This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/AskFBvRE4tY5tlit_Gy114m2J0A.roa File: AskFBvRE4tY5tlit_Gy114m2J0A.roa (raw, json) Hash identifier: J6ljvruIBCWnrpJURNZnlPx/uNcMw2gcnFDVYqRVqz0= Subject key identifier: 02:C9:05:06:F4:44:E2:D6:39:B6:58:AD:FC:6C:B5:D7:89:B6:27:40 Certificate issuer: /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d Certificate serial: 019B7DCAD6BEBC172B90807D5067EBD40339 Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/AskFBvRE4tY5tlit_Gy114m2J0A.roa Signing time: Fri 02 Jan 2026 08:20:03 +0000 ROA not before: Fri 02 Jan 2026 08:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62856 IP address blocks: 185.81.100.0/22 maxlen: 22 185.81.100.0/24 maxlen: 24 185.81.101.0/24 maxlen: 24 185.81.102.0/24 maxlen: 24 2a05:8780::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d6:be:bc:17:2b:90:80:7d:50:67:eb:d4:03:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d Validity Not Before: Jan 2 08:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02c90506f444e2d639b658adfc6cb5d789b62740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6e:ff:41:38:44:c7:5e:c1:b8:dd:77:26:f5: 75:1d:a2:4b:d4:f8:e3:9c:86:65:79:2d:ec:45:ab: 60:69:3d:f2:73:72:36:2d:d4:06:c4:b6:e0:57:76: d5:62:c2:7c:96:46:a5:41:fa:d8:6b:63:e1:c8:62: 66:3e:f2:49:3e:93:14:af:a3:ef:84:a9:a9:f2:fe: c7:cd:37:53:5c:6c:83:7b:0c:c7:9a:f1:b1:c8:b9: e8:f3:23:70:b6:45:ac:d6:43:72:e1:08:1c:42:f8: 12:a8:a3:18:a2:8d:c3:d5:46:4e:20:ed:8d:0d:87: ea:e1:23:db:a6:1e:31:57:f3:39:a7:3a:ac:96:07: a4:e5:69:32:8a:56:2e:fd:ee:d8:87:be:ad:a7:81: d6:dc:80:9b:fb:79:e1:ac:76:53:1c:59:b7:d8:da: 05:e9:16:92:29:d3:ca:ac:32:78:b5:c2:70:ae:18: e8:72:c3:98:ca:cc:a3:81:06:2d:81:7b:00:9b:35: f4:43:29:e9:7d:f2:51:75:35:c9:98:ad:7b:4a:0f: f5:b9:9b:68:e0:92:3f:71:ef:81:d4:48:b5:97:2a: 1d:4b:65:b3:7e:fb:ce:95:e6:23:df:da:af:c8:5f: 5b:15:f7:e0:39:d2:8e:8c:1d:20:8a:d3:5d:1b:06: 95:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C9:05:06:F4:44:E2:D6:39:B6:58:AD:FC:6C:B5:D7:89:B6:27:40 X509v3 Authority Key Identifier: keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/AskFBvRE4tY5tlit_Gy114m2J0A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.81.100.0/22 IPv6: 2a05:8780::/29 Signature Algorithm: sha256WithRSAEncryption 50:4f:32:28:a3:ce:bc:4e:3c:87:0f:50:53:2a:3c:55:fd:81: 8f:65:4b:1d:60:cf:bb:b3:4e:df:98:04:f3:2f:85:1c:38:86: