This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/AfdcY0-Nv9-nDm8D_XhuzGvHs1M.roa File: AfdcY0-Nv9-nDm8D_XhuzGvHs1M.roa (raw, json) Hash identifier: Iln5My7Vy90xzmErWY2q1+QP+/1Vku9eLVf6no/e5Gc= Subject key identifier: 01:F7:5C:63:4F:8D:BF:DF:A7:0E:6F:03:FD:78:6E:CC:6B:C7:B3:53 Certificate issuer: /CN=c67e9de8e826cdee0e65f622583434b81cf37bad Certificate serial: 019B7CED21E23FE03B4BAD0F947A2253C343 Authority key identifier: C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/AfdcY0-Nv9-nDm8D_XhuzGvHs1M.roa Signing time: Fri 02 Jan 2026 04:17:54 +0000 ROA not before: Fri 02 Jan 2026 04:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1136 IP address blocks: 193.177.140.0/24 maxlen: 24 193.177.141.0/24 maxlen: 24 193.177.142.0/23 maxlen: 23 193.177.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.crl rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:21:e2:3f:e0:3b:4b:ad:0f:94:7a:22:53:c3:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c67e9de8e826cdee0e65f622583434b81cf37bad Validity Not Before: Jan 2 04:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01f75c634f8dbfdfa70e6f03fd786ecc6bc7b353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:83:70:ba:b4:75:46:4e:a3:78:4d:a0:66:1c: 44:3e:99:10:c7:34:f7:ef:3d:bb:00:84:1d:77:5a: 5e:38:f7:7d:a3:bd:79:95:f9:0d:f4:91:c0:89:d1: fa:97:bb:cb:4c:c3:01:0c:b6:23:b1:41:69:57:15: 7e:91:48:10:57:fc:ab:d4:98:6e:a1:4f:58:2e:98: 1d:3a:52:6f:19:df:bc:24:37:a2:fa:05:94:f3:89: 48:92:a4:b6:aa:ae:7f:26:09:92:9f:a6:9a:be:08: f6:94:ff:a7:cc:e6:d1:5c:61:82:87:22:9a:9e:8b: 90:2d:4d:c0:8a:10:0a:66:8b:90:05:59:7d:4a:f8: 87:65:23:9d:27:9c:54:3e:2a:0b:bc:a9:22:35:38: 35:6f:ff:26:5b:2c:f5:74:b3:81:b8:4d:4d:f6:dd: 73:17:1b:83:c8:20:ea:5f:28:89:fb:c3:6a:38:b9: 3e:b9:25:2a:17:2e:6a:9f:f8:dd:e1:92:fc:f9:c4: cf:c6:0d:96:73:61:0e:8b:55:8e:97:77:a3:a0:3f: 1f:5e:e5:fb:3b:ff:29:7f:cc:39:c5:0d:79:69:62: 0c:5c:ee:1a:78:f7:6f:11:7e:5e:2f:c3:a0:68:7d: 5b:51:01:75:a4:5d:d8:1a:58:b9:55:a6:05:b1:c0: 68:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F7:5C:63:4F:8D:BF:DF:A7:0E:6F:03:FD:78:6E:CC:6B:C7:B3:53 X509v3 Authority Key Identifier: keyid:C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/AfdcY0-Nv9-nDm8D_XhuzGvHs1M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.177.140.0-193.177.147.255 Signature Algorithm: sha256WithRSAEncryption 1c:8b:af:4e:c6:a7:40:82:02:ae:08:78:21:b3:83:f3:70:b2: 