This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/AFQC7jHnRlCUVKp9-Y8DclCs6sw.roa File: AFQC7jHnRlCUVKp9-Y8DclCs6sw.roa (raw, json) Hash identifier: K8ES0stF0B9nVEj6mDlZTMrk2WtUAQbBdwAem6tOZGY= Subject key identifier: 00:54:02:EE:31:E7:46:50:94:54:AA:7D:F9:8F:03:72:50:AC:EA:CC Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940 Certificate serial: 019B7CEE4D3B172FE09C2BF4A0F6AD95C61F Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/AFQC7jHnRlCUVKp9-Y8DclCs6sw.roa Signing time: Fri 02 Jan 2026 04:19:10 +0000 ROA not before: Fri 02 Jan 2026 04:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203970 IP address blocks: 139.15.0.0/20 maxlen: 24 185.112.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:4d:3b:17:2f:e0:9c:2b:f4:a0:f6:ad:95:c6:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940 Validity Not Before: Jan 2 04:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=005402ee31e746509454aa7df98f037250aceacc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:63:95:98:db:e1:64:26:15:85:bb:7a:36:a1: 7b:12:54:b7:c9:fe:44:d8:af:0f:fc:32:99:ff:e7: 8c:db:a5:aa:52:ad:97:f2:f4:3e:48:30:55:51:e4: b1:6d:c2:c6:cf:0f:9b:6e:84:24:48:ea:4c:16:06: fe:57:3c:77:60:3e:e4:e6:7d:af:1e:f3:f4:55:dc: 18:92:fd:8f:ef:09:6a:b3:58:ae:06:9f:6c:8b:fa: a8:ee:73:c3:8c:73:97:e1:2a:c8:a8:ec:00:c2:5b: a3:d5:a2:37:b9:95:b9:5e:bf:5b:98:75:2d:46:aa: ec:c6:98:57:62:ae:0b:b5:2c:fc:5d:ef:b1:f5:73: 46:bf:8d:26:27:85:d8:72:00:c7:2e:28:0a:7e:79: e4:4b:08:c7:39:f0:4c:9b:e5:37:2e:ab:6a:48:3e: fc:f1:7c:07:76:ba:94:2b:ab:e4:01:fb:88:af:4c: 56:5b:3d:f7:0b:29:a6:85:d8:7b:f1:e0:a1:56:82: 79:4a:67:15:79:d2:79:02:5f:6f:1b:a5:e2:65:d5: 98:b1:38:04:6f:32:31:99:9f:47:b2:23:cf:a5:62: c1:29:da:a9:94:33:bb:79:bc:db:42:dc:63:10:b0: 19:3a:d2:ff:43:45:c0:72:db:36:55:29:81:4d:3c: ed:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:54:02:EE:31:E7:46:50:94:54:AA:7D:F9:8F:03:72:50:AC:EA:CC X509v3 Authority Key Identifier: keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/AFQC7jHnRlCUVKp9-Y8DclCs6sw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.15.0.0/20 185.112.176.0/22 Signature Algorithm: sha256WithRSAEncryption aa:de:99:b5:d8:58:85:60:49:f1:0a:cf:f8:a1:a2:ab:91:28: 4d:b7:21:30:5d:92:cf:0f:65:ed:92:fc:8b:6d:8b:0f:c0:a7: 5f:73:cf:14:95:df:a3:85:51:48:79:09:cc:5a:78:fe:21:d1: 14:68:e0:f6:33:44:b0:7c:50:08:a2:1b:03:2a:f6:92:68:14: ff:0f:be:60:2d:cd:9e:d4:a0:86:03:65:82:d7:54:57:3d:a5: 1c:d3:b2:dc:58:5f:57:51:57:26:e8:de:c3:a3:06:ea:fd:e7: 35:51:71:5c:51:40:d6:ef:c0:0f:32:a9:31:59:45:88:9e:87: f8:e5:db:a3:9d:7a:5b:65:22:2c:eb:7a:4d:b6:85:22:ac:0b: 33:aa:ab:4d:c9:fb:8c:be:b3:1e:df:e8:1d:e5:86:5d:d2:f0: 80:ef:d0:27:4c:b1:66:04:20:fb:9f:ea:19:81:e3:a6:d0:81: 9a:68:af:ea:9b:af:df:3a:e3:43:80:65:23:52:ad:ae:87:68: 81:57:53:8a:80:81:5c:13:28:c7:d8:95:0f:16:69:0b:91:e8: b1:a7:6c:fc:d6:d4:43:d9:60:66:10:6d:9a:29:02:ae:2c:30: 04:14:04:33:c1:14:25:5e:35:63:b8:40:14:92:42:59:ad:d2: be:60:ae:26 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87k07Fy/gnCv0oPatlcYfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NDkyOGEzOTYyN2NkNWVlNWY5NzViZDg5N2MyZDc3NWFi Mjk5NDAwHhcNMjYwMTAyMDQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDU0MDJlZTMxZTc0NjUwOTQ1NGFhN2RmOThmMDM3MjUwYWNlYWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2OVmNvhZCYVhbt6NqF7ElS3yf5E 2K8P/DKZ/+eM26WqUq2X8vQ+SDBVUeSxbcLGzw+bboQkSOpMFgb+Vzx3YD7k5n2v HvP0VdwYkv2P7wlqs1iuBp9si/qo7nPDjHOX4SrIqOwAwluj1aI3uZW5Xr9bmHUt RqrsxphXYq4LtSz8Xe+x9XNGv40mJ4XYcgDHLigKfnnkSwjHOfBMm+U3LqtqSD78 8XwHdrqUK6vkAfuIr0xWWz33Cymmhdh78eChVoJ5SmcVedJ5Al9vG6XiZdWYsTgE bzIxmZ9HsiPPpWLBKdqplDO7ebzbQtxjELAZOtL/Q0XActs2VSmBTTztzwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFABUAu4x50ZQlFSqffmPA3JQrOrMMB8GA1UdIwQY MBaAFIlJKKOWJ81e5fl1vYl8LXdasplAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEt MTU5M2Q0MDQ1Y2JjLzEvQUZRQzdqSG5SbENVVktwOS1ZOERjbENzNnN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEtMTU5M2Q0MDQ1Y2Jj LzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEiw8AAwQC uXCwMA0GCSqGSIb3DQEBCwUAA4IBAQCq3pm12FiFYEnxCs/4oaKrkShNtyEwXZLP D2XtkvyLbYsPwKdfc88Uld+jhVFIeQnMWnj+IdEUaOD2M0SwfFAIohsDKvaSaBT/ D75gLc2e1KCGA2WC11RXPaUc07LcWF9XUVcm6N7Dowbq/ec1UXFcUUDW78APMqkx WUWInof45dujnXpbZSIs63pNtoUirAszqqtNyfuMvrMe3+gd5YZd0vCA79AnTLFm BCD7n+oZgeOm0IGaaK/qm6/fOuNDgGUjUq2uh2iBV1OKgIFcEyjH2JUPFmkLkeix p2z81tRD2WBmEG2aKQKuLDAEFAQzwRQlXjVjuEAUkkJZrdK+YK4m -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:21 2026 by rpki-client