This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/AvyUsGmD_FZSKoOLRhh-bjGaAsc.roa File: AvyUsGmD_FZSKoOLRhh-bjGaAsc.roa (raw, json) Hash identifier: zPe3RFgMAuhI1JggJJNojXmQ9y8rJ9aHTKAukLLAFVw= Subject key identifier: 02:FC:94:B0:69:83:FC:56:52:2A:83:8B:46:18:7E:6E:31:9A:02:C7 Certificate issuer: /CN=c0b8bb485eba392b80c3166929b7fcb958f449bc Certificate serial: 019B7DCB163045A14AAA3D00C87AE4BAE93D Authority key identifier: C0:B8:BB:48:5E:BA:39:2B:80:C3:16:69:29:B7:FC:B9:58:F4:49:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/AvyUsGmD_FZSKoOLRhh-bjGaAsc.roa Signing time: Fri 02 Jan 2026 08:20:19 +0000 ROA not before: Fri 02 Jan 2026 08:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208175 IP address blocks: 185.245.28.0/24 maxlen: 24 185.245.29.0/24 maxlen: 24 185.245.29.48/28 maxlen: 28 185.245.30.0/24 maxlen: 24 185.245.31.0/24 maxlen: 24 2a09:1500::/48 maxlen: 48 2a09:1500:8::/48 maxlen: 48 2a09:1500:13::/48 maxlen: 48 2a09:1500:20::/48 maxlen: 48 2a09:1500:1000::/40 maxlen: 40 2a09:1500:2000::/40 maxlen: 40 2a09:1500:2400::/40 maxlen: 40 2a09:1500:3400::/40 maxlen: 40 2a09:1500:4600::/40 maxlen: 40 2a09:1500:5400::/40 maxlen: 40 2a09:1500:5600::/40 maxlen: 40 2a09:1500:5800::/40 maxlen: 40 2a09:1500:6600::/40 maxlen: 40 2a09:1500:7000::/40 maxlen: 40 2a09:1501::/48 maxlen: 48 2a09:1501:3000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:16:30:45:a1:4a:aa:3d:00:c8:7a:e4:ba:e9:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0b8bb485eba392b80c3166929b7fcb958f449bc Validity Not Before: Jan 2 08:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02fc94b06983fc56522a838b46187e6e319a02c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0d:42:82:7c:6f:d9:e6:a1:66:cf:46:de:31: 10:11:c8:01:14:b9:57:52:5d:0f:ce:8e:0d:aa:6b: a4:22:35:2b:b5:74:5d:e2:29:68:f9:e5:2c:34:a3: a1:bf:3d:60:84:34:9d:c9:f5:5c:ab:37:0c:2f:ad: f4:31:92:bc:e7:2e:75:a8:b0:2f:c8:d9:b4:e7:89: 5d:d8:77:60:07:1d:c3:41:24:45:4a:95:64:4b:8f: 34:85:69:15:85:a1:35:13:6c:0a:e0:88:27:52:31: 7d:c3:be:0c:21:04:29:e1:fd:c0:1a:24:57:f4:9f: 79:ec:66:c0:15:cd:76:4c:87:a2:f9:55:7c:ac:58: fc:fe:69:fa:87:5d:5e:72:73:56:89:5f:94:74:22: 89:dd:c5:44:94:29:23:54:4d:ac:7a:16:75:33:c4: cd:09:17:63:09:ad:c4:77:69:ba:8c:93:b8:9f:9a: ba:8f:1b:ef:3d:6c:13:c4:a7:8a:60:7a:87:99:da: 09:36:c9:6a:92:ed:df:05:bb:7c:0e:01:00:a8:be: 26:00:1c:ed:b0:87:cb:b8:0e:4a:48:c1:e1:7f:21: 7b:5f:49:98:57:e2:09:d9:1c:81:b6:f0:d4:a1:e1: d9:cd:2c:ce:51:a2:ae:5d:15:14:49:58:06:98:84: 29:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FC:94:B0:69:83:FC:56:52:2A:83:8B:46:18:7E:6E:31:9A:02:C7 X509v3 Authority Key Identifier: keyid:C0:B8:BB:48:5E:BA:39:2B:80:C3:16:69:29:B7:FC:B9:58:F4:49:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/AvyUsGmD_FZSKoOLRhh-bjGaAsc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.245.28.0/22 IPv6: 2a09:1500::/48 2a09:1500:8::/48 2a09:1500:13::/48 2a09:1500:20::/48 2a09:1500:1000::/40 2a09:1500:2000::/40 