This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/ApGR2Q6UiBOTln3YEs6ePXPQ8lQ.roa File: ApGR2Q6UiBOTln3YEs6ePXPQ8lQ.roa (raw, json) Hash identifier: lyxkrW/UqVG023E4rkiQmolfszYoshoVE4T/qdnjtKM= Subject key identifier: 02:91:91:D9:0E:94:88:13:93:96:7D:D8:12:CE:9E:3D:73:D0:F2:54 Certificate issuer: /CN=dee72c8faecb7052c841201b25f6a018e477b1c2 Certificate serial: 019B7BA532FF91679DBB0A46188549F199F5 Authority key identifier: DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/ApGR2Q6UiBOTln3YEs6ePXPQ8lQ.roa Signing time: Thu 01 Jan 2026 22:19:42 +0000 ROA not before: Thu 01 Jan 2026 22:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47216 IP address blocks: 193.111.236.0/24 maxlen: 24 194.59.215.0/24 maxlen: 24 2a11:7bc0::/29 maxlen: 29 2a11:7bc0:b001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:32:ff:91:67:9d:bb:0a:46:18:85:49:f1:99:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dee72c8faecb7052c841201b25f6a018e477b1c2 Validity Not Before: Jan 1 22:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=029191d90e94881393967dd812ce9e3d73d0f254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:93:5e:e8:be:7e:27:d8:30:62:cc:e3:81:76: cd:c2:70:ee:da:6c:3a:e0:c4:65:14:99:7b:85:90: d7:c8:5e:c1:fa:87:e0:6c:74:d7:01:81:02:c5:e5: 3d:10:41:b0:f3:66:27:5b:d4:18:8a:e1:a5:0e:12: 8c:c0:fd:89:5a:6b:3a:c3:12:4b:66:34:e6:1a:7d: 86:21:7e:7f:30:ba:51:61:a7:d0:20:45:94:ca:66: 00:f7:d2:b6:13:4f:9e:f7:f6:44:6b:c2:d9:c1:eb: 34:70:1c:a3:d3:b5:95:c6:b7:35:63:28:3d:5b:ca: 62:c8:1d:37:60:a8:7c:00:6a:e8:2d:7a:8d:d7:87: e0:df:ab:8a:e6:68:81:6d:0e:a4:93:ea:9c:56:4d: 4b:88:aa:4a:2f:a3:b8:83:a0:f5:73:89:d3:ca:a4: 7f:86:24:b1:fb:9c:54:a3:8c:ef:b3:f1:b5:00:e3: e8:47:b1:4b:b8:e0:53:d3:84:c6:98:1e:e4:f7:d8: a0:e4:f9:a7:44:c9:2f:8e:a5:28:b9:bd:d7:15:2d: 69:2c:dc:9f:65:2d:0b:4e:c3:41:7f:82:fb:1c:13: c2:37:f9:a9:9f:99:12:29:95:63:64:8d:8c:99:4e: a7:33:8a:26:d7:fe:7f:ca:c3:bb:40:a7:a6:36:67: 18:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:91:91:D9:0E:94:88:13:93:96:7D:D8:12:CE:9E:3D:73:D0:F2:54 X509v3 Authority Key Identifier: keyid:DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/ApGR2Q6UiBOTln3YEs6ePXPQ8lQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.236.0/24 194.59.215.0/24 IPv6: 2a11:7bc0::/29 Signature Algorithm: sha256WithRSAEncryption a0:0d:95:cf:96:db:19:72:8c:5c:9e:5b:48:31:5b:0c:c9:77: f7:e3:49:72:f8:d0:fc:6b:7e:0b:28:c1:9d:61:1d:3a:87:7d: 