This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/AfJ31M1mdM2BcUs04G4JrC1slog.roa
File: AfJ31M1mdM2BcUs04G4JrC1slog.roa (raw, json)
Hash identifier: /d5FHSDqjTxqeXiQmWuusQl5177RW6vIPYsMu8uMIys=
Subject key identifier: 01:F2:77:D4:CD:66:74:CD:81:71:4B:34:E0:6E:09:AC:2D:6C:96:88
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019BD15E07E82221CCFB24C9E094E126E682
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/AfJ31M1mdM2BcUs04G4JrC1slog.roa
Signing time: Sun 18 Jan 2026 13:49:19 +0000
ROA not before: Sun 18 Jan 2026 13:49:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.187.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
81.21.1.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.7.0/24 maxlen: 24
176.57.56.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 15:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:d1:5e:07:e8:22:21:cc:fb:24:c9:e0:94:e1:26:e6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 18 13:49:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01f277d4cd6674cd81714b34e06e09ac2d6c9688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:7f:05:c1:eb:45:e6:b4:6a:6f:92:9c:e3:
d0:80:20:0f:04:5d:dc:b7:75:cd:6d:19:3a:96:c0:
b6:0f:d8:60:42:d2:20:a0:08:45:92:55:fb:34:4a:
92:97:3d:f4:12:3e:54:f7:da:07:87:0a:2c:93:36:
a7:91:5d:9e:b3:62:38:e2:af:0d:4f:5f:36:87:55:
6b:23:29:b5:23:b0:0b:76:c4:9c:13:84:02:b4:d8:
c3:6f:b5:b9:43:7e:76:98:cf:9a:bd:91:74:af:4e:
eb:b1:fb:5a:0a:fe:0a:47:b4:da:71:e3:df:59:df:
cf:43:40:f8:9c:17:53:9f:38:5f:06:40:7c:d5:40:
3f:f7:aa:d3:22:a2:c8:cf:5b:dc:d3:d5:d2:77:19:
f5:71:9b:21:d5:80:f8:52:31:45:9e:4a:e7:01:49:
e5:bf:bc:bd:60:05:94:0d:f4:c9:d3:e1:40:3c:32:
c2:f1:6b:d7:d9:9e:84:d6:fb:4d:9a:70:a5:19:d1:
fd:dd:30:77:f6:39:5b:f6:e4:7c:c0:6d:69:ff:3c:
24:67:df:76:2b:5c:02:9a:63:c6:b2:78:56:36:16:
00:9a:65:52:ba:2a:6e:9f:2c:8c:79:aa:8c:cd:be:
55:d4:24:d3:7b:81:f9:a0:e4:d0:c3:43:88:44:93:
dc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F2:77:D4:CD:66:74:CD:81:71:4B:34:E0:6E:09:AC:2D:6C:96:88
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/AfJ31M1mdM2BcUs04G4JrC1slog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.187.0/24
62.72.191.0/24
81.21.1.0-81.21.7.255
176.57.56.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
af:79:b7:f7:b6:c9:fe:ad:3b:94:81:42:77:53:5c:a3:9e:59:
9b:16:a6:d3:27:22:94:e9:68:d1:a8:88:ce:00:80:66:c4:ff:
2c:38:fb:8c:e1:eb:52:6f:56:e2:08:d4:99:0d:16:bb:b1:6e:
be:cb:e0:58:7b:53:e6:4a:09:06:cd:2d:3e:9b:68:a0:9c:ba:
ab:b8:60:d9:57:2b:74:94:e7:cc:96:f9:33:3b:0b:3e:8c:7c:
dd:5f:38:b4:e1:23:73:03:34:74:72:c2:04:41:b9:77:90:d9:
36:ed:a8:f6:bd:17:a7:ea:75:6e:db:b1:40:31:86:a8:57:56:
f9:02:ea:f4:0a:dc:7d:8f:ca:93:32:cf:9e:3c:77:59:72:49:
98:b0:b9:e0:0a:6a:30:f2:bf:e7:e9:8b:51:00:8b:21:2f:9c:
b9:03:86:8e:5f:6d:23:9b:cc:7c:cd:15:48:99:45:12:0f:64:
41:24:92:18:b5:d1:6c:ce:f2:33:cf:71:2c:16:5f:9c:d4:69:
b3:39:81:17:2a:0d:38:5e:4c:80:4f:92:23:6b:5e:9e:7f:d4:
44:05:e1:88:b1:61:8f:b2:08:67:5c:34:10:01:67:0a:df:bd:
f1:ea:c3:4a:29:75:32:06:bd:b5:bc:78:32:a5:52:0f:bd:86:
51:55:bb:54
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAZvRXgfoIiHM+yTJ4JThJuaCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjYwMTE4MTM0OTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWYyNzdkNGNkNjY3NGNkODE3MTRiMzRlMDZlMDlhYzJkNmM5Njg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8t/BcHrRea0am+SnOPQgCAPBF3c
t3XNbRk6lsC2D9hgQtIgoAhFklX7NEqSlz30Ej5U99oHhwoskzankV2es2I44q8N
T182h1VrIym1I7ALdsScE4QCtNjDb7W5Q352mM+avZF0r07rsftaCv4KR7TacePf
Wd/PQ0D4nBdTnzhfBkB81UA/96rTIqLIz1vc09XSdxn1cZsh1YD4UjFFnkrnAUnl
v7y9YAWUDfTJ0+FAPDLC8WvX2Z6E1vtNmnClGdH93TB39jlb9uR8wG1p/zwkZ992
K1wCmmPGsnhWNhYAmmVSuipunyyMeaqMzb5V1CTTe4H5oOTQw0OIRJPcWQIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFAHyd9TNZnTNgXFLNOBuCawtbJaIMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvQWZKMzFNMW1kTTJCY1VzMDRHNEpyQzFzbG9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0MAwDBAE+SKID
BAM+SKADBAA+SLsDBAA+SL8wDAMEAFEVAQMEA1EVAAMEALA5OAMEALA5PzANBgkq
hkiG9w0BAQsFAAOCAQEAr3m397bJ/q07lIFCd1Nco55Zmxam0ycilOlo0aiIzgCA
ZsT/LDj7jOHrUm9W4gjUmQ0Wu7FuvsvgWHtT5koJBs0tPptooJy6q7hg2VcrdJTn
zJb5MzsLPox83V84tOEjcwM0dHLCBEG5d5DZNu2o9r0Xp+p1btuxQDGGqFdW+QLq
9ArcfY/KkzLPnjx3WXJJmLC54ApqMPK/5+mLUQCLIS+cuQOGjl9tI5vMfM0VSJlF
Eg9kQSSSGLXRbM7yM89xLBZfnNRpszmBFyoNOF5MgE+SI2tenn/URAXhiLFhj7II
Z1w0EAFnCt+98erDSil1Mga9tbx4MqVSD72GUVW7VA==
-----END CERTIFICATE-----
Generated at Wed Jan 21 01:50:10 2026 by rpki-client