This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/AF6sh9exhyT3RadXGsADlkTaLJ8.roa File: AF6sh9exhyT3RadXGsADlkTaLJ8.roa (raw, json) Hash identifier: mmAfrhqPRq547ylhgckT/XcKMg7fuumyD9PAsX1F+Ec= Subject key identifier: 00:5E:AC:87:D7:B1:87:24:F7:45:A7:57:1A:C0:03:96:44:DA:2C:9F Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 019B7910EFBFE5E8D9345BB3C4ABE98CC951 Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/AF6sh9exhyT3RadXGsADlkTaLJ8.roa Signing time: Thu 01 Jan 2026 10:18:31 +0000 ROA not before: Thu 01 Jan 2026 10:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44066 IP address blocks: 5.183.95.0/24 maxlen: 24 45.86.163.0/24 maxlen: 24 46.30.189.0/24 maxlen: 24 46.30.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ef:bf:e5:e8:d9:34:5b:b3:c4:ab:e9:8c:c9:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: Jan 1 10:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=005eac87d7b18724f745a7571ac0039644da2c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3f:cc:e4:c4:af:10:3e:20:c3:65:ff:10:1c: 44:fe:c1:69:38:20:69:33:5b:88:ef:f8:28:a7:3c: 59:48:42:34:9c:83:91:16:28:36:8f:6e:ff:3e:09: ec:eb:92:03:3d:ba:f8:c7:65:ea:85:7e:d1:85:70: 51:77:81:b4:1e:bf:74:88:48:1a:b6:51:8c:9d:fb: ba:87:77:1d:cc:a8:6f:a0:78:f1:c6:b1:f7:37:1e: 20:b7:d0:6e:58:da:c1:3b:3f:f6:b9:9f:b9:79:24: 58:bd:a7:d6:a4:01:cb:14:fe:f0:ab:94:03:8d:7d: 50:0f:43:23:6d:f9:16:ff:29:5c:b9:31:7a:6e:21: 6a:7e:6b:f9:91:79:a0:98:27:78:c4:c1:0b:4d:d2: 47:ae:93:d4:7b:9a:16:4f:a6:37:ce:96:a1:f2:01: 69:ff:c7:b5:0f:5a:7d:a3:5c:29:8f:4c:5f:b1:ca: 7c:0a:4c:b1:f9:b2:fd:98:c9:87:ce:74:fc:5d:8f: da:11:0d:c0:43:34:40:97:bf:67:66:1a:3e:30:28: cd:04:1b:31:1d:a2:8b:b7:38:02:56:33:9c:04:f5: ee:b1:02:7c:d9:3c:b4:52:27:4f:df:2e:e7:92:09: 69:57:11:c5:d0:ab:6a:1e:56:ba:4a:aa:4d:18:bf: fb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5E:AC:87:D7:B1:87:24:F7:45:A7:57:1A:C0:03:96:44:DA:2C:9F X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/AF6sh9exhyT3RadXGsADlkTaLJ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.95.0/24 45.86.163.0/24 46.30.189.0-46.30.190.255 Signature Algorithm: sha256WithRSAEncryption 3a:68:61:a8:86:a8:ce:c4:de:6a:48:f7:c7:7a:40:1b:7e:b3: 36:11:ae:1f:18:b6:d0:0d:da:74:44:99:0c:8d:60:a9:70:93: 66:61:d5:c9:3d:21:be:90:b6:32:4d:d2:a3:a8:ad:99:64:95: d4:59:64:43:17:11:59:89:a3:77:d1:0c:b7:04:13:e2:03:dd: c9:e3:df:cd:30:c0:7f:2e:15:af:3b:55:02:a8:c7:7e:18:ce: 37:37:71:81:22:7d:ec:69:e5:02:5e:67:8f:60:ce:b1:6f:c0: a0:44:32:4d:ab:58:3e:0e:de:3f:d0:15:64:ff:60:1d:c0:9d: f5:93:c5:93:7a:19:0a:08:7a:43:cd:73:0c:09:d0:71:41:25: 83:6b:5c:01:da:ea:53:1c:7d:67:5f:d9:ac:6a:e6:8e:e5:73: c6:01:87:5c:c4:98:12:65:6d:ad:82:ad:4c:e0:30:c8:cf:de: f2:2e:a6:18:5f:de:fa:3f:5b:f9:7d:eb:35:37:92:bb:36:3d: 1d:92:ab:d5:46:d2:a2:1a:5d:aa:26:6e:6a:af:e1:fb:18:cf: c4:9c:b6:c6:36:6a:a5:73:eb:fd:81:41:8c:eb:ed:e1:a2:8b: ce:a9:23:a2:67:bf:c9:b1:41:f7:89:f2:0c:e0:0d:f7:6d:e8: f0:5e:1d:bd -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt5EO+/5ejZNFuzxKvpjMlRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjYwMTAxMTAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDVlYWM4N2Q3YjE4NzI0Zjc0NWE3NTcxYWMwMDM5NjQ0ZGEyYzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT/M5MSvED4gw2X/EBxE/sFpOCBp M1uI7/gopzxZSEI0nIORFig2j27/Pgns65IDPbr4x2XqhX7RhXBRd4G0Hr90iEga tlGMnfu6h3cdzKhvoHjxxrH3Nx4gt9BuWNrBOz/2uZ+5eSRYvafWpAHLFP7wq5QD jX1QD0MjbfkW/ylcuTF6biFqfmv5kXmgmCd4xMELTdJHrpPUe5oWT6Y3zpah8gFp /8e1D1p9o1wpj0xfscp8Ckyx+bL9mMmHznT8XY/aEQ3AQzRAl79nZho+MCjNBBsx HaKLtzgCVjOcBPXusQJ82Ty0UidP3y7nkglpVxHF0KtqHla6SqpNGL/7swIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFABerIfXsYck90WnVxrAA5ZE2iyfMB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvQUY2c2g5ZXhoeVQzUmFkWEdzQURsa1RhTEo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQABbdfAwQA LVajMAwDBAAuHr0DBAAuHr4wDQYJKoZIhvcNAQELBQADggEBADpoYaiGqM7E3mpI 98d6QBt+szYRrh8YttAN2nREmQyNYKlwk2Zh1ck9Ib6QtjJN0qOorZlkldRZZEMX EVmJo3fRDLcEE+ID3cnj380wwH8uFa87VQKox34Yzjc3cYEifexp5QJeZ49gzrFv wKBEMk2rWD4O3j/QFWT/YB3AnfWTxZN6GQoIekPNcwwJ0HFBJYNrXAHa6lMcfWdf 2axq5o7lc8YBh1zEmBJlba2CrUzgMMjP3vIuphhf3vo/W/l96zU3krs2PR2Sq9VG 0qIaXaombmqv4fsYz8SctsY2aqVz6/2BQYzr7eGii86pI6Jnv8mxQfeJ8gzgDfdt 6PBeHb0= -----END CERTIFICATE-----Generated at Sun Jan 25 10:30:18 2026 by rpki-client