This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/AUFsMm-NGs1yxNBgw6rr1pZcQ-c.roa File: AUFsMm-NGs1yxNBgw6rr1pZcQ-c.roa (raw, json) Hash identifier: 4iBvcmN7U/XeqdrUYWh/5pPTsC0ExDr/UBaq8SA+90o= Subject key identifier: 01:41:6C:32:6F:8D:1A:CD:72:C4:D0:60:C3:AA:EB:D6:96:5C:43:E7 Certificate issuer: /CN=e8697eeb84673d81c3b7c07166d96cac1645f833 Certificate serial: 019B76EAE9F7CE18B2CE165743B9DB8E753E Authority key identifier: E8:69:7E:EB:84:67:3D:81:C3:B7:C0:71:66:D9:6C:AC:16:45:F8:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Gl-64RnPYHDt8BxZtlsrBZF-DM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/AUFsMm-NGs1yxNBgw6rr1pZcQ-c.roa Signing time: Thu 01 Jan 2026 00:17:45 +0000 ROA not before: Thu 01 Jan 2026 00:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198211 IP address blocks: 45.146.216.0/22 maxlen: 22 45.146.216.0/24 maxlen: 24 194.107.93.0/24 maxlen: 24 194.107.94.0/24 maxlen: 24 194.107.95.0/24 maxlen: 24 2a0f:3800::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.crl rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft rsync://rpki.ripe.net/repository/DEFAULT/6Gl-64RnPYHDt8BxZtlsrBZF-DM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e9:f7:ce:18:b2:ce:16:57:43:b9:db:8e:75:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8697eeb84673d81c3b7c07166d96cac1645f833 Validity Not Before: Jan 1 00:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01416c326f8d1acd72c4d060c3aaebd6965c43e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f4:87:77:1d:ff:b0:f9:a9:d7:58:7c:82:13: 8d:aa:83:b9:03:9a:88:c3:7a:a3:7a:9b:7c:73:1c: 67:f8:da:4c:f5:29:81:27:2b:a6:d4:4f:d2:b3:d8: a4:63:c2:4a:d7:a7:ab:8e:26:cf:05:f0:18:eb:78: 89:3b:d2:00:37:81:a1:bf:aa:3b:97:9f:55:18:cd: 9c:ed:1d:7b:03:a3:37:8c:3f:3b:e8:50:f0:dd:16: d8:13:80:bd:45:6f:42:be:6e:6c:84:af:17:2d:05: c2:a6:39:bc:0b:ff:56:cc:e5:e7:75:63:13:2a:36: c8:c0:53:f7:26:fc:5d:3c:72:42:2c:84:f0:0c:7f: 70:ec:8f:f5:5e:88:cc:be:bd:9f:91:78:db:78:6b: 98:03:58:74:db:14:21:84:b2:81:7b:6d:23:ac:3f: db:30:9c:3d:7d:c2:17:07:f4:c0:44:7b:e9:8b:4d: b5:c2:8c:68:56:f1:a5:53:bd:d9:e4:8e:17:44:17: 7e:e5:81:5d:13:2f:76:62:17:89:e8:8e:ac:01:02: 23:6e:7f:c3:8e:52:f3:c7:1e:e0:6c:7e:71:15:ca: a4:c6:9d:82:90:98:34:d4:4f:de:ee:9b:fa:85:26: f1:5c:01:fb:88:73:89:92:1e:d5:f3:62:d7:42:75: eb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:41:6C:32:6F:8D:1A:CD:72:C4:D0:60:C3:AA:EB:D6:96:5C:43:E7 X509v3 Authority Key Identifier: keyid:E8:69:7E:EB:84:67:3D:81:C3:B7:C0:71:66:D9:6C:AC:16:45:F8:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Gl-64RnPYHDt8BxZtlsrBZF-DM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/AUFsMm-NGs1yxNBgw6rr1pZcQ-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.216.0/22 