This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/afryRTczOiJ-97BSlttmBWsAvpk.roa File: afryRTczOiJ-97BSlttmBWsAvpk.roa (raw, json) Hash identifier: 92MPVImZCblIYX2e9SnrYElWSQt9ltTqzjCdeolAt+0= Subject key identifier: 69:FA:F2:45:37:33:3A:22:7E:F7:B0:52:96:DB:66:05:6B:00:BE:99 Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Certificate serial: 019B7DCA33B18E694DDF8A4FAB6CB913538A Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/afryRTczOiJ-97BSlttmBWsAvpk.roa Signing time: Fri 02 Jan 2026 08:19:22 +0000 ROA not before: Fri 02 Jan 2026 08:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209024 IP address blocks: 62.113.64.0/24 maxlen: 24 176.109.64.0/24 maxlen: 24 176.109.65.0/24 maxlen: 24 176.109.66.0/24 maxlen: 24 176.109.68.0/24 maxlen: 24 176.109.69.0/24 maxlen: 24 176.109.70.0/24 maxlen: 24 178.236.24.0/24 maxlen: 24 178.236.25.0/24 maxlen: 24 2a02:28:d::/48 maxlen: 48 2a02:2a:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:33:b1:8e:69:4d:df:8a:4f:ab:6c:b9:13:53:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Validity Not Before: Jan 2 08:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69faf24537333a227ef7b05296db66056b00be99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5f:83:ae:07:5f:b1:62:82:1f:79:b7:39:fc: dd:e0:fa:85:3e:5c:b7:2d:0f:3e:c8:4c:3e:d4:ec: 0b:e8:7f:50:6e:fa:05:5f:cf:79:09:c5:ed:dc:f2: 57:68:d7:82:7c:5c:76:9c:03:19:fe:11:f3:b9:b7: 62:6e:7c:b7:61:54:99:9d:06:59:8b:d6:4d:42:e0: 97:3b:ae:eb:f5:e6:55:a2:a6:b7:ad:83:39:61:46: 4e:65:a6:2d:57:12:07:4a:ed:4f:6f:bd:96:66:83: 7e:0e:f5:1e:e5:43:33:59:63:4e:5d:4c:10:38:06: db:4f:29:41:fb:88:33:54:05:1a:c2:21:f6:5b:dd: 64:b1:d2:9c:ab:1d:3b:74:70:b9:84:a4:26:1a:cd: 28:96:e8:ca:66:40:08:74:23:fc:ff:a7:2e:f2:e2: ab:10:34:8e:16:ea:92:27:95:71:70:0b:2e:7f:74: e7:d6:93:63:32:f8:b8:73:bc:48:dc:9a:6e:cb:2c: 1b:ae:1e:03:1b:95:aa:f7:cd:9d:59:df:bd:58:5a: 25:a7:f9:6d:d0:4d:e1:07:43:57:bb:df:5c:38:2b: a0:af:6d:6b:2e:c1:85:af:90:73:14:b9:42:61:85: a0:e2:be:b9:4f:9c:c1:ad:26:25:5f:87:e1:33:28: b2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FA:F2:45:37:33:3A:22:7E:F7:B0:52:96:DB:66:05:6B:00:BE:99 X509v3 Authority Key Identifier: keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/afryRTczOiJ-97BSlttmBWsAvpk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.113.64.0/24 176.109.64.0-176.109.66.255 176.109.68.0-176.109.70.255 178.236.24.0/23 