This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/af-JAUgg3uHOnD0P3g5PWRYf2eM.roa File: af-JAUgg3uHOnD0P3g5PWRYf2eM.roa (raw, json) Hash identifier: vEE0ehR7YSTimLugA5ctoJzTVOfPtIWx+nnoGeltd4k= Subject key identifier: 69:FF:89:01:48:20:DE:E1:CE:9C:3D:0F:DE:0E:4F:59:16:1F:D9:E3 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84D823E349349541DA3650DB6EFDB2 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/af-JAUgg3uHOnD0P3g5PWRYf2eM.roa Signing time: Fri 02 Jan 2026 16:22:51 +0000 ROA not before: Fri 02 Jan 2026 16:22:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60603 IP address blocks: 93.171.10.0/23 maxlen: 24 95.47.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d8:23:e3:49:34:95:41:da:36:50:db:6e:fd:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69ff89014820dee1ce9c3d0fde0e4f59161fd9e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5d:ca:5f:18:a1:6a:fc:1b:4d:d7:10:82:2d: 71:e7:a2:ba:6c:3e:30:cc:43:2c:5c:0c:b1:d8:c6: d8:f2:8e:33:2e:0b:ae:55:63:56:13:1e:fd:43:3f: 3a:87:5f:76:b1:48:53:e3:ca:e0:cf:64:a6:f2:7a: bf:2f:b2:8e:ac:73:6e:07:fd:fa:8f:85:36:8d:34: 0b:d9:5b:43:4b:4c:d6:d1:8c:f1:63:6b:80:0b:31: ed:12:dc:72:1f:a0:cb:58:b8:3f:83:b2:3b:4c:33: 01:6c:48:6e:f3:d9:93:61:ab:1b:6b:f1:a9:98:59: c7:97:be:44:49:23:13:1e:15:b1:c5:c5:7c:b4:e3: bc:60:81:40:3b:ea:fc:c2:31:cb:f9:d7:b8:c0:e3: 5c:c2:00:b0:7d:df:88:ea:21:4f:41:63:ae:bc:6e: 59:9a:f7:1e:05:53:4f:58:07:85:08:a8:db:58:9f: fb:cc:dd:36:68:1e:8b:19:91:24:14:91:e3:c3:ad: 52:0a:15:7c:07:e8:f2:d4:94:5d:93:82:56:a9:15: 44:6f:61:5d:71:9c:ed:11:b0:96:ec:e4:59:0f:22: 05:cd:29:67:08:b6:f4:27:64:2f:9d:78:64:c4:a2: 5c:fa:82:ba:7d:b1:06:8b:94:3b:99:d5:99:b4:58: 1d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FF:89:01:48:20:DE:E1:CE:9C:3D:0F:DE:0E:4F:59:16:1F:D9:E3 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/af-JAUgg3uHOnD0P3g5PWRYf2eM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.171.10.0/23 95.47.147.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:d3:f1:68:fd:07:0f:41:dd:c2:8d:34:96:bc:fe:64:e0:73: 3a:df:dd:15:1e:12:4d:1c:87:c2:a1:d5:53:62:62:6f:08:a6: e9:b9:3d:15:1e:35:ba:02:05:43:0e:5c:76:4f:c1:ec:b5:a1: c9:53:32:b0:cb:35:b9:8d:60:cc:7d:e4:96:b3:ed:15:e9:b0: ef:50:27:2d:4f:1f:14:d5:78:7a:cc:92:46:4b:4d:49:74:dc: 3c:73:8b:d6:3f:c9:23:01:95:10:6c:cb:4b:53:da:f7:27:47: 7b:8d:bc:46:44:ca:7e:6e:48:79:78:7e:9c:06:cd:85:35:17: a2:ac:e5:09:eb:8f:f4:76:58:87:11:cc:9c:bd:01:72:93:7f: d7:a1:cc:3e:9e:45:b6:d6:85:38:02:ec:9c:c2:9b:88:e4:c7: 95:67:0f:a7:47:a8:47:77:f4:b0:27:b4:58:69:e7:fc:50:5b: 0e:e9:9a:c1:df:02:cb:55:68:44:69:61:91:fe:d3:17:1c:6e: 57:0f:1c:d4:27:84:d6:d6:fd:4c:58:f1:03:ac:54:f0:c0:06: 5b:4c:d2:75:7b:f4:8d:f1:e9:9e:9b:2f:5e:61:4f:90:d7:44: 0b:e3:67:ee:b0:75:17:82:5b:91:ee:68:f7:95:56:e8:a4:e5: 36:3f:2f:69 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hNgj40k0lUHaNlDbbv2yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWZmODkwMTQ4MjBkZWUxY2U5YzNkMGZkZTBlNGY1OTE2MWZkOWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF3KXxihavwbTdcQgi1x56K6bD4w zEMsXAyx2MbY8o4zLguuVWNWEx79Qz86h192sUhT48rgz2Sm8nq/L7KOrHNuB/36 j4U2jTQL2VtDS0zW0YzxY2uACzHtEtxyH6DLWLg/g7I7TDMBbEhu89mTYasba/Gp mFnHl75ESSMTHhWxxcV8tOO8YIFAO+r8wjHL+de4wONcwgCwfd+I6iFPQWOuvG5Z mvceBVNPWAeFCKjbWJ/7zN02aB6LGZEkFJHjw61SChV8B+jy1JRdk4JWqRVEb2Fd cZztEbCW7ORZDyIFzSlnCLb0J2QvnXhkxKJc+oK6fbEGi5Q7mdWZtFgdQQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGn/iQFIIN7hzpw9D94OT1kWH9njMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvYWYtSkFVZ2czdUhPbkQwUDNnNVBXUllmMmVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXasKAwQA Xy+TMA0GCSqGSIb3DQEBCwUAA4IBAQBb0/Fo/QcPQd3CjTSWvP5k4HM6390VHhJN HIfCodVTYmJvCKbpuT0VHjW6AgVDDlx2T8HstaHJUzKwyzW5jWDMfeSWs+0V6bDv UCctTx8U1Xh6zJJGS01JdNw8c4vWP8kjAZUQbMtLU9r3J0d7jbxGRMp+bkh5eH6c Bs2FNReirOUJ64/0dliHEcycvQFyk3/Xocw+nkW21oU4AuycwpuI5MeVZw+nR6hH d/SwJ7RYaef8UFsO6ZrB3wLLVWhEaWGR/tMXHG5XDxzUJ4TW1v1MWPEDrFTwwAZb TNJ1e/SN8ememy9eYU+Q10QL42fusHUXgluR7mj3lVbopOU2Py9p -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:28 2026 by rpki-client