This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/AfDFx5CztN26DfCfFCFVeLtbfYk.roa File: AfDFx5CztN26DfCfFCFVeLtbfYk.roa (raw, json) Hash identifier: 6hydPd19IUZH5tUXaWmgrdl0J31zdN4Hkjua9Sst5JQ= Subject key identifier: 01:F0:C5:C7:90:B3:B4:DD:BA:0D:F0:9F:14:21:55:78:BB:5B:7D:89 Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e Certificate serial: 019B7EA51360E74B1FCA4115ADECDE55A803 Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/AfDFx5CztN26DfCfFCFVeLtbfYk.roa Signing time: Fri 02 Jan 2026 12:18:26 +0000 ROA not before: Fri 02 Jan 2026 12:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206776 IP address blocks: 185.196.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:13:60:e7:4b:1f:ca:41:15:ad:ec:de:55:a8:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e Validity Not Before: Jan 2 12:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01f0c5c790b3b4ddba0df09f14215578bb5b7d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:db:90:27:9c:4d:d5:fd:31:b4:07:bd:fd:fb: 2a:d8:8b:8d:95:11:f3:17:ec:b1:6e:63:3e:18:9b: 10:de:d1:65:24:de:80:6c:40:d2:5a:83:c4:cf:21: c8:0b:16:a7:81:48:0d:86:11:84:a9:c2:bb:4f:97: 23:ec:b2:21:19:04:f0:b4:cc:9b:99:a5:f6:ba:e9: 60:71:7a:cb:1d:7e:23:2f:a0:da:0c:10:7a:93:08: ff:16:2e:87:6d:6b:94:39:18:a9:0a:d7:68:84:49: 7b:fd:5e:42:ef:fe:d5:88:b6:70:c5:77:63:5d:1e: 60:17:11:65:90:03:6c:0c:72:34:44:6f:81:7c:3e: 01:2f:62:ed:87:5b:b1:5e:33:d8:b0:96:e7:1e:59: fb:ed:1d:65:7a:04:ee:ce:fe:0c:14:a2:d7:9e:d1: 18:7b:d0:f7:83:69:63:b6:5f:f5:ee:1e:52:ee:c3: ae:b2:29:b4:46:63:59:16:2c:5a:f4:7d:21:83:c6: 7a:d5:00:a0:74:c1:da:dd:15:d4:e1:ab:c9:99:29: 30:b4:5c:bb:1c:6e:d9:6b:64:2c:b5:e8:16:67:a1: 16:60:65:e1:b4:50:13:df:db:ea:41:fc:35:52:92: f6:8d:9b:d6:a3:be:a6:9b:0c:2a:76:53:e6:1f:70: 98:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F0:C5:C7:90:B3:B4:DD:BA:0D:F0:9F:14:21:55:78:BB:5B:7D:89 X509v3 Authority Key Identifier: keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/AfDFx5CztN26DfCfFCFVeLtbfYk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.222.0/24 Signature Algorithm: sha256WithRSAEncryption 53:36:e7:c7:95:d2:24:84:f7:62:9c:c8:c8:5d:05:c4:c1:5e: 8c:f8:15:85:e2:2a:7f:98:01:1c:7a:07:90:51:80:cd:18:b1: 22:e6:e0:9f:1b:bf:ba:e9:41:29:b5:be:f5:95:7c:97:27:5b: 92:20:6d:19:56:b2:07:57:f2:7d:fd:82:54:63:c7:c6:6d:75: 81:d8:41:8b:bc:f0:45:40:a1:31:29:6f:6a:2e:46:ed:77:e6: 37:74:a7:ba:ab:06:12:6e:ca:48:53:85:4d:d7:65:41:56:0e: bf:e5:b2:20:da:28:c6:ed:e3:15:42:48:05:7a:55:83:2e:f0: b7:33:a0:c7:11:d1:fc:ec:80:27:cd:80:b1:3c:5a:5e:06:09: 51:a5:47:80:8a:20:8b:2b:db:68:d9:ca:cc:11:9d:4d:95:d2: f2:ab:76:d2:bf:20:ad:15:bf:18:16:a3:14:e7:16:59:1a:d5: a1:96:ce:3b:2b:55:fa:e9:21:ba:09:b8:53:69:2a:0a:04:fb: 5c:2d:ab:a4:fe:fe:b2:8d:22:f2:8d:10:2e:32:74:69:06:52: 35:31:fc:99:8a:e2:8c:22:7d:0f:d4:71:0e:15:53:c0:41:2d: 30:5b:f9:76:96:89:97:11:0b:66:c8:5a:80:31:82:01:43:27: d4:8d:11:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pRNg50sfykEVrezeVagDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2U1NjlhMTRjMmRiMzc3MmYyMzE4N2NlNjhlNjU0MWVj MDA0OGUwHhcNMjYwMTAyMTIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWYwYzVjNzkwYjNiNGRkYmEwZGYwOWYxNDIxNTU3OGJiNWI3ZDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltuQJ5xN1f0xtAe9/fsq2IuNlRHz F+yxbmM+GJsQ3tFlJN6AbEDSWoPEzyHICxangUgNhhGEqcK7T5cj7LIhGQTwtMyb maX2uulgcXrLHX4jL6DaDBB6kwj/Fi6HbWuUORipCtdohEl7/V5C7/7ViLZwxXdj XR5gFxFlkANsDHI0RG+BfD4BL2Lth1uxXjPYsJbnHln77R1legTuzv4MFKLXntEY e9D3g2ljtl/17h5S7sOusim0RmNZFixa9H0hg8Z61QCgdMHa3RXU4avJmSkwtFy7 HG7Za2QstegWZ6EWYGXhtFAT39vqQfw1UpL2jZvWo76mmwwqdlPmH3CYGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAHwxceQs7Tdug3wnxQhVXi7W32JMB8GA1UdIwQY MBaAFJnOVpoUwts3cvIxh85o5lQewASOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQt MTA5NTU0NGM2YzUwLzEvQWZERng1Q3p0TjI2RGZDZkZDRlZlTHRiZllrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQtMTA5NTU0NGM2YzUw LzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucTeMA0G CSqGSIb3DQEBCwUAA4IBAQBTNufHldIkhPdinMjIXQXEwV6M+BWF4ip/mAEcegeQ UYDNGLEi5uCfG7+66UEptb71lXyXJ1uSIG0ZVrIHV/J9/YJUY8fGbXWB2EGLvPBF QKExKW9qLkbtd+Y3dKe6qwYSbspIU4VN12VBVg6/5bIg2ijG7eMVQkgFelWDLvC3 M6DHEdH87IAnzYCxPFpeBglRpUeAiiCLK9to2crMEZ1NldLyq3bSvyCtFb8YFqMU 5xZZGtWhls47K1X66SG6CbhTaSoKBPtcLauk/v6yjSLyjRAuMnRpBlI1MfyZiuKM In0P1HEOFVPAQS0wW/l2lomXEQtmyFqAMYIBQyfUjRH+ -----END CERTIFICATE-----Generated at Fri Jan 23 09:20:41 2026 by rpki-client