This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/Afbq1k6w-CyvtuWTM1C6rvgCNA4.roa File: Afbq1k6w-CyvtuWTM1C6rvgCNA4.roa (raw, json) Hash identifier: KbZ41VBRQC5jWkzEW0pFpnJm7Ql3SPnGBB+qurCmces= Subject key identifier: 01:F6:EA:D6:4E:B0:F8:2C:AF:B6:E5:93:33:50:BA:AE:F8:02:34:0E Certificate issuer: /CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13 Certificate serial: 019B7CEDF2D943C63DD800BCB3C8E1052CC0 Authority key identifier: D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/Afbq1k6w-CyvtuWTM1C6rvgCNA4.roa Signing time: Fri 02 Jan 2026 04:18:47 +0000 ROA not before: Fri 02 Jan 2026 04:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1140 IP address blocks: 94.198.152.0/21 maxlen: 21 94.198.152.0/24 maxlen: 24 94.198.153.0/24 maxlen: 24 94.198.154.0/24 maxlen: 24 94.198.155.0/24 maxlen: 24 94.198.156.0/24 maxlen: 24 94.198.157.0/24 maxlen: 24 94.198.158.0/24 maxlen: 24 94.198.159.0/24 maxlen: 24 185.76.132.0/22 maxlen: 22 185.76.132.0/24 maxlen: 24 185.76.133.0/24 maxlen: 24 185.76.134.0/24 maxlen: 24 185.76.135.0/24 maxlen: 24 193.176.144.0/24 maxlen: 24 2a00:d78::/32 maxlen: 32 2a00:d78::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:f2:d9:43:c6:3d:d8:00:bc:b3:c8:e1:05:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13 Validity Not Before: Jan 2 04:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01f6ead64eb0f82cafb6e5933350baaef802340e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a8:d0:1e:1a:cb:1f:81:01:0b:c8:2c:19:7f: f4:c0:75:7f:0b:5b:cf:a1:ec:85:95:d9:a9:5d:17: 32:2b:32:84:ed:0b:d2:a3:0b:ef:a3:f9:26:51:b8: 92:b0:c6:05:07:b5:63:7e:08:e9:a8:08:78:ef:a2: 61:88:0e:d8:07:a5:4e:50:f7:6a:e2:9f:92:af:92: 41:e5:8a:80:90:4c:ff:50:21:c3:9d:83:f5:3d:31: 91:4f:61:ad:5d:c5:5c:15:18:32:a9:4b:75:5a:31: 27:36:8e:ae:fb:d1:1a:e2:23:51:92:9b:95:df:3a: f6:b2:49:f0:b4:89:b1:69:c9:58:9f:77:f9:da:0e: 6e:09:41:a5:fb:b8:5a:bd:e4:59:64:dc:a8:34:8b: da:bb:80:e8:21:ed:9e:7a:d4:4f:e2:b6:44:b3:23: fd:7c:b1:2d:d6:df:60:8b:21:88:52:e6:c9:70:76: 67:70:1c:55:0e:f9:1f:7c:c2:b8:09:76:15:46:a1: 0d:05:c8:65:a2:e6:98:5e:8e:12:74:bb:d0:71:e9: c6:5e:4d:e3:d0:4e:8e:1d:67:97:85:a2:d5:3a:04: 7d:f4:d7:06:84:44:c7:ee:5e:a9:ca:07:85:c5:de: e9:b3:8d:d5:e7:b5:71:67:2e:47:06:78:58:ae:d3: 67:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F6:EA:D6:4E:B0:F8:2C:AF:B6:E5:93:33:50:BA:AE:F8:02:34:0E X509v3 Authority Key Identifier: keyid:D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/Afbq1k6w-CyvtuWTM1C6rvgCNA4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.198.152.0/21 185.76.132.0/22 193.176.144.0/24 IPv6: 