This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/Af8A-DlcdQcQEG1iSd_AG8TQ-Is.roa File: Af8A-DlcdQcQEG1iSd_AG8TQ-Is.roa (raw, json) Hash identifier: 05pphNsHs/lZ9Wx7yqy4/o8gKg0IO3YqZIzgokwWHFQ= Subject key identifier: 01:FF:00:F8:39:5C:75:07:10:10:6D:62:49:DF:C0:1B:C4:D0:F8:8B Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Certificate serial: 019B7AC7E9C5DEE1D0C650A11E88A6E526E8 Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/Af8A-DlcdQcQEG1iSd_AG8TQ-Is.roa Signing time: Thu 01 Jan 2026 18:18:00 +0000 ROA not before: Thu 01 Jan 2026 18:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1163 IP address blocks: 145.102.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e9:c5:de:e1:d0:c6:50:a1:1e:88:a6:e5:26:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Validity Not Before: Jan 1 18:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01ff00f8395c750710106d6249dfc01bc4d0f88b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fb:77:12:96:07:81:37:b7:0a:c9:6f:d8:90: 59:e4:a2:bf:f3:33:97:eb:9e:79:98:dd:10:7a:0d: 49:c9:5f:47:91:fd:b0:0b:4a:6e:fe:47:27:3b:44: 78:5d:60:4a:07:15:ac:84:86:1f:f4:ce:73:ad:a5: 62:ab:0b:f1:36:55:5b:88:f7:f7:09:55:44:ea:90: 7c:2b:c3:57:65:e0:4a:c1:4e:a6:5f:09:61:57:4d: a2:9c:71:c7:72:c3:22:c8:2a:c4:2a:84:d3:42:9e: 89:ab:2e:d4:51:20:01:7a:c1:2a:1e:b1:31:3d:96: 4c:ad:31:2a:9f:ee:26:a7:a0:59:9c:41:65:2d:bd: 49:84:e2:b9:e3:e6:45:9b:33:19:ed:39:d2:fc:ce: 95:94:4a:ea:e9:ea:19:d0:95:a3:6a:18:69:3b:46: d1:b7:3d:67:45:24:4a:6b:cd:0e:b3:0f:04:cb:87: 68:04:e4:3b:a7:e5:63:af:59:b2:66:31:59:46:af: b8:26:4e:cc:c7:4d:79:98:78:7b:32:3f:67:ac:cc: 48:b9:e1:35:15:c2:23:72:6d:d4:7a:e9:33:7d:5b: 4f:98:17:fc:3c:45:20:af:93:79:f7:40:d6:73:51: 80:e8:fb:ec:6d:62:db:b3:64:49:87:f6:28:8b:e3: ab:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FF:00:F8:39:5C:75:07:10:10:6D:62:49:DF:C0:1B:C4:D0:F8:8B X509v3 Authority Key Identifier: keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/Af8A-DlcdQcQEG1iSd_AG8TQ-Is.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.102.129.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:ff:ce:1d:e9:0d:b0:c4:bb:ef:40:60:6c:31:31:e1:c2:f7: dd:d4:a3:cf:a0:8d:c8:71:ea:86:f8:25:ef:32:47:2c:82:75: 5f:83:65:50:d4:7e:b3:24:18:c2:07:2a:33:a1:f4:6e:08:7c: 27:a2:bd:e8:dc:b0:18:3e:08:50:61:2a:e0:ae:e6:43:53:7b: 57:88:55:5d:de:63:4b:7c:1d:3f:c3:1b:ec:18:af:9d:7b:f3: 2e:43:2a:0c:58:3a:52:cd:46:cd:af:ee:4d:a9:eb:b8:e8:3a: e0:3d:31:1e:6b:c1:6f:8d:f1:81:e5:ac:0a:45:7b:ad:65:97: 45:65:2c:cc:01:d8:f4:59:cb:b7:9c:5c:a3:f5:fa:64:df:2b: f1:be:3c:52:9b:9d:e5:6b:fa:6f:38:66:4e:9e:ff:78:9e:6f: 60:86:61:62:27:7b:cc:9e:2e:52:52:6c:83:b2:1a:2c:2f:ab: 7d:92:46:4e:0f:c2:c5:1a:62:43:46:9a:bf:c2:69:bc:f0:90: 57:74:a2:b4:85:82:b8:a6:b6:71:a8:13:99:1a:48:05:43:a1: ea:99:6b:5c:da:ef:be:eb:85:e2:1e:50:8f:a3:0d:b6:17:aa: 45:8c:a0:97:74:1e:dd:bc:f8:83:de:a0:91:94:34:fe:f6:78: 04:ed:d1:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x+nF3uHQxlChHoim5SboMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm NDUyM2UwHhcNMjYwMTAxMTgxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWZmMDBmODM5NWM3NTA3MTAxMDZkNjI0OWRmYzAxYmM0ZDBmODhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vt3EpYHgTe3Cslv2JBZ5KK/8zOX 6555mN0Qeg1JyV9Hkf2wC0pu/kcnO0R4XWBKBxWshIYf9M5zraViqwvxNlVbiPf3 CVVE6pB8K8NXZeBKwU6mXwlhV02inHHHcsMiyCrEKoTTQp6Jqy7UUSABesEqHrEx PZZMrTEqn+4mp6BZnEFlLb1JhOK54+ZFmzMZ7TnS/M6VlErq6eoZ0JWjahhpO0bR tz1nRSRKa80Osw8Ey4doBOQ7p+Vjr1myZjFZRq+4Jk7Mx015mHh7Mj9nrMxIueE1 FcIjcm3UeukzfVtPmBf8PEUgr5N590DWc1GA6PvsbWLbs2RJh/Yoi+OrdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAH/APg5XHUHEBBtYknfwBvE0PiLMB8GA1UdIwQY MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt NTQ4NjFmMjMyNDlkLzEvQWY4QS1EbGNkUWNRRUcxaVNkX0FHOFRRLUlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkWaBMA0G CSqGSIb3DQEBCwUAA4IBAQAK/84d6Q2wxLvvQGBsMTHhwvfd1KPPoI3IceqG+CXv MkcsgnVfg2VQ1H6zJBjCByozofRuCHwnor3o3LAYPghQYSrgruZDU3tXiFVd3mNL fB0/wxvsGK+de/MuQyoMWDpSzUbNr+5Nqeu46DrgPTEea8FvjfGB5awKRXutZZdF ZSzMAdj0Wcu3nFyj9fpk3yvxvjxSm53la/pvOGZOnv94nm9ghmFiJ3vMni5SUmyD shosL6t9kkZOD8LFGmJDRpq/wmm88JBXdKK0hYK4prZxqBOZGkgFQ6HqmWtc2u++ 64XiHlCPow22F6pFjKCXdB7dvPiD3qCRlDT+9ngE7dH+ -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:26 2026 by rpki-client