IPv6: 2a02:28:d::/48 2a02:2a:1000::/36 Signature Algorithm: sha256WithRSAEncryption 0c:2f:40:e6:29:e4:5b:48:4a:d3:5b:24:ce:1d:e6:a8:59:f1: 5c:65:ed:42:33:79:43:8c:91:9e:29:7f:3e:e6:74:4c:a5:92: 94:b4:bd:e5:b1:e0:7b:ce:93:78:b9:ff:fe:5a:4b:c2:be:da: c2:19:06:73:52:e8:c1:f2:1b:e5:ab:39:34:41:71:1c:ce:7f: b6:17:cb:72:d4:51:0a:4c:58:f4:f9:10:63:45:94:a0:55:28: db:9a:10:c7:6a:34:96:50:17:f3:c3:fb:7a:f3:9d:80:21:14: af:39:d2:cb:19:d6:f9:d1:3a:51:21:83:08:65:c8:c9:13:0e: 8a:2e:1f:fb:01:da:c6:ed:eb:b5:fb:35:03:a5:08:78:4b:65: b4:4d:72:8c:36:31:18:3e:e0:73:21:16:93:12:3d:94:11:f6: 87:73:ad:b2:07:1b:6b:41:27:95:dc:0f:b6:f7:83:32:a7:1e: 3a:7d:12:ce:bc:b7:b3:ff:c0:43:7d:7d:9a:ad:53:f6:66:7a: eb:53:03:1f:d0:3c:9b:e7:9e:cb:85:99:b4:95:50:7e:c0:0b: 53:85:3b:aa:ce:6d:fc:22:1f:c4:44:8f:2f:b6:a8:a9:80:91: ff:fa:33:9e:20:c4:ce:16:c4:1d:3c:a2:2b:d2:4a:5f:a2:80: a9:20:1a:e0 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgISAZt9yjOxjmlN34pPq2y5E1OKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl NmI3ZTUwHhcNMjYwMTAyMDgxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWZhZjI0NTM3MzMzYTIyN2VmN2IwNTI5NmRiNjYwNTZiMDBiZTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl+DrgdfsWKCH3m3Ofzd4PqFPly3 LQ8+yEw+1OwL6H9QbvoFX895CcXt3PJXaNeCfFx2nAMZ/hHzubdibny3YVSZnQZZ i9ZNQuCXO67r9eZVoqa3rYM5YUZOZaYtVxIHSu1Pb72WZoN+DvUe5UMzWWNOXUwQ OAbbTylB+4gzVAUawiH2W91ksdKcqx07dHC5hKQmGs0olujKZkAIdCP8/6cu8uKr EDSOFuqSJ5VxcAsuf3Tn1pNjMvi4c7xI3Jpuyywbrh4DG5Wq982dWd+9WFolp/lt 0E3hB0NXu99cOCugr21rLsGFr5BzFLlCYYWg4r65T5zBrSYlX4fhMyiy8wIDAQAB o4ICRDCCAkAwHQYDVR0OBBYEFGn68kU3MzoifvewUpbbZgVrAL6ZMB8GA1UdIwQY MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt NDI4NDU4Njc5Y2U0LzEvYWZyeVJUY3pPaUotOTdCU2x0dG1CV3NBdnBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0 LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTAuBAIAATAoAwQAPnFAMAwD BAawbUADBACwbUIwDAMEArBtRAMEALBtRgMEAbLsGDAXBAIAAjARAwcAKgIAKAAN AwYEKgIAKhAwDQYJKoZIhvcNAQELBQADggEBAAwvQOYp5FtIStNbJM4d5qhZ8Vxl 7UIzeUOMkZ4pfz7mdEylkpS0veWx4HvOk3i5//5aS8K+2sIZBnNS6MHyG+WrOTRB cRzOf7YXy3LUUQpMWPT5EGNFlKBVKNuaEMdqNJZQF/PD+3rznYAhFK850ssZ1vnR OlEhgwhlyMkTDoouH/sB2sbt67X7NQOlCHhLZbRNcow2MRg+4HMhFpMSPZQR9odz rbIHG2tBJ5XcD7b3gzKnHjp9Es68t7P/wEN9fZqtU/ZmeutTAx/QPJvnnsuFmbSV UH7AC1OFO6rObfwiH8REjy+2qKmAkf/6M54gxM4WxB08oivSSl+igKkgGuA= -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:26 2026 by rpki-client