This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/avfWH99nPoOW7DLQE0x7Si_KvhQ.roa File: avfWH99nPoOW7DLQE0x7Si_KvhQ.roa (raw, json) Hash identifier: UCgXZAxPXfRssHeFoFTyFUIT22WDj1cAxQIAYxr8z30= Subject key identifier: 6A:F7:D6:1F:DF:67:3E:83:96:EC:32:D0:13:4C:7B:4A:2F:CA:BE:14 Certificate issuer: /CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf Certificate serial: 019B7BA4D1BE7599D8F98286E112B5C3F046 Authority key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/avfWH99nPoOW7DLQE0x7Si_KvhQ.roa Signing time: Thu 01 Jan 2026 22:19:17 +0000 ROA not before: Thu 01 Jan 2026 22:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44709 IP address blocks: 80.244.173.0/24 maxlen: 24 80.244.174.0/24 maxlen: 24 80.244.175.0/24 maxlen: 24 185.106.128.0/24 maxlen: 24 185.106.129.0/24 maxlen: 24 185.106.130.0/24 maxlen: 24 185.106.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:d1:be:75:99:d8:f9:82:86:e1:12:b5:c3:f0:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf Validity Not Before: Jan 1 22:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6af7d61fdf673e8396ec32d0134c7b4a2fcabe14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ca:c6:2e:93:81:63:62:46:f8:fe:d8:e8:ca: 79:70:5c:c3:7a:48:a6:bc:d4:7b:a9:a0:e6:39:bb: 00:ac:78:95:3a:a4:76:13:ef:ad:ab:5b:97:ff:29: 43:1f:5f:29:37:7b:8e:b8:35:b2:68:b7:93:a2:98: 18:74:6c:ba:6d:26:da:c0:ab:af:1d:79:b4:3e:29: 4d:51:16:ef:9d:b8:58:df:57:71:da:2a:c9:6a:9d: cb:2b:9b:6c:35:3c:63:d0:bb:b5:3a:e4:ca:93:aa: a2:2c:f5:1b:e9:21:a7:24:9c:52:40:77:31:c1:9d: a7:14:19:40:63:45:ff:eb:07:12:62:a9:a7:2d:51: 97:1d:3a:19:78:d8:82:62:88:2c:69:c1:7e:25:52: c3:72:ae:71:06:c8:85:1a:2e:48:cd:02:78:e7:1c: 46:9f:27:e1:81:a7:97:3e:92:a9:28:ab:28:a2:91: 65:ed:2e:76:f8:1d:c3:43:25:ef:71:58:e9:5f:5b: a5:b0:df:97:a8:1b:50:0f:21:55:89:0a:3f:ea:9a: 96:62:0f:ca:75:0c:7d:b2:d6:31:16:09:ca:6d:ca: 56:88:ba:13:4a:b4:90:92:4d:91:5d:fe:a3:a7:5d: 9e:c8:ac:55:a0:4e:ba:56:5f:aa:68:ee:73:ac:d1: 24:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F7:D6:1F:DF:67:3E:83:96:EC:32:D0:13:4C:7B:4A:2F:CA:BE:14 X509v3 Authority Key Identifier: keyid:5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/avfWH99nPoOW7DLQE0x7Si_KvhQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.244.173.0-80.244.175.255 185.106.128.0/22 Signature Algorithm: sha256WithRSAEncryption 79:7c:68:7c:0c:11:3a:7b:a5:80:be:df:49:24:63:69:a3:15: 19:c1:0e:e8:cb:55:8c:78:de:aa:50:8e:60:77:fc:85:b9:44: 