This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/afwmdDPxI0FC4beVffmJEKKbBsQ.roa File: afwmdDPxI0FC4beVffmJEKKbBsQ.roa (raw, json) Hash identifier: LbqhvTjyTIjZ8Qt17ioh33uzMoc1zh5mFq98Ml4kaWY= Subject key identifier: 69:FC:26:74:33:F1:23:41:42:E1:B7:95:7D:F9:89:10:A2:9B:06:C4 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B7759697C99751499686708116DA23D76 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/afwmdDPxI0FC4beVffmJEKKbBsQ.roa Signing time: Thu 01 Jan 2026 02:18:26 +0000 ROA not before: Thu 01 Jan 2026 02:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62162 IP address blocks: 85.204.43.0/24 maxlen: 24 85.204.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:69:7c:99:75:14:99:68:67:08:11:6d:a2:3d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69fc267433f1234142e1b7957df98910a29b06c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7a:5a:6c:fe:28:96:44:7e:32:4a:d9:d5:98: 7d:27:1b:64:9e:50:f1:43:82:9f:af:f3:97:1c:de: b7:1d:71:46:37:75:7f:34:5e:37:55:97:d9:44:00: 69:ca:97:d7:44:12:93:60:88:d9:a5:1d:71:cb:88: ed:1f:b0:2d:9d:bc:f7:0e:97:97:17:3a:50:53:bb: f5:bd:e3:be:1b:4a:4b:d8:b9:5c:56:1d:98:8a:ab: 47:d4:84:d0:f7:47:31:84:5d:8c:1e:0d:2d:c2:77: 8d:14:a6:13:09:34:69:ff:01:27:35:0b:1d:94:a5: 5e:46:9d:59:3f:8b:98:26:3d:ad:4a:76:ff:3e:2e: ee:b6:ba:76:84:ca:c3:22:81:ea:71:bf:f0:11:77: 93:4f:5a:d8:5c:70:00:be:66:09:03:31:ee:66:13: 99:c9:3a:08:e3:ab:e6:5c:c5:ef:9a:61:7d:4e:40: 7b:21:d4:cb:f8:e9:aa:99:02:c7:77:2b:db:d8:41: da:6b:42:cb:72:a6:87:35:6d:0d:f9:65:37:31:07: 3e:58:03:f0:6f:3f:93:dc:4f:47:2a:49:74:a7:cd: fe:00:69:58:f6:af:02:d6:ea:fb:57:a2:0d:9d:4d: db:3c:e6:6c:8f:29:cb:06:83:fc:21:d2:e4:d0:3b: ab:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FC:26:74:33:F1:23:41:42:E1:B7:95:7D:F9:89:10:A2:9B:06:C4 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/afwmdDPxI0FC4beVffmJEKKbBsQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.204.43.0/24 85.204.73.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:5b:be:03:29:aa:97:1d:c6:ca:bf:f2:3e:89:3f:2f:4c:38: fe:9f:c7:8f:63:22:73:24:10:f1:c2:cc:5e:ee:6e:bf:51:eb: d3:e2:10:da:b7:85:af:02:45:70:97:9a:1a:bd:4b:ef:c7:9b: f5:b7:71:38:30:97:c4:d2:47:88:47:64:c1:87:ec:a9:50:6e: 36:08:58:d0:74:e3:c7:f7:5a:6c:d8:c7:07:79:b3:1b:d1:2d: f3:9b:03:b2:a8:f2:a3:18:2a:a5:5e:df:26:c3:c4:85:03:d3: ce:85:b4:d0:75:5b:88:d1:ba:e0:d0:5b:43:a2:ba:d6:f8:48: bc:42:0f:27:a3:0c:e2:62:5e:4b:3c:44:2a:37:65:21:6c:f6: f9:64:03:6a:32:f2:fc:06:f0:16:e6:a0:af:59:92:0f:15:2a: 2e:13:80:84:00:36:e2:a9:0d:b2:31:fe:45:be:f0:4c:c6:f3: d9:bd:f0:10:a4:65:08:4b:ec:30:91:c0:0b:1f:fc:17:ec:0e: f1:64:f7:30:f3:d1:81:1f:73:ed:89:40:0b:44:8f:c1:77:70: 06:37:ee:13:23:d1:1b:44:49:65:ef:ec:71:cc:82:f5:40:8c: fa:70:25:ef:3f:a9:fc:a5:3a:ff:a4:60:c0:3f:c0:cf:06:33: e9:17:64:b1 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3WWl8mXUUmWhnCBFtoj12MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWZjMjY3NDMzZjEyMzQxNDJlMWI3OTU3ZGY5ODkxMGEyOWIwNmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHpabP4olkR+MkrZ1Zh9JxtknlDx Q4Kfr/OXHN63HXFGN3V/NF43VZfZRABpypfXRBKTYIjZpR1xy4jtH7Atnbz3DpeX FzpQU7v1veO+G0pL2LlcVh2YiqtH1ITQ90cxhF2MHg0twneNFKYTCTRp/wEnNQsd lKVeRp1ZP4uYJj2tSnb/Pi7utrp2hMrDIoHqcb/wEXeTT1rYXHAAvmYJAzHuZhOZ yToI46vmXMXvmmF9TkB7IdTL+OmqmQLHdyvb2EHaa0LLcqaHNW0N+WU3MQc+WAPw bz+T3E9HKkl0p83+AGlY9q8C1ur7V6INnU3bPOZsjynLBoP8IdLk0DursQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGn8JnQz8SNBQuG3lX35iRCimwbEMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL2Fmd21kRFB4STBGQzRiZVZmZm1KRUtLYkJzUS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABVzCsD BABVzEkwDQYJKoZIhvcNAQELBQADggEBAH1bvgMpqpcdxsq/8j6JPy9MOP6fx49j InMkEPHCzF7ubr9R69PiENq3ha8CRXCXmhq9S+/Hm/W3cTgwl8TSR4hHZMGH7KlQ bjYIWNB048f3WmzYxwd5sxvRLfObA7Ko8qMYKqVe3ybDxIUD086FtNB1W4jRuuDQ W0Oiutb4SLxCDyejDOJiXks8RCo3ZSFs9vlkA2oy8vwG8BbmoK9Zkg8VKi4TgIQA NuKpDbIx/kW+8EzG89m98BCkZQhL7DCRwAsf/BfsDvFk9zDz0YEfc+2JQAtEj8F3 cAY37hMj0RtESWXv7HHMgvVAjPpwJe8/qfylOv+kYMA/wM8GM+kXZLE= -----END CERTIFICATE-----Generated at Sun Jan 25 13:00:37 2026 by rpki-client