This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/afsk4joDpHnoJv62lZtjXF1VD34.roa File: afsk4joDpHnoJv62lZtjXF1VD34.roa (raw, json) Hash identifier: 1O4prDUnlN0kF0HrU0LRJ6fiYKcIRVrdQ3x8VBal8ls= Subject key identifier: 69:FB:24:E2:3A:03:A4:79:E8:26:FE:B6:95:9B:63:5C:5D:55:0F:7E Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343 Certificate serial: 019B7C121600A21F18062F73A812AFE10B35 Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/afsk4joDpHnoJv62lZtjXF1VD34.roa Signing time: Fri 02 Jan 2026 00:18:38 +0000 ROA not before: Fri 02 Jan 2026 00:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48760 IP address blocks: 185.84.136.0/22 maxlen: 24 195.62.12.0/23 maxlen: 24 2a07:1cc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:16:00:a2:1f:18:06:2f:73:a8:12:af:e1:0b:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343 Validity Not Before: Jan 2 00:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69fb24e23a03a479e826feb6959b635c5d550f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b0:54:d8:f2:8a:8e:67:92:34:f0:74:49:c6: d9:1c:a5:74:18:89:cf:ca:dd:03:63:30:9f:c7:f3: 8d:81:b9:97:ab:5a:2d:9e:6c:16:27:fd:8b:d6:c6: 95:cd:56:20:35:05:bd:54:e4:d6:0e:28:fd:54:6d: 2d:4f:c0:0b:9d:51:2e:78:24:fc:5a:7c:8b:5a:a7: fb:3d:98:3f:82:99:7d:92:0e:97:48:05:a6:3b:22: 55:4b:b0:3b:21:a7:3c:66:8a:5e:40:3d:01:73:8a: 5e:15:29:b0:d8:d7:63:dc:08:d7:5a:ec:58:e6:f2: 0f:75:43:7a:a9:3f:70:15:2c:37:2a:6b:b4:aa:07: 6f:19:b1:75:64:0d:40:c3:2e:97:98:df:8e:1e:1e: 69:16:fa:f7:4f:02:86:c1:1d:a8:ad:2e:48:b5:91: 67:5f:46:73:bb:cd:f6:e7:6c:04:5c:cb:36:28:41: 1b:92:21:01:5c:3b:dd:f5:57:16:ce:4b:de:2f:bf: 65:84:66:d1:37:b5:d0:7d:95:fe:f2:ea:ba:e8:71: f6:a5:a3:ab:a5:61:2f:b6:5e:10:62:71:d6:12:c9: a9:c9:1c:3f:ff:c2:88:36:18:38:cd:e7:9d:a4:31: 9d:a9:ae:55:e1:09:9b:38:51:ff:cc:2d:57:64:07: 81:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FB:24:E2:3A:03:A4:79:E8:26:FE:B6:95:9B:63:5C:5D:55:0F:7E X509v3 Authority Key Identifier: keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/afsk4joDpHnoJv62lZtjXF1VD34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.84.136.0/22 195.62.12.0/23 IPv6: 2a07:1cc0::/29 Signature Algorithm: sha256WithRSAEncryption 9d:92:4e:9c:0c:99:4c:ce:be:54:22:42:62:b5:13:e9:40:92: 06:d2:57:11:09:84:45:69:af:2d:c0:eb:a6:77:ed:45:8f:9c: 04:8f:a8:56:5c:9a:d0:50:f8:8f:0c:e4:93:3a:cb:a7:b9:3f: 34:5c:bb:1b:53:1a:b1:ae:9b:97:d1:fc:ba:2e:e4:b4:b1:d5: 3f:73:85:92:a0:71:1f:b8:91:ef:7a:d2:65:fe:82:9c:21:ad: 19:f5:fc:e1:d7:16:5f:c8:8c:37:26:ee:ea:aa:15:cd:eb:e9: 48:01:dd:44:9a:7c:85:16:d2:02:b2:39:e7:28:b1:c1:df:16: cd:ea:07:a8:f6:ee:40:e8:b4:b1:55:de:b2:4a:6c:60:09:c1: ea:bc:86:6f:59:11:52:ba:87:3d:97:c3:59:cb:bb:e9:94:f8: 87:77:d7:cd:a9:da:67:8c:c1:b8:de:f3:e4:fc:41:d1:4e:a5: 48:96:0b:6c:92:0a:df:a6:2a:ef:6a:69:cc:99:11:f1:4f:6c: 3a:b4:95:db:79:47:b7:53:7b:7c:e0:66:da:53:be:43:f4:82: fe:fd:ea:8e:3a:f5:10:77:26:10:33:cb:09:4f:c2:b4:ce:f4: cf:b4:8d:f6:83:3d:d1:eb:45:f3:08:1e:04:6b:00:91:00:5e: 82:bb:72:44 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8EhYAoh8YBi9zqBKv4Qs1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YTVhYTkxOGNiZmViM2UxMjk5N2YzMzg5MGZlYjI1ODkw N2IzNDMwHhcNMjYwMTAyMDAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWZiMjRlMjNhMDNhNDc5ZTgyNmZlYjY5NTliNjM1YzVkNTUwZjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrBU2PKKjmeSNPB0ScbZHKV0GInP yt0DYzCfx/ONgbmXq1otnmwWJ/2L1saVzVYgNQW9VOTWDij9VG0tT8ALnVEueCT8 WnyLWqf7PZg/gpl9kg6XSAWmOyJVS7A7Iac8ZopeQD0Bc4peFSmw2Ndj3AjXWuxY 5vIPdUN6qT9wFSw3Kmu0qgdvGbF1ZA1Awy6XmN+OHh5pFvr3TwKGwR2orS5ItZFn X0Zzu83252wEXMs2KEEbkiEBXDvd9VcWzkveL79lhGbRN7XQfZX+8uq66HH2paOr pWEvtl4QYnHWEsmpyRw//8KINhg4zeedpDGdqa5V4QmbOFH/zC1XZAeBDwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGn7JOI6A6R56Cb+tpWbY1xdVQ9+MB8GA1UdIwQY MBaAFCalqpGMv+s+Epl/M4kP6yWJB7NDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xNDMzZWEtMTA4MC00NmU1LWI2MTIt Mjk3ZTI4MmQ2NmE4LzEvYWZzazRqb0RwSG5vSnY2MmxadGpYRjFWRDM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8xNDMzZWEtMTA4MC00NmU1LWI2MTItMjk3ZTI4MmQ2NmE4 LzEvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuVSIAwQB wz4MMA0EAgACMAcDBQMqBxzAMA0GCSqGSIb3DQEBCwUAA4IBAQCdkk6cDJlMzr5U IkJitRPpQJIG0lcRCYRFaa8twOumd+1Fj5wEj6hWXJrQUPiPDOSTOsunuT80XLsb UxqxrpuX0fy6LuS0sdU/c4WSoHEfuJHvetJl/oKcIa0Z9fzh1xZfyIw3Ju7qqhXN 6+lIAd1EmnyFFtICsjnnKLHB3xbN6geo9u5A6LSxVd6ySmxgCcHqvIZvWRFSuoc9 l8NZy7vplPiHd9fNqdpnjMG43vPk/EHRTqVIlgtskgrfpirvamnMmRHxT2w6tJXb eUe3U3t84GbaU75D9IL+/eqOOvUQdyYQM8sJT8K0zvTPtI32gz3R60XzCB4EawCR AF6Cu3JE -----END CERTIFICATE-----Generated at Mon Jan 26 12:38:35 2026 by rpki-client