This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a90db1-d2f3-48d1-918c-fcebdc0dfc3f/1/Afbz_CgFHMzfcYyB-LhD-CN5fJo.roa File: Afbz_CgFHMzfcYyB-LhD-CN5fJo.roa (raw, json) Hash identifier: UVJ+Ac4Bp4WWuF6LeTd+T8dhUJ7FlhzP+dm7sJQtR5c= Subject key identifier: 01:F6:F3:FC:28:05:1C:CC:DF:71:8C:81:F8:B8:43:F8:23:79:7C:9A Certificate issuer: /CN=72fa41a0a7a68102b53ab31742db61242f75908c Certificate serial: 019B7AC938BF76E37AEE60B0CCFB9B815016 Authority key identifier: 72:FA:41:A0:A7:A6:81:02:B5:3A:B3:17:42:DB:61:24:2F:75:90:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvpBoKemgQK1OrMXQtthJC91kIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a90db1-d2f3-48d1-918c-fcebdc0dfc3f/1/Afbz_CgFHMzfcYyB-LhD-CN5fJo.roa Signing time: Thu 01 Jan 2026 18:19:25 +0000 ROA not before: Thu 01 Jan 2026 18:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43770 IP address blocks: 91.195.154.0/23 maxlen: 23 185.153.4.0/22 maxlen: 22 185.210.220.0/22 maxlen: 22 2a07:84c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a90db1-d2f3-48d1-918c-fcebdc0dfc3f/1/cvpBoKemgQK1OrMXQtthJC91kIw.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a90db1-d2f3-48d1-918c-fcebdc0dfc3f/1/cvpBoKemgQK1OrMXQtthJC91kIw.mft rsync://rpki.ripe.net/repository/DEFAULT/cvpBoKemgQK1OrMXQtthJC91kIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:38:bf:76:e3:7a:ee:60:b0:cc:fb:9b:81:50:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72fa41a0a7a68102b53ab31742db61242f75908c Validity Not Before: Jan 1 18:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01f6f3fc28051cccdf718c81f8b843f823797c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c0:f2:cb:9f:bb:00:1f:3e:39:ab:16:f7:fd: 22:3d:33:7c:1b:2e:35:7b:60:f4:bf:7f:12:e2:a1: 34:96:e9:7a:95:a6:07:f5:3c:71:88:3c:d2:a5:ea: f1:d2:02:25:ac:ba:67:d3:10:85:fa:3c:ce:d0:14: 1f:20:82:a9:f2:49:de:f1:8b:9e:d3:d0:27:6b:c7: a2:6f:65:f7:5b:29:92:4d:48:37:d2:a1:43:d9:ed: 5c:29:3c:9f:af:76:7f:d0:31:dd:6c:94:7d:d2:1a: e1:58:a2:7c:93:ad:89:73:cd:8f:19:2b:d7:1b:17: 4d:5c:ac:61:e1:f9:d0:d4:a3:7f:65:89:52:0d:9d: f4:07:b4:8e:a6:64:8a:31:bf:3e:ba:47:a6:5a:0c: e2:96:f4:da:27:3b:28:26:93:9e:6d:db:c1:9a:54: 99:94:77:44:67:00:33:88:67:a8:a3:81:ee:df:04: 32:8f:92:81:56:bb:3f:ef:fe:c1:18:93:11:51:06: c2:06:6e:12:43:c8:32:eb:4a:b2:4f:c4:86:d0:39: c9:9a:fc:e3:d1:38:56:6a:43:47:1d:2e:12:9f:83: 1c:93:d3:01:81:98:1b:39:aa:fd:8e:75:e5:fe:12: a8:63:a8:9c:a8:2e:9b:b8:b2:12:e0:d7:63:22:55: 38:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F6:F3:FC:28:05:1C:CC:DF:71:8C:81:F8:B8:43:F8:23:79:7C:9A X509v3 Authority Key Identifier: keyid:72:FA:41:A0:A7:A6:81:02:B5:3A:B3:17:42:DB:61:24:2F:75:90:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvpBoKemgQK1OrMXQtthJC91kIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a90db1-d2f3-48d1-918c-fcebdc0dfc3f/1/Afbz_CgFHMzfcYyB-LhD-CN5fJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a90db1-d2f3-48d1-918c-fcebdc0dfc3f/1/cvpBoKemgQK1OrMXQtthJC91kIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.154.0/23 