2a00:d78::/32 Signature Algorithm: sha256WithRSAEncryption c6:29:a5:28:de:90:b0:a2:3b:b3:dc:cf:84:01:55:39:7f:f5: 3b:90:94:83:03:4c:87:2f:8c:15:8f:c4:f7:dc:e3:5f:4e:a0: fc:e6:d2:24:8c:9b:0f:35:8a:4e:87:03:0f:7e:85:66:ef:32: b6:91:75:7b:2e:cd:79:6e:ce:2c:b3:74:8e:a4:4a:bc:7d:52: 8e:e9:15:80:e2:c6:87:03:77:73:4b:61:ef:99:dc:11:ad:c9: 12:30:b3:04:ec:32:37:57:27:05:8f:c8:a1:1b:45:52:73:4a: a2:71:03:76:41:74:ef:f1:ab:41:fb:7d:66:d5:67:02:c3:76: 73:64:84:3f:90:14:7b:cd:d2:79:28:6e:f9:bf:1a:c2:1b:eb: c8:61:4a:5d:45:56:79:ee:ba:15:a8:28:37:6d:07:73:43:1b: 99:e7:c3:0d:08:a4:7a:13:36:4b:26:5d:b0:1b:99:de:e4:e8: ca:24:31:18:42:59:36:f5:19:ab:75:a7:14:6a:83:28:04:29: 73:0f:a1:25:09:6a:62:1f:19:19:ac:43:ea:a5:69:46:76:2d: c8:f9:21:8b:74:15:37:d4:39:81:e8:18:5f:ae:ef:19:bf:66: fe:f0:21:8c:1b:65:bf:50:61:02:50:09:cc:e5:43:dc:81:b5: 14:48:d8:62 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt87fLZQ8Y92AC8s8jhBSzAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYzJiMGVlMTg3OTI4NDA5MDY1ZDE5ZWU5YzA4NThlOGMx N2VhMTMwHhcNMjYwMTAyMDQxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWY2ZWFkNjRlYjBmODJjYWZiNmU1OTMzMzUwYmFhZWY4MDIzNDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KjQHhrLH4EBC8gsGX/0wHV/C1vP oeyFldmpXRcyKzKE7QvSowvvo/kmUbiSsMYFB7VjfgjpqAh476JhiA7YB6VOUPdq 4p+Sr5JB5YqAkEz/UCHDnYP1PTGRT2GtXcVcFRgyqUt1WjEnNo6u+9Ea4iNRkpuV 3zr2sknwtImxaclYn3f52g5uCUGl+7haveRZZNyoNIvau4DoIe2eetRP4rZEsyP9 fLEt1t9giyGIUubJcHZncBxVDvkffMK4CXYVRqENBchlouaYXo4SdLvQcenGXk3j 0E6OHWeXhaLVOgR99NcGhETH7l6pygeFxd7ps43V57VxZy5HBnhYrtNnBQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFAH26tZOsPgsr7blkzNQuq74AjQOMB8GA1UdIwQY MBaAFNLCsO4YeShAkGXRnunAhY6MF+oTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHNLdzdoaDVLRUNRWmRHZTZjQ0Zqb3dYNmhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hYmFjMTQtNmVhYi00OTg1LTg2N2Et YzhlODYzYzFhOGQxLzEvQWZicTFrNnctQ3l2dHVXVE0xQzZydmdDTkE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hYmFjMTQtNmVhYi00OTg1LTg2N2EtYzhlODYzYzFhOGQx LzEvMHNLdzdoaDVLRUNRWmRHZTZjQ0Zqb3dYNmhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDXsaYAwQC uUyEAwQAwbCQMA0EAgACMAcDBQAqAA14MA0GCSqGSIb3DQEBCwUAA4IBAQDGKaUo 3pCwojuz3M+EAVU5f/U7kJSDA0yHL4wVj8T33ONfTqD85tIkjJsPNYpOhwMPfoVm 7zK2kXV7Ls15bs4ss3SOpEq8fVKO6RWA4saHA3dzS2HvmdwRrckSMLME7DI3VycF j8ihG0VSc0qicQN2QXTv8atB+31m1WcCw3ZzZIQ/kBR7zdJ5KG75vxrCG+vIYUpd RVZ57roVqCg3bQdzQxuZ58MNCKR6EzZLJl2wG5ne5OjKJDEYQlk29RmrdacUaoMo BClzD6ElCWpiHxkZrEPqpWlGdi3I+SGLdBU31DmB6Bhfru8Zv2b+8CGMG2W/UGEC UAnM5UPcgbUUSNhi -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:21 2026 by rpki-client