This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/AfDUmyK_-yRdfu3oY0w-ZmuI_n8.roa File: AfDUmyK_-yRdfu3oY0w-ZmuI_n8.roa (raw, json) Hash identifier: LsPuKpZEctSg8i+4uevFKA+sYuA+iu39H7g8hC66rsA= Subject key identifier: 01:F0:D4:9B:22:BF:FB:24:5D:7E:ED:E8:63:4C:3E:66:6B:88:FE:7F Certificate issuer: /CN=38728e9bd37399df9ffae587bd06884b350a65b7 Certificate serial: 019B78A35CAA76111F466DF48893BA4ADDC3 Authority key identifier: 38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/AfDUmyK_-yRdfu3oY0w-ZmuI_n8.roa Signing time: Thu 01 Jan 2026 08:18:50 +0000 ROA not before: Thu 01 Jan 2026 08:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20495 IP address blocks: 185.184.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5c:aa:76:11:1f:46:6d:f4:88:93:ba:4a:dd:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38728e9bd37399df9ffae587bd06884b350a65b7 Validity Not Before: Jan 1 08:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01f0d49b22bffb245d7eede8634c3e666b88fe7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9e:71:21:0c:6f:5e:e1:1a:74:fe:ee:a0:8b: 9f:37:bb:14:b8:06:29:52:36:75:df:ad:fa:3f:2e: a8:ce:b4:4e:5a:5c:a1:44:7d:e6:16:ba:07:f7:80: d1:f7:36:54:58:47:bd:26:5c:60:26:27:09:8d:af: 65:36:8a:de:d1:1c:30:84:b5:7e:e1:de:c8:5c:d3: b3:dd:3a:8c:bd:1b:01:d7:7f:1b:6e:0a:a4:06:80: b0:6b:f1:6e:5f:31:03:a7:77:d3:ff:b4:56:32:ff: ce:1b:e4:ed:c6:5c:88:fb:60:4e:22:d7:c1:7f:f2: bd:fa:03:12:78:5e:1e:07:d0:98:15:d1:6c:bd:4f: 49:64:3b:eb:f5:f1:52:4b:de:30:e8:bf:29:77:31: 0b:b8:3a:ad:66:70:ac:88:cd:21:03:3f:e8:2e:1e: d3:38:61:27:76:07:c4:e8:26:45:ec:7c:5a:f5:a7: 46:5e:0c:c8:15:b9:e5:48:67:e8:fc:90:21:b3:7e: f9:9c:2b:ea:81:20:e9:4a:b3:14:53:3e:83:4b:bd: f4:0b:df:8f:eb:03:00:79:28:d3:c7:1a:25:0c:16: ce:9e:a3:8d:bb:1f:a7:d8:70:da:1d:a6:1f:67:55: 46:c7:c8:fd:57:34:f9:99:e4:28:18:07:0d:30:62: 4b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F0:D4:9B:22:BF:FB:24:5D:7E:ED:E8:63:4C:3E:66:6B:88:FE:7F X509v3 Authority Key Identifier: keyid:38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/AfDUmyK_-yRdfu3oY0w-ZmuI_n8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.184.108.0/22 Signature Algorithm: sha256WithRSAEncryption 56:06:b9:6a:58:cb:9e:b1:68:79:72:3f:08:74:97:74:72:7d: b7:14:3e:dd:cb:4a:09:a5:56:3e:99:1a:39:4d:8a:fa:d9:89: b0:07:c5:33:60:cf:1a:cd:44:e9:cf:30:9f:3d:bb:c8:67:c2: c8:be:80:f2:57:b7:e8:9a:c8:d0:9a:17:44:dc:d1:4f:00:ae: a0:51:11:33:3d:56:29:66:90:e9:b6:18:79:fe:66:15:e5:04: d2:b3:d3:7a:2e:2a:fb:ec:f0:9c:36:3c:f5:1f:46:1e:81:76: db:68:cf:3e:1f:5f:52:9a:79:dc:b2:02:70:88:2e:cf:fb:60: 85:8f:c2:5b:32:35:d7:c3:62:2e:d6:9e:42:6e:17:69:b6:c3: f3:98:2d:08:15:67:14:8d:a9:fb:15:53:e7:06:fd:5d:8f:7c: 09:0d:17:15:db:5c:3e:3f:4d:dd:88:25:b2:df:ec:1d:d5:f2: ff:04:2c:f7:68:30:0b:83:0f:4b:d1:18:63:a9:d0:95:3f:cc: d4:f5:12:70:db:4f:e0:42:13:c6:20:87:00:9a:38:51:ad:c5: 89:45:b7:89:77:47:99:28:17:a6:e8:b9:06:52:6c:9c:fd:27: 65:d4:fe:81:f3:5f:9b:b3:e9:6d:2a:ea:88:92:0f:f1:39:33: db:09:d0:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o1yqdhEfRm30iJO6St3DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NzI4ZTliZDM3Mzk5ZGY5ZmZhZTU4N2JkMDY4ODRiMzUw YTY1YjcwHhcNMjYwMTAxMDgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWYwZDQ5YjIyYmZmYjI0NWQ3ZWVkZTg2MzRjM2U2NjZiODhmZTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4J5xIQxvXuEadP7uoIufN7sUuAYp UjZ13636Py6ozrROWlyhRH3mFroH94DR9zZUWEe9JlxgJicJja9lNore0RwwhLV+ 4d7IXNOz3TqMvRsB138bbgqkBoCwa/FuXzEDp3fT/7RWMv/OG+TtxlyI+2BOItfB f/K9+gMSeF4eB9CYFdFsvU9JZDvr9fFSS94w6L8pdzELuDqtZnCsiM0hAz/oLh7T OGEndgfE6CZF7Hxa9adGXgzIFbnlSGfo/JAhs375nCvqgSDpSrMUUz6DS730C9+P 6wMAeSjTxxolDBbOnqONux+n2HDaHaYfZ1VGx8j9VzT5meQoGAcNMGJL9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAHw1Jsiv/skXX7t6GNMPmZriP5/MB8GA1UdIwQY MBaAFDhyjpvTc5nfn/rlh70GiEs1CmW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0hLT205TnptZC1mLXVXSHZRYUlTelVLWmJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iZTNlMjUtODgxYy00YWVjLWE5MzIt ZjhjZmEzM2Q2ODRlLzEvQWZEVW15S18teVJkZnUzb1kwdy1abXVJX244LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9iZTNlMjUtODgxYy00YWVjLWE5MzItZjhjZmEzM2Q2ODRl LzEvT0hLT205TnptZC1mLXVXSHZRYUlTelVLWmJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubhsMA0G CSqGSIb3DQEBCwUAA4IBAQBWBrlqWMuesWh5cj8IdJd0cn23FD7dy0oJpVY+mRo5 TYr62YmwB8UzYM8azUTpzzCfPbvIZ8LIvoDyV7fomsjQmhdE3NFPAK6gUREzPVYp ZpDpthh5/mYV5QTSs9N6Lir77PCcNjz1H0YegXbbaM8+H19SmnncsgJwiC7P+2CF j8JbMjXXw2Iu1p5CbhdptsPzmC0IFWcUjan7FVPnBv1dj3wJDRcV21w+P03diCWy 3+wd1fL/BCz3aDALgw9L0RhjqdCVP8zU9RJw20/gQhPGIIcAmjhRrcWJRbeJd0eZ KBem6LkGUmyc/Sdl1P6B81+bs+ltKuqIkg/xOTPbCdCO -----END CERTIFICATE-----Generated at Mon Jan 26 00:16:30 2026 by rpki-client