18:4f:af:43:50:2d:e2:b5:64:ad:c6:6b:ef:7e:aa:72:8c:db: 76:05:fc:84:e0:c2:83:a0:c7:7a:41:5d:fb:39:4e:12:de:9a: 1d:af:75:87:21:c8:7a:91:df:7c:1f:3e:43:3e:48:d2:99:8b: 5f:b0:28:3c:e5:4b:40:15:ae:29:78:f4:f3:25:c7:d7:01:e8: 5e:08:5f:68:f9:a7:88:81:e8:93:28:cf:5f:61:81:ef:25:a8: 6e:86:d2:c9:6a:2e:eb:78:a6:7f:96:3c:07:1a:7d:f1:f5:6e: a8:02:9b:a3:03:49:a7:51:c5:a5:1a:26:66:88:c7:92:76:a2: 18:f9:bc:a3:f3:9a:0c:f2:f1:37:3b:56:a5:ff:f3:00:8e:dd: 50:72:15:b1:bc:35:ba:98:d0:fb:5f:91:3f:93:3a:6c:18:cc: 78:cc:85:7d:13:3f:ea:fa:45:22:10:f4:8b:10:eb:d9:e1:da: 1c:63:a0:45:39:e4:30:94:e6:3e:24:8f:1d:ab:a7:b8:a7:ab: 1e:86:ff:a8:12:0b:20:70:86:db:00:b2:4b:14:b6:f0:8a:5c: c3:16:13:89 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7pTL/kWeduwpGGIVJ8Zn1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZTcyYzhmYWVjYjcwNTJjODQxMjAxYjI1ZjZhMDE4ZTQ3 N2IxYzIwHhcNMjYwMTAxMjIxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjkxOTFkOTBlOTQ4ODEzOTM5NjdkZDgxMmNlOWUzZDczZDBmMjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZNe6L5+J9gwYszjgXbNwnDu2mw6 4MRlFJl7hZDXyF7B+ofgbHTXAYECxeU9EEGw82YnW9QYiuGlDhKMwP2JWms6wxJL ZjTmGn2GIX5/MLpRYafQIEWUymYA99K2E0+e9/ZEa8LZwes0cByj07WVxrc1Yyg9 W8piyB03YKh8AGroLXqN14fg36uK5miBbQ6kk+qcVk1LiKpKL6O4g6D1c4nTyqR/ hiSx+5xUo4zvs/G1AOPoR7FLuOBT04TGmB7k99ig5PmnRMkvjqUoub3XFS1pLNyf ZS0LTsNBf4L7HBPCN/mpn5kSKZVjZI2MmU6nM4om1/5/ysO7QKemNmcY7QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAKRkdkOlIgTk5Z92BLOnj1z0PJUMB8GA1UdIwQY MBaAFN7nLI+uy3BSyEEgGyX2oBjkd7HCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3Vjc2o2N0xjRkxJUVNBYkpmYWdHT1Izc2NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lZjgyOWEtYWNmYy00NDAyLTk1Y2Ut MzgzZmIyYjk1NGQ5LzEvQXBHUjJRNlVpQk9UbG4zWUVzNmVQWFBROGxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9lZjgyOWEtYWNmYy00NDAyLTk1Y2UtMzgzZmIyYjk1NGQ5 LzEvM3Vjc2o2N0xjRkxJUVNBYkpmYWdHT1Izc2NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAwW/sAwQA wjvXMA0EAgACMAcDBQMqEXvAMA0GCSqGSIb3DQEBCwUAA4IBAQCgDZXPltsZcoxc nltIMVsMyXf340ly+ND8a34LKMGdYR06h30YT69DUC3itWStxmvvfqpyjNt2BfyE 4MKDoMd6QV37OU4S3podr3WHIch6kd98Hz5DPkjSmYtfsCg85UtAFa4pePTzJcfX AeheCF9o+aeIgeiTKM9fYYHvJahuhtLJai7reKZ/ljwHGn3x9W6oApujA0mnUcWl GiZmiMeSdqIY+byj85oM8vE3O1al//MAjt1QchWxvDW6mND7X5E/kzpsGMx4zIV9 Ez/q+kUiEPSLEOvZ4docY6BFOeQwlOY+JI8dq6e4p6sehv+oEgsgcIbbALJLFLbw ilzDFhOJ -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:09 2026 by rpki-client