5f:34:1c:1d:7d:37:c3:5f:0a:dc:7b:ad:90:db:a1:46:db:72: 4d:14:15:f8:1c:dd:2a:b9:ab:a0:f3:52:e1:74:9f:27:46:2b: 9a:70:e2:4a:e8:2c:96:e4:a2:63:a0:13:a5:86:a7:2c:ee:47: 42:26:e1:c6:e0:6a:71:00:ca:26:fd:79:43:cc:72:c0:2e:ec: 80:fa:f0:fd:48:30:2e:8d:46:36:66:62:77:03:9f:9c:60:6b: 48:75:06:1d:7c:3f:24:e8:93:39:b3:3a:ad:54:10:d1:81:1c: 56:2e:f6:e8:af:fb:55:cd:56:d1:b5:ea:d8:2a:70:49:dc:d1: 1d:b1:2c:5a:b2:df:06:56:5b:36:48:71:a7:52:5b:81:7a:06: f6:dd:f9:07:e9:a0:25:f0:3b:9c:9e:63:1e:fd:8f:a4:e0:a8: 6d:2b:7e:73:70:cc:36:65:8b:bd:6b:35:56:f2:5e:ac:ab:0c: 26:ec:d2:09:3a:3f:85:28:c7:81:20:2f:fa:aa:b9:ce:40:13: 25:29:62:5d:e5:f9:1b:7a:f4:e7:b5:28:20:a9:f5:cd:24:f4: b3:4d:53:2b -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt7pNG+dZnY+YKG4RK1w/BGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOTVmZGZkMjhjZGMwM2Q4OWQyMTRlNGFkM2E2YzVmYjNl YmFjYmYwHhcNMjYwMTAxMjIxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWY3ZDYxZmRmNjczZTgzOTZlYzMyZDAxMzRjN2I0YTJmY2FiZTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsrGLpOBY2JG+P7Y6Mp5cFzDekim vNR7qaDmObsArHiVOqR2E++tq1uX/ylDH18pN3uOuDWyaLeTopgYdGy6bSbawKuv HXm0PilNURbvnbhY31dx2irJap3LK5tsNTxj0Lu1OuTKk6qiLPUb6SGnJJxSQHcx wZ2nFBlAY0X/6wcSYqmnLVGXHToZeNiCYogsacF+JVLDcq5xBsiFGi5IzQJ45xxG nyfhgaeXPpKpKKsoopFl7S52+B3DQyXvcVjpX1ulsN+XqBtQDyFViQo/6pqWYg/K dQx9stYxFgnKbcpWiLoTSrSQkk2RXf6jp12eyKxVoE66Vl+qaO5zrNEkQwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFGr31h/fZz6Dluwy0BNMe0ovyr4UMB8GA1UdIwQY MBaAFF6V/f0ozcA9idIU5K06bF+z66y/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHBYOV9Tak53RDJKMGhUa3JUcHNYN1Byckw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83YmZmM2UtMDNhYS00ZTBhLWIyZmMt NGE3ZGRmMmQ4NmJkLzEvYXZmV0g5OW5Qb09XN0RMUUUweDdTaV9LdmhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni83YmZmM2UtMDNhYS00ZTBhLWIyZmMtNGE3ZGRmMmQ4NmJk LzEvWHBYOV9Tak53RDJKMGhUa3JUcHNYN1Byckw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABQ9K0D BARQ9KADBAK5aoAwDQYJKoZIhvcNAQELBQADggEBAHl8aHwMETp7pYC+30kkY2mj FRnBDujLVYx43qpQjmB3/IW5RF80HB19N8NfCtx7rZDboUbbck0UFfgc3Sq5q6Dz UuF0nydGK5pw4kroLJbkomOgE6WGpyzuR0Im4cbganEAyib9eUPMcsAu7ID68P1I MC6NRjZmYncDn5xga0h1Bh18PyTokzmzOq1UENGBHFYu9uiv+1XNVtG16tgqcEnc 0R2xLFqy3wZWWzZIcadSW4F6Bvbd+QfpoCXwO5yeYx79j6TgqG0rfnNwzDZli71r NVbyXqyrDCbs0gk6P4Uox4EgL/qquc5AEyUpYl3l+Rt69Oe1KCCp9c0k9LNNUys= -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:14 2026 by rpki-client