7b:de:29:d8:94:bc:fb:3c:2d:84:16:8d:24:41:f2:e5:d7:8c: 23:2d:60:b4:fa:44:80:cf:e6:87:45:6a:63:d3:94:e8:25:d9: 43:4f:f8:5c:48:94:14:9e:bf:4a:83:bc:f1:4e:b0:a9:48:53: 6d:16:b7:9f:39:94:46:63:b2:a3:22:63:46:43:01:40:74:f9: 3a:cb:ad:56:64:ba:ce:a8:d5:ef:b9:79:fc:d3:fd:5b:41:17: 02:14:7f:c9:17:37:0b:4a:69:3e:f5:94:2b:16:b3:04:43:5f: 8e:3d:23:ff:28:54:cc:61:c1:98:17:37:12:ec:ef:99:a3:10: b4:62:60:5b:e0:88:2d:8b:ac:e5:99:19:68:d9:9e:42:e6:ad: 58:12:67:26:94:fb:ef:4c:8f:9d:c8:8d:f2:01:23:57:b2:eb: 49:b1:25:e4:f8:fc:2d:ed:ac:a4:af:59:0f:fd:b9:db:90:ed: ab:cb:82:de:fa:81:85:b7:84:4e:5a:3a:b6:02:84:55:59:64: 9d:ae:be:a8:47:31:10:21:cb:79:f9:37:2b:2e:e6:ec:4f:19: df:a4:8e:b5:05:07:d9:17:99:69:ed:aa:71:9f:f0:ab:fc:2c: 49:36:04:44 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt87SHiP+A7S60PlHoiU8NDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2N2U5ZGU4ZTgyNmNkZWUwZTY1ZjYyMjU4MzQzNGI4MWNm MzdiYWQwHhcNMjYwMTAyMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWY3NWM2MzRmOGRiZmRmYTcwZTZmMDNmZDc4NmVjYzZiYzdiMzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYNwurR1Rk6jeE2gZhxEPpkQxzT3 7z27AIQdd1peOPd9o715lfkN9JHAidH6l7vLTMMBDLYjsUFpVxV+kUgQV/yr1Jhu oU9YLpgdOlJvGd+8JDei+gWU84lIkqS2qq5/JgmSn6aavgj2lP+nzObRXGGChyKa nouQLU3AihAKZouQBVl9SviHZSOdJ5xUPioLvKkiNTg1b/8mWyz1dLOBuE1N9t1z FxuDyCDqXyiJ+8NqOLk+uSUqFy5qn/jd4ZL8+cTPxg2Wc2EOi1WOl3ejoD8fXuX7 O/8pf8w5xQ15aWIMXO4aePdvEX5eL8OgaH1bUQF1pF3YGli5VaYFscBoVwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFAH3XGNPjb/fpw5vA/14bsxrx7NTMB8GA1UdIwQY MBaAFMZ+nejoJs3uDmX2Ilg0NLgc83utMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG42ZDZPZ216ZTRPWmZZaVdEUTB1Qnp6ZTYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wYjBjMWMtZTVlYS00NTU4LWJiZGQt MTk5ZTA1NmE2ODAwLzEvQWZkY1kwLU52OS1uRG04RF9YaHV6R3ZIczFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8wYjBjMWMtZTVlYS00NTU4LWJiZGQtMTk5ZTA1NmE2ODAw LzEveG42ZDZPZ216ZTRPWmZZaVdEUTB1Qnp6ZTYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALBsYwD BALBsZAwDQYJKoZIhvcNAQELBQADggEBAByLr07Gp0CCAq4IeCGzg/NwsnveKdiU vPs8LYQWjSRB8uXXjCMtYLT6RIDP5odFamPTlOgl2UNP+FxIlBSev0qDvPFOsKlI U20Wt585lEZjsqMiY0ZDAUB0+TrLrVZkus6o1e+5efzT/VtBFwIUf8kXNwtKaT71 lCsWswRDX449I/8oVMxhwZgXNxLs75mjELRiYFvgiC2LrOWZGWjZnkLmrVgSZyaU ++9Mj53IjfIBI1ey60mxJeT4/C3trKSvWQ/9uduQ7avLgt76gYW3hE5aOrYChFVZ ZJ2uvqhHMRAhy3n5Nysu5uxPGd+kjrUFB9kXmWntqnGf8Kv8LEk2BEQ= -----END CERTIFICATE-----Generated at Tue Jan 27 05:37:42 2026 by rpki-client