2a09:1500:2400::/40 2a09:1500:3400::/40 2a09:1500:4600::/40 2a09:1500:5400::/40 2a09:1500:5600::/40 2a09:1500:5800::/40 2a09:1500:6600::/40 2a09:1500:7000::/40 2a09:1501::/48 2a09:1501:3000::/40 Signature Algorithm: sha256WithRSAEncryption 48:78:99:b5:b7:3a:14:81:b0:12:4d:fe:5c:69:6d:b6:51:ff: 7f:e6:97:91:bb:7c:d5:0c:5d:4e:f8:e4:bc:c7:c2:54:2d:84: 1b:3d:6d:94:7e:83:fa:a8:42:9e:e2:17:92:6d:f8:31:a5:f4: c1:a7:7b:3e:4e:19:80:a5:dc:f5:57:2c:bf:7e:d2:8d:e2:99: 45:96:7a:43:64:29:f5:0d:79:75:e4:c5:e0:8d:fc:8c:6d:13: 82:8e:9b:8b:d2:67:d8:8f:0b:7a:ac:96:af:2b:5b:2a:db:ed: 84:af:6a:88:73:94:03:89:a2:34:b2:ea:fc:4a:76:c1:89:35: 37:64:31:79:aa:68:fd:c8:f9:75:9b:be:c4:2a:82:1c:12:c4: 0d:a0:62:e1:46:dc:c9:ca:38:5a:0d:79:b4:8f:cb:d9:2d:58: 29:a8:82:c1:03:23:5e:24:4f:c8:89:c5:b1:9c:18:aa:39:17: f4:25:ab:56:71:01:d5:6d:e9:c6:18:f3:8b:58:48:26:e6:e6: cd:1d:26:0c:1b:ca:3f:df:ec:09:87:7f:8a:fb:7b:cc:94:a9: c0:54:d0:a4:8b:bb:17:b4:a2:9a:48:1e:96:52:b8:a0:7f:ad: 39:8c:76:97:cf:b3:c7:1b:1c:f5:da:67:18:a7:39:c1:97:1a: d2:29:5e:79 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt9yxYwRaFKqj0AyHrkuuk9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYjhiYjQ4NWViYTM5MmI4MGMzMTY2OTI5YjdmY2I5NThm NDQ5YmMwHhcNMjYwMTAyMDgyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmZjOTRiMDY5ODNmYzU2NTIyYTgzOGI0NjE4N2U2ZTMxOWEwMmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg1Cgnxv2eahZs9G3jEQEcgBFLlX Ul0Pzo4NqmukIjUrtXRd4ilo+eUsNKOhvz1ghDSdyfVcqzcML630MZK85y51qLAv yNm054ld2HdgBx3DQSRFSpVkS480hWkVhaE1E2wK4IgnUjF9w74MIQQp4f3AGiRX 9J957GbAFc12TIei+VV8rFj8/mn6h11ecnNWiV+UdCKJ3cVElCkjVE2sehZ1M8TN CRdjCa3Ed2m6jJO4n5q6jxvvPWwTxKeKYHqHmdoJNslqku3fBbt8DgEAqL4mABzt sIfLuA5KSMHhfyF7X0mYV+IJ2RyBtvDUoeHZzSzOUaKuXRUUSVgGmIQpWQIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFAL8lLBpg/xWUiqDi0YYfm4xmgLHMB8GA1UdIwQY MBaAFMC4u0heujkrgMMWaSm3/LlY9Em8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0xpN1NGNjZPU3VBd3hacEtiZjh1VmowU2J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS84NDk0MmYtNzIxZi00MjM0LTg4YzEt ZGJmMzk2OWNhNzVmLzEvQXZ5VXNHbURfRlpTS29PTFJoaC1iakdhQXNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS84NDk0MmYtNzIxZi00MjM0LTg4YzEtZGJmMzk2OWNhNzVm LzEvd0xpN1NGNjZPU3VBd3hacEtiZjh1VmowU2J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGwBggrBgEFBQcBBwEB/wSBoDCBnTAMBAIAATAGAwQCufUc MIGMBAIAAjCBhQMHACoJFQAAAAMHACoJFQAACAMHACoJFQAAEwMHACoJFQAAIAMG ACoJFQAQAwYAKgkVACADBgAqCRUAJAMGACoJFQA0AwYAKgkVAEYDBgAqCRUAVAMG ACoJFQBWAwYAKgkVAFgDBgAqCRUAZgMGACoJFQBwAwcAKgkVAQAAAwYAKgkVATAw DQYJKoZIhvcNAQELBQADggEBAEh4mbW3OhSBsBJN/lxpbbZR/3/ml5G7fNUMXU74 5LzHwlQthBs9bZR+g/qoQp7iF5Jt+DGl9MGnez5OGYCl3PVXLL9+0o3imUWWekNk KfUNeXXkxeCN/IxtE4KOm4vSZ9iPC3qslq8rWyrb7YSvaohzlAOJojSy6vxKdsGJ NTdkMXmqaP3I+XWbvsQqghwSxA2gYuFG3MnKOFoNebSPy9ktWCmogsEDI14kT8iJ xbGcGKo5F/Qlq1ZxAdVt6cYY84tYSCbm5s0dJgwbyj/f7AmHf4r7e8yUqcBU0KSL uxe0oppIHpZSuKB/rTmMdpfPs8cbHPXaZxinOcGXGtIpXnk= -----END CERTIFICATE-----Generated at Tue Feb 10 01:07:25 2026 by rpki-client