185.153.4.0/22 185.210.220.0/22 IPv6: 2a07:84c0::/29 Signature Algorithm: sha256WithRSAEncryption 7a:45:21:bd:a3:5b:7f:b2:ad:31:48:c2:20:40:e8:7f:28:a3: 09:ad:3b:fe:82:f2:85:73:77:50:45:b1:13:ad:6d:3b:f0:1b: 1c:f0:fd:15:bc:df:83:2b:b8:c4:15:20:f8:bc:e5:6d:af:ea: 3f:37:ed:49:62:9d:c3:09:ce:5a:09:84:5d:f9:4f:a0:ad:70: fa:12:44:d8:da:09:4e:86:e3:3f:ac:15:0a:00:e5:ca:75:b6: 5d:18:d3:29:aa:ad:f1:07:6e:e6:19:ea:66:4c:4a:81:18:ef: 0d:37:6a:a7:c7:83:f6:0c:ed:ba:3c:94:68:14:90:4e:cd:42: d9:5b:97:3b:47:03:11:fa:5c:73:c1:6a:a9:10:48:1b:b4:47: bf:ca:1f:0f:e4:10:b3:1d:ef:d7:01:ef:67:d3:cf:95:30:b9: 09:61:a7:e5:32:dc:62:9e:68:e1:7b:ce:80:58:c9:8a:16:8b: 04:27:1f:84:4a:bb:e1:ce:11:81:04:7f:c9:f2:10:b6:08:90: f1:e1:9e:60:37:7c:79:11:b1:8e:1b:70:cf:6f:58:0e:59:5e: 69:2f:30:b8:91:40:89:e9:f0:b1:82:29:6b:c1:6c:8a:03:b0: 69:d4:a9:ad:20:0a:06:0b:69:1d:52:39:66:a5:13:09:d2:a5: 97:62:1b:7a -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6yTi/duN67mCwzPubgVAWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZmE0MWEwYTdhNjgxMDJiNTNhYjMxNzQyZGI2MTI0MmY3 NTkwOGMwHhcNMjYwMTAxMTgxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWY2ZjNmYzI4MDUxY2NjZGY3MThjODFmOGI4NDNmODIzNzk3YzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8Dyy5+7AB8+OasW9/0iPTN8Gy41 e2D0v38S4qE0lul6laYH9TxxiDzSperx0gIlrLpn0xCF+jzO0BQfIIKp8kne8Yue 09Ana8eib2X3WymSTUg30qFD2e1cKTyfr3Z/0DHdbJR90hrhWKJ8k62Jc82PGSvX GxdNXKxh4fnQ1KN/ZYlSDZ30B7SOpmSKMb8+ukemWgzilvTaJzsoJpOebdvBmlSZ lHdEZwAziGeoo4Hu3wQyj5KBVrs/7/7BGJMRUQbCBm4SQ8gy60qyT8SG0DnJmvzj 0ThWakNHHS4Sn4Mck9MBgZgbOar9jnXl/hKoY6icqC6buLIS4NdjIlU4NQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFAH28/woBRzM33GMgfi4Q/gjeXyaMB8GA1UdIwQY MBaAFHL6QaCnpoECtTqzF0LbYSQvdZCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3ZwQm9LZW1nUUsxT3JNWFF0dGhKQzkxa0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hOTBkYjEtZDJmMy00OGQxLTkxOGMt ZmNlYmRjMGRmYzNmLzEvQWZiel9DZ0ZITXpmY1l5Qi1MaEQtQ041ZkpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hOTBkYjEtZDJmMy00OGQxLTkxOGMtZmNlYmRjMGRmYzNm LzEvY3ZwQm9LZW1nUUsxT3JNWFF0dGhKQzkxa0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBW8OaAwQC uZkEAwQCudLcMA0EAgACMAcDBQMqB4TAMA0GCSqGSIb3DQEBCwUAA4IBAQB6RSG9 o1t/sq0xSMIgQOh/KKMJrTv+gvKFc3dQRbETrW078Bsc8P0VvN+DK7jEFSD4vOVt r+o/N+1JYp3DCc5aCYRd+U+grXD6EkTY2glOhuM/rBUKAOXKdbZdGNMpqq3xB27m GepmTEqBGO8NN2qnx4P2DO26PJRoFJBOzULZW5c7RwMR+lxzwWqpEEgbtEe/yh8P 5BCzHe/XAe9n08+VMLkJYaflMtxinmjhe86AWMmKFosEJx+ESrvhzhGBBH/J8hC2 CJDx4Z5gN3x5EbGOG3DPb1gOWV5pLzC4kUCJ6fCxgilrwWyKA7Bp1KmtIAoGC2kd UjlmpRMJ0qWXYht6 -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:15 2026 by rpki-client