0/24 maxlen: 24 185.195.94.0/24 maxlen: 24 185.195.95.0/24 maxlen: 24 2a0a:56c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:4a:8e:e3:62:b1:e6:cf:51:48:9f:10:b7:ea:0e:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d Validity Not Before: Dec 4 12:16:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=024c095885903fd9693d5c4f0436dc30cafe8c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ac:9f:53:45:3f:d1:15:dd:3d:16:f3:37:dd: 82:62:21:fd:1d:9d:fc:55:c4:79:6f:bb:7c:bb:97: 7b:4f:30:cd:50:d5:68:7f:6c:dd:4a:7d:ef:46:05: 5b:04:de:fd:cf:24:08:35:ea:f0:cb:59:86:5d:53: 56:d6:f2:16:87:c9:49:99:08:2b:b5:55:73:b7:a4: 16:9a:63:54:da:2b:86:95:f5:80:56:50:29:f3:82: 88:c4:2f:98:80:05:76:93:d3:69:1d:81:b6:fb:37: 6a:22:75:e6:8b:78:7e:ce:54:f9:af:22:1d:c7:54: 61:05:61:e4:03:4c:24:a2:69:4e:33:c8:5f:77:33: 14:44:44:59:e6:d7:5e:c3:9a:94:b8:d8:59:19:4d: 75:6e:5b:0d:23:ce:9e:3b:af:7e:1d:94:d6:b5:a1: a5:8f:6b:1d:fd:78:67:38:43:b0:10:62:79:0c:49: 2e:9e:60:b9:8b:27:56:38:a3:2f:e9:98:85:53:cb: 2c:5c:2e:3d:da:b3:76:71:d5:d2:c9:c7:c1:6e:20: a6:eb:ca:db:a4:7a:21:1c:fc:ce:da:85:38:49:3f: c1:36:36:79:6d:67:12:47:16:ea:9d:45:98:be:7f: 48:85:03:50:a8:ab:55:04:ec:d1:d2:5d:9d:b2:94: 93:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4C:09:58:85:90:3F:D9:69:3D:5C:4F:04:36:DC:30:CA:FE:8C:88 X509v3 Authority Key Identifier: keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/AkwJWIWQP9lpPVxPBDbcMMr-jIg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.76.64.0/18 178.239.48.0/20 185.24.248.0/22 185.149.56.0/22 185.195.92.0/22 IPv6: 2a0a:56c0::/29 Signature Algorithm: sha256WithRSAEncryption 57:3c:79:73:14:11:00:48:3b:28:a7:ed:7c:72:26:2f:c2:4c: f2:1f:fe:7b:30:8f:f9:29:78:8b:74:0f:f9:81:cd:c7:b8:39: f3:91:a1:a1:3b:d9:8d:83:e9:d3:8d:d6:da:75:fd:05:07:c6: 56:f9:13:63:64:71:b3:b8:f3:ce:56:0c:83:e3:7f:8f:f4:8c: 9b:52:71:32:df:48:98:77:bf:87:3f:8e:72:02:d5:3d:df:14: 49:e4:a9:11:1a:4b:3a:0c:c7:68:c5:a6:65:89:2e:93:86:55: b9:9c:db:e1:30:08:7a:7d:96:55:64:c7:ad:55:14:4b:08:f2: 64:4b:57:0e:37:e1:e3:a7:7d:c3:20:f3:e1:43:89:b3:c5:cb: 67:3a:74:82:7a:f4:6f:4d:2a:5b:b4:50:e8:d2:6a:47:e4:d8: 1e:64:61:90:71:af:36:cf:95:1c:fd:c2:e9:fb:57:2f:89:29: e2:1a:fc:9e:a0:94:e2:ce:6f:c8:f0:a9:54:ba:bc:f7:a1:25: 0a:98:19:aa:bd:1c:d5:82:51:18:b9:c0:f8:fb:a5:24:24:d5: 81:15:a0:ea:bf:82:a1:99:3b:1a:3d:72:d8:d3:8b:d3:ba:b2: 34:5c:be:9b:46:61:69:21:93:ae:c2:02:c4:5a:2e:62:5b:0a: 57:f9:61:8a -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZrpSo7jYrHmz1FInxC36g5FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YTA0MzRiZWJlNWRmYTYzZGRhNzhjMjRhNGViYzFkMmNk NzM2OWQwHhcNMjUxMjA0MTIxNjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjRjMDk1ODg1OTAzZmQ5NjkzZDVjNGYwNDM2ZGMzMGNhZmU4Yzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKyfU0U/0RXdPRbzN92CYiH9HZ38 VcR5b7t8u5d7TzDNUNVof2zdSn3vRgVbBN79zyQINerwy1mGXVNW1vIWh8lJmQgr tVVzt6QWmmNU2iuGlfWAVlAp84KIxC+YgAV2k9NpHYG2+zdqInXmi3h+zlT5ryId x1RhBWHkA0wkomlOM8hfdzMURERZ5tdew5qUuNhZGU11blsNI86eO69+HZTWtaGl j2sd/XhnOEOwEGJ5DEkunmC5iydWOKMv6ZiFU8ssXC492rN2cdXSycfBbiCm68rb pHohHPzO2oU4ST/BNjZ5bWcSRxbqnUWYvn9IhQNQqKtVBOzR0l2dspST6QIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFAJMCViFkD/ZaT1cTwQ23DDK/oyIMB8GA1UdIwQY MBaAFKagQ0vr5d+mPdp4wkpOvB0s1zadMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAt OWNlNDc2N2RhMmMxLzEvQWt3SldJV1FQOWxwUFZ4UEJEYmNNTXItaklnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAtOWNlNDc2N2RhMmMx LzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQGgExAAwQE su8wAwQCuRj4AwQCuZU4AwQCucNcMA0EAgACMAcDBQMqClbAMA0GCSqGSIb3DQEB CwUAA4IBAQBXPHlzFBEASDsop+18ciYvwkzyH/57MI/5KXiLdA/5gc3HuDnzkaGh O9mNg+nTjdbadf0FB8ZW+RNjZHGzuPPOVgyD43+P9IybUnEy30iYd7+HP45yAtU9 3xRJ5KkRGks6DMdoxaZliS6ThlW5nNvhMAh6fZZVZMetVRRLCPJkS1cON+Hjp33D IPPhQ4mzxctnOnSCevRvTSpbtFDo0mpH5NgeZGGQca82z5Uc/cLp+1cviSniGvye oJTizm/I8KlUurz3oSUKmBmqvRzVglEYucD4+6UkJNWBFaDqv4KhmTsaPXLY04vT urI0XL6bRmFpIZOuwgLEWi5iWwpX+WGK -----END CERTIFICATE-----Generated at Tue Dec 16 15:26:08 2025 by rpki-client