This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/AF3aMmAq2dXzKMHSJZOdImL-Na4.roa File: AF3aMmAq2dXzKMHSJZOdImL-Na4.roa (raw, json) Hash identifier: dt4d55RCZb6zWxiuXjvaxzyQbohK0ftFh2OMlduNrzA= Subject key identifier: 00:5D:DA:32:60:2A:D9:D5:F3:28:C1:D2:25:93:9D:22:62:FE:35:AE Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019AF23C9CB51D47170037775A5558236CE1 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/AF3aMmAq2dXzKMHSJZOdImL-Na4.roa Signing time: Sat 06 Dec 2025 05:57:29 +0000 ROA not before: Sat 06 Dec 2025 05:57:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204044 IP address blocks: 185.244.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3c:9c:b5:1d:47:17:00:37:77:5a:55:58:23:6c:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Dec 6 05:57:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=005dda32602ad9d5f328c1d225939d2262fe35ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:64:ad:95:12:f3:5d:7d:18:db:6b:19:8b:3a: e0:03:5e:e0:e6:d4:1a:62:41:d3:56:3d:89:2a:29: 36:60:87:2e:2d:c7:90:49:ea:c8:3c:31:4c:e8:77: b4:48:36:e0:c7:1c:e8:3e:d5:67:3e:52:d1:8a:a9: 8f:92:7b:7d:59:4e:e6:dc:4e:37:12:35:5b:a5:65: 40:bf:7a:84:b0:cc:1b:4c:1d:92:6e:dd:f0:5f:a0: a7:81:8b:5b:20:db:b5:08:9d:7a:e8:6c:33:46:33: 2c:02:57:60:a9:9b:b9:eb:00:00:e8:a3:57:89:52: 5f:c8:4a:d3:97:c2:48:61:28:02:52:10:6a:f5:3a: c6:b2:42:db:1b:a9:82:3e:a9:c3:ab:27:a5:c8:79: e0:bf:ef:af:7a:da:b7:d5:8d:97:ef:00:f6:c7:82: 0f:3a:f7:e3:65:ec:f1:2c:51:73:b2:13:1f:57:9d: 62:2b:1e:80:45:e2:99:47:f7:f3:b1:9f:15:9c:da: dc:e1:46:79:52:48:98:59:2d:d3:31:0a:e9:db:34: 06:44:b3:90:b1:d9:50:65:06:9b:ed:21:7b:0d:6f: 7c:76:3d:7a:db:dd:db:97:16:f3:65:5f:9e:ca:b1: 90:87:e0:49:1e:61:a4:ba:e0:77:26:eb:4a:fc:67: 56:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5D:DA:32:60:2A:D9:D5:F3:28:C1:D2:25:93:9D:22:62:FE:35:AE X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/AF3aMmAq2dXzKMHSJZOdImL-Na4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.244.104.0/24 Signature Algorithm: sha256WithRSAEncryption aa:43:c8:59:cc:7c:71:7c:34:86:8f:4a:6b:e4:ff:30:33:94: 52:65:4c:1f:61:35:94:5b:9f:9a:cd:2e:8f:0a:0c:fb:36:7f: ca:fa:f0:aa:e4:9e:19:f0:ec:73:cd:ce:83:ce:bc:da:53:0a: 43:59:bc:71:d3:4d:08:34:ec:fc:c4:dd:1a:d8:43:ff:66:a7: fa:16:b5:88:b6:df:c2:0c:b2:2d:00:e8:37:9b:25:2c:d4:9c: 0d:c7:15:02:1b:da:f7:8e:54:a7:28:95:60:3a:26:cd:36:03: cf:61:c1:3c:3b:a3:aa:d9:f7:f6:0e:c2:92:cf:a0:c6:1f:30: f3:59:7c:21:15:fc:cc:66:ee:fd:e1:b6:91:ef:22:f0:2d:3c: 54:04:b7:e5:ba:25:82:c5:0d:59:21:bc:c1:60:ea:2b:35:81: ab:0c:08:56:94:f2:32:80:b5:b9:5b:b7:2a:57:7c:0f:3e:e3: 4c:d9:70:11:82:cd:fb:03:08:ba:f0:8c:e5:b6:02:6e:dd:58: fb:a9:b0:b4:fb:56:62:b8:3a:2b:9a:74:a7:f4:50:69:4d:bb: 6e:50:98:38:e6:be:87:7f:64:11:4e:ab:68:40:5c:06:d2:ef: 65:5d:c4:d2:59:0a:a0:3b:14:ae:cd:c8:e8:f7:62:ae:21:7b: 47:e4:05:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZryPJy1HUcXADd3WlVYI2zhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjUxMjA2MDU1NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDVkZGEzMjYwMmFkOWQ1ZjMyOGMxZDIyNTkzOWQyMjYyZmUzNWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGStlRLzXX0Y22sZizrgA17g5tQa YkHTVj2JKik2YIcuLceQSerIPDFM6He0SDbgxxzoPtVnPlLRiqmPknt9WU7m3E43 EjVbpWVAv3qEsMwbTB2Sbt3wX6CngYtbINu1CJ166GwzRjMsAldgqZu56wAA6KNX iVJfyErTl8JIYSgCUhBq9TrGskLbG6mCPqnDqyelyHngv++vetq31Y2X7wD2x4IP OvfjZezxLFFzshMfV51iKx6AReKZR/fzsZ8VnNrc4UZ5UkiYWS3TMQrp2zQGRLOQ sdlQZQab7SF7DW98dj16293blxbzZV+eyrGQh+BJHmGkuuB3JutK/GdWrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFABd2jJgKtnV8yjB0iWTnSJi/jWuMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvQUYzYU1tQXEyZFh6S01IU0paT2RJbUwtTmE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufRoMA0G CSqGSIb3DQEBCwUAA4IBAQCqQ8hZzHxxfDSGj0pr5P8wM5RSZUwfYTWUW5+azS6P Cgz7Nn/K+vCq5J4Z8Oxzzc6DzrzaUwpDWbxx000INOz8xN0a2EP/Zqf6FrWItt/C DLItAOg3myUs1JwNxxUCG9r3jlSnKJVgOibNNgPPYcE8O6Oq2ff2DsKSz6DGHzDz WXwhFfzMZu794baR7yLwLTxUBLfluiWCxQ1ZIbzBYOorNYGrDAhWlPIygLW5W7cq V3wPPuNM2XARgs37Awi68IzltgJu3Vj7qbC0+1ZiuDormnSn9FBpTbtuUJg45r6H f2QRTqtoQFwG0u9lXcTSWQqgOxSuzcjo92KuIXtH5AXZ -----END CERTIFICATE-----Generated at Sat Dec 6 16:25:16 2025 by rpki-client