This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/AfH1FsJhmlZzLVv0joRFh8JXKtI.roa File: AfH1FsJhmlZzLVv0joRFh8JXKtI.roa (raw, json) Hash identifier: C/QZLCrVXN00Tj2Qh4p+y2MkOW5TtBVj68fBG3TFoNA= Subject key identifier: 01:F1:F5:16:C2:61:9A:56:73:2D:5B:F4:8E:84:45:87:C2:57:2A:D2 Certificate issuer: /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112 Certificate serial: 019B7F1588BE5FF3775DB85DAF54BB6942F8 Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/AfH1FsJhmlZzLVv0joRFh8JXKtI.roa Signing time: Fri 02 Jan 2026 14:21:16 +0000 ROA not before: Fri 02 Jan 2026 14:21:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48863 IP address blocks: 185.80.156.0/22 maxlen: 22 213.138.160.0/20 maxlen: 20 213.138.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:88:be:5f:f3:77:5d:b8:5d:af:54:bb:69:42:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112 Validity Not Before: Jan 2 14:21:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01f1f516c2619a56732d5bf48e844587c2572ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b0:18:d5:c5:2c:57:88:54:b8:e7:ce:f7:d9: 00:b8:a0:64:c0:09:ff:45:50:99:aa:e2:8f:76:9f: 75:14:20:62:7a:fb:f7:e1:eb:ea:5e:cf:72:54:2f: 55:50:35:1c:a0:62:6d:ac:62:4e:55:ca:35:18:f9: 1f:12:50:92:61:7b:02:7b:19:f3:2f:67:30:81:3e: 67:37:da:f9:93:19:75:1c:4e:e3:4f:97:8c:d9:9d: fb:4f:c9:4c:21:86:7a:2e:34:e3:92:5d:e2:03:23: 51:0c:87:e6:9c:d0:4f:9d:08:80:9f:10:3f:9c:08: 13:a2:08:a8:69:4d:ed:b8:10:e7:f3:94:57:d4:d2: c8:41:b8:8d:a6:c9:3e:08:69:b4:cb:72:3e:6e:d5: a5:cf:bb:e7:26:70:33:7c:b9:5f:e4:bd:d3:08:dc: 14:85:2f:84:fc:98:92:c4:e8:6a:ad:91:43:d0:c4: 74:cc:f2:f8:65:47:87:c2:fc:c1:2d:79:3f:bb:02: 60:c4:45:40:be:0a:0c:5e:63:1b:54:27:ed:4e:e3: 65:81:19:8d:bf:20:39:1a:5e:34:84:6e:e3:50:7a: 9c:fd:cc:41:d4:be:3f:98:00:72:74:48:cf:3b:a5: 3f:4b:61:25:36:f4:0a:12:b4:9f:de:ff:c9:e4:1e: 13:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F1:F5:16:C2:61:9A:56:73:2D:5B:F4:8E:84:45:87:C2:57:2A:D2 X509v3 Authority Key Identifier: keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/AfH1FsJhmlZzLVv0joRFh8JXKtI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.80.156.0/22 213.138.160.0-213.138.183.255 Signature Algorithm: sha256WithRSAEncryption 3a:4c:47:58:f9:ca:b5:78:b1:c6:a3:ef:a0:a8:5f:53:be:ae: e8:23:95:23:42:b8:01:95:a6:5a:a9:f3:7b:8e:d5:d8:7d:dc: a5:22:d0:3d:8b:df:9f:bf:c9:3f:32:5f:29:7f:bb:25:f3:8c: