This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/afKwRxk1ZzUuMbqjhAMAsR8SW7k.roa File: afKwRxk1ZzUuMbqjhAMAsR8SW7k.roa (raw, json) Hash identifier: 36wIpsjr4F5SRwjTUDc1wC/5dcZLwPECLsusWpMpGsA= Subject key identifier: 69:F2:B0:47:19:35:67:35:2E:31:BA:A3:84:03:00:B1:1F:12:5B:B9 Certificate issuer: /CN=52b9b9e256580c4344bb241445b4d52e54fdd50b Certificate serial: 019B78A29805365611BF20720829BBA08C66 Authority key identifier: 52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/afKwRxk1ZzUuMbqjhAMAsR8SW7k.roa Signing time: Thu 01 Jan 2026 08:18:00 +0000 ROA not before: Thu 01 Jan 2026 08:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41350 IP address blocks: 85.223.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:98:05:36:56:11:bf:20:72:08:29:bb:a0:8c:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52b9b9e256580c4344bb241445b4d52e54fdd50b Validity Not Before: Jan 1 08:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69f2b047193567352e31baa3840300b11f125bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:61:39:5b:a0:64:d9:ad:3f:90:83:01:53:a7: 16:0e:91:55:b9:fc:61:56:58:84:d4:14:fe:08:3a: 3f:f7:d1:f1:d7:bb:bd:18:fc:50:d0:eb:2a:8a:8f: 06:83:58:c6:b6:27:f0:24:8a:e6:d1:f7:da:9c:da: f7:a2:2c:66:07:8a:52:d9:38:93:78:df:8d:9e:3b: e1:c3:47:74:7c:75:b1:34:05:72:1a:b7:46:79:2e: 5b:28:07:f2:8d:80:e9:de:1d:ee:12:b4:e2:57:bf: 6d:58:13:d7:76:e4:97:d5:11:3a:45:12:a7:7d:70: 7d:99:f8:34:05:c0:7d:90:09:7e:54:35:9c:8c:db: 84:8d:22:e8:a6:08:e4:8c:d2:34:c8:27:24:43:26: f3:43:5a:10:67:27:9f:cd:a3:39:b3:29:ae:cd:f7: 7f:21:09:77:56:00:84:2c:df:d8:ad:4d:00:7a:38: 43:29:a8:23:bb:d3:4a:cd:d9:3c:ce:48:1e:4f:4e: c1:3a:3c:55:ff:9f:a9:3a:66:e5:86:20:9f:84:11: e6:87:a4:15:59:04:c1:63:57:a1:97:a7:89:3f:02: d4:4a:00:2e:17:71:e0:e9:3f:48:c6:ec:ff:0c:3c: 75:18:2a:b8:79:98:2b:7c:b1:e5:1e:ea:55:02:89: 56:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F2:B0:47:19:35:67:35:2E:31:BA:A3:84:03:00:B1:1F:12:5B:B9 X509v3 Authority Key Identifier: keyid:52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/afKwRxk1ZzUuMbqjhAMAsR8SW7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.223.143.0/24 Signature Algorithm: sha256WithRSAEncryption 10:e8:65:e0:76:42:8a:af:55:0b:e8:c1:49:a4:ad:77:79:08: 7f:89:ee:6a:02:5e:73:6c:10:93:3d:2f:34:43:43:af:5d:55: 71:d2:fa:6d:de:75:0f:54:8f:c0:1d:0b:fb:48:28:95:cf:e1: 1a:87:a8:25:31:9d:80:cf:05:83:9a:b9:6c:ce:15:64:78:d7: e7:cc:5b:2f:53:cc:df:a5:55:f1:75:f7:c2:b2:2e:2e:84:9d: a5:d5:80:47:eb:a0:ac:c5:07:c2:c8:13:65:a1:8e:50:26:15: e8:3e:fa:ed:78:27:50:00:76:c7:de:9f:b0:eb:e0:f3:97:a6: 1d:72:f6:0e:2d:4d:3d:7a:74:44:60:1c:d2:31:cd:91:22:cc: 3d:7a:29:05:b7:c6:39:ec:6b:fb:c4:65:43:2d:c8:60:76:21: 6e:df:e2:66:8d:dc:49:a3:61:22:76:ea:bc:fb:f7:65:aa:cc: c2:fa:e3:b8:4d:91:d4:f5:44:d1:64:49:ba:96:db:2c:a6:eb: f3:9d:a5:b1:62:cf:16:67:3d:6b:14:32:6b:4c:cb:4d:60:ec: 91:1f:f3:e5:4f:14:a6:08:06:de:75:dd:d3:a8:69:1e:a5:9b: ad:64:e4:fb:c7:0b:b7:16:af:d7:80:b5:a3:0d:d8:85:ea:57: ba:f0:d4:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4opgFNlYRvyByCCm7oIxmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYjliOWUyNTY1ODBjNDM0NGJiMjQxNDQ1YjRkNTJlNTRm ZGQ1MGIwHhcNMjYwMTAxMDgxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWYyYjA0NzE5MzU2NzM1MmUzMWJhYTM4NDAzMDBiMTFmMTI1YmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmE5W6Bk2a0/kIMBU6cWDpFVufxh VliE1BT+CDo/99Hx17u9GPxQ0Osqio8Gg1jGtifwJIrm0ffanNr3oixmB4pS2TiT eN+Nnjvhw0d0fHWxNAVyGrdGeS5bKAfyjYDp3h3uErTiV79tWBPXduSX1RE6RRKn fXB9mfg0BcB9kAl+VDWcjNuEjSLopgjkjNI0yCckQybzQ1oQZyefzaM5symuzfd/ IQl3VgCELN/YrU0AejhDKagju9NKzdk8zkgeT07BOjxV/5+pOmblhiCfhBHmh6QV WQTBY1ehl6eJPwLUSgAuF3Hg6T9Ixuz/DDx1GCq4eZgrfLHlHupVAolWGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGnysEcZNWc1LjG6o4QDALEfElu5MB8GA1UdIwQY MBaAFFK5ueJWWAxDRLskFEW01S5U/dULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXJtNTRsWllERU5FdXlRVVJiVFZMbFQ5MVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lYWY4MWQtYTlkZi00YTZhLWI2MTAt ZGUwNWM1NDA0NWJiLzEvYWZLd1J4azFaelV1TWJxamhBTUFzUjhTVzdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lYWY4MWQtYTlkZi00YTZhLWI2MTAtZGUwNWM1NDA0NWJi LzEvVXJtNTRsWllERU5FdXlRVVJiVFZMbFQ5MVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVd+PMA0G CSqGSIb3DQEBCwUAA4IBAQAQ6GXgdkKKr1UL6MFJpK13eQh/ie5qAl5zbBCTPS80 Q0OvXVVx0vpt3nUPVI/AHQv7SCiVz+Eah6glMZ2AzwWDmrlszhVkeNfnzFsvU8zf pVXxdffCsi4uhJ2l1YBH66CsxQfCyBNloY5QJhXoPvrteCdQAHbH3p+w6+Dzl6Yd cvYOLU09enREYBzSMc2RIsw9eikFt8Y57Gv7xGVDLchgdiFu3+JmjdxJo2Eiduq8 +/dlqszC+uO4TZHU9UTRZEm6ltsspuvznaWxYs8WZz1rFDJrTMtNYOyRH/PlTxSm CAbedd3TqGkepZutZOT7xwu3Fq/XgLWjDdiF6le68NRa -----END CERTIFICATE-----Generated at Mon Feb 9 21:24:25 2026 by rpki-client