194.107.93.0-194.107.95.255 IPv6: 2a0f:3800::/29 Signature Algorithm: sha256WithRSAEncryption 50:b9:80:0a:4a:02:18:6d:ce:e8:85:b8:0e:6c:47:a6:c9:0c: c8:12:61:2d:7d:56:c2:85:4d:ef:1b:29:25:94:75:89:d5:9b: a3:ef:26:36:29:01:0c:e6:ee:9d:26:f9:55:02:8e:13:3e:eb: 59:81:d3:f8:fe:e0:57:8c:4f:4b:ce:5e:54:6e:c2:85:bb:d2: 71:ad:49:33:e7:37:df:a4:2b:9c:91:5a:d7:36:91:54:d2:7e: b0:71:b4:80:06:c8:1a:87:d9:7b:a2:b5:da:e5:b4:24:f8:83: 10:6f:cc:56:7b:c3:54:48:98:54:fb:8a:03:49:98:a1:15:a6: da:4b:24:5e:a8:09:86:ea:95:a7:ce:50:82:f9:e1:26:1a:2a: d0:f2:03:2d:8a:4e:7c:4a:d6:35:50:4d:8c:5a:00:3e:15:61: 3f:b0:dc:f0:26:61:31:27:41:fc:96:af:e0:30:2a:9d:d6:fa: c5:51:18:26:21:ab:bc:62:6f:44:43:10:36:65:cb:5e:d4:0f: 0e:1c:77:f4:43:5b:6f:08:df:6a:d3:54:d2:5a:b6:9b:47:b6: 32:14:18:5b:0a:0c:a3:de:52:32:ac:4c:0b:c8:7f:84:ef:0b: 8c:da:06:6c:4c:f1:e4:6d:4c:b7:1e:f9:2f:6c:aa:f2:9e:ee: ae:cc:92:89 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt26un3zhiyzhZXQ7nbjnU+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4Njk3ZWViODQ2NzNkODFjM2I3YzA3MTY2ZDk2Y2FjMTY0 NWY4MzMwHhcNMjYwMTAxMDAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTQxNmMzMjZmOGQxYWNkNzJjNGQwNjBjM2FhZWJkNjk2NWM0M2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/SHdx3/sPmp11h8ghONqoO5A5qI w3qjept8cxxn+NpM9SmBJyum1E/Ss9ikY8JK16erjibPBfAY63iJO9IAN4Ghv6o7 l59VGM2c7R17A6M3jD876FDw3RbYE4C9RW9Cvm5shK8XLQXCpjm8C/9WzOXndWMT KjbIwFP3JvxdPHJCLITwDH9w7I/1XojMvr2fkXjbeGuYA1h02xQhhLKBe20jrD/b MJw9fcIXB/TARHvpi021woxoVvGlU73Z5I4XRBd+5YFdEy92YheJ6I6sAQIjbn/D jlLzxx7gbH5xFcqkxp2CkJg01E/e7pv6hSbxXAH7iHOJkh7V82LXQnXriwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFAFBbDJvjRrNcsTQYMOq69aWXEPnMB8GA1UdIwQY MBaAFOhpfuuEZz2Bw7fAcWbZbKwWRfgzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkdsLTY0Um5QWUhEdDhCeFp0bHNyQlpGLURNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy84YmZhYjMtMDY3MS00NzVlLTgyMDMt OTM3Mzc2ZWIyM2RhLzEvQVVGc01tLU5HczF5eE5CZ3c2cnIxcFpjUS1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy84YmZhYjMtMDY3MS00NzVlLTgyMDMtOTM3Mzc2ZWIyM2Rh LzEvNkdsLTY0Um5QWUhEdDhCeFp0bHNyQlpGLURNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQCLZLYMAwD BADCa10DBAXCa0AwDQQCAAIwBwMFAyoPOAAwDQYJKoZIhvcNAQELBQADggEBAFC5 gApKAhhtzuiFuA5sR6bJDMgSYS19VsKFTe8bKSWUdYnVm6PvJjYpAQzm7p0m+VUC jhM+61mB0/j+4FeMT0vOXlRuwoW70nGtSTPnN9+kK5yRWtc2kVTSfrBxtIAGyBqH 2XuitdrltCT4gxBvzFZ7w1RImFT7igNJmKEVptpLJF6oCYbqlafOUIL54SYaKtDy Ay2KTnxK1jVQTYxaAD4VYT+w3PAmYTEnQfyWr+AwKp3W+sVRGCYhq7xib0RDEDZl y17UDw4cd/RDW28I32rTVNJatptHtjIUGFsKDKPeUjKsTAvIf4TvC4zaBmxM8eRt TLce+S9sqvKe7q7Mkok= -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:53 2026 by rpki-client