b1:5a:0f:b8:b7:f7:b6:cf:0f:08:05:34:d1:9d:5b:c4:67:a7: 2d:ef:44:36:5a:6b:96:f7:c6:61:ff:fb:bf:2a:91:11:f6:25: 89:0b:72:53:dc:79:53:25:40:77:2b:77:1b:c8:41:42:ba:03: fc:35:3a:a5:62:ea:3a:bb:8c:e1:46:df:e7:30:09:f1:a4:85: 24:7f:f2:9a:21:e1:47:46:1a:c2:57:e5:5b:b2:2d:b8:7b:d1: 21:46:86:34:75:b4:d2:5a:aa:68:53:e2:f3:13:10:33:b0:3e: a7:b1:89:c1:e1:c1:0e:bf:fc:23:89:a2:f3:38:7a:42:24:a6: 9b:62:f4:cf:5c:ee:40:57:00:ac:2a:6c:5d:bf:17:39:70:76: 3b:f1:15:fb:78:85:f9:18:8e:f8:f1:44:b8:00:3d:25:bc:99: a4:13:d5:4b:0d:41:71:87:16:54:15:37:7d:a2:0f:a7:eb:44: 5d:e5:5e:72:34:b9:3a:42:d2:8d:a3:32:5d:8e:36:6c:7d:a2: c0:df:99:be -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt/FYi+X/N3Xbhdr1S7aUL4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YWM0OWQxY2NkY2FlZGQ5YTEzZjQ4MDNkZjFhZWRjZTZk YzExMTIwHhcNMjYwMTAyMTQyMTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWYxZjUxNmMyNjE5YTU2NzMyZDViZjQ4ZTg0NDU4N2MyNTcyYWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLAY1cUsV4hUuOfO99kAuKBkwAn/ RVCZquKPdp91FCBievv34evqXs9yVC9VUDUcoGJtrGJOVco1GPkfElCSYXsCexnz L2cwgT5nN9r5kxl1HE7jT5eM2Z37T8lMIYZ6LjTjkl3iAyNRDIfmnNBPnQiAnxA/ nAgTogioaU3tuBDn85RX1NLIQbiNpsk+CGm0y3I+btWlz7vnJnAzfLlf5L3TCNwU hS+E/JiSxOhqrZFD0MR0zPL4ZUeHwvzBLXk/uwJgxEVAvgoMXmMbVCftTuNlgRmN vyA5Gl40hG7jUHqc/cxB1L4/mABydEjPO6U/S2ElNvQKErSf3v/J5B4T2wIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFAHx9RbCYZpWcy1b9I6ERYfCVyrSMB8GA1UdIwQY MBaAFLmsSdHM3K7dmhP0gD3xrtzm3BESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWF4SjBjemNydDJhRV9TQVBmR3UzT2JjRVJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81MzcxOTEtMTE3OS00OGVjLWFkOWYt ZmZlNDNhNTJkM2Y2LzEvQWZIMUZzSmhtbFp6TFZ2MGpvUkZoOEpYS3RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC81MzcxOTEtMTE3OS00OGVjLWFkOWYtZmZlNDNhNTJkM2Y2 LzEvdWF4SjBjemNydDJhRV9TQVBmR3UzT2JjRVJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCuVCcMAwD BAXViqADBAPVirAwDQYJKoZIhvcNAQELBQADggEBADpMR1j5yrV4scaj76CoX1O+ rugjlSNCuAGVplqp83uO1dh93KUi0D2L35+/yT8yXyl/uyXzjLFaD7i397bPDwgF NNGdW8Rnpy3vRDZaa5b3xmH/+78qkRH2JYkLclPceVMlQHcrdxvIQUK6A/w1OqVi 6jq7jOFG3+cwCfGkhSR/8poh4UdGGsJX5VuyLbh70SFGhjR1tNJaqmhT4vMTEDOw PqexicHhwQ6//COJovM4ekIkppti9M9c7kBXAKwqbF2/FzlwdjvxFft4hfkYjvjx RLgAPSW8maQT1UsNQXGHFlQVN32iD6frRF3lXnI0uTpC0o2jMl2ONmx9osDfmb4= -----END CERTIFICATE-----Generated at Mon Jan 26 19:54:51 2026 by rpki-client