a0:59:41:db:55:aa:b3:52:51:c9:f4:82:62:e7:14:7a:a6:a2: 14:fb:99:3f:d9:03:18:53:a1:1f:2e:9e:0a:85:f8:f0:59:7a: 8c:b4:e6:e8:f1:eb:24:02:34:45:25:b0:ec:03:f3:06:ef:f3: 66:9d:fa:4c:12:29:cc:d6:30:63:1a:fc:6d:c1:2f:49:00:ce: 74:2f:01:cb:43:ec:ca:f2:67:cd:a0:67:d6:38:9f:7e:8f:56: 21:9a:c7:5c:ca:26:11:cb:67:b2:3b:e1:e1:ee:a2:fc:f5:99: fe:de:c5:81:cf:9c:ef:0f:1e:13:96:bb:14:67:bb:20:65:b1: b7:a1:f8:2a:71:1c:3b:b1:42:d5:0a:63:38:79:7b:34:55:17: a0:42:32:ac:94:69:a0:34:4b:bf:c3:41:7e:a5:27:9a:58:72: a5:6e:31:ed:dc:47:60:26:d8:32:25:0a:96:de:73:1d:d8:dd: 0b:b1:41:2b:c6:6d:2d:0b:4a:f0:5c:e6:a7:ca:2b:83:90:5d: 73:2e:86:27:28:0a:a3:d3:ef:6c:80:e7:aa:bf:27:40:75:b9: b4:db:2b:b5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yta+vBcrkIB9UGfr1AM5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MmRjMGQwOTk4YjgxMjZiYWJiOTc3NWFiNDBjMTYyZWY5 NmZhMmQwHhcNMjYwMTAyMDgyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmM5MDUwNmY0NDRlMmQ2MzliNjU4YWRmYzZjYjVkNzg5YjYyNzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG7/QThEx17BuN13JvV1HaJL1Pjj nIZleS3sRatgaT3yc3I2LdQGxLbgV3bVYsJ8lkalQfrYa2PhyGJmPvJJPpMUr6Pv hKmp8v7HzTdTXGyDewzHmvGxyLno8yNwtkWs1kNy4QgcQvgSqKMYoo3D1UZOIO2N DYfq4SPbph4xV/M5pzqslgek5WkyilYu/e7Yh76tp4HW3ICb+3nhrHZTHFm32NoF 6RaSKdPKrDJ4tcJwrhjocsOYysyjgQYtgXsAmzX0QynpffJRdTXJmK17Sg/1uZto 4JI/ce+B1Ei1lyodS2WzfvvOleYj39qvyF9bFffgOdKOjB0gitNdGwaVMQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFALJBQb0ROLWObZYrfxstdeJtidAMB8GA1UdIwQY MBaAFIUtwNCZi4EmuruXdatAwWLvlvotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFMzQTBKbUxnU2E2dTVkMXEwREJZdS1XLWkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8xY2Q2Y2EtYzA1Mi00ZTNkLTk3NGQt ZDMyZTU2ZDc5YjJhLzEvQXNrRkJ2UkU0dFk1dGxpdF9HeTExNG0ySjBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8xY2Q2Y2EtYzA1Mi00ZTNkLTk3NGQtZDMyZTU2ZDc5YjJh LzEvaFMzQTBKbUxnU2E2dTVkMXEwREJZdS1XLWkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVFkMA0E AgACMAcDBQMqBYeAMA0GCSqGSIb3DQEBCwUAA4IBAQBQTzIoo868TjyHD1BTKjxV /YGPZUsdYM+7s07fmATzL4UcOIagWUHbVaqzUlHJ9IJi5xR6pqIU+5k/2QMYU6Ef Lp4KhfjwWXqMtObo8eskAjRFJbDsA/MG7/NmnfpMEinM1jBjGvxtwS9JAM50LwHL Q+zK8mfNoGfWOJ9+j1YhmsdcyiYRy2eyO+Hh7qL89Zn+3sWBz5zvDx4TlrsUZ7sg ZbG3ofgqcRw7sULVCmM4eXs0VRegQjKslGmgNEu/w0F+pSeaWHKlbjHt3EdgJtgy JQqW3nMd2N0LsUErxm0tC0rwXOanyiuDkF1zLoYnKAqj0+9sgOeqvydAdbm02yu1 -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:40 2026 by rpki-client